Fuji Xerox C2265 - Class FDP: User Data Protection; Table 16 Common Access Control SFP

Fuji Xerox C2265/C2263 Security Target
- 51 - Copyright

2016 by Fuji Xerox Co., Ltd
- AES
[assignment: cryptographic key sizes]
- 256bits
[assignment: list of cryptographic operations]
- encryption of the document data to be stored in the internal HDD
and decryption of the document data retrieved from the internal
HDD.
6.1.3. Class FDP: User Data Protection
The Security Function Policy (SFP) described in Table16 is referenced by the Class FDP SFRs in
this clause.
Table 16 Common Access Control SFP
Object Attribute Operation(s) Subject *Access control
rule
D.DOC attributes
from Table
17
Delete
- Delete the document data
in Mailbox and Private Print
U.USER Denied, except
for his/her own
documents
- R1
- R2
Delete
- Delete the document data
except for Mailbox and
Private Print.
U.USER Denied
- Register the document
data to the Mailbox
U. USER - R3
D.FUNC attributes
from Table
17
Modify; Delete
- Modify and delete the
data
U. USER Denied, except
for his/her own
function data
- R4
*Details of Access control rule
R1: When the owner identifier of D.DOC matches the user identifier, operation to delete the
document in Mailbox is permitted.
R2: When the owner identifier of D.DOC matches the user identifier, operation to delete the
document in Private Print is permitted.
R3: When the owner identifier of D.DOC matches the user identifier, operation to register the
document in Mailbox is permitted.
R4: When the owner identifier of D.FUNC matches the user identifier, operation to modify and
delete the Mailbox is permitted.