Protection Profile for Mobile Device Management Systems Version 1.0

Profile details

Status archived
Valid from 23.10.2013
Valid until 10.03.2014
Scheme 🇺🇸 US
Category Mobility
Security level N/A

Certification report

certification report could not be downloaded, no link is available.

Protection profile

Extracted keywords

Symmetric Algorithms
AES, AES-, DES, HMAC, CMAC
Asymmetric Algorithms
ECDH, ECDHE, ECDSA, ECC, Diffie-Hellman, DH, DHE, DSA
Hash functions
SHA-1, SHA-384, SHA-512, SHA-256, SHA-224, SHA256
Schemes
MAC
Protocols
SSH, TLS, TLS 1.0, TLS 1.1, TLS 1.2, DTLS, DTLS 1.0, DTLS 1.2, IKEv1, IKEv2, IKE, IPsec, VPN
Randomness
DRBG, RBG
Elliptic Curves
P-256, P-384, P-521, curve P-384, P-284
Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XEX, XTS
TLS cipher suites
TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA

Security level
EAL1
Claims
O.DATA_PROTECTION_TRANSIT, O.ACCOUNTABILITY, O.APPLY_POLICY, O.MANAGEMENT, T.MALICIOUS_APPS, T.NETWORK_ATTACK, T.NETWORK_EAVESDROP, T.PHYSICAL_ACCESS, A.CONNECTIVITY, A.MOBILE_DEVICE_PLATFORM, A.MDM_SERVER_PLATFORM, A.PROPER_ADMIN, A.PROPER_USER, A.TIMESTAMP, OE.IT_ENTERPRISE, OE.MOBILE_DEVICE_PLATFORM, OE.MDM_SERVER_PLATFORM, OE.PROPER_ADMIN, OE.PROPER_USER, OE.WIRELESS_NETWORK, OE.TIMESTAMP
Security Assurance Requirements (SAR)
ADV_FSP.1, ADV_FSP, AGD_OPE.1, AGD_PRE.1, AGD_OPE, AGD_PRE, ALC_CMC.1, ALC_CMS.1, ALC_CMC, ALC_CMC.2, ALC_CMS, ALC_CMS.2, ATE_IND.1, ATE_IND, AVA_VAN.1, AVA_VAN, ASE_INT.1, ASE_CCL.1, ASE_OBJ.1, ASE_ECD.1, ASE_REQ.1, ASE_TSS.1
Security Functional Requirements (SFR)
FAU_ALT_EXT.1, FAU_ALT_EXT.2, FAU_GEN.1, FAU_SAR.1, FAU_SEL.1, FAU_STG_EXT.1, FAU_STG_EXT.2, FAU_ALT_EXT.1.1, FAU_ALT_EXT.1.2, FAU_ALT_EXT.2.1, FAU_GEN.1.1, FAU_GEN.1.2, FAU_STG_EXT.1.1, FAU_SEL.1.1, FAU_SAR.1.1, FAU_SAR.1.2, FAU_STG_EXT.2.1, FAU_CRP_EXT.1, FAU_CRP_EXT.1.1, FCS_CKM.1, FCS_CKM_EXT.2, FCS_CKM_EXT.4, FCS_COP.1, FCS_DTLS_EXT.1, FCS_RBG_EXT.1, FCS_STC_EXT.1, FCS_TLS_EXT.1, FCS_CKM.1.1, FCS_COP.1.1, FCS_CKM_EXT.2.1, FCS_STG_EXT.1, FCS_CKM_EXT.4.1, FCS_RBG_EXT.1.1, FCS_RBG_EXT.1.2, FCS_STG_EXT.1.1, FCS_DTLS_EXT.1.1, FCS_DTLS_EXT.1.2, FCS_SSH_EXT.1, FCS_SSH_EXT.1.1, FCS_SSH_EXT.1.2, FCS_SSH_EXT.1.5, FCS_SSH_EXT.1.3, FCS_SSH_EXT.1.4, FCS_COP, FCS_SSH_EXT.1.6, FCS_SSH_EXT.1.7, FCS_TLS_EXT.1.1, FCS_TLS_EXT.1.2, FIA_ENR_EXT.1, FIA_UAU.1, FIA_ENR_EXT.1.1, FIA_ENR_EXT.1.2, FIA_ENR_EXT.1.3, FIA_UAU.1.1, FIA_UAU.1.2, FMT_POL_EXT.1, FMT_SMF.1, FMT_MOF.1, FMT_SMR.1, FMT_MOF.1.1, FMT_POL_EXT.1.1, FMT_SMF.1.1, FMT_SMF, FMT_SMR.1.1, FMT_SMR.1.2, FMT_POL_EXT.1.2, FMT_POL_EXT.1.3, FPT_ITT.1, FPT_TST_EXT.1, FPT_TUD_EXT.1, FPT_ITT.1.1, FPT_TUD_EXT.1.1, FPT_TUD_EXT.1.3, FPT_TST_EXT.1.2, FPT_TST_EXT.1.1, FPT_TUD_EXT.1.2, FPT_TUD_EXT.2, FTA_TAB.1, FTA_TAB.1.1, FTP_TRP.1, FTP_TRP.2, FTP_ITC_EXT.1, FTP_TRP.1.1, FTP_TRP.1.2, FTP_TRP.1.3, FTP_TRP.2.1, FTP_TRP.2.2, FTP_TRP.2.3

