Fuji Xerox C2265/C2263 Security Target
- 113 - Copyright
2016 by Fuji Xerox Co., Ltd
user ID and password are verified against the data registered in the TOE setting data. The ID
and password are also verified for user identification/authentication upon saving data for the
private print function.
This identification (FIA_UID.1) and the authentication (FIA_UAU.1) are simultaneously
performed, and the operation is allowed only when both of the identification and authentication
succeed.
When receiving fax data by the public telephone line, the TOE receives the fax data and
stores them in Mailbox without user identification and authentication.
(6) FIA_UAU.7 Protected authentication feedback
The TOE offers the function to display the same number of asterisks (`*`) as the
entered-password characters on the control panel or Web browser in order to hide the
password at the time of user authentication.
(7) FIA_USB.1 User-subject binding
With the authenticated ID, TOE associates the roles of key operator, SA, and general user
with the subjects.
(8) FMT_MSA.1(a), FMT_MSA.1(b), FMT_MSA.1(c), FMT_MSA.1(d), FMT_MSA.1(e),
FMT_MSA.1(f), FMT_MSA.1(g), FMT_MSA.1(h) Management of security attributes
As shown in Table 44, the TOE restricts the handling of security attributes to the user whose
identity is authenticated by the user authentication function.
Table 44 Management of security attributes
Security Attribute Operation Roles
Key operator identifier Change Key
operator,
SA identifier Query, Change, delete,
create
Key
operator, SA
General user identifier Query, Change, delete,
create
Key
operator, SA
User identifier for each function Query, Change Key
operator, SA
Owner identifier of D.DOC (own document data
in Personal Mailbox)
Query, delete, create Key
operator, SA,
General user
Owner identifier of D.DOC (own document data
in Shared Mailbox)
Query, delete, create Key
operator, SA,
General user
Owner identifier of D.DOC (all document data in
Mailbox)
Query, delete Key operator
To Next Page
Loading...
