Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Microsoft SQL Server 2014 Database Engine Enterprise Edition x64 (English)12.0.2000.8
JISEC-CC-CRP-C0475 		VoiceIdent Unit 1.0
BSI-DSZ-CC-0359-2007
name Microsoft SQL Server 2014 Database Engine Enterprise Edition x64 (English)12.0.2000.8 VoiceIdent Unit 1.0
category Databases Access Control Devices and Systems
scheme JP DE
not_valid_after 01.07.2020 01.09.2019
not_valid_before 16.06.2015 10.01.2007
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/c0475_erpt.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0359a.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/c0475_est.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0359b.pdf
manufacturer Microsoft Corporation Deutsche Telekom AG / T-COM
manufacturer_web https://www.microsoft.com https://www.t-online.de/
security_level EAL2+, ALC_FLR.2 EAL2+, ADV_SPM.1
dgst c225189611bed8f2 44ac63b485b1d9d0
heuristics/cert_id JISEC-CC-CRP-C0475 BSI-DSZ-CC-0359-2007
heuristics/cert_lab [] BSI
heuristics/extracted_sars ALC_CMS.2, ALC_DEL.1, ATE_IND.2, ATE_COV.1, ADV_ARC.1, AVA_VAN.2, ADV_FSP.2, ALC_FLR.2, AGD_PRE.1 ASE_ENV.1, ADV_RCR.1, AGD_AGD.1, ASE_INT.1, AGD_USR.1, ASE_REQ.1, ASE_PPC.1, ASE_DES.1, AVA_SOF.1, ASE_TSS.1, AGD_ADM.1, ADV_HLD.1, ATE_FUN.1, ATE_COV.1, ADV_FSP.1, ASE_SRE.1, ASE_OBJ.1, AVA_VLA.1, ATE_IND.2, ADV_SPM.1
heuristics/extracted_versions 12.0.2000.8 1.0
heuristics/report_references/directly_referenced_by {} BSI-DSZ-CC-0469-2008
heuristics/report_references/indirectly_referenced_by {} BSI-DSZ-CC-0469-2008
heuristics/scheme_data
  • cert_id: JISEC-CC-CRP-C0475
  • certification_date: 01.06.2015
  • claim: EAL2+ ALC_FLR.2 PP
  • enhanced:
    • assurance_level: EAL2 Augmented with ALC_FLR.2
    • cc_version: 3.1 Release4
    • cert_link: https://www.ipa.go.jp/en/security/c0475_eimg.pdf
    • description: PRODUCT DESCRIPTION Description of TOE The TOE is the database engine of SQL Server 2014. SQL Server is a Database Management System (DBMS). The TOE has been developed as the core module of the DBMS to store and manage data in a secure way. TOE security functionality This TOE provides the following security functionality: - The Access Control function of the TOE controls the access of users to user data and metadata stored in the TOE. - The Session Handling function of the TOE limits the possibilities of users to establish sessions with the TOE. - The Security Audit function of the TOE produces log files about all security relevant events. - The Security Management function allows authorized administrators to manage the behavior of the security functionality of the TOE. - The Identification and Authentication function of the TOE is able to identify and authenticate users. - The Residual Information Protection function of the TOE overwrites the residual information on the memory that will be used for user sessions.
