Defines a protection profile for a secure signature creation device that may generate signing keys internally and export the public key in protected manner: Secure Signature-creation Device with key generation and trusted communication with certificate generation application.