Belkin F1DN102C User manual

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|1
Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3
SecurityTarget







ReleaseDate:July16,2012
DocumentID:HDC06839
Revision:1.01
PreparedBy:CarlosDelToro,Belkin®
InternationalInc.


Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|2
Contents
1Introduction ............................................................................................................................ 5
1.1STandTOEIdentification ................................................................................................. 5
1.2TOEOverview ................................................................................................................... 6
1.3TOEDescription................................................................................................................ 7
1.3.1CommonCriteriaProducttype................................................................................. 8
1.3.2PhysicalScopeandBoundary ................................................................................... 8
1.3.3EvaluatedEnvironment........................................................................................... 10
1.3.4GuidanceDocuments.............................................................................................. 15
1.3.5TOEFeaturesOutsideofEvaluationScope ............................................................ 15
1.3.6LogicalScopeoftheTOE......................................................................................... 16
1.4Organization ................................................................................................................... 17
1.5DocumentConventions.................................................................................................. 18
1.6DocumentTerminology.................................................................................................. 18
1.6.1STSpecificTerminology .......................................................................................... 18
1.6.2Acronyms ................................................................................................................ 22
2ConformanceClaims ............................................................................................................. 23
2.1CommonCriteriaConformanceClaims.......................................................................... 23
2.2ProtectionProfile(PP)Claims ........................................................................................ 23
2.3PackageClaims ............................................................................................................... 23
3SecurityProblemDefinition.................................................................................................. 24
3.1SecureUsageAssumptions ............................................................................................ 24
3.2Threats............................................................................................................................ 24
3.2.1ThreatsAddressedbytheTOE................................................................................ 25
3.2.2ThreatsaddressedbytheITOperatingEnvironment............................................. 26
3.3OrganizationalSecurityPolicies ..................................................................................... 26
4SecurityObjectives................................................................................................................ 27
4.1SecurityObjectivesfortheTOE ..................................................................................... 27
4.2SecurityObjectivesfortheOperationalEnvironment................................................... 29

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|3
4.3Rationale ........................................................................................................................ 30
4.3.1TOESecurityObjectivesRationale.......................................................................... 31
4.3.2SecurityObjectivesRationalefortheOperationalEnvironment ........................... 37
4.4RationaleforOrganizationalPolicyCoverage................................................................ 38
5ExtendedComponentsDefinition......................................................................................... 39
5.1ClassEXT:ExtendedVisualindications .......................................................................... 39
5.1.1VisualIndicationRule(EXT_VIR)............................................................................. 39
5.2ClassEXT:Extended‐InvalidUSBConnection(EXT_IUC).............................................. 40
5.2.1InvalidUSBConnection(EXT_IUC).......................................................................... 40
5.3ClassEXT:Extended–ROM(EXT_ROM) ........................................................................ 41
5.4RationaleforExplicitlyStatedSecurityRequirements .................................................. 42
6SecurityRequirements.......................................................................................................... 43
6.1SecurityFunctionalRequirementsfortheTOE.............................................................. 43
6.1.1ClassFDP:UserDataProtection ............................................................................. 44
6.1.2ClassFMT:SecurityManagement .......................................................................... 47
6.1.3ClassFPT:ProtectionoftheTSF.............................................................................. 48
6.2ExplicitlyStatedRequirementsfortheTOE ................................................................... 49
6.3RationaleForTOESecurityRequirements ..................................................................... 50
6.3.1TOESecurityFunctionalRequirementsTracing&Rationale.................................. 50
6.4RationaleForITSecurityRequirementDependencies .................................................. 56
6.5DependenciesNotMet .................................................................................................. 57
6.6SecurityAssuranceRequirements ................................................................................. 58
6.7RationaleforSecurityAssurance ................................................................................... 59
7TOESummarySpecification.................................................................................................. 60
7.1UserDataProtection–DataSeparation(TSF_DSP)....................................................... 60
7.2SecurityManagement(TSF_MGT) ................................................................................. 61
7.3ProtectionoftheTSF(TSF_TMP) ................................................................................... 62
7.4USBConnection(TSF_IUC) ............................................................................................. 62
7.5Read‐OnlyMemory(TSF_ROM) ..................................................................................... 63
7.6AudioOutputSwitchingFunctionClarification.............................................................. 63

