threat of a deliberate unauthorized change to the state of the system

EXAMPLE Examples of security-relevant active threats may include modification of messages, replay of messages, and insertion of spurious messages, masquerading as an authorized entity and denial of service.

process by which personal information (PI) is irreversibly altered in such a way that an Individual or a legal entity can no longer be identified directly or indirectly either by the controller alone or in collaboration with any other party

granting of rights, which includes the granting of access based on access rights

potential action or manner to violate security systems

set of rules that regulate how to handle security threats or define the appropriate security level

family of functions and their inverse functions that is parameterized by cryptographic keys

NOTE 1 to entry The functions map bit strings of a fixed length to bit strings of the same length.

ST set of security requirements and specifications to be used as the basis for evaluation of an identified TOE

may be an actual instantiation of equipment performing a conformance test process ‘live’, using ‘live’ equipment or may be equipment/systems that simulate behaviour of equipment at the point being tested in order to stimulate or observe the behaviour resultant from the stimulation and note the result of that stimulation

mechanism which is used to detect whether a data unit has been modified (either accidentally or intentionally)

signature data appended to, or a cryptographic transformation of, a data unit that allows a recipient of the data unit to prove the source and integrity of the data unit and protect against forgery, e.g. by the recipient

NOTE See also cryptography.

document, in the form of a questionnaire, which when completed for an IUT becomes an implementation extra information for testing

string of bits which is the output of a hash-function

information from a system user identifying suspicious behaviour from another system user that can be

characterized as misbehaviour

assurance levels to evaluate securities for products and systems

function which maps strings of bits to fixed-length strings of bits, satisfying the following two properties: a) for a given output, it is computationally infeasible to find an input which maps to this output; and b) for a given output, it is computationally infeasible to find a second input which maps to the same output

NOTE Computational feasibility depends on the specific security requirements and environment.

rights of an invididual to have access to personal data held about the individual and ability to challenge and correct such data

hierarchy of “certification authorities” to allow individuals and organizations to identify each other for the purpose of doing business electronically

entity authentication which provides one entity with the assurance of the other's identity but not vice versa

encipherment of data within or at the source end system, with the corresponding decipherment occurring only within or at the destination end system

principles, means and methods for the transformation of data in order to hide its information content, prevent its undetected modification or prevent its unauthorized use

tests which are performed in a laboratory under specified conditions

physical module that securely executes cryptographic functions and stores keys

intelligible data, the semantic content of which is available

právo a povinnosti jednotlivců a organizací týkající se sběru, užití, držení, prozrazení a disponování s osobními údaji+S377

limits to the purposes which personal data can be used

any data or information related to an individual or legal entity or an association of person or individuals by which the individual or legal entity or association of persons could be identified

NOTE 1 to entry The EU-Dir 95/48/EC names in its Art 2 lit. (a) the personal information as “personal data” and defines it as: “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity”.

threat of unauthorized disclosure of information without changing the state of the system

reference to Cryptomaterial allowing that Cryptomaterial to be used in cryptographic operations, i.e. sign, verify, encrypt, decrypt

property that data content cannot be changed by a reader/interrogator

security requirements to assure confidence in the implementation of functional requirements

information security product or system for the subject of security evaluation

admittance, entry, permit to use the road network and/or associated infrastructure (bridges, tunnels etc.)

algorithm that uses a block cipher to provide an information service such as confidentiality or authenticity

prevention of unauthorized use of a resource, including the prevention of use of a resource in an unauthorized manner

list of entities, together with their access right, which are authorized to have access to a resource

certificate of conformity granted to a product that meets a minimum set of regulatory, technical and safety requirements, generally, by regulation required before certain products are allowed to be sold

NOTE 1 to entry Often called ‘Homologation’ approval based on conformity testing on the basis of one or more specimens of a product representative of the production

any freely given specific and informed written indication of his wishes by which the data subject signifies his agreements to personal data relating to him being processed

private key which defines the private decipherment transformation

purposes for which personal data are collected

key of an entity's asymmetric key pair which should only be used by that entity

NOTE In the case of an asymmetric signature system the private key defines the signature transformation. In the case of an asymmetric encipherment system the private key defines the decipherment transformation.

nature of a test, either basic or conditional

NOTE 1 to entry A test labelled “conditional” is performed if, and only if, it is applicable to a feature identified in the specification of the system or component, whereas a test labelled “basic” indicates a highly recommended test as part of a foundation for meaningful evaluation.

process of encoding messages (or information) in such a way that only authorized parties can read it

information which for reasons of national security is restricted to government authorized or approved persons

test that is performed under real-life conditions

kind of test, such as inspection, simulation, lab test, and field test

attempt to destroy, expose, alter, disable, steal or gain unauthorised access to or make use of an asset

key of an entity's asymmetric key pair which can be made public

NOTE In the case of an asymmetric signature system the public key defines the verification transformation. In the case of an asymmetric encipherment system the public key defines the encipherment transformation. A key that is “publicly” known is not necessarily globally available. The key is only made available to all members of a pre-specified group.

cryptographic key that can be obtained and used by anyone to encrypt messages intended for a

particular recipient, such that the encrypted messages can be deciphered only by using a second key that is known only to the recipient (the private key)

public key which defines the public encipherment transformation

entity authentication which provides both entities with assurance of each other’s identity

functional entity providing confidentiality, integrity, authentication, guaranteed in-order delivery, and replay protection on the datagrams that are passed over it

data source governing what access to resources is permissible by peer Applications

verification process determining that a product of each phase of the system life cycle development process fulfils all the requirements specified in the previous phase

testing the extent to which an IUT is a conforming implementation

instructions for the setup, execution, and evaluation of results for a given test case

a combination of equipment and processes which is able to perform conformance tests according to ISO/TS 13143-1

acceptable standard of accuracy of personal data