Belkin F1dn102c User manual

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand

SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01

Page|1

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand

SecureWindowingKVMEAL4augmentedALC_FLR.3

SecurityTarget



ReleaseDate:July16,2012

DocumentID:HDC06839

Revision:1.01

PreparedBy:CarlosDelToro,Belkin®

InternationalInc.



Belkin®SecureDVIKVMSwitch,SecureKMSwitchand

SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01

Page|2

Contents

1Introduction ............................................................................................................................ 5

1.1STandTOEIdentification ................................................................................................. 5

1.2TOEOverview ................................................................................................................... 6

1.3TOEDescription................................................................................................................ 7

1.3.1CommonCriteriaProducttype................................................................................. 8

1.3.2PhysicalScopeandBoundary ................................................................................... 8

1.3.3EvaluatedEnvironment........................................................................................... 10

1.3.4GuidanceDocuments.............................................................................................. 15

1.3.5TOEFeaturesOutsideofEvaluationScope ............................................................ 15

1.3.6LogicalScopeoftheTOE......................................................................................... 16

1.4Organization ................................................................................................................... 17

1.5DocumentConventions.................................................................................................. 18

1.6DocumentTerminology.................................................................................................. 18

1.6.1STSpecificTerminology .......................................................................................... 18

1.6.2Acronyms ................................................................................................................ 22

2ConformanceClaims ............................................................................................................. 23

2.1CommonCriteriaConformanceClaims.......................................................................... 23

2.2ProtectionProfile(PP)Claims ........................................................................................ 23

2.3PackageClaims ............................................................................................................... 23

3SecurityProblemDefinition.................................................................................................. 24

3.1SecureUsageAssumptions ............................................................................................ 24

3.2Threats............................................................................................................................ 24

3.2.1ThreatsAddressedbytheTOE................................................................................ 25

3.2.2ThreatsaddressedbytheITOperatingEnvironment............................................. 26

3.3OrganizationalSecurityPolicies ..................................................................................... 26

4SecurityObjectives................................................................................................................ 27

4.1SecurityObjectivesfortheTOE ..................................................................................... 27

4.2SecurityObjectivesfortheOperationalEnvironment................................................... 29

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand

SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01

Page|3

4.3Rationale ........................................................................................................................ 30

4.3.1TOESecurityObjectivesRationale.......................................................................... 31

4.3.2SecurityObjectivesRationalefortheOperationalEnvironment ........................... 37

4.4RationaleforOrganizationalPolicyCoverage................................................................ 38

5ExtendedComponentsDefinition......................................................................................... 39

5.1ClassEXT:ExtendedVisualindications .......................................................................... 39

5.1.1VisualIndicationRule(EXT_VIR)............................................................................. 39

5.2ClassEXT:Extended‐InvalidUSBConnection(EXT_IUC).............................................. 40

5.2.1InvalidUSBConnection(EXT_IUC).......................................................................... 40

5.3ClassEXT:Extended–ROM(EXT_ROM) ........................................................................ 41

5.4RationaleforExplicitlyStatedSecurityRequirements .................................................. 42

6SecurityRequirements.......................................................................................................... 43

6.1SecurityFunctionalRequirementsfortheTOE.............................................................. 43

6.1.1ClassFDP:UserDataProtection ............................................................................. 44

6.1.2ClassFMT:SecurityManagement .......................................................................... 47

6.1.3ClassFPT:ProtectionoftheTSF.............................................................................. 48

6.2ExplicitlyStatedRequirementsfortheTOE ................................................................... 49

6.3RationaleForTOESecurityRequirements ..................................................................... 50

6.3.1TOESecurityFunctionalRequirementsTracing&Rationale.................................. 50

6.4RationaleForITSecurityRequirementDependencies .................................................. 56

6.5DependenciesNotMet .................................................................................................. 57

6.6SecurityAssuranceRequirements ................................................................................. 58

6.7RationaleforSecurityAssurance ................................................................................... 59

7TOESummarySpecification.................................................................................................. 60

7.1UserDataProtection–DataSeparation(TSF_DSP)....................................................... 60

7.2SecurityManagement(TSF_MGT) ................................................................................. 61

7.3ProtectionoftheTSF(TSF_TMP) ................................................................................... 62

7.4USBConnection(TSF_IUC) ............................................................................................. 62

7.5Read‐OnlyMemory(TSF_ROM) ..................................................................................... 63

7.6AudioOutputSwitchingFunctionClarification.............................................................. 63

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand

SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01

Page|4



DocumentRevisions

Rev.DateAuthorChanges

1.01July16,2012CarlosDelToro,BelkinChangedproductsP/Nandversions

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand

SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01

Page|5

1Introduction

ThissectionidentifiestheSecurityTarget(ST),TargetofEvaluation(TOE),conformanceclaims,

STorganization,documentconventions,andterminology.Italsoincludesanoverviewofthe

evaluatedproduct.

AnSTprincipallydefines:

Asecurityproblemexpressedasasetofassumptionsaboutthesecurityaspectsofthe

environment;alistofthreatswhichtheproductisintendedtocounter;andanyknown

ruleswithwhichtheproductmustcomply(inChapter3,SecurityProblemDefinition).