    • evaluation_facility: TÜV Informationstechnik GmbH, Evaluation Body for IT-Security
    • product: Microsoft SQL Server 2014 Database Engine Enterprise Edition x64 (English)
    • product_type: Database Management System (DBMS)
    • protection_profile: U.S. Government Protection Profile for Database Management Systems, Version 1.3
    • report_link: https://www.ipa.go.jp/en/security/c0475_erpt.pdf
    • target_link: https://www.ipa.go.jp/en/security/c0475_est.pdf
    • toe_version: 12.0.2000.8
    • vendor: Microsoft Corporation
  • expiration_date: 01.07.2020
  • supplier: Microsoft Corporation
  • toe_japan_name: -----
  • toe_overseas_link: https://www.ipa.go.jp/en/security/jisec/software/certified-cert/c0475_it3480.html
  • toe_overseas_name: Microsoft SQL Server 2014 Database Engine Enterprise Edition x64 (English)12.0.2000.8
heuristics/protection_profiles 61018742063aaca9 {}
protection_profile_links https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp_dbms_v1.3.pdf {}
pdf_data/report_filename c0475_erpt.pdf 0359a.pdf
pdf_data/report_frontpage
  • DE:
  • DE:
    • cert_id: BSI-DSZ-CC-0359-2007
    • cert_item: VoiceIdent Unit 1.0
    • cert_lab: BSI
    • developer: Deutsche Telekom AG / T-COM
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
pdf_data/report_keywords/cc_cert_id
  • JP:
    • CRP-C0475-01: 1
    • Certification No. C0475: 1
  • DE:
    • BSI-DSZ-CC-0359-2007: 18
pdf_data/report_keywords/cc_protection_profile_id
  • BSI:
    • BSI-PP-0016-2005: 4
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL2: 4
    • EAL2 augmented: 3
    • EAL2+: 2
  • EAL:
    • EAL 1: 1
    • EAL 2: 6
    • EAL 2 augmented: 4
    • EAL 4: 1
    • EAL 7: 1
    • EAL1: 5
    • EAL2: 3
    • EAL3: 4
    • EAL4: 5
    • EAL5: 6
    • EAL6: 3
    • EAL7: 4
pdf_data/report_keywords/cc_sar
  • ALC:
    • ALC_FLR.2: 4
  • ACM:
    • ACM_AUT: 2
    • ACM_CAP: 2
    • ACM_CAP.2: 1
    • ACM_SCP: 2
  • ADO:
    • ADO_DEL: 2
    • ADO_DEL.1: 1
    • ADO_IGS: 2
    • ADO_IGS.1: 1
  • ADV:
    • ADV_FSP: 2
    • ADV_FSP.1: 1
    • ADV_HLD: 2
    • ADV_HLD.1: 1
    • ADV_IMP: 2
    • ADV_INT: 2
    • ADV_LLD: 2
    • ADV_RCR: 2
    • ADV_RCR.1: 1
    • ADV_SPM: 2
    • ADV_SPM.1: 5
  • AGD:
    • AGD_ADM: 2
    • AGD_ADM.1: 1
    • AGD_USR: 2
    • AGD_USR.1: 1
  • ALC:
    • ALC_DVS: 2
    • ALC_FLR: 2
    • ALC_LCD: 1
    • ALC_TAT: 2
  • ASE:
    • ASE_DES.1: 1
    • ASE_ENV.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.1: 1
    • ASE_PPC.1: 1
    • ASE_REQ.1: 1
    • ASE_SRE.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV: 2
    • ATE_COV.1: 1
    • ATE_DPT: 2
    • ATE_FUN: 2
    • ATE_FUN.1: 1
    • ATE_IND: 2
    • ATE_IND.2: 1
  • AVA:
