Belkin®
Secure
DVI
KVM
Switch,
Secure
KM
Switch
and
Secure
Windowing
KVM
EAL
4
augmented
ALC_FLR.3
Security
Target
Rev.
1.01
Page
|
45
Dependencies:
FDP_IFC.1a
Subset
information
flow
control
FMT_MSA.3
Static
attribute
initialization
FDP_IFF.1.1a
The
TSF
shall
enforce
the
Data
Separation
SFP
based
on
the
following
types
of
subject
and
information
security
attributes:
PERIPHERAL
PORT
GROUPS
(SUBJECTS);
KEYBOARD
PERIPHERAL
DATA
,
POINTING
DEVICE
PERIPHERAL
DATA
,
EDID
PERIPHERAL
DATA
,
and
USER
AUTHENTICATION
DEVICE
PERIPHERAL
DATA
(OBJECTS),
and
PERIPHERAL
PORT
GROUP
IDs
(ATTRIBUTES).
FDP_IFF.1.2a
The
TSF
shall
permit
an
information
flow
between
a
controlled
subject
and
controlled
information
via
a
controlled
operation
if
the
following
rules
hold:
Switching
Rule:
KEYBOARD
PERIPHERAL
DATA
and
POINTING
DEVICE
PERIPHERAL
DATA
can
flow
to
a
PERIPHERAL
PORT
GROUP
with
a
given
ID
only
if
it
was
received
from
a
PERIPHERAL
PORT
GROUP
with
the
same
ID.
FDP_IFF.1.3a
The
TSF
shall
enforce
the
No
additional
information
flow
control
SFP
rules
.
FDP_IFF.1.4a
The
TSF
shall
provide
the
following:
No
additional
SFP
capabilities.
FDP_IFF.1.5a
The
TSF
shall
explicitly
authorize
an
information
flow
based
on
the
following
rules:
No
additional
rules
.
FDP_IFF.1.6a
The
TSF
shall
explicitly
deny
an
information
flow
based
on
the
following
rules:
No
additional
rules
.
6.1.1.5
FDP_IFF.1b
Simple
Security
Attributes
(Unidirectional
Data
Flow)
Hierarchical
to:
No
other
components.
Dependencies:
FDP_IFC.1b
Subset
information
flow
control
FMT_MSA.3
Static
attribute
initialization