eID Box

Q: Is eID Box compliant with eIDAS?

Yes. eID Box is built to the eIDAS Regulation and supports the qualified certificate and electronic signature requirements defined under eIDAS Article 28 and Annex I. It has been deployed in the Portuguese national identity card system — a state-issued eID scheme notified to the European Commission under eIDAS — and is validated for cross-border EU authentication scenarios.

Q: Does eID Box send authentication data to external servers?

No. eID Box operates entirely within your infrastructure. All cryptographic operations — PIN verification, certificate validation, signature generation — execute locally against the smart card. There is no call-home mechanism, no cloud dependency, and no data egress of any kind. This satisfies data residency requirements under GDPR Article 44 and national data localisation obligations in Germany, France, and other EU member states.

Q: Can eID Box be deployed in an air-gapped or restricted government environment?

Yes. eID Box has no runtime dependencies on internet connectivity. Licence validation, updates, and support are handled through offline mechanisms for classified or restricted deployments. It has been used in Portuguese government infrastructure under equivalent security constraints.

Q: Which smart cards and operating systems does eID Box support?

eID Box supports Portuguese Citizen Card (Cartao de Cidadao), PIV (FIPS 201), ISO/IEC 7816-compliant smart cards, and PKCS#11-compliant USB tokens from major manufacturers. It runs on Windows, macOS, and Linux. Browser integration via native messaging host is supported for Chrome, Firefox, Edge, and Safari.

Q: Is eID Box available for private sector organisations?

Yes. eID Box is available to public and private sector organisations alike. Banks under PSD2, healthcare providers under GDPR Article 9, and critical infrastructure operators under NIS2 benefit from its on-premise architecture and eIDAS-grade audit capabilities. Licensing is available on a per-deployment or enterprise subscription basis.

eID Box is a digital identity middleware solution developed by Caixa Mágica Software that integrates smart card authentication and electronic signatures into enterprise applications. It is compliant with eIDAS standards and has been deployed in the Portuguese national identity card system, used by the entire Portuguese population.

Available for Windows, Linux, MacOS, iOS and Android, it supports PACE-enabled eID integration, PIN management, and cryptographic operations for both online and offline use.

By leveraging cloud solutions and custom software development, eID Box offers a versatile solution for electronic identity applications, enabling seamless integration with various cryptographic tokens using standardized APIs.

Get a quote

eIDBox - Unpack your identity

Our secure digital middleware solution empowers users to efficiently manage all card objects, including PINs, PUKs, certificates and personal data, providing comprehensive control over their cryptographic tokens. Consequently, it enables you to securely sign documents and perform cryptographic operations, ensuring robust security.
Available for Windows, Linux, MacOS, iOS and Android, it integrates with the most common platforms, ensuring accessibility across a wide range of devices.

eID GUI Applications

In conjunction with the eID Server subsystem, this module extends access to eIDAS token functionalities found in ID cards. This includes capabilities like genre verification, address verification, age verification, restricted identification and ID attribute sharing.

Desktop and Mobile SDK Modules

Our SDK modules seamlessly collaborate with the eID server subsystem, allowing e-signature and eID functions to be readily available on Windows, Linux, MacOS. It is also available for iOS and Android equipped with NFC interfaces.

Features of our Secure Digital Middleware Solution

This middleware solution allows generic applications to utilize smart card features through operating system standard interfaces. The following features demonstrate how the eID Box improves security and enhances user experience:

Available modules

Desktop GUI Application

Cross-platform desktop application that reads and manages cardholder data from ID cards

Desktop Installer

Installer that simplifies the setup of our middleware solution, compatible with  Windows, Linux, and MacOS

Desktop SDK

Allow custom applications to use all card features (sign documents, activate card, read card data, write card data, verify certificates)

Mobile SDK

Seamlessly collaborates with the eID server, allowing e-signature and eID functions  to be readily available on mobile

Minidriver: CryptoAPI card module

Allows you to securely manage cryptographic operations, cryptographic keys, and access card features

CNG Key Storage Provider module for a remote QSCD

Ensures that desktop applications can harness the power of remote QSCD  for document signing

PKCS#11 module for  Windows, Linux and MacOS

Your applications can securely sign documents and perform cryptographic operations

CryptoTokenKit module for MacOS

Empowers you to manage keys, protect data, and ensure secure access.

Frequently Asked Questions About eID Box

Is eID Box compliant with eIDAS?
Yes. eID Box is built to the eIDAS Regulation and supports the qualified certificate and electronic signature requirements defined under eIDAS Article 28 and Annex I. It has been deployed in the Portuguese national identity card system — a state-issued eID scheme notified to the European Commission under eIDAS — and is validated for cross-border EU authentication scenarios.

Does eID Box send authentication data to external servers?
No. eID Box operates entirely within your infrastructure. All cryptographic operations — PIN verification, certificate validation, signature generation — execute locally against the smart card. There is no call-home mechanism, no cloud dependency, and no data egress of any kind. This satisfies data residency requirements under GDPR Article 44 and national data localisation obligations in Germany, France, and other EU member states.

Can eID Box be deployed in an air-gapped or restricted government environment?
Yes. eID Box has no runtime dependencies on internet connectivity. Licence validation, updates, and support are handled through offline mechanisms for classified or restricted deployments. It has been used in Portuguese government infrastructure under equivalent security constraints.

Which smart cards and operating systems does eID Box support?
eID Box supports Portuguese Citizen Card (Cartão de Cidadão), PIV (FIPS 201), ISO/IEC 7816-compliant smart cards, and PKCS#11-compliant USB tokens from major manufacturers. It runs on Windows, macOS, and Linux. Browser integration via native messaging host is supported for Chrome, Firefox, Edge, and Safari.

Is eID Box available for private sector organisations?
Yes. eID Box is available to public and private sector organisations alike. Banks under PSD2, healthcare providers under GDPR Article 9, and critical infrastructure operators under NIS2 benefit from its on-premise architecture and eIDAS-grade audit capabilities. Licensing is available on a per-deployment or enterprise subscription basis.