Source: https://www.scribd.com/document/214099745/Huawei-Wcdma-St-1-19
Timestamp: 2019-08-22 22:28:45
Document Index: 748725902

Matched Legal Cases: ['art 2', 'art 3', 'art 3', 'art 2', 'art 3', 'art 1']

Huawei Wcdma St 1.19 | Transport Layer Security | Threat (Computer)
saveSave Huawei Wcdma St 1.19 For Later
a589914.pdf
Skybox Customer Presentation - May 2016
Cert WC7425 7428 7435 SupplementaryGuide
Certification Study Guide 401
Huawei WCDMA NodeB Software Security Target
Version: 1.19 Last Update: 2011-11-11 Author: Huawei Technologies Co., Ltd.
Huawei WCDMA NodeB Software Version V200R013C01SPC010 Security Target
1. 1.1. 1.2. 1.3. 1.3.1. 1.3.2. 1.3.3. 1.4. 1.4.1. 1.4.2. 2. 3. 3.1. 3.2. 3.2.1. 3.2.2. 3.2.3. 3.3. 3.3.1. 3.4. 3.4.1. 3.4.2. 3.4.3. 3.4.4. 3.4.5. 4. 4.1. 4.2. 4.3. 4.3.1. 4.3.2. 5. 5.1. 5.1.1. 5.1.1.1. 5.1.1.2. 5.1.1.3. INTRODUCTION......................................................................................................................... 7 STREFERENCE....................................................................................................................... 7 TOEREFERENCE .................................................................................................................... 7 TOEOVERVIEW..................................................................................................................... 7 TOEUSAGE ........................................................................................................................... 7 TOETYPE .............................................................................................................................. 9 NONTOEHARDWAREANDSOFTWARE ................................................................................10 TOEDESCRIPTION ................................................................................................................13 LOGICALSCOPE....................................................................................................................13 PHYSICALSCOPE ..................................................................................................................18
PPCONFORMANCECLAIM........................................................................................................19 SECURITYPROBLEMDEFINITION ..............................................................................................20 TOEASSETS..........................................................................................................................20 THREATS..............................................................................................................................20 THREATSBYEAVESDROPPER................................................................................................21 THREATSBYINTERACTIVENETWORKATTACKER ..................................................................21 THREATSBYRESTRICTEDAUTHORIZEDUSER........................................................................21 ORGANIZATIONALPOLICIES .................................................................................................22 P1.AUDIT .............................................................................................................................22 ASSUMPTIONS.....................................................................................................................22 PHYSICAL .............................................................................................................................22 PERSONNEL .........................................................................................................................22 CONNECTIVITY.....................................................................................................................22 SUPPORT .............................................................................................................................22 SECUREPKI...........................................................................................................................23
SECURITYOBJECTIVES ..............................................................................................................24 SECURITYOBJECTIVESFORTHETOE .....................................................................................24 SECURITYOBJECTIVESFORTHEOPERATIONALENVIRONMENT ............................................24 SECURITYOBJECTIVESRATIONALE .......................................................................................25 COVERAGE...........................................................................................................................25 SUFFICIENCY ........................................................................................................................26
SECURITYREQUIREMENTSFORTHETOE...................................................................................28 SECURITYREQUIREMENTS ...................................................................................................28 SECURITYAUDIT(FAU).........................................................................................................28 FAU_GEN.1AUDITDATAGENERATION ............................................................................28 FAU_GEN.2USERIDENTITYASSOCIATION........................................................................28 FAU_SAR.1AUDITREVIEW ..............................................................................................28
5.1.1.4. 5.1.1.5. 5.1.1.6. 5.1.2. 5.1.2.1. 5.1.2.2. 5.1.2.3. 5.1.3. 5.1.3.1. 5.1.3.2. 5.1.3.3. 5.1.3.4. 5.1.3.5. 5.1.3.6. 5.1.4. 5.1.4.1. 5.1.4.2. 5.1.4.3. 5.1.4.4. 5.1.4.5. 5.1.4.6. 5.1.5. 5.1.5.1. 5.1.5.2. 5.1.5.3. 5.1.5.4. 5.1.6. 5.1.6.1. 5.1.6.2. 5.1.7. 5.1.7.1. 5.2. 5.2.1. 5.2.2. 5.2.3. 5.3. 5.4. 