Digital Data Communications LEVEL ONE FCS-4300 Guía de usuario descargar pdf (Pagina 52)

Fuji Xerox ApeosPort-II C4300(AP)Series Security Kit for Asia Pacific Security Target V1.01

- 48 -

FCS_COP.1 By the following security function, FCS_COP.1, the cryptographic operation, can be

assured:

SF.ENCRYPTION

SF.ENCRYPTION, TOE encrypts document data stored on the hard disk drive using

the automatically-generated cryptographic key.

FDP_RIP.1 By the following security function, FDP_RIP.1, the subset residual information protection,

can be assured:

SF.OVERWRITE

SF.OVERWRITE, TOE overwrites and erases used document data file stored on the

hard disk drive.

SF.OVERWRITE, one-time overwriting (overwriting with “0”) or three-time

overwritings (overwriting with random number, again with random number, and then

with “0”) can be selected as the control of overwriting and erasing so that process

efficiency or security strength can be prioritized depending on the usage environment

of the multifunction machine.

When process efficiency is prioritized, the number of overwritings and erasings is

“one.” One-time overwriting and erasing is appropriate because it has less effect of

lowering process speed and can counter the low-level attack to recover data.

When security strength is prioritized, the number of overwiritngs and erasings is

“three.” Three-time overwritings and erasings are appropriate because it is more robust

(recommended number of overwritings and erasings) and can sufficiently counter the

low-level attack to recover data, although process speed is lower than one-time

overwriting and erasing.

FIA_AFL.1

By the following security function, FIA_AFL.1, the handling in failure of authentication,

can be assured:

SF. MANAGE

SF. MANAGE, TOE denies authentication when key operator fails in authentication

the set number of times.

FIA_UID.2

By the following security function, FIA_UID.2, the user identification before any action,

can be assured:

SF. MANAGE

SF. MANAGE, TOE requests key operator to enter the user ID before allowing

key-operator’s operations from the control panel or the Web browser of key-operator’s

client, and verifies that the entered key-operator’s name matches the key-operator’s

user ID registered on TOE. This identification and the authentication (FIA_UAU.2) are

simultaneously performed and the operation is allowed only when both of the

identification and authentication succeed.

FIA_UAU.2

By the following security function, FIA_UAU.2, the user authentication before any action,

can be assured:

SF. MANAGE

SF. MANAGE, TOE requests key operator to enter the password before allowing

key-operator’s operations from the control panel or the Web browser of key-operator’s

client, and verifies that the entered password matches the key-operator’s password

registered on TOE. This authentication and the identification (FIA_UID.2) are

simultaneously performed and the operation is allowed only when both of the

identification and authentication succeed.

FIA_UAU.7

By the following security function, FIA_UAU.7, the protected authentication-feedback,

can be assured:

SF. MANAGE

SF. MANAGE, asterisks (‘*’) of the same number as the characters entered as

key-operator’s password are displayed by TOE on the control panel or the Web

browser of key-operator’s client at the time of key-operator’s authentication.

FMT_MOF.1

(1)

By the following security function, FMT_MOF.1 (1), the security-function behavior

management (1), can be assured because the person who changes the TOE setting data

for “HDD overwriting function for residual data” is limited to key operator:

SF. MANAGE

SF. MANAGE, TOE allows the authenticated key-operator to change the TOE

setting data for “HDD overwriting function for residual data.”

FMT_MOF.1

(2)

By the following security function, FMT_MOF.1 (2), the security-function behavior

management (2), can be assured because the person who changes the TOE setting data

for “HDD data encryption function” is limited to key operator:

SF. MANAGE

SF. MANAGE, TOE allows the authenticated key-operator to change the TOE

setting data for “HDD data encryption function.”

FMT_MOF.1

(3)

By the following security function, FMT_MOF.1 (3), the security-function behavior

management (3), can be assured because the person who changes the security function

“key-operator authentication function” is limited to key operator:

1 2 ... 47 48 49 50 51 52 53 54 55 56 57

Comentarios a estos manuales

Sin comentarios

Digital Data Communications LEVEL ONE FCS-4300 Guía de usuario Pagina 52

Comentarios a estos manuales

Relacionado con productos y manuales para Cámaras De Seguridad Digital Data Communications LEVEL ONE FCS-4300