Download Security Target Mobile PayPass 1.0 on Orange
Transcript
Reference R0R21486_001_CCD_ASE Classification level Public Release 1.01p (Printed copy not controlled: verify the version before using) Pages 133 (U)SIM Card Life Cycle Status is SELECTED; Contactless Life Cycle State ACTIVATED; PAP Transaction Processing State complies with Transaction Flows; PAP Counters Integrity is VERIFIED; PAP Counters State is not BLOCKED; PAP Customer Account Information Integrity is VERIFIED; PAP Risk Management Parameters Integrity is VERIFIED;. FDP_ACF.1.3/ PAP Transaction The TSF shall explicitly authorise access of subjects to objects based on the following additional rules: None. FDP_ACF.1.4/ PAP Transaction The TSF shall explicitly deny access of subjects to objects based on the following additional rules: following rule: If one of the conditions listed in FDP_ACF.1.2 is not fulfilled. 6.1.3 INFORMATION FLOW CONTROL POLICY FDP_IFC.2/ PAP Offline Authentication Complete information flow control FDP_IFC.2.1/ PAP Offline Authentication The TSF shall enforce the PAP Offline Authentication information flow control SFP on Subjects: S.PAP; Information: PAP Transaction Parameters; and all operations that cause that information to flow to and from subjects covered by the SFP. FDP_IFC.2.2/ PAP Offline Authentication The TSF shall ensure that all operations that cause any information in the TOE to flow to and from any subject in the TOE are covered by an information flow control SFP. Application Note: What follows are all operations among subjects and objects covered by this SFP: PAP Offline Data Authentication FDP_IFC.2/ PAP Offline Transaction Complete information flow control FDP_IFC.2.1/ PAP Offline Transaction The TSF shall enforce the PAP Offline Transaction Information Flow Control SFP on Subject: S.PAP; Information: PAP Transaction Parameters; and all operations that cause that information to flow to and from subjects covered by the SFP. ST Applicable on: February 2012 No disclosure to a third party without prior written consent of Gemalto Page : 89 / 133