Side-channel analysis
malfunction
Certification process
out of scope, which enforce the security policies, and servers which host mobile application repositories, are out of scope. 1.1 Compliant Targets of Evaluation The Mobile Device Management (MDM) system consists of two

Creation date D:20131024085650-04'00'
Modification date D:20131024085650-04'00'
Pages 128

References

No references are available for this protection profile.

Processing updates

  • The protection profile was first processed.

Raw data

{
  "_id": "8c2d4f33aa9db145",
  "_type": "sec_certs.sample.protection_profile.ProtectionProfile",
  "dgst": "8c2d4f33aa9db145",
  "heuristics": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
  },
  "pdf_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
    "pp_filename": "",
    "pp_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 14
          },
          "ECDH": {
            "ECDH": 2,
            "ECDHE": 2
          },
          "ECDSA": {
            "ECDSA": 24
          }
        },
        "FF": {
          "DH": {
            "DH": 30,
            "DHE": 2,
            "Diffie-Hellman": 10
          },
          "DSA": {
            "DSA": 4
          }
        }
      },
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A.CONNECTIVITY": 1,
          "A.MDM_SERVER_PLATFORM": 1,
          "A.MOBILE_DEVICE_PLATFORM": 1,
          "A.PROPER_ADMIN": 1,
          "A.PROPER_USER": 1,
          "A.TIMESTAMP": 1
        },
        "O": {
          "O.ACCOUNTABILITY": 2,
          "O.APPLY_POLICY": 2,
          "O.DATA_PROTECTION_TRANSIT": 2,
          "O.MANAGEMENT": 2
        },
        "OE": {
          "OE.IT_ENTERPRISE": 1,
          "OE.MDM_SERVER_PLATFORM": 1,
          "OE.MOBILE_DEVICE_PLATFORM": 1,
          "OE.PROPER_ADMIN": 1,
          "OE.PROPER_USER": 1,
          "OE.TIMESTAMP": 1,
          "OE.WIRELESS_NETWORK": 1
        },
        "T": {
          "T.MALICIOUS_APPS": 2,
          "T.NETWORK_ATTACK": 2,
          "T.NETWORK_EAVESDROP": 2,
          "T.PHYSICAL_ACCESS": 2
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ADV": {
          "ADV_FSP": 1,
          "ADV_FSP.1": 8
        },
        "AGD": {
          "AGD_OPE": 7,
          "AGD_OPE.1": 10,
          "AGD_PRE": 2,
          "AGD_PRE.1": 2
        },
        "ALC": {
          "ALC_CMC": 1,
          "ALC_CMC.1": 5,
          "ALC_CMC.2": 1,
          "ALC_CMS": 1,
          "ALC_CMS.1": 1,
          "ALC_CMS.2": 4
        },
        "ASE": {
          "ASE_CCL.1": 1,
          "ASE_ECD.1": 1,
          "ASE_INT.1": 1,
          "ASE_OBJ.1": 1,
          "ASE_REQ.1": 1,
          "ASE_TSS.1": 1
        },
        "ATE": {
          "ATE_IND": 5,
          "ATE_IND.1": 5
        },
        "AVA": {
          "AVA_VAN": 2,
          "AVA_VAN.1": 6
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL1": 3
        }
      },
      "cc_sfr": {
        "FAU": {
          "FAU_ALT_EXT.1": 4,
          "FAU_ALT_EXT.1.1": 2,
          "FAU_ALT_EXT.1.2": 1,
          "FAU_ALT_EXT.2": 3,
          "FAU_ALT_EXT.2.1": 1,
          "FAU_CRP_EXT.1": 1,
          "FAU_CRP_EXT.1.1": 1,
          "FAU_GEN.1": 6,
          "FAU_GEN.1.1": 3,
          "FAU_GEN.1.2": 5,
          "FAU_SAR.1": 3,
          "FAU_SAR.1.1": 1,
          "FAU_SAR.1.2": 1,
          "FAU_SEL.1": 5,
          "FAU_SEL.1.1": 2,
          "FAU_STG_EXT.1": 3,
          "FAU_STG_EXT.1.1": 1,
          "FAU_STG_EXT.2": 3,
          "FAU_STG_EXT.2.1": 1
        },
        "FCS": {
          "FCS_CKM.1": 8,
          "FCS_CKM.1.1": 4,
          "FCS_CKM_EXT.2": 6,
          "FCS_CKM_EXT.2.1": 2,
          "FCS_CKM_EXT.4": 7,
          "FCS_CKM_EXT.4.1": 2,
          "FCS_COP": 1,
          "FCS_COP.1": 24,