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|4

DocumentRevisions
Rev.DateAuthorChanges
1.01July16,2012CarlosDelToro,BelkinChangedproductsP/Nandversions

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|5
1Introduction
ThissectionidentifiestheSecurityTarget(ST),TargetofEvaluation(TOE),conformanceclaims,
STorganization,documentconventions,andterminology.Italsoincludesanoverviewofthe
evaluatedproduct.
AnSTprincipallydefines:
Asecurityproblemexpressedasasetofassumptionsaboutthesecurityaspectsofthe
environment;alistofthreatswhichtheproductisintendedtocounter;andanyknown
ruleswithwhichtheproductmustcomply(inChapter3,SecurityProblemDefinition).
Asetofsecurityobjectivesandasetofsecurityrequirementstoaddressthatproblem
(inChapters4and5,SecurityObjectivesandITSecurityRequirements,respectively).
TheITsecurityfunctionsprovidedbytheTargetofEvaluation(TOE)thatmeetthesetof
requirements(inChapter6,TOESummarySpecification).
ThestructureandcontentofthisSTcomplieswiththerequirementsspecifiedintheCommon
Criteria(CC),Part1,AnnexA,andPart3,Chapter6.
1.1 STandTOEIdentification
ThissectionprovidesinformationneededtoidentifyandcontrolthisSTanditsTargetof
Evaluation(TOE),theTOEName.ThisSTtargetsanEvaluationAssuranceLevel(EAL)4
(augmentedwithALC_FLR.3)levelofassurance.
STTitle:BelkinSecureDVIKVMSwitch,SecureKMSwitchandSecureWindowing
KVMSecurityTargetEAL4augmentedALC_FLR.3SecurityTarget
STEvaluation:EWA,Canada
RevisionNumber:1.01
STPublishDate: July16,2012
STAuthors:  CarlosDelToro,BelkinInternational

TOEIdentification: 
BelkinSecure2‐portDVI‐IKVMSwitchw/audioandCAC‐ModelF1DN102C,Ver.111111
Or
BelkinSecure2‐portDVI‐DKVMSwitchw/audio‐ModelF1DN102F,Ver.111111
Or
BelkinSecure4‐portDVI‐IKVMSwitchw/audio–ModelF1DN104B,Ver.111111

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|6
Or
BelkinSecure4‐portDVI‐IKVMSwitchw/audioandCAC‐ModelF1DN104G,Ver.111111
Or
BelkinSecure8‐portDVI‐IKVMSwitchw/audioandCAC‐ModelF1DN108C,Ver.111111
Or
BelkinSecure4‐portDVI‐IDual‐HeadKVMSwitchw/audioandCAC‐ModelF1DN104H,Ver.
111111
Or
BelkinSecure8‐portDVI‐IDual‐HeadKVMSwitchw/audioandCAC‐ModelF1DN108F,Ver.
111111
Or
BelkinSecure16‐portDVI‐IKVMSwitchw/audioandCAC‐ModelF1DN116C,Ver.111111
Or
BelkinSecure4‐portKMSwitchw/audio‐ModelF1DN104K,Ver.111111
Or
BelkinSecure8‐portKMSwitchw/audio‐ModelF1DN108K,Ver.111111
Or
BelkinSecure4‐portWindowingKVM‐ModelF1DN104M,Ver.111111
And
BelkinDesktopControllerUnit(DCU)ModelF1DN003R,Ver.111111.

PPIdentification:
ValidatedProtectionProfile–NIAPPeripheralSharingSwitchforHumanInterfaceDevices
ProtectionProfile,Version2.1,September7,2010

1.2 TOEOverview
TheBelkinSecureKVMSwitchallowsthesecuresharingofasinglesetofperipheral
componentssuchaskeyboard,VideoDisplayandMouse/Pointingdevicesamongmultiple
computersthroughstandardUSB,andDVIinterfaces.

