CERTIFIED PRODUCTS AND SYSTEMS

• Identification and Authentication
• Security Management

The TOE is the xPortalNet HS system which consist of xPortalNet Server version 2.0.0.2, xPortalNet HS Client version 2.0.0.2 and Xp-GLS5100 Controllers. The TOE provides a centralise management system to manage MicroEngine controller(s) and supporting device from unauthorised user access and/or physical temper on controllers or device such as access control system, alarm system, parking payment system, lift access control system and other.

The following security functions are implemented by the TOE:

• Security Audit
• Identification and Authentication
• Security Management
• Secure Communication
• Tamper Protection

The TOE a content aware Data Leakage Prevention (DLP) solution that is designed as a complete solution for preventing data leakage problems in government and corporate environments from the start.

The following security functions are implemented by the TOE:

• Security Audit
• Identification and Authentication
• Security Management
• User Data Protection

The TOE provides secure access control systems using Bluetooth technology to restrict unauthorized user to physically access to a restricted assets area. Physical access control is a matter of whom, where, and when

The following security functions are implemented by the TOE:

• Security Audit
• Identification and Authentication
• Security Management
• Secure Communication
• Tamper Protection

SCAN S3 SMC-AGENT is a Web-Based Application Access Control Management, which enable users to access their internal network resources securely through PKI implementation via soft-certificates, roaming certificates and smart cards. SCAN S3 SMC-AGENT is the combination of SCAN S3 SMC(Security Management Console), in which, the SCAN S3 SMC is define as the administration console for the operations SCAN S3 SMC-AGENT in the aspects of managing users and the access controls, thus, as for the SCAN S3 AGENT is the front-end interface for all users registered in the SCAN S3 SMC system, uses the interface as a secure platform in communicating with the protected resources govern by the security protection of SCAN S3 SMC-AGENT.With the new integration of software desktop that enable users to access the internal network resources, by inputting soft-certificate, roaming certificates orsmart cards through that application.

The SCAN S3 SMCAGENTenables the organization to manage the overall security through a single framework that enables the defining and assignment or implementation of the following security functions in one system:

• Security Audit; The TOE will generate audit records for selected security events in several log files and categories.
• Authentication and Identification; TOE Administrator/smust login to SCAN S3 to identify themselves to the application together with the prompted (one of up to three) authentication means in order for them to gain access to the protected websites, using SCAN S3 AGENT software desktop.
• Cryptography; TOE has built-in feature of cryptography that bound to the operations of SCAN S3 AGENT at Users and Administrators workstation.
• Security Management; TOE Administrator/s has access to all TOE features, that applicable to be managed through web application portal hosted byTOE.
• User Data Protection; User/s data and credentials including TOE Administrator/s information is protected by ensuring that specific TOE Administrator/s that is assigned with roles and privileges can only access a specific web pages/portals and hence the data associated with the web pages/portal.
• Protection of the TSF; The security audit functions will generate audit records of events along with date and time of event. To ensure a reliable date and time, TOE enforce the time stamps to be taken from a reliable source from the environment.

MQAssureTM NetSignOn version 3.0 is a client authentication agent which integrates with Windows operating system platform for desktops and laptops. It leverages multiple authentication methods such as MyKAD, biometric (Fingerprinting/Iris), USB Token, and userid/password to perform login functionality to a system in a Domain (Network connected mode and network disconnected mode). The scope of the evaluation only covers NetSignOn that runs in system which is connected to the domain.

MQAssure™ NetSignOn v2.0 is EAL1 certified by MyCC Scheme in 2012. The additional features of MQAssure™ NetSignOn v3.0 can be found in the Excutive Summary of the Certification Report.

