Download Security Target Mobile PayPass 1.0 on Orange

Transcript
Reference
R0R21486_001_CCD_ASE
Classification level
Public
Release
1.01p
(Printed copy not controlled: verify the
version before using)
Pages
133
(U)SIM Card Life Cycle Status is SELECTED;
Contactless Life Cycle State ACTIVATED;
PAP Transaction Processing State complies with Transaction Flows;
PAP Counters Integrity is VERIFIED;
PAP Counters State is not BLOCKED;
PAP Customer Account Information Integrity is VERIFIED;
PAP Risk Management Parameters Integrity is VERIFIED;.
FDP_ACF.1.3/ PAP Transaction The TSF shall explicitly authorise access of subjects to objects
based on the following additional rules: None.
FDP_ACF.1.4/ PAP Transaction The TSF shall explicitly deny access of subjects to objects based on
the following additional rules: following rule:
If one of the conditions listed in FDP_ACF.1.2 is not fulfilled.
6.1.3
INFORMATION FLOW CONTROL POLICY
FDP_IFC.2/ PAP Offline Authentication Complete information flow control
FDP_IFC.2.1/ PAP Offline Authentication The TSF shall enforce the PAP Offline Authentication
information flow control SFP on
Subjects:
S.PAP;
Information:
PAP Transaction Parameters;
and all operations that cause that information to flow to and from subjects covered by the SFP.
FDP_IFC.2.2/ PAP Offline Authentication The TSF shall ensure that all operations that cause any
information in the TOE to flow to and from any subject in the TOE are covered by an information
flow control SFP.
Application Note: What follows are all operations among subjects and objects covered by this SFP:
PAP Offline Data Authentication
FDP_IFC.2/ PAP Offline Transaction Complete information flow control
FDP_IFC.2.1/ PAP Offline Transaction The TSF shall enforce the PAP Offline Transaction
Information Flow Control SFP on
Subject:
S.PAP;
Information:
PAP Transaction Parameters;
and all operations that cause that information to flow to and from subjects covered by the SFP.
ST
Applicable on: February 2012
No disclosure to a third party without prior written consent of Gemalto
Page : 89 / 133