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|7
TheBelkinSecureKVMproductusesmultiplemicrocontrollerstoemulatetheconnected
peripheralsinordertopreventvariousmethodsofattackssuchas:displaysignaling,keyboard
signaling,powersignalingetc.Theproductisalsoequippedwithmultipleunidirectionalflow
forcingdevicestoassureadherencetotheorganizationalconfidentialitypolicyandflow
betweencoupledcomputers.
TheBelkinSecureKVMlineproductsareavailablein2,4,8or16portmodelswithsingleor
dual‐head(displays).ProductsincludetraditionalKVMswitchingdevices,desktopcontroller
unit(DCU),directdisplayconnectionproducts(KM),WindowingKVMtoallowsecure
interactionwithmultipleconnectedcomputers.
TheBelkinSecureKVMworkswithstandardPersonalComputersrunningoperatingsystems
suchasWindowsorLinuxandhaveportsforUSBkeyboard,USBmouse,DVI‐Ivideo,DVI‐D
video,audio(inputandoutput),andUSBCommonAccessCard(CAC)orSmart‐Cardreader.
TheTOEisintendedtobeusedinarangeofsecuritysettings(i.e.computerscoupledtoasingle
TOEcanvaryfromnon‐classifiedInternetconnectedtothoseprotectedinaccordancewith
nationalsecuritypolicy).AnydataleakageacrosstheTOEmaycauseseveredamagetothe
organizationandthereforemustbeprevented.
UnlikeolderSecureKVMsecurityschemesthatmostlyprotecteduserinformationtransitioning
throughtheTOE,themodernapproachprimarilyaddressestheriskofTOEcompromise
throughremoteattackstocouplednetworkswhichcouldleaklocaluserinformation.
AsummaryoftheBelkinSecureKVMsecurityfeaturescanbefoundinSection1.4.Adetailed
descriptionoftheTOEsecurityfeaturescanbefoundinSection6,TOESummarySpecification.
1.3 TOEDescription
ThissectionprovidescontextfortheTOEevaluationbyidentifyingthelogicalandphysical
scopeoftheTOE,aswellasitsevaluatedconfiguration.

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|8
1.3.1 CommonCriteriaProducttype
TheTOEisaKVMswitchdeviceclassifiedasa“PeripheralSharingSwitch”forCommonCriteria.
TheTOEincludesbothhardwareandfirmwarecomponents.
ItshouldbenotedthatmodernSecureKVMdevicesdonotallowanyelectricalinterface
peripheralsharinginordertopreventcertainattacks,andthereforetheyarenolongersimple
switchingdevices.



















Figure1–TypicalexampleofTOEinstallation
1.3.2 PhysicalScopeandBoundary
TheTOEisaperipheralsharingswitch.
ThephysicalboundaryoftheTOEconsistsof(refertofigure1below):
OneBELKINSecureKVMSwitch,KMswitchorWindowingKVM;
ThefirmwareembeddedinsidetheTOEthatispermanentlyprogrammedintotheTOE
multiplemicrocontrollers;

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|9
TheTOEpowersupplythatisshippedwiththeproduct;
TheTOECOMPUTERinterfacecablesthatareshippedwiththeproduct;
TheoptionalDesktopControllerUnit(DCU)accessory;and
TheaccompanyingUserGuidance.UpdatedUserGuidancecanbedownloadedfromthe
http://www.belkin.comwebsiteatanytime.

TheevaluatedTOEconfigurationdoesnotincludeanyperipheralsorcomputercomponents,
butdoincludesuppliedcomputerinterfacecablesandaRemoteDesktopControllerattached
totheTOE.ThefollowingfiguredepictstheTOEanditsenvironment.
ItshouldbenotedthatsomeTOEmodelssupporttheoperationofmultipleuserdisplays.

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|10

1.3.3 EvaluatedEnvironment
Thistableidentifieshardwarecomponentsandindicateswhetherornoteachcomponentisin
theTOEorEnvironment.

