Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
RICOH Remote Communication Gate A2 V1.0.2
JISEC-CC-CRP-C0535 		DERMALOG Fingerprint PAD Kit LF10
BSI-DSZ-CC-1042-V2-2023
name RICOH Remote Communication Gate A2 V1.0.2 DERMALOG Fingerprint PAD Kit LF10
category Network and Network-Related Devices and Systems Other Devices and Systems
scheme JP DE
status archived active
not_valid_after 27.12.2021 02.03.2028
not_valid_before 27.12.2016 03.03.2023
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/c0535_eimg.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1042V2c_pdf.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/c0535_erpt.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1042V2a_pdf.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/c0535_est.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1042V2b_pdf.pdf
manufacturer Ricoh Company, Ltd. DERMALOG Identification Systems GmbH
manufacturer_web https://www.ricoh.com/ https://www.dermalog.com
security_level EAL2+, ALC_FLR.2 ADV_TDS.1, ASE_REQ.2, ALC_DEL.1, ASE_ECD.1, ATE_FUN.1, ALC_FLR.1, ASE_TSS.1, AGD_OPE.1, ATE_COV.1, ADV_FSP.2, ASE_INT.1, ATE_IND.2, ALC_CMS.2, ASE_CCL.1, AGD_PRE.1, ALC_CMC.2, ASE_SPD.1, ASE_OBJ.2, ADV_ARC.1
dgst 0ce03afffa8e1437 6bdfa0ee441dab87
heuristics/cert_id JISEC-CC-CRP-C0535 BSI-DSZ-CC-1042-V2-2023
heuristics/cert_lab [] BSI
heuristics/extracted_sars ASE_INT.1, AVA_VAN.2, ADV_FSP.2, ASE_ECD.1, ASE_TSS.1, ASE_SPD.1, ALC_DEL.1, AGD_OPE.1, AGD_PRE.1, ALC_CMS.2, ADV_TDS.1, ATE_FUN.1, ATE_COV.1, ADV_ARC.1, ASE_OBJ.2, ALC_FLR.2, ASE_REQ.2, ALC_CMC.2, ATE_IND.2, ASE_CCL.1 ASE_INT.1, ADV_FSP.2, ASE_ECD.1, ASE_TSS.1, ALC_FLR.1, ASE_SPD.1, ALC_DEL.1, AGD_OPE.1, AGD_PRE.1, ALC_CMS.2, ADV_TDS.1, ATE_FUN.1, ATE_COV.1, ADV_ARC.1, ASE_OBJ.2, ASE_REQ.2, ALC_CMC.2, ATE_IND.2, ASE_CCL.1
heuristics/extracted_versions 1.0.2 -
heuristics/report_references/directly_referencing {} BSI-DSZ-CC-1042-2020
heuristics/report_references/indirectly_referencing {} BSI-DSZ-CC-1042-2020
heuristics/scheme_data
  • cert_id: JISEC-CC-CRP-C0535
  • certification_date: 01.12.2016
  • claim: EAL2+ALC_FLR.2
  • enhanced:
    • assurance_level: EAL2 Augmented with ALC_FLR.2
    • cc_version: 3.1 Release4
    • cert_link: https://www.ipa.go.jp/en/security/c0535_eimg.pdf
    • description: PRODUCT DESCRIPTION Description of TOE This TOE is a communication device that enables digital MFPs and printers (hereafter "devices") to be connected to the communication server (hereafter "CS") in the maintenance center. Information that the TOE obtains from the device and sends to the CS is also sent to the designated email address. Functions this TOE can provide include notification of device troubles (service call function), automatic counter checking of prints of each devices (machine counter notice function), automatic counter checking of prints by each user (counter per user retrieval function), automatic ordering of supplies such as toner (supply call function), and device firmware updating. It also provides Web-based user interface functions for TOE operations. TOE security functionality The major security functions this TOE can provide are as follows: - Communication data protection function between the TOE and the device for the service This function is used for communication between the TOE and devices for the service if the service call function, the machine counter notice function, the counter per user retrieval function, and the supply call function are enabled. The communication data between the TOE and the Ricoh device will be secured, and the data tampering will be detected by using a TLS protocol. - Communication data protection function between the TOE and the CS The TOE specifies only the genuine CS as the communication destination via Internet. The communication data between the TOE and the CS will be secured, and the data tampering will be detected by using a TLS protocol. - Communication data protection function between the TOE and computers This function is applied to data communication between the TOE and computers if Web-based functions are enabled. The communication data will be secured and the data tampering will be detected by using a TLS protocol. - Email protection function This function is applied to make mail sent from the TOE. The contents of the mail will be secured and the data tampering will be detected by using S/MIME. - User identification and authentication function The TOE identifies and authenticates users who access Web-based user interface functions. - RC Gate firmware verification function This function enables the TOE to check that the firmware (applications, shared parts of firmware, platforms, and the operating system) is genuine. - Security management function This function provides TOE management methods for the Administrator only. - Audit logging function This function enables the TOE to record the information related to security relevant events and allows only the administrator to review the audit logging.