The scope of the evaluation covers major security features as follows:

• User Data Protection – The TOE provides various methods in enforcing user authentication. The users can login to the domain via one of the following methods: Userid and password combination, or MyKAD and PIN/password combination, or MyKAD and Biometric (finger printing) combination, or eKey and PIN combination, or iris Biometric image. Userid and password combination must be combined with either MyKAD or eKey or iris biometric authentication scheme. Regardless of the authentication mechanism used, the initial userid must be entered at the very beginning of the authentication process.
• Identification and Authentication - The TOE allows authorized user to access the TOE once user is successfully identified and authenticated by the TOE.
• Security Management - The TOE provides various management functions to ensure efficient and secure management of the TOE such as user management and changing password through NetSignOn user application or MQAssureTM Identity Manager (IM).

The Target of Evaluation (TOE) is Single Card Acces Maximum Security (SCAMS) 1.0 includes Ohanae Connect 2.1.2.0 or SCAMS. The TOE is an access control solution that consists of an access card that equipped with USB mass storage drive, and pre-installed with Ohanae software. However, the door access card and Ohanae registration module are not part of the evaluation scope. Ohanae provides random password generator, centralised user password management, data protection using encrypted drive/partition, data sanitisation that cleans user track when using USB mass storage drive outside of the secure operational environment and synchronisation capabilities.

The TOE comprises of multiple security components as follows:

• Door Access Card - The hardware component of the SCAMS is a RFID hardware wiring with plastic casing that provides access door security features. However this is not part of the TOE.
• Ohanae Secure Sign-On - Provides users with capabilities of generating random password for any forms of web application that require identification and authentication process. It is also applicable to be use on messaging clients such as MSN Messenger, Yahoo Messenger and others.
• Ohanae Securworkplace - It provides data sanitisation while working with MS Windows 64 bit host operating system. Once this feature is activated, any user activities will be monitored by Ohanae Securworkplace module. Whereas, as the users completed his tasks or activities and plug-off Ohanae, any save data/files within the host operating system will be permanently deleted without any traces.
• Ohanae Securdrive - It provides encrypted drive services for user to store their data/files inside the USB mass storage drive equipped with the SCAMS Access Card. User will be able to store any data by mounting the encrypted drive on the host OS under the partition name of “INVICTA”. “INVICTA” partition is enforcing with AES 256 bit encryption within limited storage of 4GB formatted in FAT/FAT32 and unlimited storage for NTFS format.
• Ohanae Registration - To activate or deactivate devices that using Ohanae, which allows the user to have more than one device to be installed with Ohanae. However, this module is not part of the TOE.

Users must enable Ohanae Secure Sign-On, Ohanae Securworkplace and Ohanae Securdrive for evaluated and secure configuration of the TOE. This process perform by Reisetech staffs during pre-installation process is described in Operational Guidance and Administrative Guidance.

In order to perform these functions securely a number of security functions and capabilities have been implemented, including the following:

• Secure password management – provide users with secure password management via mobile storage i.e. USB Mass Storage,
• Secure operational environment – provide secure operational environment for users while operating/working inside unidentified or unprotected desktop operating system. The secure features include: secure data management, monitoring and storage, and
• Security management - centralised management system in TOE server that allows users to synchronise with Ohanae synchronisation databases. However, only Ohanae request to the TOE server is included in the evaluation scope.

The Target of Evaluation (TOE), IBM Logical Partition Architecture for Power7 operating on IBM Power Systems hardware with AH730_087 or AM740_088 (hereafter referred as LPAR), has been evaluated in the context of hardware models 770 (AM740_088 firmware) and 795 (AH730_087 firmware). The TOE firmware is designed to abstract and virtualise physical hardware resources to provide secure access to the underlying platform for one or more concurrent operating systems. Each virtual platform is known as a partition. The operating systems executing in the available partitions are treated as subjects of the TOE, where the TOE not only provides the necessary operational support for the hosted operating systems, but also serves to separate them from each other to ensure mutual non-interference.

While not included as part of the TOE, the TOE is configured using a connected Hardware Management Console (HMC) that provides access to the functions necessary to enable administrative personnel to effectively manage the allocation of resources (i.e., processors, memory, and I/O devices) to the configured partitions. Once the TOE is configured, the HMC must be disconnected so that it offers no interfaces while the TOE is operating in its evaluated configuration.

