* Accessibility Notice * Official Languages NoticeBioscryptTM Inc.
5450 Explorer Drive, Suite 500
Mississauga, Ontario
Canada
L4W 5M1
Telephone: (905) 624-7700
Fax: (905) 624-7742
support@bioscrypt.com
The Target of Evaluation(TOE) was BioscryptTM Enterprise for NT Logon, Version 2.1.3. The BioscryptTM Enterprise for NT Logon product replaces the normal Windows® Graphical Identification and Authentication (GINA) library. This allows password authentication data to be retrieved and submitted to the GINA on behalf of the user by the product via a fingerprint template that was created and stored through an enrollment process.
The Common Criteria Evaluation Facility which conducted the evaluation was EWA-Canada Ltd. Evaluation work took place from February 2001 to June 2001.
The evaluation of the BioscryptTM Enterprise for NT Logon product has determined that the TOE can be trusted, to an assurance level of EAL 2, to conform to the requirements of the Security Target (ST). The TOE is CC Part 2 conformant (functional requirements from CC Part 2 only) and CC Part 3 conformant (assurance requirements from CC Part 3 only).
The evaluated configuration for the BioscryptTM Enterprise for NT Logon product is a PC running the Microsoft Windows® NT operating system. The evaluated TOE configuration requires a registry setting that forces biometric authentication only on all users' PCs, with the exception of any PCs required for enrolment, and the Primary Domain Controller (only administrators should have access to the PDC).
The evaluation was carried out in accordance with the rules of the Canadian Common Criteria Evaluation and Certification Scheme (the Canadian CCS). The Canadian CCS has established a Certification Body that is managed by the Communications Security Establishment Canada (CSEC). The evaluation was performed using the Common Criteria (CC), applied using the Common Methodology for Information Technology Security Evaluation (CEM).
The scope of the evaluation is defined by the ST, which identifies assumptions made during the evaluation, the IT product's intended environment, its security requirements, and the level of confidence(Evaluation Assurance Level) to which it is asserted that the product satisfies its security requirements. Consumers of the Bioscrypt™ Enterprise for NT Logon product are advised to verify that their own environment is consistent with the ST, and to give due consideration to the comments, observations and recommendations stated in the Certification Report.
Security Target: * Accessibility Notice * Official Languages Notice
Certification Report: * Accessibility Notice