Class Fia: Identification And Authentication; Table 21 : List Of Authentication Events Of Basic Authentication; Table 22 : List Of Actions For Authentication Failure - Ricoh Aficio MP 2852SP Manual

FDP_ACF.1.4(b) The TSF shall explicitly deny access of subjects to objects based on the following additional
rules: [assignment: deny an operation on MFP application in case of supervisor process or
RC Gate process].
FDP_RIP.1 Subset residual information protection
Hierarchical to: No other components.
Dependencies: No dependencies.
FDP_RIP.1.1 The TSF shall ensure that any previous information content of a resource is made unavailable
upon the [selection: deallocation of the resource from] the following objects: [assignment:
user documents].
6.1.4

Class FIA: Identification and authentication

FIA_AFL.1 Authentication failure handling
Hierarchical to: No other components.
Dependencies: FIA_UAU.1 Timing of authentication
FIA_AFL.1.1 The TSF shall detect when [selection: an administrator configurable positive integer within
[assignment: 1 to 5]] unsuccessful authentication attempts occur related to [assignment: the
authentication events of Basic Authentication shown in Table 22].
Table 22 : List of Authentication Events of Basic Authentication
User authentication using the Operation Panel
User authentication using the TOE from client computer Web
browser
User authentication when printing from the client computer
User authentication when using LAN Fax from client computer
FIA_AFL.1.2 When the defined number of unsuccessful authentication attempts has been [selection: met],
the TSF shall [assignment: perform actions shown in Table 23].
Unsuccessfully
Authenticated Users
Normal user
Supervisor
MFP administrator
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved.
Authentication Events
Table 23 : List of Actions for Authentication Failure
The lockout for the normal user is released by the lockout time set by the MFP
administrator, or release operation by the MFP administrator.
The lockout for a supervisor is released by the lockout time set by the MFP
administrator, release operation by the MFP administrator or the TOE's restart.
The lockout for the MFP administrator is released by the lockout time set by the
MFP administrator, release operation by a supervisor or the TOE's restart.
Actions for Authentication Failure
Page 56 of 91