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|11


TOE/
Environment
ComponentDescription
TOEBelkinSecure2‐portDVI‐IKVMSwitchw/audioandCAC‐Model
F1DN102C
Or
BelkinSecure2‐portDVI‐DKVMSwitchw/audio‐Model
F1DN102F
Or
BelkinSecure4‐portDVI‐IKVMSwitchw/audio–Model
F1DN104B
Or
BelkinSecure4‐portDVI‐IKVMSwitchw/audioandCAC‐Model
F1DN104G
Or
BelkinSecure8‐portDVI‐IKVMSwitchw/audioandCAC‐Model
F1DN108C
Or
BelkinSecure4‐portDVI‐IDual‐HeadKVMSwitchw/audioand
CAC‐ModelF1DN104H
Or
BelkinSecure8‐portDVI‐IDual‐HeadKVMSwitchw/audioand
CAC‐ModelF1DN108F
Or
BelkinSecure16‐portDVI‐IKVMSwitchw/audioandCAC‐
ModelbF1DN116C
TOE
Hardware

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|12
TOEOr
BelkinSecure4‐portKMSwitchw/audio‐ModelF1DN104K
Or
BelkinSecure8‐portKMSwitchw/audio‐ModelF1DN108K
Or
BelkinSecure4‐portWindowingKVM‐ModelF1DN104M
And
BelkinDesktopControllerUnit(DCU)ModelF1DN003R
TOE
Hardware

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|13
EnvironmentUSBMouseandkeyboardcompatiblewith:
LogitechmouseMX518
LogitechmouseM‐UV96
Microsoftmouse1.1A
LogitechmouseG500
LogitechmouseM‐V0007
TeacmouseM52
MicrosoftIntelliMouseExplorer2.0and3.0
LogitechComfortMouseandKeyboard
DellUSBmousemodels:0CJ3339,CU036
DellKeyboardmodels:SK‐8115,0N242F,L100,TH826
Microsoftkeyboard2000,Model1047,KU‐0459
MicrosoftkeyboardRT9450
LenovokeyboardSK‐8825(L)
Shared
Peripheral
PortGroup
Member
EnvironmentUSBUserAuthenticationDevicecompatiblewith:
Precise‐200MC
SCM‐SCR335
Gemalto‐PCUSB‐TR
BelkinF1DN005U
Shared
Peripheral
PortGroup
Member
EnvironmentMonitor–DVI‐I(video)DVIdual‐linkdisplays
Including,butnotlimitedto:
AppleCinemaHDdisplay30‐inch
DellWidescreen30‐inch
HPWidescreen(LP3065)30‐inch
GatewayXHD300030‐inch
Samsung30‐inch(305T)
DellUltrasharp2007FP,20”,AnalogandDigital
connections
DellUltrasharpE190S,19”,AnalogandDigitalconnections
DellUltrasharpE228WFP,AnalogandDigitalconnections
Samsung2343BWX23”,AnalogandDigitalconnections
SamsungSyncMaster712nAnalogonlymonitor

Shared
Peripheral
PortGroup
Member

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|14
TOEBELKINKVMCables(asneeded):

P/NDescription
F1D9012b06

BelkinP/NF1D9012b06,SecureKVMCableKit,
DVI,USB&Audio,black,shielded(6ft.=180
cm).

F2E4141B10D
D‐RT

BelkinP/NF2E4141B10DD‐RT,BelkinProSeries
DVI‐DDual‐LinkMtoMCable,shielded(10ft.=
300cm).

CWR05114BelkinRJ‐14toRJ‐14DCUcable,unshielded(6ft.=
180cm)

F1D9013b10

BelkinP/NF1D9013b10,CACUSBcable,black,
shielded(10ft=300cm)

Cablesfor
connection
ofHost
Computers
to
Peripheral
PortGroup
EnvironmentAudioDevice(Speakers:supports3.5mmconnector)Shared
Peripheral
Group
Member

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|15
EnvironmentHostComputersQty2,4,8or16basedonKVMmodelused

AnyhardwareplatformsupportingthefollowingOperating
Systems:
Windows2000Professional–servicepack4
MSWindowsXP(Home/Pro)–servicepack3
MSWindows2003Server–latestreleasedservicepack
MSWindowsVista–32/64bit
MSWindows7–32/64bit
AppleOSXv10.4andhigher
RedHatLinuxDesktop–latestreleasedversion
RedHatEnterpriseLinuxWS–latestreleasedversion
Ubuntu9.10Linux–latestreleasedversion
withUSBHIDsupportandsingleordualDVIorDPmonitor
outputsupport.
Operational
Environmen
tHost
Computer
resources
Table1:EvaluatedTOEandEnvironmentComponents
1.3.4 GuidanceDocuments
ThefollowingguidancedocumentsareprovidedwiththeTOEupondeliveryinaccordancewith
EAL4requirements:
Productuser’smanual
AlldocumentationdeliveredwiththeproductisrelevanttoandwithinthescopeoftheTOE.
LatestdocumentationmaybefoundatBELKINweb‐site:
http://www.belkin.com/Product_Docs.html