    • AVA_CCA: 2
    • AVA_MSU: 2
    • AVA_SOF: 3
    • AVA_SOF.1: 1
    • AVA_VLA: 3
    • AVA_VLA.1: 1
    • AVA_VLA.2: 1
    • AVA_VLA.3: 1
    • AVA_VLA.4: 1
pdf_data/report_keywords/cc_sfr
  • FAU:
    • FAU_ARP.1: 1
    • FAU_GEN.1: 1
    • FAU_GEN.2: 1
    • FAU_SAA.1: 1
  • FDP:
    • FDP_ACC.1: 1
    • FDP_ACF.1: 1
    • FDP_RIP.2: 1
  • FIA:
    • FIA_AFL.1: 1
    • FIA_ATD.1: 1
    • FIA_UAU.2: 1
    • FIA_UAU.3: 1
    • FIA_UAU.5: 1
    • FIA_UAU.7: 1
    • FIA_UID.2: 1
  • FMT:
    • FMT_MOF.1: 1
    • FMT_MSA.1: 1
    • FMT_MSA.3: 1
    • FMT_MTD.1: 1
    • FMT_MTD.3: 1
    • FMT_SMF.1: 1
    • FMT_SMR.1: 1
  • FPT:
    • FPT_RPL.1: 1
pdf_data/report_keywords/cc_claims
  • A:
    • A.NO_EVIL: 1
    • A.NO_GENERAL_: 1
    • A.PHYSICAL: 1
  • T:
    • T.ACCIDENTIAL_ADMIN_ERROR: 1
    • T.MASQUERADE: 1
    • T.POOR_DESIGN: 1
    • T.POOR_IMPLEMENTATION: 1
    • T.POOR_TEST: 1
    • T.RESIDUAL_DATA: 1
    • T.TSF_COMPROMISE: 1
    • T.UNAUTHORIZED_: 1
    • T.UNIDENTIFIED_: 1
  • A:
    • A.ADMINISTRATION: 2
    • A.CAPTURE: 2
    • A.ENROLMENT: 2
    • A.ENVIRONMENT: 2
    • A.FALLBACK: 2
    • A.PHYSICAL: 2
  • OSP:
    • OSP.FAR: 1
    • OSP.USERLIMIT: 1
  • T:
    • T.BRUTEFORCE: 1
    • T.MODIFY_ASSETS: 1
    • T.REPRODUCE: 1
    • T.RESIDUAL: 1
    • T.ROLES: 1
pdf_data/report_keywords/vendor
  • Microsoft:
    • Microsoft: 20
    • Microsoft Corporation: 7
pdf_data/report_keywords/eval_facility
  • TUV:
    • TÜV Informationstechnik: 4
  • SRC:
    • SRC Security Research & Consulting: 4
pdf_data/report_keywords/randomness
  • RNG:
    • RNG: 3
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7125: 2
    • BSI 7148: 1
    • BSI 7149: 1
pdf_data/report_keywords/standard_id
  • CC:
    • CCMB-2012-09-001: 2
    • CCMB-2012-09-002: 2
    • CCMB-2012-09-003: 2
    • CCMB-2012-09-004: 2
  • BSI:
    • AIS 34: 1
  • ISO:
    • ISO/IEC 15408:2005: 2
pdf_data/report_keywords/certification_process
  • ConfidentialDocument:
    • Unit 1.0, Deutsche Telekom AG / T-COM [8] Evaluation Technical Report, Version 1.2, 06.12.2006 (confidential document) [9] Protection Profile BSI-PP-0016-2005, Version 1.04, 17.08.2005, Protection Profile for: 1
  • OutOfScope:
    • Identification is not addressed within the evaluation. Furthermore the enrolment process is out of scope of the evaluation and it is assumed that all authorized users have been enrolled. VoiceIdent Unit 1: 1
    • identification is not addressed within the evaluation. Furthermore the enrolment process is out of scope and it is assumed that all authorized users have been enrolled. For correct operation the TOE needs: 1
    • out of scope: 2
pdf_data/report_metadata
  • /CreationDate: D:20150724094408+09'00'
