智能卡或类似设备，包括安全元件
存储或管理密码运算与身份、支付凭据，保护水平达 AVA_VAN.4 的元件。
类别解释
Smartcards or similar devices, including secure elements
安全元件是具有安全相关功能（包括篡改迹象检测、抗篡改或篡改响应）的微控制器或微处理器，通常存储、处理或管理密码学操作或身份凭据、支付凭据等敏感数据，设计保护水平至少达到《通用准则》或《通用评估方法》所规定的 AVA_VAN.4 级。它们可以是独立硅芯片，也可以集成于片上系统（SoC），并可包含应用环境、操作系统及一个或多个应用程序。本类别包括但不限于可信平台模块（TPM）、嵌入式通用集成电路卡（eUICC），以及集成于卡片或其他载体材料中的安全元件，例如身份证件、旅行证件、合格电子签名卡与可更换式 UICC。
English
Secure elements are microcontrollers or microprocessors with security-related functionalities, including tamper evidence, resistance or response, that typically store, process or manage cryptographic operations or sensitive data such as identity or payment credentials, and are designed to provide protection of at least AVA_VAN.4 as set out in the Common Criteria or the Common Evaluation Methodology. They may be standalone silicon chips or integrated into a system on chip, and may contain an application environment, an operating system and one or more applications. The category includes trusted platform modules, embedded UICCs and secure elements embedded in card-shaped or other carrier materials, such as identity and travel documents, qualified electronic signature cards and removable UICCs.
CRA 附件四，技术描述见实施条例 (EU) 2025/2392 附件二
Annex IV to the CRA, with technical descriptions in Annex II to Implementing Regulation (EU) 2025/2392
制造商可能被要求依照欧洲网络安全认证方案取得欧洲网络安全证书，或接受强制性第三方合格评定；具体取决于后续认证安排的适用情况。
Manufacturers may be required to obtain a European cybersecurity certificate under a European cybersecurity certification scheme, or to undergo mandatory third-party conformity assessment.
关键产品的主要义务
在产品设计中落实更高等级的安全保障，并准备认证或评定所需的安全证据。
持续满足认证所依据的安全保障等级与文档保持要求。
与监管机构及应急响应机制保持协同，及时处理漏洞与事件。
English
- Implement a higher assurance level in the product design and prepare the security evidence required for certification or assessment.
- Continuously satisfy the assurance level and documentation obligations attached to the certificate.
- Cooperate with authorities and incident response mechanisms on vulnerabilities and incidents.