The certified technical security device for POS systems (TSE) will be mandatory from 2020. Perhaps you too – along with many other retailers in Germany – are in the starting blocks to meet the legal requirements of the KassenSichV and quickly upgrade or convert your systems. What is still missing are the TSEs. Currently, no product has yet received the necessary certificate.
Bundesdruckerei is one of the companies that have applied for TSE certification from the German Federal Office for Information Security (BSI). Our JTL-POS point of sale system also relies on Bundesdruckerei’s solutions. In the final part of our blog series, we would like to find out from our expert colleague Matthias Kromphardt where the hurdles still lie and when you, as a checkout operator, can expect the first certified security devices.
Interview with TSE expert Matthias Kromphardt from D-TRUST
Matthias Kromphardt is Senior Product Manager at D-TRUST and an expert in technical security devices for POS systems. He is familiar with the concerns of cash register manufacturers and software developers.
D-TRUST GmbH, based in Berlin, is a company of the Bundesdruckerei Group and is considered one of the pioneers in the field of secure digital identities. Among other things, the company issues qualified digital certificates for electronic signatures, seals and qualified remote signatures.
What is the current status of BSI certification for your TSE products?
Matthias Kromphardt: The certification of our TSE products is proceeding according to plan. Together with our partners, we offer two different solutions: a hardware module in the form of a microSD card for decentralized operation and the Fiskal Cloud as a central solution for all internet-enabled cash registers. With the hardware module, we are working towards placing a TSE provisionally approved by the BSI on the market before the end of this year.
In this case, “provisionally shared” means that essential parts of the certification and safety-relevant tests must already have been completed. The provider then has a maximum of one year to complete certification of the TSE. Important for cash register manufacturers and operators: The TSE can already be sold and used without restrictions until certification is complete. The second listing – our TSE web service – is already being tested by TÜViT.
How is the cooperation with the BSI going?
Matthias Kromphardt: Our excellent cooperation with the BSI as a neutral certifier has already been established and proven itself in many projects. This good tradition will be continued for the development and certification of our TSE products.
What are the pain points, where are the hurdles?
Matthias Kromphardt: The timetable for the nationwide introduction of the TSE is extremely tight. However, this problem has now been recognized at federal and state level. In order to give manufacturers and Applications the time they need for certification, integration and rollout, a transitional period has therefore been granted until September 30, 2020. Until this date, no objections will be raised if cash registers are operated without a TSE (see information box “Non-objection regulation”).
How does the cooperation with the cash register manufacturers work?
Matthias Kromphardt: With our TSE, we actively support the field test of the German Association for Cash Register and Accounting System Technology (DFKA). We also support many cash register manufacturers in the technical integration of our TSE, either directly or via our development partner cv cryptovision.
We work with manufacturers in a variety of ways: from processing support requests to regular face-to-face meetings, we provide all kinds of necessary support for the integration of our TSE solutions. If you have any questions or suggestions, our experts are on hand to provide advice – you can also find initial answers on our website in the FAQs on fiscalization.
Bundesdruckerei is securing technological expertise in the development of cryptographic processes by acquiring a 35.1 percent stake in cv cryptovision GmbH. The Gelsenkirchen-based company is an expert in highly efficient, secure encryption technologies and offers innovative cryptography and electronic identity solutions. JTL also relies on cryptovision’s expertise for its POS software JTL-POS.
What are the next steps?
Matthias Kromphardt: Over the next few weeks, we will be taking the final step towards the provisional release of the TSE module. At the same time, production will be ramped up so that the rollout can begin as planned in January. The full TSE certification will then be tackled.
At the same time, we are continuing to work on finishing and certifying the TSE web service with our partner, Deutsche Fiskal.
When can we expect the first certifications and market launch?
Matthias Kromphardt: The market launch for the TSE module will take place as planned in January. The market launch for the TSE web service is planned for April 2020.
………
We would like to thank Bundesdruckerei and Matthias Kromphardt for the interview and the Good cooperation.
