Xerox WorkCentre 5632/5638/5645/5655 - Common Criteria

Xerox WorkCentre 5632/5638/5645/5655/5665/5675/5687
Multifunction Systems Security Target
O.PROTECT_DAT
FTP_TRP.1 ensures that the TOE provides communications channels
between itself and remote trusted IT distinct from other communication
channels and provides assured identification of its end points and
protection of the channel data from modification or disclosure.
FPT_STM.1 ensures that the TOE provides a reliable timestamp for
inclusion in cryptographic operations.
FCS_COP.1(UDE 1 and 2) ensures that the TOE provides the
cryptographic support necessary to assure data protection for stored.
FDP_RIP.1 (IOW 1) and FDP_RIP.1 (IOW2) protect data by ensuring
that residual temporary document data does not remain on the mass
storage device once the corresponding job has completed processing.
FDP_RIP.1 (IOW 3) protects data by ensuring that stored document
data and directory information does not remain on the mass storage
device once the system administrator has determined that the stored
jobs and data are no longer necessary.
5.8. Rationale for Security Assurance
Requirements
This ST has been developed for multi-function digital image processing products
incorporating Image Overwrite Security function, an Authentication and Authorization
function, an Audit Logging function, an IP Filtering function, and cryptographic network
communications protocols. The TOE environment will be exposed to only a low level of
risk because the TOE sits in office space where it is under almost constant supervision.
Agents cannot physically access the HDD or FAX without disassembling the TOE.
Agents have no means of infiltrating the TOE with code to effect a change. As such, the
Evaluation Assurance Level 3 is appropriate.
That Assurance Level is augmented with ALC_FLR.3, Systematic flaw remediation.
ALC_FLR.3 ensures that instructions and procedures for the reporting, configuration
management, and remediation of identified security flaws are in place and their
inclusion is expected by the consumers of this TOE.
5.9. Rationale for Dependencies
64
Copyright 2009 Xerox Corporation, All rights reserved