Table of Contents
Advertisement
Fuji Xerox C2265/C2263
The detailed SFR description and the added SFR content for each SFR are described.
The description of the operation of registering the document data of Common Access
Control SFP is added. However, only the authorized user can register the document data,
thus FDP_ACC.1 / FDP_ACF.1 is more restrictive than PP.
The security attributes of +SMI is not defined, but as there is no operation to restrict the
transfer of FPT_FDI_EXP.1, it is equivalent to the PP requirement.
As it is defined in the access control SFP of D.DOC that some deletion processing is not
allowed for U.USER, FDP_ACC.1 is more restrictive than PP.
Only the authorized user can add the access control SFP of D.FUNC for the creation and
registration of D.FUNC, thus FDP_ACC.1 / FDP_ACF.1 is more restrictive than PP.
Other SFRs specified in PP are equivalent to the requirement, and TOE is set to be more
restrictive by the additional SFR.
Therefore, the SFR of this ST is more restrictive than that of PP.
In this ST, the content quoted from the SFR of PP is written in italics, describing the content
required by PP.
Also, the assigned part is similarly written in italics, including the part fixed in PP.
Among the Security Objectives Rationale specified in PP, the objective of
P.AUDIT.LOGGING replaces OE.AUDIT_STORAGE.PROTECTED and
OE.AUDIT_ACCESS.AUTHORIZED with O.AUDIT_STORAGE.PROTECTED and
O.AUDIT_ACCESS.AUTHORIZED.
Also, O.CIPHER is added to the objectives of P.CIPHER. Others describe the content
required by PP without any changes to show its assurance.
Objectives are assured as the description is added for the added TOE objectives and SFR.,
The relationship between FMT_MSA.1 and the security objectives are different from PP, but
this does not change the content of security requirements specified in PP. This is because,
in order to protect user data, the requirements to prevent disclosure and alteration of
security attributes are apllied to TSF data security objectives.
As to other TOE objectives and SFR, the contents required by PP are described.
The SAR specified in PP describes the content required by PP without any changes.
Therefore, this ST demonstrably conforms to IEEE Std. 2600.2
Security Target
TM
-2009
- 22 -
Copyright
2016 by Fuji Xerox Co., Ltd
Advertisement
Table of Contents
