Belkin®
Secure
DVI
KVM
Switch,
Secure
KM
Switch
and
Secure
Windowing
KVM
EAL
4
augmented
ALC_FLR.3
Security
Target
Rev.
1.01
Page
|
51
Table
11:
SFR
and
Security
Objectives
Mapping
Objective
SFR
Addressing
the
Objective
Rationale
O.CONF
The
TOE
shall
not
violate
the
confidentiality
of
information,
which
it
processes.
Information
generated
within
any
PERIPHERAL
GROUP
COMPUTER
CONNECTION
shall
not
be
accessible
by
any
other
PERIPHERAL
GROUP
‐
COMPUTER
CONNECTION
FDP_ETC.1
(Export
of
User
Data
Without
Security
Attributes)
FDP_IFC.1a
(Subset
Information
Flow
Control)
FDP_IFC.1b
(Subset
Information
Flow
Control
‐
Unidirectional
Data
Flow)
FDP_ETC.1:
In
typical
TOE
applications,
USER
data
consists
of
HUMAN
INTERFACE
DEVICE
control
information.
Also
included
is
configuration
information
such
as
KEYBOARD
settings
that
must
be
reestablished
each
time
the
TOE
switches
between
COMPUTERS.
These
DEVICES
neither
expect
nor
require
any
security
ATTRIBUTE
information.
The
information
content
of
the
data
passed
through
a
CONNECTION
is
ignored.
Note
that
although
this
SFR
appears
in
the
claimed
Protection
Profile,
it
is
not
applicable
specifically
for
the
TOE
as
it
does
not
handle
HUMAN
INTERFACE
DEVICE
control
information
or
states.
FDP_IFC.1a:
This
captures
the
policy
that
no
information
flows
between
different
PERIPHERAL
PORT
GROUP
IDS.
FDP_IFC.1b:
This
captures
the
policy
that
HUMAN
INTERFACE
DEVICE
data
can
flow
only
from
a
device
to
a
selected
COMPUTER,
thus
preventing
data
from
one
COMPUTER
flowing
through
the
TOE
to
another
COMPUTER.
FDP_IFF.1a:
