Feedback

[kgal]

Section 2.2.4 DSC Characteristics: : This section introduces the “user” concept but does not really use it to clarify DSC function. For example: FDP_ACC just uses Subjects, Objects and Operations. Application Note 32 indicates that user is a generic term that can be admin or client application roles. Section 2.4.4 talks about roles and key hierarchies. The concept of roles seems more precise when explaining the uses of the DSC. Proposal: In the context of a DSC is might be better to concentrate on the concept of roles rather than users to explain functions. The text in Section 2.2.4 could perhaps mention roles to explain how the administrator role sets up key information so that client applications can use the DSC to prove various assertions. This fits in with the use-case for these devices where the DSC is not directly controlled by the device end-user.