          "FCS_COP.1.1": 10,
          "FCS_DTLS_EXT.1": 5,
          "FCS_DTLS_EXT.1.1": 2,
          "FCS_DTLS_EXT.1.2": 2,
          "FCS_RBG_EXT.1": 7,
          "FCS_RBG_EXT.1.1": 8,
          "FCS_RBG_EXT.1.2": 6,
          "FCS_SSH_EXT.1": 1,
          "FCS_SSH_EXT.1.1": 1,
          "FCS_SSH_EXT.1.2": 1,
          "FCS_SSH_EXT.1.3": 1,
          "FCS_SSH_EXT.1.4": 1,
          "FCS_SSH_EXT.1.5": 2,
          "FCS_SSH_EXT.1.6": 1,
          "FCS_SSH_EXT.1.7": 1,
          "FCS_STC_EXT.1": 1,
          "FCS_STG_EXT.1": 3,
          "FCS_STG_EXT.1.1": 1,
          "FCS_TLS_EXT.1": 13,
          "FCS_TLS_EXT.1.1": 2,
          "FCS_TLS_EXT.1.2": 2
        },
        "FIA": {
          "FIA_ENR_EXT.1": 5,
          "FIA_ENR_EXT.1.1": 2,
          "FIA_ENR_EXT.1.2": 3,
          "FIA_ENR_EXT.1.3": 1,
          "FIA_UAU.1": 3,
          "FIA_UAU.1.1": 1,
          "FIA_UAU.1.2": 1
        },
        "FMT": {
          "FMT_MOF.1": 5,
          "FMT_MOF.1.1": 2,
          "FMT_POL_EXT.1": 7,
          "FMT_POL_EXT.1.1": 1,
          "FMT_POL_EXT.1.2": 2,
          "FMT_POL_EXT.1.3": 2,
          "FMT_SMF": 1,
          "FMT_SMF.1": 23,
          "FMT_SMF.1.1": 3,
          "FMT_SMR.1": 3,
          "FMT_SMR.1.1": 1,
          "FMT_SMR.1.2": 1
        },
        "FPT": {
          "FPT_ITT.1": 13,
          "FPT_ITT.1.1": 1,
          "FPT_TST_EXT.1": 5,
          "FPT_TST_EXT.1.1": 2,
          "FPT_TST_EXT.1.2": 8,
          "FPT_TUD_EXT.1": 4,
          "FPT_TUD_EXT.1.1": 1,
          "FPT_TUD_EXT.1.2": 1,
          "FPT_TUD_EXT.1.3": 7,
          "FPT_TUD_EXT.2": 1
        },
        "FTA": {
          "FTA_TAB.1": 1,
          "FTA_TAB.1.1": 1
        },
        "FTP": {
          "FTP_ITC_EXT.1": 2,
          "FTP_TRP.1": 7,
          "FTP_TRP.1.1": 1,
          "FTP_TRP.1.2": 1,
          "FTP_TRP.1.3": 1,
          "FTP_TRP.2": 7,
          "FTP_TRP.2.1": 1,
          "FTP_TRP.2.2": 1,
          "FTP_TRP.2.3": 1
        }
      },
      "certification_process": {
        "OutOfScope": {
          "out of scope": 1,
          "which enforce the security policies, and servers which host mobile application repositories, are out of scope. 1.1 Compliant Targets of Evaluation The Mobile Device Management (MDM) system consists of two": 1
        }
      },
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "CCM": {
          "CCM": 2
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 4
        },
        "OFB": {
          "OFB": 1
        },
        "XEX": {
          "XEX": 1
        },
        "XTS": {
          "XTS": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 38,
          "IKEv1": 40,
          "IKEv2": 30
        },
        "IPsec": {
          "IPsec": 36
        },
        "SSH": {
          "SSH": 20
        },
        "TLS": {
          "DTLS": {
            "DTLS": 18,
            "DTLS 1.0": 2,
            "DTLS 1.2": 2
          },
          "TLS": {
            "TLS": 41,
            "TLS 1.0": 2,
            "TLS 1.1": 2,
            "TLS 1.2": 4
          }
        },
        "VPN": {
          "VPN": 14
        }
      },
      "crypto_scheme": {
        "MAC": {
          "MAC": 11
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 36,
          "P-284": 12,
          "P-384": 14,
          "P-521": 36,
          "curve P-384": 2
        }
      },
      "eval_facility": {},
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 12
          },
          "SHA2": {
            "SHA-224": 2,
            "SHA-256": 4,
            "SHA-384": 4,
            "SHA-512": 6,
            "SHA256": 6
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 6
        },
        "RNG": {
          "RBG": 55
        }
      },
