The TOE, IBM DB2 Document Manager provides the capability to manage controlled documents, such as standard operating procedures, engineering drawings, work instructions, and material safety data sheets, throughout the lifecycle of the documents. It enforces a role-based policy that controls what operations users can perform on documents, based on the user’s role. Document Manager relies on IBM® DB2® Content Manager Enterprise Edition V8.4 Fix Pack 1 to act as a content repository for Document Manager documents.
\r\nDocument Manager works with IBM® DB2® Content Manager Enterprise Edition V8.4 Fix Pack 1 (also referred to simply as ‘Content Manager’ or ‘CM’) to manage controlled documents throughout their lifecycle. Document Manager provides relationship management of related documents and manages the various states and transitions that occur throughout a document’s lifecycle, from creation to disposition or destruction.
\r\nThe Document Manager system is built on a three-tiered computing model comprising
\r\n(1) a Content Repository Tier, which provides an information management function built on the supporting Content Management system;
\r\n(2) a Document Manager Server and Services tier, which provides a DM server function to control communication with the content repository, a group of specialized services (i.e., lifecycle, notification, rendition, print/plot, and automation services, alarm manager, and cache manager), and a client software delivery component; and
\r\n(3) a Document Manager Clients tier, which provides a configurable desktop client application, functions to support the integration of Microsoft Office and other viewing applications, the Designer system administration client application, a batch item loader, and a client application programming interface (API).
","evaluation_configuration":null,"security_evaluation_summary":"The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the IBM DB2® Document Manager V8.4 Fix Pack 1 TOE was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 2.3. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 2.3. Science Applications International Corporation (SAIC) determined that the evaluation assurance level (EAL) for the product is EAL 3 augmented with ALC_FLR.2 family of assurance requirements. The product, when configured as specified in the IBM DB2 Document Manager Version 8 Release 4 Planning and Installing Your Document Management System and the IBM DB2 Document Manager System Administration Guide Version 8 Release 4, satisfies all of the security functional requirements stated in the IBM DB2® Document Manager V8.4 Fix Pack 1 Security Target, Version 1.0. Two Validators on behalf of the CCEVS Validation Body monitored the evaluation carried out by SAIC. The evaluation was completed in November 2008. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report, (report number CCEVS-VR-VID10221-2009, dated 30 January 2009 and prepared by CCEVS.
","environmental_strengths":"The TOE is a commercial product whose users require a low to moderate level of independently assured security. IBM® DB2® Document Manager V8.4 Fix Pack 1 is targeted at a relatively benign environment with good physical access security and competent administrators. Within such environments, it is assumed that attackers will have little attack potential. The security environment also assumes that the TOE components are physically protected.
\r\nIBM® DB2® Document Manager V8.4 Fix Pack 1 supports the following four security functions:
\r\nSecurity Audit
\r\nThe components of the Server and Services tier generate logs of actions performed on a document throughout the document’s lifecycle. The Desktop provides the user with the interface to review the logs.
\r\nUser Data Protection
\r\nThe TOE enforces a role-based access control policy that controls the actions users can perform on documents, based on the roles the user is associated with and the life cycle stage of the document. Users of the TOE are identified and authenticated by the IT environment before any access to the TOE is granted. The TOE defines document management roles, and associates those roles with users and groups that are defined in the IT environment. The roles a user is associated with determine what commands a user can perform. Roles are also associated with the various states in which a document type can exist. The document life cycle defines how the document transitions through its various states. A document life cycle stage is the current state of the document and the transitions that apply to the document in its current state. The TOE ensures the user has an appropriate document management role and that the requested operation is valid for the current life cycle stage of the document before allowing a requested operation to be performed. The Desktop tier and the Server and Services tier work together to implement the role-based access control policy.
\r\nIdentification and Authentication
\r\nThe TOE presents a login screen to users of both the Desktop and the Designer when these client applications are first started. The user identity and password are passed through to the IT environment for identification and authentication prior to granting any further access to the TOE. The TOE enforces the identification and authentication decision received from the IT environment and ensures the user does not gain access to the TOE if identification and authentication fail. The TOE associates the user identity with the current active session and uses this identity and the user’s document management roles to enforce the access control policy on documents.
\r\nThe Desktop client can be configured by the administrator to lock out the Desktop client login screen after a set number of failed attempts, for an administrator-defined interval. The Desktop client can also be configured to require the end user to re-login if idle for longer than a configurable interval.
\r\nSecurity Management
\r\nThe TOE requires an authorized administrator role to perform the security functions of creating and modifying document management roles, document states, and document classes and defining document life cycle stages. The TOE’s authorized administrator security management role is defined in the IT environment.
","features":[]}