57. Where the certification applies to the holder of a tangible or logical device that allows the holder to be identified or located or one of the holder’s attributes to be specified and where the device contains a secret element, the holder must protect its confidentiality. Where the secret element must be transmitted to the holder of the device, the transmission must be done in such a manner that only the holder of the device is informed thereof.
The holder of the device must see to it that the device is not used without authorization. Every use of the device is presumed to be made by the holder of the device.