Asetofsecurityobjectivesandasetofsecurityrequirementstoaddressthatproblem

(inChapters4and5,SecurityObjectivesandITSecurityRequirements,respectively).

TheITsecurityfunctionsprovidedbytheTargetofEvaluation(TOE)thatmeetthesetof

requirements(inChapter6,TOESummarySpecification).

ThestructureandcontentofthisSTcomplieswiththerequirementsspecifiedintheCommon

Criteria(CC),Part1,AnnexA,andPart3,Chapter6.

1.1 STandTOEIdentification

ThissectionprovidesinformationneededtoidentifyandcontrolthisSTanditsTargetof

Evaluation(TOE),theTOEName.ThisSTtargetsanEvaluationAssuranceLevel(EAL)4

(augmentedwithALC_FLR.3)levelofassurance.

STTitle:BelkinSecureDVIKVMSwitch,SecureKMSwitchandSecureWindowing

KVMSecurityTargetEAL4augmentedALC_FLR.3SecurityTarget

STEvaluation:EWA,Canada

RevisionNumber:1.01

STPublishDate: July16,2012

STAuthors:  CarlosDelToro,BelkinInternational



TOEIdentification: 

BelkinSecure2‐portDVI‐IKVMSwitchw/audioandCAC‐ModelF1DN102C,Ver.111111

Or

BelkinSecure2‐portDVI‐DKVMSwitchw/audio‐ModelF1DN102F,Ver.111111

Or

BelkinSecure4‐portDVI‐IKVMSwitchw/audio–ModelF1DN104B,Ver.111111

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand

SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01

Page|6

Or

BelkinSecure4‐portDVI‐IKVMSwitchw/audioandCAC‐ModelF1DN104G,Ver.111111

Or

BelkinSecure8‐portDVI‐IKVMSwitchw/audioandCAC‐ModelF1DN108C,Ver.111111

Or

BelkinSecure4‐portDVI‐IDual‐HeadKVMSwitchw/audioandCAC‐ModelF1DN104H,Ver.

111111

Or

BelkinSecure8‐portDVI‐IDual‐HeadKVMSwitchw/audioandCAC‐ModelF1DN108F,Ver.

111111

Or

BelkinSecure16‐portDVI‐IKVMSwitchw/audioandCAC‐ModelF1DN116C,Ver.111111

Or

BelkinSecure4‐portKMSwitchw/audio‐ModelF1DN104K,Ver.111111

Or

BelkinSecure8‐portKMSwitchw/audio‐ModelF1DN108K,Ver.111111

Or

BelkinSecure4‐portWindowingKVM‐ModelF1DN104M,Ver.111111

And

BelkinDesktopControllerUnit(DCU)ModelF1DN003R,Ver.111111.



PPIdentification:

ValidatedProtectionProfile–NIAPPeripheralSharingSwitchforHumanInterfaceDevices

ProtectionProfile,Version2.1,September7,2010



1.2 TOEOverview

TheBelkinSecureKVMSwitchallowsthesecuresharingofasinglesetofperipheral

componentssuchaskeyboard,VideoDisplayandMouse/Pointingdevicesamongmultiple

computersthroughstandardUSB,andDVIinterfaces.

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand

SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01

Page|7

TheBelkinSecureKVMproductusesmultiplemicrocontrollerstoemulatetheconnected

peripheralsinordertopreventvariousmethodsofattackssuchas:displaysignaling,keyboard

signaling,powersignalingetc.Theproductisalsoequippedwithmultipleunidirectionalflow

forcingdevicestoassureadherencetotheorganizationalconfidentialitypolicyandflow

betweencoupledcomputers.

TheBelkinSecureKVMlineproductsareavailablein2,4,8or16portmodelswithsingleor

dual‐head(displays).ProductsincludetraditionalKVMswitchingdevices,desktopcontroller

unit(DCU),directdisplayconnectionproducts(KM),WindowingKVMtoallowsecure

interactionwithmultipleconnectedcomputers.

TheBelkinSecureKVMworkswithstandardPersonalComputersrunningoperatingsystems

suchasWindowsorLinuxandhaveportsforUSBkeyboard,USBmouse,DVI‐Ivideo,DVI‐D

video,audio(inputandoutput),andUSBCommonAccessCard(CAC)orSmart‐Cardreader.

TheTOEisintendedtobeusedinarangeofsecuritysettings(i.e.computerscoupledtoasingle

TOEcanvaryfromnon‐classifiedInternetconnectedtothoseprotectedinaccordancewith

nationalsecuritypolicy).AnydataleakageacrosstheTOEmaycauseseveredamagetothe

organizationandthereforemustbeprevented.

UnlikeolderSecureKVMsecurityschemesthatmostlyprotecteduserinformationtransitioning

throughtheTOE,themodernapproachprimarilyaddressestheriskofTOEcompromise

throughremoteattackstocouplednetworkswhichcouldleaklocaluserinformation.

