Belkin®
Secure
DVI
KVM
Switch,
Secure
KM
Switch
and
Secure
Windowing
KVM
EAL
4
augmented
ALC_FLR.3
Security
Target
Rev.
1.01
Page
|
54
Attribute
Initialization)
GROUP
selection
based
on
a
physical
switch
position
or
a
manufacturer’s
specified
sequence
for
choosing
among
the
CONNECTED
COMPUTERS
(CONNECTED
here
implies
powered
on).
This
requirement
is
a
dependency
of
FDP_IFF.1a
and
FDP_ITC.1.
O.USBDETECT
The
TOE
shall
detect
any
USB
connection
that
is
not
a
pointing
device,
keyboard,
or
user
authentication
device
and
disable
that
connection.
EXT_IUC.1
(invalid
USB
Connection)
EXT_IUC.1:
Upon
detection
of
an
invalid
USB
connection,
the
TOE
will
disable
the
connection
and
notify
the
user.
O.UNIDIR
TOE
circuitry
shall
assure
that
USER
KEYBOARD,
USER
POINTING
DEVICE
and
EDID
data
will
flow
only
from
PERIPHERAL
DEVICES
to
the
SWITCHED
COUPLED
COMPUTER.
FDP_IFC.1b
(Subset
Information
Flow
Control)
FDP_IFF.1b
(Simple
Security
Attributes)
FDP_IFC.1b:
This
captures
the
policy
that
KEYBOARD,
POINTING
DEVICE
and
EDID
information
MUST
flow
from
devices
to
SWITCHED
COMPUTERs
only.
Reverse
flow
must
be
blocked
by
hardware.
FDP_IFF.1b:
This
requirement
identifies
the
security
ATTRIBUTES
needed
to
detail
the
operation
of
a
switch
and
the
rules
allowing
only
unidirectional
information
transfer
between
a
keyboard,
pointing
device
and
EDID
chip
to
a
CONNECTED
COMPUTER.
This
requirement
is
a
dependency
of
FDP_IFC.1b.