The TOE consists of the PowerVM Hypervisor which provides the virtualisation. The other components of the LPAR such as the Hardware Management Console (HMC), Flexible Service Processor (FSP), Bulk Power Assembly (BPA) and operating systems are outside the TOE scope. The underlying resources of the IBM Power 770 and Power 795 server platforms, including Disks, CPU, RAM, or networking, including the internal virtual switch are considered to be part of the TOE environment.

In the context of the evaluation, the TOE provides the following major security features:

• User data protection – the TOE is designed to instantiate multiple partitions for the purpose of supporting and isolating simultaneous operating systems. As such, it implements a policy where each partition can access only those resources explicitly assigned to it. In terms of access control, the CPU, memory, and I/O devices can be assigned to a given partition and a partition can access those resources only when they are assigned to it.
• Identification and authentication – the active entity or user of the TOE is partition, which it instantiates. Partitions are implicitly identified and authenticated by internal numerical identifiers associated with partitions (using internal data structures) as they are defined. Being implicitly identified by the TOE, partitions have no need, nor means, to identify themselves. Furthermore, the identification of a partition is guaranteed by the TOE and as such each partition is also continuously authenticated.
• Security management – the TOE supports several management functions to configure the TOE via the dedicated physical HMC interface (out of scope for this evaluation). Once the TOE is operational (in evaluated configuration), the TOE effectively doesn’t offer any security management functions. However, the TOE serves to restrict the ability to change its own configuration nonetheless.
• Protection of the TOE Security Function (TSF) – the components of the TOE that protect themselves using the domains provided by Power7 processors. The TOE operates in the privileged domain and the partitions operate in the unprivileged domain. This allows the TOE to protect itself as well as the resources it makes selectively available to the applicable partitions. Beyond protecting itself and its resources, the TOE is also designed such that when the hardware that supports a partition fails, the other partitions will continue uninterrupted.

MQAssureTM NetSignOn Version 2.0 (hereafter referred as NSO) is a client agent that integrates with Windows operating system platforms of the desktop and laptops. It leverages multiple authentication methods such as MyKAD, biometric, USB token, and userid/password to perform the login functionality to a system in a Domain (network connected mode and network disconnected mode).

NSO is utilising MQAssureTM/AppShield v1.2_CR6 Integrated with MQAssureTM IAM v1.0_CR6 (IAM), a centralized identity and access management platform. It provides the backbone for the NSO by providing centralized policy management (part of IM), session management and audit logging (part of AM). In the overall infrastructure, NSO acts as a policy enforcement agent for workstations. IAM provides a centralized administration console through which the administrators can create and enforce various policies to control the authentication schemes to workstations in a domain. IAM consists of the following modules:

• MQAssureTM Access Manager (AM) that is partially in scope of the TOE, which is where the run-time (real-time) checks are performed during the authentication phase.
• MQAssureTM Identity Manager (IM) is enforcing the authentication policy and reports viewing function which is within the scope of the TOE. Additionally, only Self-help function for TOE users is within the scope of the TOE.

The security functions that the TOE provides include the following:

• User data protection – Users are required to login using the combination of multiple authentication methods.
• Identification and Authentication – Users must be identified and authenticated before access to relevant resources is allowed.
• Security Management – The TOE contains various management functions to ensure efficient and secure management of the TOE such as user management and changing passwords.

The Target of Evaluation (TOE) is a software product, which comprises of MQAssure™/AppShield v1.2_CR6 integrated with MQAssure™/IAM v1.0_CR6. The MQAssureTM/AppShield v1.2_CR6 (hereafter referred as Appshield) combined with MQAssureTM/IAM v1.0_CR6 (hereafter referred as IAM) is an access control software for web applications. The TOE controls access to web filtering applications by enforcing authentication and authorisation using multifactor authentication schemes. It is also capable of session control, and request validation based on its core engine policy and rules.

