ISO/IEC 15408-2:2022 情報セキュリティ、サイバーセキュリティ、プライバシー保護 | ページ 6

3.1

identity

representation uniquely identifying an entity within the context of the target of evaluation (TOE)

Note 1 to entry: Entities can be diverse such as a user, process, or disk. For a human user, the representation can be the full or abbreviated name or a unique pseudonym.

Note 2 to entry: An entity can have more than one identity.

3.2

inter TSF transfer

communication between the target of evaluation (TOE) and the security functionality of other trusted IT products

3.3

internal communication channel

communication channel between separated parts of the target of evaluation (TOE)

3.4

internal TOE transfer

communicating data between separated parts of the target of evaluation (TOE)

3.5

operation

<on an ISO/IEC 15408‑2 component> modification or repetition of a component by assignment, iteration, refinement, or selection

3.6

secret

information that is known only to authorized users and/or the TOE security functionality (TSF) in order to enforce a specific security function policy (SFP) (3.8)

3.7

secure state

state in which the TOE security functionality (TSF) data are consistent and the TSF continues correct enforcement of the security functional requirements (SFRs)

3.8

security function policy

SFP

set of rules describing specific security behaviour enforced by the TOE security functionality (TSF) and expressible as a set of security functional requirements (SFRs)

3.9

TOE resource

anything usable or consumable in the target of evaluation (TOE)

3.10

transfer outside of the TOE

target of evaluation (TOE) security functionality (TSF)-mediated communication of data to entities not under the control of the TSF

3.11

trusted channel

means by which a target of evalution (TOE) security functionality (TSF) and another trusted IT product can communicate with necessary confidence

3.12

trusted path

means by which a user and a target of evaluation (TOE) security functionality (TSF) can communicate with the necessary confidence

Note 1 to entry: Communication typically implies the establishment of identification and authentication of both parties, as well as the concept of a user specific session which is integrity-protected.

Note 2 to entry: When the external entity is a trusted IT product, the notion of trusted channel (3.11) is used instead of trusted path.

Note 3 to entry: Both physical and logical aspects of secure communication can be considered as mechanisms for gaining confidence.

3.13

TSF data

data for the operation (3.5) of the target of evalution (TOE) upon which the enforcement of the security functional requirement (SFR) relies

3.14

user data

data received or produced by the target of evaluation (TOE), which is meaningful to some external entity, but which do not affect the operation (3.5) of the TOE security funtionality (TSF)

Note 1 to entry: Depending on the concept, this definition assumes that the same data created by users that has an actual impact on the operation of the TSF can be regarded as the TSF data (3.13) .