Xerox WorkCentre 5632/5638/5645/5655 - Common Criteria

Xerox WorkCentre 5632/5638/5645/5655/5665/5675/5687
Multifunction Systems Security Target
5.3.4. Class FIA: Identification and Authentication
5.3.4.1. FIA_AFL.1 (AUT 1) Authentication failure handling
Hierarchical to:
Dependencies:
FIA_AFL.1.1
FIA_AFL.1.2
No other components
FIA_UAU.1 Timing of authentication
The TSF shall detect when [3] unsuccessful authentication
attempts occur related to [authentication at the local user
interface].
When the defined number of unsuccessful authentication
attempts has been met, the TSF shall [lockout the SA login
for a period of 3 minutes on the Local User Interface].
5.3.4.2. FIA_AFL.1 (AUT 2) Authentication failure handling
Hierarchical to:
Dependencies:
FIA_AFL.1.1
FIA_AFL.1.2
No other components
FIA_UAU.1 Timing of authentication
The TSF shall detect when [1] unsuccessful authentication
attempts occurs related to [authentication at the Web User
Interface].
When the defined number of unsuccessful authentication
attempts has been met, the TSF shall [require that the SA
re-authenticate].
5.3.4.3. FIA_AFL.1 (AUT 3) Authentication failure handling
Hierarchical to:
Dependencies:
FIA_AFL.1.1
FIA_AFL.1.2
No other components
FIA_UAU.1 Timing of authentication
The TSF shall detect when [1] unsuccessful authentication
attempts occurs related to [remote network authentication].
When the defined number of unsuccessful authentication
attempts has been met, the TSF shall [rely on the network
authentication device to lock out the user account].
5.3.4.4. FIA_UAU.2 User authentication before any action
Hierarchical to:
Dependencies:
FIA_UAU.1 Timing of Authentication
FIA_UID.1 Timing of Identification
FIA_UAU.2.1
The TSF shall require each system administrator and
authorized user to be successfully authenticated before
54
Copyright 2009 Xerox Corporation, All rights reserved