IAM or Identity and Access Management is the core engine of the TOE. It is a centralised identity and access management platform that provides the back bone for the AppShield security functionality. In the overall infrastructure, AppShield acts as a policy enforcement agent for the web applications.

The security features within the scope of the evaluation for IAM includes:

• Multifactor User Authentication which includes MyKad-Biometric, iKey-PIN or password.
• TOE Administration which provides a web based GUI console for the administrator to configure and manage the TOE.
• Security Audit which generates audit records for relevant authentication events and access events to various objects.

The security features within the scope of the evaluation for AppShield includes:

• Access Control which enforces access control policy decision made by the IAM.
• HTTP request validation which protects the web applications from common input tampering attacks.

SCAN S3 SMC-ISI-MA is a web based application for Access Control Management, suitable for providing centralized authentication and audit services for user to securely access different applications. The TOE is software that comprises of:

• SCAN S3 Security Manager Console Version 1.0 Release 14556 or SCAN S3 SMC Version 1.0 Release 14556, a centralized administration of logon IDs, policy configuration and logging of events,
• SCAN S3 Multi Authentication Version 1.0 or SCAN S3 MA Version 1.0, to support multiple authentication mechanisms in a single system, and
• SCAN S3 Identity Service Infrastructure Version 1.0 or SCAN S3 ISI Version 1.0, to allow roaming of PKI key (soft token).

The security functions of the TOE that are within the scope of evaluation covering the management of the security features which involves registering new users, defining and assigning access privileges and audit log of System Administrator activities pertaining to creation, update and delete of Administrator or Staff logon IDs as well as the assignment of Administrator or Staff role.

The TOE security functions mentioned above provides the identification and authentication, security management, audit generation and views functionalities, TOE access and user data protection.

Palm n' Go - Ezio Version 1.0, the Target of Evaluation (TOE), from Multimedia University is a touch-less hand geometry and palm print authentication application. It provides the ability to verify a claimed identity of a human being using the subject's palm vein pattern as a unique characteristic of their body thus providing a method for controlling access.

The TOE works in verification mode only and does not provide biometric identification. Using Palm n' Go in an identification mode is considered outside the evaluated configuration. In this evaluation, it is assume that all authorised users have been successfully enrolled because the enrolment process is out of the evaluation scope.

The TOE also utilises a non-biometric mechanism (username and password) to identify and authenticate an administrator of the TOE to enforce an access control policy for controlling access and to the management functions of the TOE.

The TOE also provides the capability to capture audit records for events of interest associated with both the biometric identification and TOE configuration functions.

E-Jari v 4.0, is biometric based identification and authentication system that implemented by the user as the access point to the portal. The portal means restricted area for the authorised user which assigned by the administrator. It comprises of:

• E-Jari v 4.0, is the software part of the TOE which controls the verification part and fingerprint matching; and
• NM4000 is the hardware part of the TOE that capture the fingerprint template and extracting them for use to be compared between the enrolled minutiae from the flash memory.

E-Jari v 4.0 biometric verification system either verifies or rejects the claimed identity of a human being using unique characteristics of his body: his fingerprint. The scope of the evaluation only covers the operation of E-Jari v 4.0 in a verification mode only: the system verifies whether, for a specific user ID, the fingerprint offered matches the fingerprint stored for the and only that user (commonly referred to as 1:1 matching). Although it can be used in stand-alone or network-integrated solutions, the evaluation only covers stand-alone operation only.

The TOE is designed to secure web applications from the attacks and provide a security layer by proxy-ing all HTTP(S) traffic and shield web servers and databases from direct access of the attackers irrespective of the underlying application vulnerabilities.

