Ricoh Aficio MP 3350B Security Target - Page 38

of General Users Outcome: Success/Failure

Page 38 highlights

Page 38 of 83 Functional Requirements FIA_SOS.1 FIA_UAU.2 FIA_UAU.7 FIA_UID.2 FIA_USB.1 FMT_MSA.1 FMT_MSA.3 FMT_MTD.1 Actions which should be auditable a) Minimal: Rejection by the TSF of any tested secret; b) Basic: Rejection or acceptance by the TSF of any tested secret; c) Detailed: Identification of any changes to the defined quality metrics. Minimal: Unsuccessful use of the authentication mechanism; Basic: All use of the authentication mechanism. None a) Minimal: Unsuccessful use of the user identification mechanism, including the user identity provided; b) Basic: All use of the user identification mechanism, including the user identity provided. a) Minimal: Unsuccessful binding of user security attributes to a subject (e.g. creation of a subject). b) Basic: Success and failure of binding of user security attributes to a subject (e.g. success or failure to create a subject). a) Basic: All modifications of the values of security attributes. a) Basic: Modifications of the default setting of permissive or restrictive rules. b) Basic: All modifications of the initial values of security attributes. a) Basic: All modifications to the values of TSF data. Auditable events of TOE b) Basic 1. Newly creating authentication information of General Users (Outcome: Success/Failure) 2. Changing authentication information of General Users (Outcome: Success/Failure) 3. Changing Administrator Authentication Information (Outcome: Success/Failure) 4. Changing Supervisor Authentication Information (Outcome: Success/Failure) Basic 1. Login (Outcome: Success/Failure) b) Basic 1. Login (Outcome: Success/Failure) b) Basic 1. Login (Outcome: Success/Failure) 1. Adding and deleting Administrator Roles 2. Changing the Document Data ACL Auditable events are not recorded. 1. Newly creating authentication information of General Users. 2. Changing authentication information of General Users. Copyright (c) 2009,2010 RICOH COMPANY, LTD. All Rights Reserved.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83

Page 38 of 83
Functional Requirements
Actions which should be
auditable
Auditable events of TOE
FIA_SOS.1
a) Minimal: Rejection by the
TSF of any tested secret;
b)
Basic:
Rejection
or
acceptance by the TSF of any
tested secret;
c) Detailed: Identification of
any changes to the defined
quality metrics.
b) Basic
1. Newly creating authentication information
of General Users (Outcome: Success/Failure)
2. Changing authentication information of
General Users (Outcome: Success/Failure)
3. Changing Administrator Authentication
Information (Outcome: Success/Failure)
4.
Changing
Supervisor
Authentication
Information (Outcome: Success/Failure)
FIA_UAU.2
Minimal: Unsuccessful use of
the authentication mechanism;
Basic:
All
use
of
the
authentication mechanism.
Basic
1. Login (Outcome: Success/Failure)
FIA_UAU.7
None
-
FIA_UID.2
a) Minimal: Unsuccessful use of
the
user
identification
mechanism, including the user
identity provided;
b) Basic: All use of the user
identification
mechanism,
including
the
user
identity
provided.
b) Basic
1. Login (Outcome: Success/Failure)
FIA_USB.1
a)
Minimal:
Unsuccessful
binding
of
user
security
attributes to a subject (e.g.
creation of a subject).
b) Basic: Success and failure of
binding
of
user
security
attributes to a subject (e.g.
success or failure to create a
subject).
b) Basic
1. Login (Outcome: Success/Failure)
FMT_MSA.1
a) Basic: All modifications of
the values of security attributes.
<Individually defined auditable events>
1. Adding and deleting Administrator Roles
2. Changing the Document Data ACL
FMT_MSA.3
a) Basic: Modifications of the
default setting of permissive or
restrictive rules.
b) Basic: All modifications of
the initial values of security
attributes.
Auditable events are not recorded.
FMT_MTD.1
a) Basic: All modifications to
the values of TSF data.
<Individually defined auditable events>
1.
Newly
creating
authentication
information of General Users.
2. Changing authentication information of
General Users.
Copyright (c) 2009,2010 RICOH COMPANY, LTD. All Rights Reserved.