拡張コンポーネント定義 (Extended Components Definition); Fpt_Fdi_Exp Restricted Forwarding Of Data To External Interfaces - Xerox D110 Manual

拡張コンポーネント定義 (Extended Components Definition)
5.
This Protection Profile defines components that are extensions to Common Criteria
3.1 Release 2, Part 2. These extended components are defined in the Protection
Profile but are used in SFR Packages, and therefore, are employed only in TOEs
whose STs conform to those SFR Packages.
5.1. FPT_FDI_EXP Restricted forwarding of data to external
interfaces
Family behaviour:
This family defines requirements for the TSF to restrict direct forwarding of
information from one external interface to another external interface.
Many products receive information on specific external interfaces and are intended
to transform and process this information before it is transmitted on another
external interface. However, some products may provide the capability for attackers
to misuse external interfaces to violate the security of the TOE or devices that are
connected to the TOE's external interfaces. Therefore, direct forwarding of
unprocessed data between different external interfaces is forbidden unless explicitly
allowed by an authorized administrative role. The family FPT_FDI_EXP has been
defined to specify this kind of functionality.
Component leveling:
FPT FDI EXP.1 Restricted forwarding of data to external
FPT_FDI_EXP.1 Restricted forwarding of data to external interfaces, provides for the
functionality to require TSF controlled processing of data received over defined
external interfaces before this data is sent out on another external interface. Direct
forwarding of data from one external interface to another one requires explicit
allowance by an authorized administrative role.
Management: FPT_FDI_EXP.1
The following actions could be considered for the management functions in FMT:
a) Definition of the role(s) that are allowed to perform the management activities.
b) Management of the conditions under which direct forwarding can be allowed by
an administrative role.
c) Revocation of such an allowance.
Xerox D110/D125 Copier/Printer
- 30 –
セキュリティターゲット

Copyright 2012 by Fuji Xerox Co., Ltd
1