The TOE primary features include:

• Identification and Authentication: The TOE enables audit functionality to tracks all activities within the TOE boundary network inclusive of its own operations as TOE Application Server.
• User Data Protection: The TOE protects the web application from external network intrusions by using information flow control between internal and external network. The TOE will log all HTTP requests and responses before allowing or rejecting the HTTP requests.
• Security Management: TOE functions can be managed through command-line interface. The TOE only allows limited user access to run a limited set of commands.
• These do not affect the running mode of the TOE.
• Security Audit: The TOE will generate audit records for HTTP Request and responses. Each audited events will be recorded along with date and time of event, source IP, account user who performed the event, event name, system filename related to event and other event details.

The Target of Evaluation (TOE) is iDeras Unified Threat Management (UTM) v5.02 or known as iDeras.

The TOE is a Unified Threat Management (UTM) or hybrid solution consists of firewall packet filtering technology, offering server hosting services, network security with management features, and gateway security management within a single appliance. The scope of the evaluation only covers network gateway functions that are responsible to manage the enterprise network traffic flow. The TOE includes other supporting features that are not part of TOE scope such as Intrusion Detection/Prevention, antimalware, content filtering, VPN, network management, hosting server, and other features specified in Section 2.6.3 of the Security Target.

The scope of evaluation covers major security features as follows:

• Identification and Authentication - TOE administrator can access TOE by providing username and password in the Webconfig interface and CLI interface. TOE administrator will be granted role based on built-in Groups, access to services and pages within Webconfig. Password for each administrator account is governed by password policy. TOE administrator is able to modify the existing configurable settings as per required by the organisational security policies implemented or enforced.
• User Data Protection – The TOE has capabilities of protecting internal network from external network intrusion by using information flow controls between internal and external network. The TOE will check the inbound and outbound IP network protocols, contents and ports before allowing or rejecting the IP network and packets. TOE Administrator can configure packet filter rules and policies based on the subject and information security attributes. By default, all external (internet) traffic will be blocked. TOE administrator can configure any services, ports and protocols that are accessible between Internet and internal networks.
• Security Management - TOE features can be managed through Webconfig and CLI by the TOE administrator. User of TOE, whom is assigned with TOE administrator roles, is configurable using built-in feature by assigning to administrator account “admin”. TOE administrator could enable, disable, modify the behaviour of services controlled by TOE packet filtering rules, user attributes values, network setting, time-of-day web access, NTP Time server, backup and restore configuration setting, restart and shutdown functions, password policies, and related functions of TOE.
• Security Audit - The TOE will generate audit records for selected security events in several log files and categories. Each audited events will be recorded along with date and time of event, account user who performed the event, event name, system filename related to event and other event details. Audit record can be viewed by TOE administrator but it cannot be edited. TOE
• Administrator could select and filter the logs for easy viewing. TOE will create a new log file to store the audit records if the size limit is reached for a single log file. Limitation of the log storage is based on the internal hard disk equipped within the TOE appliance.
• Protection of the TSF - The security audit functions will generate audit records of events along with date and time of event. To ensure a reliable date and time, TOE enforce the time stamps to be taken from a reliable source from the environment. TOE prevents modification of date and time manually.

Biocryptodisk Encryptor is a USB portable hardware cryptographic module which consists of on-the-fly AES 256-bit hardware en-/decryption engine on board and capable to en-/decrypting the files from any computer detected storage such as USB external drive,network attached drive and virtual drives.

The TOE scope of evaluation covers various major security functions described as below:

• Audit - The TOE (Biocryptodisk Encryptor) is designed to minimize threats to an organization by providing secure management and reporting capabilities.
• Cryptographic Support – TOE has cryptographic support module that can generate the keypair generation by using ECIES with 256-bits/384-bits key sizes; generate key for Digital Signature by using ECDSA with 256-bits/384-bits, and generate key using Random Number Generation (RNG) with 256-bits key sizes.
• User Data Protection - TOE has an access control policy that covers all authorized users access to perform all operations such as Token Management, Token Enrolment, Administrator Management, etc.
• Identification and Authentication – TOE allows an authorized user to access the encrypted drive and cryptographic services; and access RTM System to connect with SQL server by entering the valid username and password.
• Management –TOE has two roles defined in the Access Control Policy which is administrator and user. The Access Control Policy implements restrictive default values at the initial TOE start up or TOE initial execution.
• Testing - TOE enforces Testing module for self-tests during the start-up of Encryptor and preserve secure state on several failure events in order to maintain the integrity of the data and protect from any modification.
• Trusted Path - TOE enforces USB communication session between RTM System and Encryptor under Trusted Path module which is protected by P256 ECIES and AES-256 session key.

