Download Security Target (ST)

 Figure 4: TOE logical boundary and subsystems This TOE includes the capture device (the fingerprint sensor) into its boundary, as part of the sensor subsystem. Compared to the minimum TOE boundary of the PP, this TOE additionally includes the local database holding the user IDs and corresponding fingerprint templates. Having the database inside the TOE allows it to perform its functionality without the need of an external database. The TOE does allow management access via the network to this database, for centralized enrolment and other management tasks. This functionality is outside the scope of the evaluation as it is performed over the network, a trusted secure interface (see objectives for the environment) and because the enrolment functionality is also outside the scope of the evaluation. The TOE includes auditing functionality which operates stand‐alone. In the networked‐solution can also be retrieved via the network interface for convenient audit review, but this is outside the scope of the evaluation. Following describes the functionality and general design of the TOE with respect to the terms of [BVMPP]: •
•
Get ID: The user's claimed identity is retrieved by reading the smartcard offered in the field of the contactless smartcard reader (part of the main subsystem). (Note that product allows entry of the normal user ID via the PIN pad, but this is outside the scope of the evaluation). The main subsystem also provides the PIN pad, display and status LEDs as the user visible interface, as well as audio feedback. GetRef: The main subsystem is responsible for getting the stored (already enrolled) fingerprint reference related to a claimed user's identity.