Specifications
S E C U R I T Y T A R G E T D T C O 1 3 8 1 , R e l e a s e 1 . 3 v
Designed by
Date
Department
Released by
Winfried Rogenz
Date
2012-04-25
Department
I CV AM TTS
LR
H
Designation
Security Target DTCO 1381, Release 1.3v
Document
40225345 SPE 000 AB
Version
Pages
40 / 52
Observe
Protection marks for restricting the use of documents and products
(DIN 34: 1998-01)
The copying, distribution and utilization of this document as well as the
communication of its contents to others without expressed authorization
is prohibited. Offenders will be held liable for the payment of damages.
All rights reserved in the event of the grant of a patent, utility model or
ornamental design registration.
Observe
Protection marks for restricting the use of documents and products
(DIN 34: 1998-01)
6.6 Accuracy
<SEF6>
The TOE provides this security enforcing function of accuracy of stored data in the TOE.
This SEF includes the following features:
6.6.1 Information flow control policy
ACR_201
The VU shall ensure that user data related to requirements 081, 084, 087, 090, 093,
102, 104, 105, 105a and 109 may only be processed from the right input sources:
−
vehicle motion data,
−
VU’s real time clock,
−
recording equipment calibration parameters,
−
tachograph cards,
−
user’s inputs.
requirement 081, 084, 087, 105, 105a, 109 in
2
:
see chapter 6.3 security enforcing function ACT_201
requirement 102 in
2
:
see chapter 6.3 security enforcing function ACT_204
requirement 090, 093 in
2
:
see chapter 6.3 security enforcing function ACT_205
requirement 104 in
2
:
The recording equipment shall record and store in its data memory the following data relevant to
the 20 most recent company locks:
-
lock-in date and time,
-
lock-out date and time,
-
company card number and card issuing Member State,
-
company name and address.
ACR_201a
The VU shall ensure that user data related to requirement 109a may only be entered for
the period last card withdrawal – current insertion (requirement 050a).
requirement 109a in
2
:
see chapter 6.3 security enforcing function ACT_201
requirement 50a in
2
:
Upon driver (or workshop) card insertion, and only at this time, the recording equipment shall
remind to the cardholder the date and time of his last card withdrawal and the activity selected at
that time, and shall prompt the cardholder for a “Declaration ?”. If the prompt is negatively an-