6. FAU_SAR.3SELECTABLEAUDITREVIEW ...........................................................................29 FAU_STG.1PROTECTEDAUDITTRAILSTORAGE................................................................29 FAU_STG.3ACTIONINCASEOFPOSSIBLEAUDITDATALOSS............................................29 CRYPTOGRAPHICSUPPORT(FCS)..........................................................................................29 FCS_COP.1/SIGNCRYPTOGRAPHICOPERATION ...............................................................29 FCS_COP.1/SSLCRYPTOGRAPHICOPERATION..................................................................29 FCS_CKM.1/SSLCRYPTOGRAPHICKEYGENERATION ........................................................30 USERDATAPROTECTION(FDP) ............................................................................................30 FDP_ACC.1/LOCALSUBSETACCESSCONTROL ..................................................................30 FDP_ACF.1/LOCALSECURITYATTRIBUTEBASEDACCESSCONTROL...................................30 FDP_ACC.1/DOMAINSUBSETACCESSCONTROL ..............................................................31 FDP_ACF.1/DOMAINSECURITYATTRIBUTEBASEDACCESSCONTROL...............................31 FDP_ACC.1/EMSCOMMSUBSETACCESSCONTROL ..........................................................31 FDP_ACF.1/EMSCOMMSECURITYATTRIBUTEBASEDACCESSCONTROL...........................31 IDENTIFICATIONANDAUTHENTICATION(FIA) ......................................................................32 FIA_AFL.1AUTHENTICATIONFAILUREHANDLING ............................................................32 FIA_ATD.1USERATTRIBUTEDEFINITION .........................................................................32 FIA_UAU.1TIMINGOFAUTHENTICATION ........................................................................33 FIA_UAU.5MULTIPLEAUTHENTICATIONMECHANISMS ...................................................33 FIA_UID.1TIMINGOFIDENTIFICATION ............................................................................33 FIA_SOS.1VERIFICATIONOFSECRETS ..............................................................................34 SECURITYMANAGEMENT(FMT) ..........................................................................................34 FMT_MSA.1MANAGEMENTOFSECURITYATTRIBUTES....................................................34 FMT_MSA.3STATICATTRIBUTEINITIALIZATION ..............................................................34 FMT_SMF.1SPECIFICATIONOFMANAGEMENTFUNCTIONS.............................................34 FMT_SMR.1SECURITYROLES...........................................................................................35 TOEACCESS(FTA) ................................................................................................................35 FTA_TSE.1/SEPTOESESSIONESTABLISHMENT .................................................................35 FTA_TSE.1/LOCALTOESESSIONESTABLISHMENT.............................................................35 TRUSTEDPATH/CHANNELS(FTP)..........................................................................................36 FTP_ITC.1INTERTSFTRUSTEDCHANNEL .........................................................................36 SECURITYFUNCTIONALREQUIREMENTSRATIONALE............................................................36 COVERAGE...........................................................................................................................36 SUFFICIENCY ........................................................................................................................37 SECURITYREQUIREMENTSDEPENDENCYRATIONALE ...........................................................38 SECURITYASSURANCEREQUIREMENTS................................................................................40 SECURITYASSURANCEREQUIREMENTSRATIONALE .............................................................41 TOESUMMARYSPECIFICATION ................................................................................................42
6.1. 6.1.1. 6.1.2. 6.1.3. 6.1.4. 6.1.5. 6.1.6. 7. 7.1. 7.2. 7.3. TOESECURITYFUNCTIONALITY ............................................................................................42 AUTHENTICATION................................................................................................................42 ACCESSCONTROL ................................................................................................................42 AUDITING ............................................................................................................................43 COMMUNICATIONSSECURITY..............................................................................................44 SECURITYFUNCTIONMANAGEMENT ...................................................................................46 DIGITALSIGNATURE.............................................................................................................46
ABBREVIATIONS,TERMINOLOGYANDREFERENCES ..................................................................48 ABBREVIATIONS ..................................................................................................................48 TERMINOLOGY ....................................................................................................................48 REFERENCES ........................................................................................................................48
Table 1 Physical Scope _____________________________________________________________18 Table 2 TOE assets ________________________________________________________________20 Table 3 Threats agents _____________________________________________________________20 Table 4 Mapping of security objectives ________________________________________________26 Table 5 Sufficiency analysis for threats ________________________________________________27 Table 6 Sufficiency analysis for assumptions ___________________________________________27 Table 7 Sufficiency analysis for organizational security policy ____________________________27 Table 8 Mapping SFRs to objectives __________________________________________________37 Table 9 SFR sufficiency analysis _____________________________________________________38 Table 10 Dependencies between TOE Security Functional Requirements __________________40 Table 11 Security Assurance Requirements ___________________________________________40
Version V 1.13 V 1.14 Date 2011-04-28 2011-05-24 Author ZhangLing ZhangLing Changes to previous version --Modifications to include M2000 access into the access control policy. Modifications of the CC test problem. Modifications of the CC test problem.
V 1.18 V 1.19
2011-09-01 2011-11-11
ZhangLing ZhangLing
This Security Target is for the CC evaluation of Huawei WCDMA (Wideband Code Division Multiple Access) NodeB Software, the TOE Version is V200R013C01SPC010 and is based on HERT BBU (Huawei Enhanced Radio Technology-Base Band Unit) version HERTBBU V200R007C01SPC040B811.
Title Version Author Publication Date Huawei WCDMA NodeB Software Security Target 1.19 Zhang Ling 2011-11-11
TOE Name TOE Version TOE Developer TOE Release Date Huawei WCDMA NodeB Software V200R013C01SPC010 Huawei 2011-08-12
In addition to the TOE Name indicated at the table above, the following reference is used, for the sake of simplicity, along the whole product documentation: