Java Card

I checked the ICAO specification. It mentions CVC certificates. They are used for the terminal authentication. The CVC structure defined in ICAO specification differs from the CVC structure defined in the IAS ECC specification. Currently we are having the epassport that is implemented by Sagem. Therefore I believe that we are having appropriate PKI scheme for that. In case of IAS ECC specification, as far as I understood, the CVC format is a way how to transport terminal public key on the card in order to be verified. One public key will be assigned to middleware software component and the other will be assigned to perso dll. So we will have 2 CVC certificates. Can we used already existed PKI scheme for that or we have to build new one. Can we use the existed one and changing the certificate profile get the CVC structure that we need for the IAS ECC project?