  • /Creator: Microsoft® Word 2010
  • /ModDate: D:20150724094442+09'00'
  • /Producer: Microsoft® Word 2010
  • pdf_file_size_bytes: 233021
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: True
  • pdf_number_of_pages: 31
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /Company: BSI, Postfach 200363, 53133 Bonn
  • /CreationDate: D:20070123132827+01'00'
  • /Creator: Acrobat PDFMaker 7.0.7 für Word
  • /Keywords: Common Criteria, Certification, Zertifizierung
  • /ModDate: D:20070124074711+01'00'
  • /Producer: Acrobat Distiller 7.0.5 (Windows)
  • /SourceModified: D:20070123122805
  • /Title: Certification Report BSI-DSZ-CC-xxxx-200x
  • pdf_file_size_bytes: 328042
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 38
pdf_data/st_filename c0475_est.pdf 0359b.pdf
pdf_data/st_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-0359: 2
pdf_data/st_keywords/cc_protection_profile_id
  • BSI:
    • BSI-PP- 0016: 2
    • BSI-PP-0016: 3
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL 2: 3
    • EAL 2 augmented: 1
    • EAL2: 2
    • EAL2 augmented: 2
    • EAL2+: 51
  • EAL:
    • EAL 2: 1
    • EAL 2 augmented: 1
    • EAL1: 1
    • EAL2: 20
    • EAL2 augmented: 2
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 2
    • ADV_FSP.2: 1
  • AGD:
    • AGD_ADD: 3
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMS.2: 1
    • ALC_DEL.1: 1
    • ALC_FLR: 1
    • ALC_FLR.2: 4
  • ATE:
    • ATE_COV.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 1
  • ACM:
    • ACM_CAP.2: 14
  • ADO:
    • ADO_DEL.1: 7
    • ADO_IGS.1: 7
  • ADV:
    • ADV_FSP.1: 19
    • ADV_HLD: 2
    • ADV_HLD.1: 15
    • ADV_RCR.1: 8
    • ADV_SPM: 1
    • ADV_SPM.1: 32
  • AGD:
    • AGD_ADM: 2
    • AGD_ADM.1: 15
    • AGD_AGD.1: 1
    • AGD_USR: 2
    • AGD_USR.1: 13
  • ATE:
    • ATE_COV.1: 6
    • ATE_FUN: 2
    • ATE_FUN.1: 13
    • ATE_IND: 2
    • ATE_IND.2: 9
  • AVA:
    • AVA_SOF: 2
    • AVA_SOF.1: 9
    • AVA_VLA: 2
    • AVA_VLA.1: 11
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN: 10
    • FAU_GEN.1: 3
    • FAU_GEN.2: 8
    • FAU_GEN.2.1: 1
    • FAU_SEL: 8
    • FAU_SEL.1: 2
    • FAU_STG: 3
    • FAU_STG.1: 2
    • FAU_STG.3: 1
    • FAU_STG.4: 1
    • FAU_STG_EXP: 2
    • FAU_STG_EXP.5: 15
    • FAU_STG_EXP.5.1: 2
  • FDP:
    • FDP_ACC.1: 10
    • FDP_ACC.1.1: 1
    • FDP_ACF: 8
    • FDP_ACF.1: 6
    • FDP_IFC.1: 1
    • FDP_RIP.1: 6
    • FDP_RIP.1.1: 1
  • FIA:
    • FIA_ATD.1: 10
    • FIA_ATD.1.1: 2
    • FIA_UAU.2: 8
    • FIA_UAU.2.1: 1
    • FIA_UAU.5: 8
    • FIA_UAU.5.1: 1
    • FIA_UAU.5.2: 1
    • FIA_UID.1: 11
    • FIA_UID.2: 12
    • FIA_UID.2.1: 1
  • FMT:
    • FMT_MOF.1: 6
    • FMT_MOF.1.1: 1
