Раздел: Документация
0 ... 11 12 13 14 15 16 17 ... 117 b)Basic: Identification of the information, the destination, and a copy of the evidence provided. c)Detailed: The identity of the user who requested a verification of the evidence. FCO NRO.1 Selective proof of origin Hierarchical to: No other components. FCO NRO.1.1 The TSF shall be able to generate evidence of origin for transmitted [assignment: list of information types] at the request of the [selection: originator, recipient, [assignment: list of third parties]]. FCO NRO.1.2 The TSF shall be able to relate the [assignment: list of attributes] of the originator of the information, and the [assignment: list of information fields] of the information to which the evidence applies. FCO NRO.1.3 The TSF shall provide a capability to verify the evidence of origin of information to [selection: originator, recipient, [assignment: list of third parties]] given [assignment: limitations on the evidence of origin]. Dependencies: FIAUID.1 Timing of identification FCO NRO.2 Enforced proof of origin Hierarchical to: FCONRO.1 FCO NRO.2.1 The TSF shall enforce the generation of evidence of origin for transmitted [assignment: list of information types] at all times. FCO NRO.2.2 The TSF shall be able to relate the [assignment: list of attributes] of the originator of the information, and the [assignment: list of information fields]of the information to which the evidence applies. FCO NRO.2.3 The TSF shall provide a capability to verify the evidence of origin of information to [selection: originator, recipient, [assignment: list of third parties]] given [assignment: limitations on the evidence of origin]. Dependencies: FIAUID. 1 Timing of identification 4.2 Non-repudiation of receipt (FCO NRR) Family behaviour Non-repudiation of receipt ensures that the recipient of information cannot successfully deny receiving the information. This family requires that the TSF provide a method to ensure that a subject that transmits information during a data exchange is provided with evidence of receipt of the information. This evidence can then be verified by either this subject or other subjects. Component levelling FCO NRR Non-repudiation of receipt FCO NRR.1 Selective proof of receipt requires the TSF to provide subjects with a capability to request evidence of the receipt of information. FCONRR.2 Enforced proof of receipt requires that the TSF always generate evidence of receipt for received information. Management: FCONRR.1, FCONRR.2 The following actions could be considered for the management functions in FMT: a) The management of changes to information types, fields, originator attributes and third parties recipients of evidence. Audit: FCONRR. 1 The following actions should be auditable if FAUGEN Security audit data generation is included in the PP/ST: a)Minimal: The identity of the user who requested that evidence of receipt would be generated. b)Minimal: The invocation of the non-repudiation service. c)Basic: Identification of the information, the destination, and a copy of the evidence provided. d)Detailed: The identity of the user who requested a verification of the evidence. Audit: FCONRR.2 The following actions should be auditable if FAUGEN Security audit data generation is included in the PP/ST: a)Minimal: The invocation of the non-repudiation service. b)Basic: Identification of the information, the destination, and a copy of the evidence provided. 1 2 c) Detailed: The identity of the user who requested a verification of the evidence. FCO NRR.1 Selective proof of receipt Hierarchical to: No other components. FCO NRR.1.1 The TSF shall be able to generate evidence of receipt for received [assignment: list of information types] at the request of the [selection: originator, recipient, [assignment: list of third parties]]. FCO NRR.1.2 The TSF shall be able to relate the [assignment: list of attributes] of the recipient of the information, and the [assignment: list of information fields] of the information to which the evidence applies. FCO NRR.1.3 The TSF shall provide a capability to verify the evidence of receipt of information to [selection: originator, recipient, [assignment: list of third parties]] given [assignment: limitations on the evidence ofreceipt]. Dependencies: FIAUID.1 Timing of identification FCO NRR.2 Enforced proof of receipt Hierarchical to: FCO NRR.1 FCO NRR.2.1 The TSF shall enforce the generation of evidence of receipt for received [assignment: list of information types]. FCO NRR.2.2 The TSF shall be able to relate the [assignment: list of attributes] of the recipient of the information, and the [assignment: list of information fields] of the information to which the evidence applies. FCO NRR.2.3 The TSF shall provide a capability to verify the evidence of receipt of information to [selection: originator, recipient, [assignment: list of third parties]] given [assignment: limitations on the evidence ofreceipt]. Dependencies: FIAUID. 1 Timing of identification 0 ... 11 12 13 14 15 16 17 ... 117
|