    • evaluation_facility: ECSEC Laboratory Inc. Evaluation Center
    • product: RICOH Remote Communication Gate A2
    • product_type: Appliance for remote service
    • protection_profile: none
    • report_link: https://www.ipa.go.jp/en/security/c0535_erpt.pdf
    • target_link: https://www.ipa.go.jp/en/security/c0535_est.pdf
    • toe_version: V1.0.2
    • vendor: RICOH COMPANY, LTD.
  • expiration_date: 01.01.2022
  • supplier: RICOH COMPANY, LTD.
  • toe_japan_name: RICOH Remote Communication Gate A2V1.0.2
  • toe_overseas_link: https://www.ipa.go.jp/en/security/jisec/software/certified-cert/c0535_it4523.html
  • toe_overseas_name: RICOH Remote Communication Gate A2V1.0.2
heuristics/protection_profiles {} b02ed76d2545326a
protection_profile_links {} https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0062b_pdf.pdf
pdf_data/cert_filename c0535_eimg.pdf 1042V2c_pdf.pdf
pdf_data/cert_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-1042-V2-2023: 1
pdf_data/cert_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP-0062-2010: 1
pdf_data/cert_keywords/cc_security_level
  • EAL:
    • EAL2: 1
pdf_data/cert_keywords/cc_sar
  • ALC:
    • ALC_FLR.2: 1
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMS.2: 1
    • ALC_DEL.1: 1
    • ALC_FLR.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
pdf_data/cert_keywords/eval_facility
  • ECSEC:
    • ECSEC Laboratory: 1
pdf_data/cert_keywords/standard_id
  • ISO:
    • ISO/IEC 15408: 2
    • ISO/IEC 18045: 2
pdf_data/cert_metadata
  • /CreationDate: D:20170306102238+09'00'
  • /Creator: Word 用 Acrobat PDFMaker 11
  • /Keywords:
  • /ModDate: D:20170306102454+09'00'
  • /Producer: Adobe PDF Library 11.0
  • /Subject:
  • /Title:
  • pdf_file_size_bytes: 452634
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: True
  • pdf_number_of_pages: 1
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /Keywords: "Common Criteria, Certification, Zertifizierung, Dermalog, Biometrics, Fingerprint, PAD"
  • /Subject: Common Criteria, Certification, Zertifizierung, Dermalog, Biometrics, Fingerprint, PAD
  • /Title: Certificate BSI-DSZ-CC-1042-V2-2023
  • pdf_file_size_bytes: 322048
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
pdf_data/report_filename c0535_erpt.pdf 1042V2a_pdf.pdf
pdf_data/report_frontpage
  • DE:
  • DE:
    • cc_security_level: Common Criteria Part 3 conformant ADV_ARC.1, ADV_FSP.2, ADV_TDS.1, AGD_OPE.1, AGD_PRE.1, ALC_CMC.2, ALC_CMS.2, ALC_DEL.1, ALC_FLR.1, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.2, ASE_REQ.2, ASE_SPD.1, ASE_TSS.1, ATE_COV.1, ATE_FUN.1, ATE_IND.2
    • cc_version: PP conformant Common Criteria Part 2 extended
    • cert_id: BSI-DSZ-CC-1042-V2-2023
