Xerox WorkCentre 5135/5150 Multifunction ... - Common Criteria

Xerox WorkCentre 5135/5150
Multifunction Systems Security Target
FDP_IFF.1.2
FDP_IFF.1.3
FDP_IFF.1.4
FDP_IFF.1.5
The TSF shall permit an information flow between a
controlled subject and controlled information via a controlled
operation if the following rules hold: [
SSL session establishment and maintenance are in
accordance with the SSLv3.1 standard.
The SSL cryptographic operations are in accordance with
the SSLv3.1 standard.
The signature on the X.509 certificate received by the
MFD is valid].
The TSF shall enforce the [no additional information flow
control SFP rules].
The TSF shall explicitly authorize an information flow based
on the following rules: [no additional rules based on security
attributes that explicitly authorize information flows].
The TSF shall explicitly deny any information flow based on
the following rules: [HTTP management traffic without an
SSL tunnel].
5.3.3.11. FDP_RIP.1 (IOW 1) Subset residual information protection
Hierarchical to:
Dependencies:
FDP_RIP.1.1
No other components
No dependencies
The TSF shall ensure that any previous information content
of temporary image files will be overwritten according to
DoD 5200.28-M upon the deallocation of the temporary
image files from the following objects: [print, network scan
or scan-to-email job].
Application Note: This SFR shall ensure that all temporary document image data
written to the hard disk drive will be overwritten once the respective print, network
scan or scan-to-email job is finished.
5.3.3.12. FDP_RIP.1 (IOW 2) Subset residual information protection
Hierarchical to:
Dependencies:
FDP_RIP.1.1
No other components
No dependencies
The TSF shall ensure that any previous information content
of temporary image files will be overwritten with zeroes
upon the deallocation of the temporary image files from the
following objects: [embedded fax job].
52
Copyright 2009 Xerox Corporation, All rights reserved