Ricoh Aficio MP C305 Security Target - Page 57

Table 21 : List of Authentication Events of Basic Authentication

Page 57 highlights

6.1.4 Class FIA: Identification and authentication Page 56 of 91 FIA_AFL.1 Authentication failure handling Hierarchical to: No other components. Dependencies: FIA_UAU.1 Timing of authentication FIA_AFL.1.1 The TSF shall detect when [selection: an administrator configurable positive integer within [assignment: 1 to 5]] unsuccessful authentication attempts occur related to [assignment: the authentication events of Basic Authentication shown in Table 21]. Table 21 : List of Authentication Events of Basic Authentication FIA_AFL.1.2 Authentication Events User authentication using the Operation Panel User authentication using WIM from the client computer User authentication when printing from the client computer User authentication when using LAN Fax from client computer When the defined number of unsuccessful authentication attempts has been [selection: met], the TSF shall [assignment: perform actions shown in Table 22]. Table 22 : List of Actions for Authentication Failure Unsuccessfully Authenticated Users Normal user Supervisor MFP administrator Actions for Authentication Failure The lockout for the normal user is released by the lockout time set by the MFP administrator, or release operation by the MFP administrator. The lockout for a supervisor is released by the lockout time set by the MFP administrator, release operation by the MFP administrator, or elapse of a given time after the TOE's restart. The lockout for the MFP administrator is released by the lockout time set by the MFP administrator, release operation by a supervisor, or elapse of a given time after the TOE's restart. FIA_ATD.1 User attribute definition Hierarchical to: No other components. Dependencies: No dependencies. FIA_ATD.1.1 The TSF shall maintain the following list of security attributes belonging to individual users: [assignment: the security attributes listed in Table 23 for each user in Table 23]. Copyright (c) 2012 RICOH COMPANY, LTD. All rights reserved.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92

Page 56 of
91
Copyright (c) 2012 RICOH COMPANY, LTD. All rights reserved.
6.1.4
Class FIA: Identification and authentication
FIA_AFL.1
Authentication failure handling
Hierarchical to:
No other components.
Dependencies:
FIA_UAU.1 Timing of authentication
FIA_AFL.1.1
The TSF shall detect when
[selection: an administrator configurable positive integer within
[assignment: 1 to 5]]
unsuccessful authentication attempts occur related to
[assignment: the
authentication events of Basic Authentication shown in Table 21]
.
Table 21 : List of Authentication Events of Basic Authentication
Authentication Events
User authentication using the Operation Panel
User authentication using WIM from the client computer
User authentication when printing from the client computer
User authentication when using LAN Fax from client computer
FIA_AFL.1.2
When the defined number of unsuccessful authentication attempts has been
[selection: met]
,
the TSF shall
[assignment: perform actions shown in Table 22]
.
Table 22 : List of Actions for Authentication Failure
Unsuccessfully
Authenticated Users
Actions for Authentication Failure
Normal user
The lockout for the normal user is released by the lockout time set by the MFP
administrator, or release operation by the MFP administrator.
Supervisor
The lockout for a supervisor is released by the lockout time set by the MFP
administrator, release operation by the MFP administrator, or elapse of a given
time after the TOE's restart.
MFP administrator
The lockout for the MFP administrator is released by the lockout time set by the
MFP administrator, release operation by a supervisor, or elapse of a given time
after the TOE's restart.
FIA_ATD.1
User attribute definition
Hierarchical to:
No other components.
Dependencies:
No dependencies.
FIA_ATD.1.1
The TSF shall maintain the following list of security attributes belonging to individual users:
[assignment: the security attributes listed in Table 23 for each user in Table 23]
.