    • cert_item: DERMALOG Fingerprint PAD Kit LF10 LF10, Part No. 8004-0009-00 or Part No. 8004-0003-05 DermalogBPLF10Plugin, V 1.12.5.2228 DermalogFakeFingerDetectionLF10Plugin, V 1.6.8.2227 DermalogFourprintSegmentation2, V 1.20.2.2210 DermalogAuditLogger, V 1.1.3.1827
    • cert_lab: BSI
    • developer: DERMALOG Identification Systems GmbH
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
    • ref_protection_profiles: Fingerprint Spoof Detection Protection Profile based on Organisational Security Policies (FSDPP_OSP), Version 1.7, 27 November 2009, BSI-CC-PP-0062-2010
pdf_data/report_keywords/cc_cert_id
  • JP:
    • CRP-C0535-01: 1
    • Certification No. C0535: 1
  • DE:
    • BSI-DSZ-CC-1042-2020: 3
    • BSI-DSZ-CC-1042-V2-2023: 11
pdf_data/report_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP-0062-2010: 4
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL2: 4
    • EAL2 augmented: 2
  • EAL:
    • EAL 1: 1
    • EAL 2: 2
    • EAL 4: 1
pdf_data/report_keywords/cc_sar
  • ALC:
    • ALC_FLR.2: 4
  • ADV:
    • ADV_ARC.1: 3
    • ADV_FSP.2: 3
    • ADV_TDS.1: 3
  • AGD:
    • AGD_OPE.1: 3
    • AGD_PRE.1: 3
  • ALC:
    • ALC_CMC.2: 3
    • ALC_CMS.2: 3
    • ALC_DEL.1: 3
    • ALC_FLR: 1
    • ALC_FLR.1: 3
  • ASE:
    • ASE_CCL.1: 3
    • ASE_ECD.1: 3
    • ASE_INT.1: 3
    • ASE_OBJ.2: 3
    • ASE_REQ.2: 3
    • ASE_SPD.1: 3
    • ASE_TSS.1: 3
  • ATE:
    • ATE_COV.1: 3
    • ATE_FUN.1: 3
    • ATE_IND.2: 3
  • AVA:
    • AVA_VAN: 1
pdf_data/report_keywords/cc_sfr
  • FPT:
    • FPT_SPOD.1: 1
pdf_data/report_keywords/cc_claims
  • A:
    • A.CE: 1
    • A.DEVICE: 1
    • A.NO_THRU_TRAFFIC: 1
    • A.PHYSICAL_: 1
    • A.TRUSTED_: 1
  • T:
    • T.FAKE_NOTICE_: 1
    • T.FAKE_NOTICE_POINT: 1
    • T.HTTPS_DEV: 2
    • T.PC_WEB: 2
    • T.UNAUTHORIZED_: 1
    • T.UNAUTHORIZED_ADMINISTRATOR_ACCESS: 1
    • T.UNTRUSTED_: 1
    • T.UNTRUSTED_COMMUNICATION_CHANNELS: 1
    • T.UPDATE_: 1
    • T.UPDATE_COMPROMISE: 1
pdf_data/report_keywords/eval_facility
  • ECSEC:
    • ECSEC Laboratory: 4
  • TUV:
    • TÜV Informationstechnik: 3
pdf_data/report_keywords/crypto_protocol
  • TLS:
    • TLS:
      • TLS: 19
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7148: 1
pdf_data/report_keywords/standard_id
  • CC:
    • CCMB-2012-09-001: 2
    • CCMB-2012-09-002: 2
    • CCMB-2012-09-003: 2
    • CCMB-2012-09-004: 2
  • BSI:
    • AIS 32: 1
  • ISO:
    • ISO/IEC 15408: 4
    • ISO/IEC 17065: 2
    • ISO/IEC 18045: 4
pdf_data/report_keywords/certification_process
  • ConfidentialDocument:
    • 7, 14 October 2022, DERMALOG Identification Systems GmbH (confidential document) [12] DERMALOG Guidance Addendum DERMALOG Fingerprint PAD Kit LF10, Version 3.0, 13 October 2022: 1
