FDP_ITT.4 Attribute-based integrity monitoring

["YOKOTA HIROFUMI" <yokota-hirofumi@jqa.jp>]

Hi,

Considering the meaning and the symmetry with FDP_ITT.1 and FDP_ITT.2, I
think that FDP_ITT.4 should be changed as the following.

-------------------------------------
[current]

FDP_ITT.4.1 The TSF shall enforce the [assignment: access control SFP(s)
and/or information flow control SFP(s)] to monitor user data transmitted
between physically-separated parts of the TOE for the following errors:
[assignment: integrity errors], based on the following attributes:
[assignment: security attributes that require separate transmission
channels].

FDP_ITT.4.2 Upon detection of a data integrity error, the TSF shall
[assignment: specify the action to be taken upon integrity error].

-------------------------------------
[suggested change]

FDP_ITT.4.1 The TSF shall enforce the [assignment: access control SFP(s)
and/or information flow control SFP(s)] to monitor user data transmitted
between physically-separated parts of the TOE for the following errors:
[assignment: integrity errors].

FDP_ITT.4.2 The TSF shall separate data controlled by the SFP(s) when
transmitted between physically-separated parts of the TOE, based on the
following attributes: [assignment: security attributes that require separate
transmission channels].

FDP_ITT.4.3 Upon detection of a data integrity error, the TSF shall
[assignment: specify the action to be taken upon integrity error].
--------------------------------------

It is not clear what is attempted to try based on the attributes in the
current statement.
I suggest to make it clear that it is to separate data ......, as it is
written so in FDP_ITT.2.2.
Am I wrong?

Regards,
Hirofumi Yokota