- Product Name :
- CBT Engine
- Version of TOE :
- 01-00
- Product Type :
- The major application of CBT examination system
- Certification No. :
- C0288
- Date :
- 2011-03-29
- Version of Common Criteria:
- 3.1
- Conformance Claim :
- EAL1 Augmented with ASE_OBJ.2, ASE_REQ.2, ASE_SPD.1
- PP Identifier :
- None
- Vendor :
- Hitachi Solutions, Ltd.
-
- POC :
- Yoshikazu Nishi
- Division :
- Government, Public Sector Systems Business Division
- Phone :
- +81-3-5780-3955
- E-mail :
- Evaluation Facility :
- Electronic Commerce Security Technology Laboratory Inc.
Evaluation Center
PRODUCT DESCRIPTION
Description of TOE
The TOE is a part of the application program for the CBT examination system, and its major function is the management of exam questions.
The TOE provides the basic functions in the CBT examination system, such as making and composing exam questions, evaluation of exam questions, delivery of exam questions and results, marking exams, etc.
The TOE provides the security functions to prevent exam questions from unauthorized disclosure and alteration by the unauthorized execution of the basic functions.
TOE security functionality
The TOE provides the following security functions.
| - | Authentication function Function to identify and authenticate the user. |
|
| - | Access control function Function to judge whether the user is authorized to use the basic function. |
|
| - | Suspend function against unauthorized software Function to suspend the examination when detecting a USB flash drive. | |
Security functional requirements
This TOE implements the following security functional requirements.
| Security audit | Non-repudiation of origin/receipt | Cryptographic functionality | Access control |
| Data authentication | Export data protection | Information flow control | Import data protection |
| Internal transfer data protection | Residual information protection | Rollback | Stored data integrity |
| Transfer data confidentiality | Transfer data integrity | Identification and authentication | Security management |
| Privacy Control | Security functionality protection | Resource utilisation management | TOE access control |
| Trusted path/channels |