    • Evaluation Guidance, Version 2.1, 18 December 2009 [10] Toolbox022017, February 2017, BSI (confidential document) [11] Configuration list for the TOE: List of references DERMALOG Fingerprint PAD Kit LF10, Version: 1
    • GmbH [7] Evaluation Technical Report, Version 1, 14 October 2022, TÜV Informationstechnik GmbH (confidential document) [8] Fingerprint Spoof Detection Protection Profile based on Organisational Security Policies: 1
    • being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification: 1
pdf_data/report_metadata
  • /CreationDate: D:20170406114307+09'00'
  • /Creator: Word 用 Acrobat PDFMaker 11
  • /ModDate: D:20170406114353+09'00'
  • /Producer: Adobe PDF Library 11.0
  • /Title:
  • pdf_file_size_bytes: 447326
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: True
  • pdf_number_of_pages: 34
pdf_data/st_filename c0535_est.pdf 1042V2b_pdf.pdf
pdf_data/st_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-1042-V2-2021: 1
pdf_data/st_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP-0062: 1
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL2: 2
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMS.2: 1
    • ALC_DEL.1: 1
    • ALC_FLR.2: 3
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 1
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMS.2: 1
    • ALC_DEL.1: 1
    • ALC_FLR.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN: 1
    • FAU_GEN.1: 15
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 7
    • FAU_GEN.2.1: 1
    • FAU_SAR.1: 9
    • FAU_SAR.1.1: 1
    • FAU_SAR.1.2: 1
    • FAU_SAR.2: 7
    • FAU_SAR.2.1: 1
    • FAU_STG.1: 9
    • FAU_STG.1.1: 1
    • FAU_STG.1.2: 1
    • FAU_STG.3: 1
    • FAU_STG.4: 7
    • FAU_STG.4.1: 1
  • FIA:
    • FIA_AFL.1: 7
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_ATD.1: 8
    • FIA_ATD.1.1: 1
    • FIA_SOS.1: 7
    • FIA_SOS.1.1: 1
    • FIA_UAU.1: 4
    • FIA_UAU.2: 8
    • FIA_UAU.2.1: 1
    • FIA_UAU.6: 7
    • FIA_UAU.6.1: 1
    • FIA_UID.1: 6
    • FIA_UID.2: 9
    • FIA_UID.2.1: 1
    • FIA_USB.1: 7
    • FIA_USB.1.1: 1
    • FIA_USB.1.2: 1
    • FIA_USB.1.3: 1
  • FMT:
    • FMT_MTD.1: 7
    • FMT_MTD.1.1: 1
    • FMT_SMF.1: 8
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 10
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_FUD: 3
    • FPT_FUD.1: 14
    • FPT_FUD.1.1: 2
    • FPT_FUD.1.2: 2
    • FPT_FUD.1.3: 2
    • FPT_FUD.2: 12
    • FPT_STM.1: 9
    • FPT_STM.1.1: 1
  • FTA:
    • FTA_SSL.1: 7
    • FTA_SSL.1.1: 1
    • FTA_SSL.1.2: 1
  • FTP:
    • FTP_ITC.1: 22
    • FTP_ITC.1.1: 3
    • FTP_ITC.1.2: 3
    • FTP_ITC.1.3: 3
    • FTP_SSL.1: 1
    • FTP_SSL.3: 1
    • FTP_TRP.1: 6
