Class Fta: Toe Access; Class Ftp: Trusted Path/Channels; Security Assurance Requirements - Ricoh Aficio MP C305 Series Manual

FPT_FDI_EXP.1
Hierarchical to: No other components.
Dependencies: FMT_SMF.1 Specification of Management Functions
FMT_SMR.1 Security roles
FPT_FDI_EXP.1.1
Operation Panel, LAN, telephone line] from being forwarded without further processing by
the TSF to [assignment: the LAN and telephone line].
6.1.7

Class FTA: TOE access

FTA_SSL.3 TSF-initiated termination
Hierarchical to: No other components.
Dependencies: No dependencies.
FTA_SSL.3.1 The TSF shall terminate an interactive session after a [assignment: lapse of Operation Panel
auto logout time, lapse of WIM auto logout time, completion of document data reception
from the printer driver, completion of document data reception from the fax driver, and
termination of communication with RC Gate].
6.1.8

Class FTP: Trusted path/channels

FTP_ITC.1 Inter-TSF trusted channel
Hierarchical to: No other components.
Dependencies: No dependencies.
FTP_ITC.1.1 The TSF shall provide a communication channel between itself and another trusted IT product
that is logically distinct from other communication channels and provides assured identification
of its end points and protection of the channel data from modification or disclosure.
FTP_ITC.1.2 The TSF shall permit [selection: the TSF, another trusted IT product] to initiate
communication via the trusted channel.
FTP_ITC.1.3 The TSF shall initiate communication via the trusted channel for [assignment: communication
via the LAN of document data, function data, protected data, and confidential data, and
communication with RC Gate via the LAN].
6.2

Security Assurance Requirements

The evaluation assurance level of this TOE is EAL3+ALC_FLR.2. Table 30 lists the assurance components
of the TOE. ALC_FLR.2 was added to the set of components defined in evaluation assurance level 3
(EAL3).
Copyright (c) 2012 RICOH COMPANY, LTD. All rights reserved.
Restricted forwarding of data to external interfaces
The TSF shall provide the capability to restrict data received on [assignment: the
Page 66 of 91