Dell C7765DN MFP Color Laser Printer - Manual (Page 68)

Dell C7765dn Security Target
- 64 -
Security Objectives Security Functional Requirements Rationale
local authentication) reaches the defined number of times.
By FIA_UAU.1 and FIA_UID.1, user authentication is performed to
identify an authorized system administrator or general user.
By FIA_UAU.7, unauthorized disclosure of the authentication
information (password) is prevented because the authentication feedback
is protected.
By FMT_MOF.1, the person who enables/disables TOE security
functions and makes functional settings is limited to system
administrator.
By FMT_MTD.1, the person who can make settings of TOE security
functions is limited to system administrator. Thus, only system
administrators can query, modify, and create TSF data.
By FMT_SMF.1, TOE security management functions are provided for
system administrator.
By FMT_SMR.1 (1), the role related to the security is limited to system
administrator by maintaining the role of system administrator as a user
who has special authority.
O.RESIDUAL
O.RESIDUAL is the objective that disables the reproduction and
recovery of the used document data in the internal HDD.
By satisfying the following security requirements, O.RESIDUAL can be
realized:
By FDP_RIP.1, the previous information of the used document data
stored in the internal HDD is made unavailable.
O.RESTRICT
O.RESTRICT is the objective that offers the function to inhibit an
unauthorized person from using the TOE.
By satisfying the following security requirements, O.RESTRICT can be
realized:
By FIA_AFL.1 (1), successive attacks are prevented because the power
needs to be cycled when the number of key operator authentication
failures reaches the defined number of times.
By FIA_AFL.1 (2), successive attacks are prevented because the power
needs to be cycled when the number of SA authentication failures (at
local authentication) reaches the defined number of times.
By FIA_AFL.1 (3), when general user authentication fails, “incorrect
password” message is displayed, requesting password re-entry.
By FIA_AFL.1 (4), when SA authentication fails (at remote
authentication), “incorrect password” message is displayed, requesting
password re-entry.
By FIA_UIA.1 and FIA_UID.1, user authentication is performed to
identify an authorized general user and system administrator.