    • FMT_MSA.1: 6
    • FMT_MSA.1.1: 1
    • FMT_MSA.3: 8
    • FMT_MSA.3.1: 1
    • FMT_MSA.3.2: 1
    • FMT_MTD.1: 7
    • FMT_MTD.1.1: 1
    • FMT_REV.1: 16
    • FMT_REV.1.1: 2
    • FMT_REV.1.2: 2
    • FMT_SMF.1: 7
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 14
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_STM.1: 1
    • FPT_TRC.1: 6
    • FPT_TRC.1.1: 1
    • FPT_TRC.1.2: 1
  • FTA:
    • FTA_MCS.1: 6
    • FTA_MCS.1.1: 1
    • FTA_MCS.1.2: 1
    • FTA_TAH.1: 8
    • FTA_TAH.1.1: 1
    • FTA_TAH.1.2: 1
    • FTA_TAH.1.3: 1
    • FTA_TSE.1: 6
    • FTA_TSE.1.1: 1
  • FAU:
    • FAU_ARP: 2
    • FAU_ARP.1: 10
    • FAU_GEN: 2
    • FAU_GEN.1: 12
    • FAU_GEN.2: 9
    • FAU_SAA: 2
    • FAU_SAA.1: 10
  • FDP:
    • FDP_ACC: 2
    • FDP_ACC.1: 11
    • FDP_ACC.1.1: 1
    • FDP_ACF: 2
    • FDP_ACF.1: 7
    • FDP_ACF.1.1: 1
    • FDP_ACF.1.2: 1
    • FDP_ACF.1.3: 1
    • FDP_ACF.1.4: 1
    • FDP_ICF.1: 2
    • FDP_IFC.1: 2
    • FDP_RIP: 2
    • FDP_RIP.1: 1
    • FDP_RIP.2: 8
  • FIA:
    • FIA_AFL: 2
    • FIA_AFL.1: 11
    • FIA_ATD: 2
    • FIA_ATD.1: 10
    • FIA_UAU: 5
    • FIA_UAU.1: 3
    • FIA_UAU.2: 8
    • FIA_UAU.3: 12
    • FIA_UAU.5: 8
    • FIA_UAU.5.1: 1
    • FIA_UAU.5.2: 1
    • FIA_UAU.7: 7
    • FIA_UID: 2
    • FIA_UID.1: 8
    • FIA_UID.2: 8
  • FMT:
    • FMT_MOF: 13
    • FMT_MOF.1: 6
    • FMT_MSA: 2
    • FMT_MSA.1: 7
    • FMT_MSA.1.1: 2
    • FMT_MSA.3: 10
    • FMT_MSA.3.1: 1
    • FMT_MSA.3.2: 1
    • FMT_MTD: 3
    • FMT_MTD.1: 11
    • FMT_MTD.3: 9
    • FMT_SMF: 2
    • FMT_SMF.1: 17
    • FMT_SMR: 2
    • FMT_SMR.1: 17
  • FPT:
    • FPT_RPL: 2
    • FPT_RPL.1: 13
    • FPT_STM.1: 4
pdf_data/st_keywords/cc_claims
  • A:
    • A.NO_EVIL: 3
    • A.NO_GENERAL_PURPOSE: 3
    • A.PHYSICAL: 3
  • O:
    • O.ACCESS_HISTORY: 5
    • O.ADMIN_GUIDANCE: 1
    • O.ADMIN_ROLE: 4
    • O.AUDIT_: 1
    • O.AUDIT_GENERATION: 4
    • O.CONFIGURATION_IDENTIFICATION: 1
    • O.DOCUMENTED_DESIGN: 1
    • O.INTERNAL_TOE_DOMAINS: 1
    • O.MANAGE: 6
    • O.MEDIATE: 5
    • O.PARTIAL_FUNCTIONAL_TEST: 1
    • O.PARTIAL_SELF_PROTECTION: 1
    • O.RESIDUAL_INFORM: 1
    • O.RESIDUAL_INFORMAT: 2
    • O.RESIDUAL_INFORMATION: 3
    • O.TOE_ACCESS: 7
    • O.VULNERABILITY_ANALYSIS: 1
  • OE:
    • OE.NO_EVIL: 4
    • OE.NO_GENERAL_: 2
    • OE.NO_GENERAL_PURPOSE: 1
    • OE.PHYSICAL: 4
  • T:
    • T.ACCIDENTIAL_ADMIN_ERROR: 1
    • T.MASQUERADE: 3
    • T.POOR_DESIGN: 1
    • T.POOR_IMPLEMENTATION: 1
    • T.POOR_TEST: 1
    • T.RESIDUAL_DATA: 3
    • T.TSF_COMPROMISE: 3
    • T.UNAUTHORIZED_ACCESS: 3
    • T.UNIDENTIFIED_ACTIONS: 3
  • A:
    • A.ADMINISTRATION: 4
    • A.CAPTURE: 3
    • A.ENROLMENT: 4
    • A.ENVIRONMENT: 4
