Download Security Target - Common Criteria

Transcript
bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo+ 360 / ineo+ 280 / ineo+ 220 / VarioLink 3622c
/ VarioLink 2822c / VarioLink 2222c / D407 / D406 / D405 Control Software A0ED0Y0-0100-GM0-24
Security Target
---- [ Contents ] --------------------------------------------------------------------------------1.
ST Introduction ...................................................................................................................... 6
1.1. ST Reference................................................................................................................................... 6
1.2. TOE Reference................................................................................................................................ 6
1.3. TOE Overview ................................................................................................................................. 6
1.3.1. TOE Type.......................................................................................................................................................... 6
1.3.2. Usage of TOE and Main Security Functions..................................................................................................... 6
1.4. TOE Description .............................................................................................................................. 7
1.4.1. Roles of TOE Users .......................................................................................................................................... 7
1.4.2. Physical Scope of TOE..................................................................................................................................... 8
1.4.3. Logical Scope of TOE..................................................................................................................................... 11
2.
Conformance Claims ........................................................................................................... 18
2.1. CC Conformance Claim ................................................................................................................ 18
2.2. PP Claim........................................................................................................................................ 18
2.3. Package Claim .............................................................................................................................. 18
2.4. Reference ...................................................................................................................................... 18
3. Security Problem Definition ................................................................................................ 19
3.1. Protected Assets............................................................................................................................ 19
3.2. Assumptions .................................................................................................................................. 20
3.3. Threats........................................................................................................................................... 20
3.4. Organizational Security Policies.................................................................................................... 22
4. Security Objectives.............................................................................................................. 23
4.1. Security Objectives for the TOE .................................................................................................... 23
4.2. Security Objectives for the Operational Environment................................................................... 25
4.3. Security Objectives Rationale ....................................................................................................... 27
4.3.1. Necessity ........................................................................................................................................................ 27
4.3.2. Sufficiency of Assumptions ............................................................................................................................. 28
4.3.3. Sufficiency of Threats ..................................................................................................................................... 28
4.3.4. Sufficiency of Organizational Security Policies............................................................................................... 32
5.
Extended Components Definition....................................................................................... 33
5.1. Extended Function Component..................................................................................................... 33
5.1.1. FAD_RIP.1 Definition ...................................................................................................................................... 33
5.1.2. FIT_CAP.1 Definition ...................................................................................................................................... 34
6.
IT Security Requirements .................................................................................................... 36
6.1. TOE Security Requirements.......................................................................................................... 36
6.1.1. TOE Security Functional Requirements.......................................................................................................... 36
6.1.2. TOE Security Assurance Requirements ......................................................................................................... 65
6.2. IT Security Requirements Rationale ............................................................................................. 66
6.2.1. Rationale for IT Security Functional Requirements ........................................................................................ 66
6.2.2. Rationale for IT Security Assurance Requirements ........................................................................................ 85
7.
TOE Summary Specification ............................................................................................... 86
7.1. F.ADMIN (Administrator Function) ................................................................................................ 86
7.1.1. Administrator Identification Authentication Function ....................................................................................... 86
7.1.2. Auto Logoff Function of Administrator Mode................................................................................................... 87
7.1.3. Function Supported in Administrator Mode..................................................................................................... 87
Copyright(c) 2011 KONICA MINOLTA BUSINESS TECHNOLOGIES, INC., All Rights Reserved.
3 / 112