1.3.5 TOEFeaturesOutsideofEvaluationScope
ThissectionidentifiesanyitemsthatarespecificallyexcludedfromtheTOE.
Pointingdevicedriver(software)usedwithKMmodelsTOEtosupportmultipledisplay
COMPUTERS.
ConfigurationutilitysoftwareusedwithandKMmodelsforinitialproductsetup.
RemoteFiberorCopperextenderthatmaybeusedtoextendtheuserconsoleand
DCU.


Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|16
1.3.6 LogicalScopeoftheTOE
TheTOElogicalscopeandboundaryconsistsofthesecurityfunctions/features
provided/controlledbytheTOE.
TheTOEprovidesthefollowingsecurityfeatures:
DataSeparation(TSF_DSP),
SecurityManagement(TSF_MGT),
ProtectionoftheTSF(TSF_TMP),
VisualIndicationRule(EXT_VIR),
InvalidUSBConnection(EXT_IUC),
Read‐OnlyROMs(EXT_ROM)

TheTOEimplementstheDataSeparationSecurityFunctionPolicy(SFP)asoutlinedinSection2
oftheclaimedProtectionProfile.Inoperation,theTOEisnotconcernedwiththeuser
informationflowingbetweenthesharedperipheralsandtheswitchedcomputers.Using
emulationtechniquesandopticaldatadiodes,theTOEenforcesunidirectionaldataflowfrom
sharedperipheralstothecoupledcomputers.TheTOEonlyprovidesasinglelogicalconnection
betweenthesharedperipheralgroupandtheoneselectedcomputer(TSF_DSP).Data
SeparationisaccomplishedasexplainedinSection7ofthisST.

TheTOEusesindividualdeviceemulatorsforeachcomputerchannel.Thisdesignallowsforthe
connectedcomputerstobepowered‐upatanytime.ThewhiteLEDswithcoloredlight‐pipesin
theTOEfrontpanel(calledcolorchips)indicatetheselectedcomputerchannel.TheTOE
providestheuserwithoneormoreofthefollowingmodeldependantmethodstoselector
switchacomputer:push‐buttons,mousebuttons,DCUswitchesorkeyboardshortcuts.These
meansallowtheusertoexplicitlydeterminetowhichcomputerthesharedsetofperipheralsis
connected(TSF_MGT).ThisconnectionisvisuallydisplayedbyaLEDattheTOEfrontpanelover
theselectedchannel.SecurityManagementandvisualindicationfunctionsareaccomplishedas
explainedinSection7ofthisST.

TheTOEimplementsmultiplealways‐onsensorstodetectanyattempttoopentheTOEby
removingthesecurityscrew.Onceatamperingeventisdetected,normalusewillbe
permanentlydisabledandtheLEDsontheTOEfrontpanelwillblinktoindicatetamperedstate.
SpecialholographicTamperingEvidentLabelsareusedassealstoprovideadditionalvisual
indicationincaseofattemptedphysicaltampering.ProtectionoftheTSFthroughtampering
detectionisaccomplishedasexplainedinmoredetailinSection7ofthisST.

TheTOEimplementsstrictfilteringofconnectedUSBdevicesateachperipheralport.Any
connecteddeviceisenumeratedandqualifiedbasedonapreprogrammedprofile.Adevicewill

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|17
beacceptedbytheTOEonlyifitisqualified.Anon‐qualified(UNAUTHORIZED)USBdevicewill
beblockedbytheTOEandcannotbeused.ProtectionfrominvalidUSBdevicesis
accomplishedasexplainedinmoredetailinSection7ofthisST.