    • A.FALLBACK: 4
    • A.PHYSICAL: 5
  • O:
    • O.AUDIT_REACTION: 17
    • O.AUTHADMIN: 7
    • O.BIO_VERIFCATION: 1
    • O.BIO_VERIFICATION: 10
    • O.NO_REPRODUCE: 4
    • O.RESIDUAL: 8
    • O.RESIDUAL_CAPTURE: 8
    • O.ROLES_AND_ACCESS: 7
  • OE:
    • OE.ADMINISTRATION: 7
    • OE.CAPTURE: 3
    • OE.ENROLMENT: 7
    • OE.ENVIRONMENT: 6
    • OE.FALLBACK: 4
    • OE.PHYSICAL: 7
  • OSP:
    • OSP.FAR: 7
    • OSP.USERLIMIT: 4
  • R:
    • R.ADMINISTRATION: 2
    • R.CAPTURE: 2
    • R.ENROLMENT: 3
    • R.ENVIRONMENT: 4
    • R.FALLBACK: 3
    • R.NO_REPRODUCE: 2
    • R.PHYSICAL: 3
    • R.RESIDUAL_CAPTURE: 2
  • T:
    • T.BRUTEFORCE: 5
    • T.MODIFY_ASSETS: 6
    • T.REPRODUCE: 5
    • T.RESIDUAL: 9
    • T.ROLES: 7
pdf_data/st_keywords/vendor
  • Microsoft:
    • Microsoft: 11
    • Microsoft Corporation: 2
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 1
pdf_data/st_keywords/randomness
  • RNG:
    • RNG: 7
pdf_data/st_keywords/tee_name
  • IBM:
    • SE: 3
pdf_data/st_keywords/standard_id
  • CC:
    • CCIMB-2005-08-004: 1
pdf_data/st_keywords/javacard_packages
  • java:
    • java.security: 1
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • Biometric Identification is not addressed within this ST. Furthermore the enrolment process is out of scope of this ST and it is assumed that all authorized users have been enrolled. Last but not least a: 1
    • higher error rates of those systems are only two of them. The biometric identification process is out of scope of this ST. Please see [BEM] or [BPT] for further explanations. 3.2 Wording in context of Common: 1
    • out of scope: 3
    • service and needs to have provided a voice sample at that time. However, this enrolment process is out of scope of this ST in accordance with the Protection Profile [PP-BSI-BV]. The following can be seen from: 1
pdf_data/st_metadata
  • /Author: Heiko-Armin Schönebeck
  • /CreationDate: D:20061229120000+01'00'
  • /Creator: PDFCreator Version 0.9.3
  • /Keywords: T-Com VoiceIdent Sprecherverifizierung BSI Zertifizierung Common Criteria
  • /ModDate: D:20061229120000<FEFF0054002D0043006F006D00200056006F006900630065004900640065006E0074002000530070007200650063006800650072007600650072006900660069007A0069006500720075006E006700200042005300490020005A006500720074006900660069007A0069006500720075006E006700200043006F006D006D006F006E002000430072006900740065007200690061>
  • /Producer: GPL Ghostscript 8.54
  • /Subject: T-Com VoiceIdent
  • /Title: ST_VoiceIdent_1_7_for_publication
  • pdf_file_size_bytes: 624574
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: True
  • pdf_number_of_pages: 89
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different