Download Security Target - Common Criteria
Transcript
bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo+ 360 / ineo+ 280 / ineo+ 220 / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c / D407 / D406 / D405 Control Software A0ED0Y0-0100-GM0-24 Security Target ---- [ Contents ] --------------------------------------------------------------------------------1. ST Introduction ...................................................................................................................... 6 1.1. ST Reference................................................................................................................................... 6 1.2. TOE Reference................................................................................................................................ 6 1.3. TOE Overview ................................................................................................................................. 6 1.3.1. TOE Type.......................................................................................................................................................... 6 1.3.2. Usage of TOE and Main Security Functions..................................................................................................... 6 1.4. TOE Description .............................................................................................................................. 7 1.4.1. Roles of TOE Users .......................................................................................................................................... 7 1.4.2. Physical Scope of TOE..................................................................................................................................... 8 1.4.3. Logical Scope of TOE..................................................................................................................................... 11 2. Conformance Claims ........................................................................................................... 18 2.1. CC Conformance Claim ................................................................................................................ 18 2.2. PP Claim........................................................................................................................................ 18 2.3. Package Claim .............................................................................................................................. 18 2.4. Reference ...................................................................................................................................... 18 3. Security Problem Definition ................................................................................................ 19 3.1. Protected Assets............................................................................................................................ 19 3.2. Assumptions .................................................................................................................................. 20 3.3. Threats........................................................................................................................................... 20 3.4. Organizational Security Policies.................................................................................................... 22 4. Security Objectives.............................................................................................................. 23 4.1. Security Objectives for the TOE .................................................................................................... 23 4.2. Security Objectives for the Operational Environment................................................................... 25 4.3. Security Objectives Rationale ....................................................................................................... 27 4.3.1. Necessity ........................................................................................................................................................ 27 4.3.2. Sufficiency of Assumptions ............................................................................................................................. 28 4.3.3. Sufficiency of Threats ..................................................................................................................................... 28 4.3.4. Sufficiency of Organizational Security Policies............................................................................................... 32 5. Extended Components Definition....................................................................................... 33 5.1. Extended Function Component..................................................................................................... 33 5.1.1. FAD_RIP.1 Definition ...................................................................................................................................... 33 5.1.2. FIT_CAP.1 Definition ...................................................................................................................................... 34 6. IT Security Requirements .................................................................................................... 36 6.1. TOE Security Requirements.......................................................................................................... 36 6.1.1. TOE Security Functional Requirements.......................................................................................................... 36 6.1.2. TOE Security Assurance Requirements ......................................................................................................... 65 6.2. IT Security Requirements Rationale ............................................................................................. 66 6.2.1. Rationale for IT Security Functional Requirements ........................................................................................ 66 6.2.2. Rationale for IT Security Assurance Requirements ........................................................................................ 85 7. TOE Summary Specification ............................................................................................... 86 7.1. F.ADMIN (Administrator Function) ................................................................................................ 86 7.1.1. Administrator Identification Authentication Function ....................................................................................... 86 7.1.2. Auto Logoff Function of Administrator Mode................................................................................................... 87 7.1.3. Function Supported in Administrator Mode..................................................................................................... 87 Copyright(c) 2011 KONICA MINOLTA BUSINESS TECHNOLOGIES, INC., All Rights Reserved. 3 / 112