Download Security Target (ST)

users that are part of a role [BVMPP]). Removal of users (biometric access control) is implemented by the main subsystems using the administrative interfaces, this results in an audit event. There is no management of the administrators, only the change of the administrator password. This is an auditable event. None N/A Date and time of the event The main subsystem contains a real time clock that allows tagging of all audit events with the date and time. Audit data can be read using the display (in administrator mode) of via the network interface. type of event The type of event is logged also. subject identity (if applicable) The user ID is logged as part of the audit events. Outcome (success or failure) of The outcome is logged as part of the audit events. the event None FAU_GEN.2 For audit events resulting from Users are identified by their user ID. actions of identified users, the TSF shall be able to associate each auditable event with the identity of the user that caused the event. FDP_RIP.2 Any previous information content of a resource is made unavailable upon the deallocation of the resource from all objects N/A The sensor subsystem holds the relevant resources (the biometric parameters of the offered fingerprint). The sensor subsystems has functions that indirectly could lead to access this offered fingerprint but only the main subsystem can access this interface (see security architecture and design documentation). The main subsystem does not call these functions. Hence the main subsystem does not access to the relevant resources at all, including at deallocation. As the main subsystem is the only access to this interface, the main subsystem does not perform the functions, and the bypass/tampering is not possible (see security architecture), the access to the resources is available