Ein Service des Bundesministeriums der Justiz und für Verbraucherschutz sowie des Bundesamts für Justiz ‒ www.gesetze-im-internet.de - Seite 35 von 40 - Nr. Referenz ERCA policy Anforderung Referenz D-MSA-Policy b) is certified to be compliant with the requirements identified in the CEN Workshop Agreement 14167-2 [10]; c)  is a trustworthy system which is assured to EAL4 or higher in accordance with ISO 15408 [11]; to level E3 or higher in ITSEC [12]; or equivalent security criteria. These evaluations shall be to a protection profile or security target; d) is demonstrated to provide an equivalent level of security. 13. § 5.3.13 The MSA shall ensure confidentiality, integrity and availability of the private keys generated, stored and used under control of the MSA Policy. § 5 Karten- und Gerätemanagement [r5.6] § 6 Schlüsselmanagement in der D-CA (Absatz 2) § 7.1 Allgemeine Anforderungen, Protokollierung [r7.2] 14. § 5.3.14 The MSA shall prevent unauthorised use of the private keys generated, stored and used under control of the MSA Policy. § 7.1 Allgemeine Anforderungen, Protokollierung (Absatz 2) § 6.2 Schlüsselpaar der D-CA (MS.SK, MS.PK) [r6.9] § 7.2 Schlüsselerzeugung [r7.8] 15. § 5.3.15 The Member State private keys may be backed up using a key recovery procedure requiring at least dual control. § 7.3 Schlüsselerzeugung [r7.11] 16. § 5.3.16 Key certification requests that rely on transportation of private keys are not allowed. § 8.2 Zertifikatserteilung [r8.7] 17. § 5.3.17 Key escrow is strictly forbidden. § 6.2 Schlüsselpaar der D-CA (MS.SK, MS.PK) [r6.11] 18. § 5.3.18 The MSA shall prevent unauthorised use of its motion sensor keys. § 6.3 Symmetrische Schlüssel für Werkstattkarten und Weg-/ Geschwindigkeitsgeber (Km, Km$_{WC}$, Km$_{VU}$) [r6.18] 19. § 5.3.19 The MSA shall ensure that the motion sensor master key (Km) is used only to encrypt motion sensor data for the purposes of motion sensor manufacturers. The data to be encrypted is defined in the ISO / IEC 16844-3 standard [7]. § 6 Schlüsselmanagement in der D-CA (Absatz 2) 20. § 5.3.20 The motion sensor master key (Km) shall never leave the secure and controlled environment of the MSA. § 6.3 Symmetrische Schlüssel für Werkstattkarten und Weg-/ Geschwindigkeitsgeber (Km, Km$_{WC}$, Km$_{VU}$) [r 6.18]