TheTOEdesignusesreadonlynon‐volatilememorycomponentstopreventanypossibilityofa
remotetamperingattackintendedtomodifyTOEsecurityfunctionality.ReadOnlyMemory
protectionisaccomplishedasexplainedinmoredetailinSection7ofthisST.
1.4 Organization
SecurityTargetIntroduction(Section1)
Section1providesidentificationoftheTOEandST,anoverviewoftheTOE,anoverviewofthe
contentoftheST,documentconventions,andrelevantterminology.Theintroductionalso
providesadescriptionoftheTOEsecurityfunctionsaswellasthephysicalandlogical
boundariesfortheTOE,thehardwareandsoftwarethatmakeuptheTOE,andthephysicaland
logicalboundariesoftheTOE.

ConformanceClaims(Section2)
Section2providesapplicableCommonCriteria(CC)conformanceclaims,ProtectionProfile(PP)
conformanceclaimsandAssurancePackageconformanceclaims.

SecurityProblemDefinition(Section3)
Section3describesthethreats,organizationalsecuritypolicies,andassumptionspertainingto
theTOEandtheTOEenvironment.

SecurityObjectives(Section4)
Section4identifiesthesecurityobjectivesfortheTOEanditssupportingenvironmentaswell
asarationaledescribinghowobjectivesaresufficienttocounterthethreatsidentifiedforthe
TOE.

ExtendedComponentsDefinition(Section5)
Section5presentsthecomponentsneededfortheSTbutnotpresentinPartIIorPartIIIofthe
CommonCriteriaStandard.

SecurityRequirements(Section6)

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|18
Section6presentstheSecurityFunctionalRequirements(SFRs)metbytheTOE,andthe
securityfunctionalrequirementsrationale.Inaddition,thissectionpresentsSecurityAssurance
Requirements(SARs)metbytheTOE,aswellastheassurancerequirementsrationale.

SummarySpecification(Section7)
ThissectiondescribesthesecurityfunctionsprovidedbytheTOEandhowtheysatisfythe
securityfunctionalrequirements.ItalsodescribesthesecurityassurancemeasuresfortheTOE
andtherationalefortheassurancemeasures.

1.5 DocumentConventions
TheCCdefinesfouroperationsonsecurityfunctionalrequirements.Thedescriptionsbelow
definetheconventionsusedinthisSTtoidentifytheseoperations.WhenNIAPinterpretations
areincludedinrequirements,theadditionsfromtheinterpretationsaredisplayedas
refinements.

Assignment: indicatedwithboldtext

Selection: indicatedwithunderlinedtext

Refinement: additionsindicatedwithboldtextanditalicsdeletionsindicatedwithstrike‐
throughboldtextanditalics

Iteration: indicatedwithtypicalCCrequirementnamingfollowedbyalowercaseletterfor
eachiteration(e.g.,FMT_MSA.1a)

Extended: indicatedaspertheapplicablePP(e.g.EXT_VIR.1)
1.6 DocumentTerminology
PleaserefertoCCPart1Section4fordefinitionsofcommonlyusedCCterms.