      "side_channel_analysis": {
        "FI": {
          "malfunction": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 2,
          "FIPS 186-4": 10,
          "FIPS PUB 186-2": 2,
          "FIPS PUB 186-4": 18
        },
        "NIST": {
          "NIST SP 800-38A": 2,
          "NIST SP 800-38C": 1,
          "NIST SP 800-38D": 2,
          "NIST SP 800-38F": 2,
          "NIST SP 800-56A": 2,
          "NIST SP 800-57": 6,
          "SP 800-38A": 5,
          "SP 800-38B": 1,
          "SP 800-38C": 1,
          "SP 800-38D": 1,
          "SP 800-38E": 1,
          "SP 800-38F": 1,
          "SP 800-56A": 2,
          "SP 800-90A": 2
        },
        "RFC": {
          "RFC 2246": 2,
          "RFC 2560": 2,
          "RFC 2818": 2,
          "RFC 2986": 1,
          "RFC 3602": 2,
          "RFC 4106": 2,
          "RFC 4109": 2,
          "RFC 4253": 4,
          "RFC 4301": 2,
          "RFC 4303": 2,
          "RFC 4304": 2,
          "RFC 4346": 2,
          "RFC 4347": 6,
          "RFC 4868": 4,
          "RFC 4945": 2,
          "RFC 5246": 4,
          "RFC 5280": 6,
          "RFC 5282": 2,
          "RFC 5759": 2,
          "RFC 5996": 2,
          "RFC 6347": 6,
          "RFC 6379": 2,
          "RFC 6460": 2
        },
        "X509": {
          "X.509": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 27,
            "AES-": 3
          }
        },
        "DES": {
          "DES": {
            "DES": 4
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 1,
            "HMAC": 10
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {
        "TLS": {
          "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 2,
          "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 2,
          "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 2,
          "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 2,
          "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 2,
          "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 2,
          "TLS_RSA_WITH_AES_128_CBC_SHA": 4,
          "TLS_RSA_WITH_AES_128_CBC_SHA256": 2,
          "TLS_RSA_WITH_AES_256_CBC_SHA": 2
        }
      },
      "vendor": {},
      "vulnerability": {}
    },
    "pp_metadata": {
      "/CreationDate": "D:20131024085650-04\u002700\u0027",
      "/ModDate": "D:20131024085650-04\u002700\u0027",
      "pdf_file_size_bytes": 1400555,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 128
    },
    "report_filename": null,
    "report_keywords": null,
    "report_metadata": null
  },
  "scheme_metadata": {
    "cc_version": "3.1",
    "pp_short_name": "PP_MDM_v1.0",
    "pp_sponsor_id": "NSA",
    "pp_transition": null,
    "predecessor": null,
    "source_scheme": "US",
    "successor": "PP_MDM_V1.1"
  },
  "state": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
    "pp": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "7c5129f461b08282983599501de8e5cfc91ff9dcc15769d410b8cdc03ef71c42",
      "txt_hash": "4ae1bbb423acf89246296388eb39412c3c53085a171aae1e39d9e1851ac5915f"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": false,
      "download_ok": false,
      "extract_ok": false,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
    "category": "Mobility",
    "is_collaborative": false,
    "maintenances": [],
    "name": "Protection Profile for Mobile Device Management Systems Version 1.0",
    "not_valid_after": "2014-03-10",
    "not_valid_before": "2013-10-23",
    "pp_link": "https://www.niap-ccevs.org/api/file/get_public_file/?file_id=10175",
    "report_link": null,
    "scheme": "US",
    "security_level": {
      "_type": "Set",
      "elements": []
    },
    "status": "archived",
    "version": "1.0"
  }
}