9.3 Unlinkability (FPR_UNL)

Family behaviour

This family ensures that a user may make multiple uses of resources or services without others being able to link these uses together.

Component levelling

FPR_UNL.1 Unlinkability requires that users and/or subjects are unable to determine whether the same user caused certain specific operations in the system.

Management: FPR_UNL.1

The following actions could be considered for the management functions in FMT:

a)    the management of the unlinkability function.

Audit: FPR_UNL.1

The following actions shall be auditable if FAU_GEN Security audit data generation is included in the PP / ST:

a)    Minimal: The invocation of the unlinkability mechanism.