1.6.1 STSpecificTerminology
Attribute(SeePeripheralPortGroupID)

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|19
AuthorizedUserAUSERwhohasbeengrantedpermissiontointeractwiththeTOE
andallofitsCONNECTEDPERIPHERALS.
Computer Aprogrammablemachine.Thetwoprincipalcharacteristicsofa
computerare:itrespondstoaspecificsetofinstructionsina
well‐definedmanner,anditcanexecuteaprerecordedlistof
instructions(asoftwareprogram).Forthepurposesofthis
document,anyelectronicDEVICEcontrollingtheMONITOR,and
acceptingsignalsfromtheKEYBOARDandPOINTINGDEVICE(if
any)willqualify.Examplesofcomputersunderthisdefinitionare
IBM‐classpersonalcomputers(andso‐calledclones),desktop
workstations,thin‐clientsandcontrolconsoleINTERFACESinto
“mainframe”computers.
DedicatedPeripheralPortAKVMportintendedforconnectionofspecificpre‐defined
peripheraldevice.Typicallyusedforuserauthenticationdeviceor
morespecificallyforCommonAccessCard(CAC)reader.
DeviceAunitofhardware,outsideorinsidethecaseorhousingforthe
essentialCOMPUTERthatiscapableofprovidingINPUTtothe
essentialCOMPUTERorofreceivingOUTPUTorboth.Theterm
PERIPHERALissometimesusedasasynonymfordeviceorany
INPUT/OUTPUTunit.
DisplayACOMPUTEROUTPUTsurfaceandprojectingmechanismthat
showtextandothergraphicimagesfromaCOMPUTERsystemto
auser,usingaCathodeRayTube(CRT),LiquidCrystalDisplay
(LCD),Light‐EmittingDiode(LED),gasplasma,activematrix,or
otherimageprojectiontechnology.Thedisplay(theterms
monitoranddisplayareoftenusedinterchangeably)isusually
consideredtoincludethescreenorprojectionsurfaceandthe
DEVICEthatproducestheinformationonthescreen.Insome
COMPUTERS,thedisplayispackagedinaseparateunitcalleda
monitor.Displays(andmonitors)arealsosometimescalledVideo
DisplayTerminals(VDTs).Alsoincludedinthiscategoryaretactile
brailleOUTPUTDEVICES.
DualHeadComputerwithtwovideooutputsusedtodrivesimultaneously
twouserdisplays.
Group(SeePeripheralPortGroup)
HumanInterfaceDevicesThosePERIPHERALSwhichprimarilyallowaUSERtodirectlyobserve
and/ormodifytheoperation/statusofaCOMPUTER.Examples
includeakeyboard,videoMONITOR,mouse,andanopticalhead
tracker.Modems,printers,harddrives,andscannersarenotsuch
devices.

Belkin®SecureDVIKVMSwitch,SecureKMSwitchand
SecureWindowingKVMEAL4augmentedALC_FLR.3SecurityTargetRev.1.01
Page|20
InterfaceTheCONNECTIONandinteractionbetweenhardware,software,
andtheUSER.
InputDeviceAnymachinethatfeedsdataintoaCOMPUTER.Thisincludes
scanners,touchscreens,andvoiceresponsesystems.
KeyboardADEVICEwhichconvertsthephysicalactionofaUSERsuchasthe
depressingofoneormorebuttonsintoelectronicsignals
correspondingtothebitwisesymbolforacharacterinsomeform
ofelectronicalphabet.Themostcommonexampleisthe
typewriter‐likekeyboardfoundonmosthomeCOMPUTERS,but
thedefinitionalsoincludesbraillekeypadsamongotherDEVICES.
KVMSwitchKeyboard,Video,Mouse‐AKVM(keyboard,video,mouse)switch
allowsasinglekeyboard,videomonitorandmousetobe
switchedtoanyofanumberofcomputerswhentypicallyasingle
personinteractswithallthecomputersbutonlyoneatatime.
WindowingKVMAspecialKVM(keyboard,videoandmouse)devicethatallowsa
singlekeyboard,videomonitorandmousetobeswitchedtoany
ofanumberofcomputerswhiletheusercaninteractwith
multiplevideooutputspresentedsimultaneouslyonasingle
display.
KMSwitchKeyboardandMouseswitch‐Aswitchallowsasinglesetofuse
keyboardandmousetobeswitchedtoanyofanumberof
computerswhentypicallyasinglepersoninteractswithallthe
computersbutonlyoneatatime.
NetworkAcollectionofcomputersanddevicesinterconnectedby
communicationschannelsthatfacilitatecommunicationsand
allowssharingofresourcesandinformationamong
interconnecteddevices.Forthepurposesofthisdocument,any
wiredorwirelesscommunicationmeanscoupledtothe
COMPUTERconnectedtotheTOE.
Object(SeePeripheralDataandStateInformation)
OpticalDataDiodeAnopticalhardwarecomponentusedtoenforcedataflowinone
directiononly.
PeripheralDataInformation,including[buffered]STATEINFORMATION,sentfrom
ortoaPERIPHERAL.
PeripheralPortGroup(“Group”)/PeripheralPortGroupID
AcollectionofHUMANINTERFACEDEVICEPORTStreatedasa
singleentitybytheSWITCH.ThereisoneGroupforthesetof
SHAREDPERIPHERALSandoneGroupforeachSWITCHED