Toe Summary Specification; Toe Security Functions; Identification & Authentication (Tsf_Fia) - Samsung X4220 Instruction Manual

Samsung Multifunction MultiXpress X4220, X4250, X4300, X401, K4250, K4300, K4350, K401 Series
7

TOE Summary Specification

7.1

TOE Security Functions

This section presents the security functions performed by the TOE to satisfy the identified SFRs in
Section 6.1
•
Identification & Authentication (TSF_FIA)
•
Network Access Control (TSF_NAC)
•
Security Management (TSF_FMT)
•
Security Audit (TSF_FAU)
•
Image Overwrite (TSF_IOW)
•
Data Encryption (TSF_NVE)
•
Fax Data Control (TSF_FLW)
•
Self Testing (TSF_STE)
•
Secure Communication (TSF_SCO)
7.1.1 Identification & Authentication (TSF_FIA)
Relevant SFR: FIA_AFL.1, FIA_ATD.1, FIA_UAU.1, FIA_UAU.7, FIA_UID.1,
FIA_USB.1, FTA_SSL.3, FDP_ACC.1(1)(2)(3), FDP_ACF.1(1)(2)(3)
U. ADMINISTRATOR can select the authentication method among basic authentication, application
authentication, and device authentication. If the device authentication selected, it requests U.USER to
login before using all device applications. In this case, U.USER cannot use any application without
logging in.
U. ADMINISTRATOR can select the login identification method.
- Local authentication is performed internally by the TOE (for U.USER).
- Remote authentication is performed externally by authentication servers (SMB, Kerberos, LDAP
server) in the operational environment of the TOE (only for U.NORMAL).
U.USER should be identified and authenticated by entering as ID and Password to access the TOE's
functions.
The TOE restricted the number of consecutive invalid authentication attempts as 3 times. When the
number of consecutive invalid authentication attempts has exceeded the limit number within 3
minutes, the account will be locked for 5 minutes. If U.USER is idle for 3 minutes, the mutual session
will be terminated automatically.
The TOE can restrict U.USER from accessing the machine or application. U. ADMINISTRATOR can
also give specific permission for U.USER to only use certain features of the machine based on User
ID, Group ID.
Copyright

2014 SAMSUNG ELECTRONICS Co., Ltd., All rights reserved
87