    • FTP_TRP.1.1: 1
  • FAU:
    • FAU_GEN.1: 5
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
  • FDP:
    • FDP_RIP.1: 1
    • FDP_RIP.2: 6
  • FMT:
    • FMT_MTD.1: 1
    • FMT_MTD.3: 8
    • FMT_MTD.3.1: 2
    • FMT_SMF: 1
    • FMT_SMF.1: 8
    • FMT_SMF.1.1: 1
  • FPT:
    • FPT_SPOD.1: 8
    • FPT_SPOD.1.1: 1
    • FPT_SPOD.1.2: 1
    • FPT_SPOD.1.3: 1
    • FPT_SPOD.1.4: 2
    • FPT_STM.1: 1
pdf_data/st_keywords/cc_claims
  • A:
    • A.CE: 3
    • A.DEVICE: 2
    • A.NO_THRU_TRAFFIC_PROTECTION: 2
    • A.PHYSICAL_PROTECTION: 3
    • A.TRUSTED_ADMINISTRATOR: 3
  • O:
    • O.ACCESS: 8
    • O.AUDIT_LOGGED: 13
    • O.GENUINE: 8
    • O.TRUSTED: 2
    • O.TRUSTED_: 6
    • O.TRUSTED_NOTICE_POINT: 8
  • OE:
    • OE.CE: 3
    • OE.DEVICE: 4
    • OE.NO_THRU_TRAFFIC_PROTECT: 2
    • OE.NO_THRU_TRAFFIC_PROTECTION: 2
    • OE.PHYSICAL: 4
    • OE.TRUSTED_ADMIN: 3
  • T:
    • T.FAKE_NOTICE_POINT: 3
    • T.HTTPS_DEV: 3
    • T.PC_WEB: 2
    • T.UNAUTHORIZED_ADMINISTRATOR_ACCESS: 3
    • T.UNTRUSTED_COMMUNICATION_CHANNELS: 2
    • T.UPDATE_COMPROMISE: 2
  • A:
    • A.BIO: 1
    • A.E: 1
  • O:
    • O.AUDIT: 1
    • O.MANAGEMENT: 2
    • O.RESIDUAL: 1
    • O.SPOOF_DETECTION: 1
  • OE:
    • OE.ADMINISTRATION: 1
    • OE.BIO: 1
    • OE.PHYSICAL: 1
    • OE.PLATFORM: 1
  • OSP:
    • OSP.AUDIT: 1
    • OSP.MANAGEMENT: 1
    • OSP.RESIDUAL: 1
    • OSP.SPOOF_DETECTION: 1
pdf_data/st_keywords/tee_name
  • IBM:
    • SE: 1
pdf_data/st_keywords/standard_id
  • CC:
    • CCMB-2012-09-001: 1
    • CCMB-2012-09-002: 1
    • CCMB-2012-09-003: 1
  • CC:
    • CCMB-2017-04-001: 1
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • functionality and biometric functionality – such as enrolment, verification and identification – is out of scope for this evaluation. Further, the TOE does not comprise the PC nor the Operating System that is: 1
    • functionality and biometric functionality – such as enrolment, verification and identification – is out of scope for this evaluation. This Security Target has been developed based on and it claims strict: 1
    • out of scope: 2
pdf_data/st_metadata
  • /CreationDate: D:20170324135725+09'00'
  • /Creator: Microsoft® Word 2013
  • /ModDate: D:20170324135725+09'00'
  • /Producer: Microsoft® Word 2013
  • /Title: RICOH Remote Communication Gate A2 Security Target
  • pdf_file_size_bytes: 575869
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 50
  • /Title: DERMALOG_SecurityTarget_LF10_V4.1
  • pdf_file_size_bytes: 2988633
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 27
state/cert/pdf_hash Different Different
state/cert/txt_hash Different Different
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different