Wireless Two-Way Electronic Mail Mail Server Protection Profile

Short Name: pp_draft_wemnw-br_v1.0

Technology Type: Wireless

Version: 1.0

Date: June 28, 2002

Conformance Claim: EAL 2

Protection Profile:

Validation Report: Not available

Related Profiles: None

Key Words: Wireless, Handheld, PKI, electronic mail, mail server, desktop

Please forward any questions or comments to pp-comments@niap-ccevs.org

PP Overview

This PP is one of three profiles that are used to specify information security requirements for the wireless two-way email solution. This PP specifies security requirements for the Mail Server component and includes the evaluation assurance level (EAL) 2 assurance requirements, as defined by the Common Criteria (CC). The Mail Server provides a controlled link between the wireless Handheld and the user's email server(s). When the user's email server receives new mail messages, the Mail Server transmits the new messages to the Handheld by encrypting the messages and delivering them over a wireless network (via the Internet). The user is able to respond to or send new mail messages on the Handheld. Messages from the Handheld are encrypted and sent to the user's email server via the Mail Server. The Mail Server decrypts received Handheld messages and places them in the appropriate user's outbox. The Mail Server is also used to enforce global policy settings for the Handheld and Desktop.