OREACryptHDisk is software application for protecting sensitive information stored in personal computers or mobile laptops, by encrypting the contents of confidential directories and files. Unauthorized access to the file's contents in the encrypted directories or files is denied even if the files were copied, backed up, or archived elsewhere.

OREACryptHDisk comprises of five subsystems that provide different functions for the TOE. They are Subsystem References, Subsystem Operation, Subsystem Storage, Subsystem Installation, and Subsystem Setting. However, only several modules inside Subsystem Operation, Subsystem Storage and Subsystem Setting are part of the TOE.

OREACryptHDisk is designed to provide protection of end-user's data by forcing the end-user to use passwords, and perform encryption and decryption process of the end-user data. Additionally, the OREACryptHDisk provides file recovery function if the end-user forgot their password by using backup key generated during OREACryptHDisk installation.

Only the "Public version" configuration was evaluated where the end-users are responsible to generate their own public and private keys. "Corporate version" where it involves an organisation's system administrator to generate the end-user's private and public keys, and perform key recovery process is not included in the scope of the evaluation.

OREACryptUSB is a stand-alone software security product that runs on USB platform by providing the need for authentication and identity verification requirements, and also a platform for storing and managing digital certificates. The TOE comprises of five subsystems that provides different functions for the TOE. They are Subsystem References, Subsystem Operation, Subsystem Storage, Subsystem Accessibility, and Subsystem Initialization. However, only several modules inside Subsystem Operation, Subsystem Storage and Subsystem Accessibility are part of the TOE.

The TOE is designed to provide protection of end-user's data by forcing the TOE end-user to use passwords and the performing a process of encrypting and decrypting the end-user data. Additionally, the TOE provides for security verification by implementing digital certificated for web applications' access control, or document signing.

The security functionalities that are covered under scope of the evaluation are End-user Authentication, Data protection, Digital certificate functionality, and Password Enforcement to authenticate the authorized user.

The TOE, Multi-application Smart Card Operating System is composed of hardware and software components. The TOE operates as a platform that store cardholder credentials as definitive electronic national identity card in which serves as national e-passport.

The following security functions are implemented by the TOE:

• File Management.
• Generic Application and Platform Management.
• Cryptographic Management.
• TOE Self Protection and Testing.

The TOE, Multi-application Smart Card Operating System is composed of hardware and software components. The TOE operates as a platform that store cardholder credentials as definitive electronic national identity card in which serves as national e-passport.

The following security functions are implemented by the TOE:

• File Management.
• Generic Application and Platform Management.
• Cryptographic Management.
• TOE Self Protection and Testing.

The TOE, Multi-application Smart Card Operating System is composed of hardware and software components. The TOE operates as a platform that store cardholder credentials as definitive electronic national identity card in which serves as national e-passport.

The following security functions are implemented by the TOE:

• File Management.
• Generic Application and Platform Management.
• Cryptographic Management.
• TOE Self Protection and Testing.

The ESKM provides capabilities for generating, storing, serving, controlling and auditing access to data encryption keys. It enables organizations to protect and preserve access to business-critical, sensitive, data-at-rest encryption keys, both locally and remotely.

The TOE is an appliance that provides security policy and key management services to encrypting client devices and applications.

The TOE primary features include:

• Security Audit
• Cryptographic Support
• User Data Protection
• Identification and authentication
• Security Management
• TSF Protection
• TOE Access
• Trusted Channel/ Path