GA/T 1138-2014Information security technology. Security technical requirements for access control products of host resources (English PDF)

Foreword

This standard was drafted in accordance with GB/T 1.1-2009 given rules.

Please note that some of the content of this document may involve patents. Release mechanism of the present document does not assume responsibility for the identification of these patents.

This standard was proposed by the Ministry of Public Security Network Security Protection Agency.

This standard is under the jurisdiction of the Ministry of Public Security Information System Standardization Technical Committee.

This standard was drafted. Ministry of Public Security of Computer Information System Security Product Quality Supervision and Inspection Center, Zhejiang Wansai Software Technology Co., Secretary, Ministry of Public Security the third Institute.

Introduction

This standard is described in detail with the host resource access control product safety environment-related assumptions, threats and organizational security policy defines the primary Machine Resource Access Control security purposes and product support environment through the basic principles of argumentation security functional requirements and be able to trace the products covered Security purposes, for security purposes can be traced back cover and secure environment-related assumptions, threats and organizational security policies.

The standard base-level reference to GB/T 18336.3-2008 prescribed level EAL2 security assurance requirements, and enhance the level at EAL4 level Security assurance requirements based on the vulnerability analysis requires upgrade to an attacker can withstand moderate attack potential attack.

This standard only gives the host resource access control products should meet the technical requirements of safety, but the host with resource access control products Body technical methods and methods is not required.

Information Security Technology Host resource access control product safety technical requirements

1 Scope

This standard specifies the host resource access control products security functional requirements, security assurance requirements and grading requirements.

This standard applies to access host resources to design, develop and test control products.

2 Normative references

The following documents for the application of this document is essential. For dated references, only the dated version suitable for use herein Member. For undated references, the latest edition (including any amendments) applies to this document.

GB 17859-1999 computer information system security protection classification criterion GB/T 18336-2008 (all parts), Information technology - Security techniques - Information Technology Security Evaluation Guidelines GB/T 25069-2010 Information security technology terms

3 Terms and Definitions

GB 17859-1999, terms and definitions GB/T 18336-2008 (all parts) and GB/T 25069-2010 defined apply this document.

4 Host Resource Access Control Product Description

Host resource access control products for controlled host, unified distribution logon rights and access to resources of a host of users, thus ensuring User control policy to permit the controlled host resources (including system access, files and folders, peripheral interface based on pre-defined access, Applications, processes, etc.) to access in order to protect the host resources from unauthorized access and use.

Host resource access control products are generally by the server and the client management console consists of three parts, sent by the server access control policy Slightly to the client. Its assets are protected host resources, in addition to a host of important data resource access control product itself and its interior is also subject to Protection of assets.

FIG. 1 is a host resource access control products a typical operating environment.