AsummaryoftheBelkinSecureKVMsecurityfeaturescanbefoundinSection1.4.Adetailed

descriptionoftheTOEsecurityfeaturescanbefoundinSection6,TOESummarySpecification.

1.3 TOEDescription

ThissectionprovidescontextfortheTOEevaluationbyidentifyingthelogicalandphysical

scopeoftheTOE,aswellasitsevaluatedconfiguration.

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand

SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01

Page|8

1.3.1 CommonCriteriaProducttype

TheTOEisaKVMswitchdeviceclassifiedasa“PeripheralSharingSwitch”forCommonCriteria.

TheTOEincludesbothhardwareandfirmwarecomponents.

ItshouldbenotedthatmodernSecureKVMdevicesdonotallowanyelectricalinterface

peripheralsharinginordertopreventcertainattacks,andthereforetheyarenolongersimple

switchingdevices.



Figure1–TypicalexampleofTOEinstallation

1.3.2 PhysicalScopeandBoundary

TheTOEisaperipheralsharingswitch.

ThephysicalboundaryoftheTOEconsistsof(refertofigure1below):

OneBELKINSecureKVMSwitch,KMswitchorWindowingKVM;

ThefirmwareembeddedinsidetheTOEthatispermanentlyprogrammedintotheTOE

multiplemicrocontrollers;

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand

SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01

Page|9

TheTOEpowersupplythatisshippedwiththeproduct;

TheTOECOMPUTERinterfacecablesthatareshippedwiththeproduct;

TheoptionalDesktopControllerUnit(DCU)accessory;and

TheaccompanyingUserGuidance.UpdatedUserGuidancecanbedownloadedfromthe

http://www.belkin.comwebsiteatanytime.



TheevaluatedTOEconfigurationdoesnotincludeanyperipheralsorcomputercomponents,

butdoincludesuppliedcomputerinterfacecablesandaRemoteDesktopControllerattached

totheTOE.ThefollowingfiguredepictstheTOEanditsenvironment.

ItshouldbenotedthatsomeTOEmodelssupporttheoperationofmultipleuserdisplays.

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand

SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01

Page|10



1.3.3 EvaluatedEnvironment

Thistableidentifieshardwarecomponentsandindicateswhetherornoteachcomponentisin

theTOEorEnvironment.

This manual suits for next models

Table of contents

Other Belkin Switch manuals

Belkin

Belkin OmniView F1DA104T User manual

Belkin

Belkin F1U201VEA1 User manual

Belkin

Belkin OmniView F1DP104Aea User manual

Belkin

Belkin F1DN104E-3 User manual

Belkin

Belkin F5U231 F5U231ea User manual

Belkin

Belkin 4-Port Mobile Hub User manual

Belkin

Belkin F5U237 User manual

Belkin

Belkin OmniView SOHO User manual

Belkin

Belkin OmniView User manual

Belkin

Belkin OMNIVIEW P74696 User manual

Belkin

Belkin F1U400 - 4x4 USB Peripheral Switch Sharing User manual

Belkin

Belkin OmniView F1DB102P2 User manual

Belkin

Belkin OmniView F1DP101Mea User manual

Belkin

Belkin F1DN104a User manual

Belkin

Belkin OmniView PRO3 PS/2 User manual

Belkin

Belkin OmniView F1DW116C User manual

Belkin

Belkin OMNIVIEW F1DA104PEA User manual

Belkin

Belkin F1DN002MOD-KM-4 User manual

Belkin

Belkin F1DA104Z - OmniView PRO3 USB User manual

Belkin

Belkin F1DN002MOD-KM-4 User manual

Belkin

Belkin F5U237VUK1 User manual

Belkin

Belkin F1DA108Q User manual

Belkin

Belkin P73783AEN User manual

Belkin

Belkin BUS STATION F5U100 User manual

Popular Switch manuals by other brands

SMC Networks

SMC Networks SMC6224M Technical specifications

Aeotec

Aeotec ZWA003-S operating manual

TRENDnet

TRENDnet TK-209i Quick installation guide

Planet

Planet FGSW-2022VHP user manual

Avocent

Avocent AutoView 2000 AV2000BC AV2000BC Installer/user guide

Moxa Technologies

Moxa Technologies PT-7728 Series user manual

Intos Electronic

Intos Electronic inLine 35392I operating instructions

Cisco

Cisco Catalyst 3560-X-24T Technical specifications

Asante

Asante IntraCore IC3648 Specifications

Siemens

Siemens SIRIUS 3SE7310-1AE Series Original operating instructions

Edge-Core

Edge-Core DCS520 quick start guide

RGBLE

RGBLE S00203 user manual

Thrustmaster

Thrustmaster FLIGHT SIMULATOR X quick guide

Southwire

Southwire SURGE GUARD 41390 RVC troubleshooting guide

Buhler

Buhler Nivotemp NT 61 Brief instructions

Kramer

Kramer VS-41HDCP user manual

Techly

Techly IDATA AU-270 user manual

Emerson

Emerson Rosemount 2521 Series quick start guide

Belkin F1DN102C User manual

Popular Switch manuals by other brands