Security Target
Page 6
... : Hardware Configuration of the TOE 12 Figure 3 : Logical Scope of the TOE...19 List of Tables Table 1 : Identification Information of MFP 7 Table 2 : Guidance for English Version-1...14 Table 3 : Guidance for English Version-2...15 Table 4 : Guidance for English Version-3...16...54 Table 19 : Subjects, Objects and Security Attributes (b 55 Table 20 : Rule to Control Operations on MFP Applications (b 55 Table 21 : List of Authentication Events of Basic Authentication 56 Table 22 : List of... Administrators for Each User Role 81 Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved.
... : Hardware Configuration of the TOE 12 Figure 3 : Logical Scope of the TOE...19 List of Tables Table 1 : Identification Information of MFP 7 Table 2 : Guidance for English Version-1...14 Table 3 : Guidance for English Version-2...15 Table 4 : Guidance for English Version-3...16...54 Table 19 : Subjects, Objects and Security Attributes (b 55 Table 20 : Rule to Control Operations on MFP Applications (b 55 Table 21 : List of Authentication Events of Basic Authentication 56 Table 22 : List of... Administrators for Each User Role 81 Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved.
Security Target
Page 8
... identification information of MFP MFP Names TOE Versions Ricoh Aficio MP 2352, Ricoh Aficio MP 2852, Ricoh Aficio MP 3352, Savin MP 2352, Savin MP 2852, Savin MP 3352, Lanier MP 2352, Lanier MP 2852, Lanier MP 3352, nashuatec MP 2352, nashuatec MP 2852, nashuatec MP 3352, Rex-Rotary MP 2352, Rex-Rotary MP 2852, Rex-Rotary MP 3352, Gestetner MP 2352, Gestetner MP 2852, Gestetner MP 3352, infotec MP 2352, infotec MP 2852, infotec MP 3352 "Fax Option...
... identification information of MFP MFP Names TOE Versions Ricoh Aficio MP 2352, Ricoh Aficio MP 2852, Ricoh Aficio MP 3352, Savin MP 2352, Savin MP 2852, Savin MP 3352, Lanier MP 2352, Lanier MP 2852, Lanier MP 3352, nashuatec MP 2352, nashuatec MP 2852, nashuatec MP 3352, Rex-Rotary MP 2352, Rex-Rotary MP 2852, Rex-Rotary MP 3352, Gestetner MP 2352, Gestetner MP 2852, Gestetner MP 3352, infotec MP 2352, infotec MP 2852, infotec MP 3352 "Fax Option...
Security Target
Page 9
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. NetworkDocBox Web Support Web Uapl animation Scanner ...00 01.01 1.02 1.00 1.12 1.03m 01.00.01 1.01:08 1.01 1.01 1.01 Hardware 01020714 01 Keywords : Digital MFP, Documents, Copy, Print, Scanner, Network, Office, Fax Page 8 of 91 1.3 TOE Overview This section defines TOE Type, TOE Usage... and Major Security Features of TOE. 1.3.1 TOE Type This TOE is an MFP, which is an IT device that inputs, stores, and outputs documents. 1.3.2 TOE Usage The operational environment of the TOE ...
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. NetworkDocBox Web Support Web Uapl animation Scanner ...00 01.01 1.02 1.00 1.12 1.03m 01.00.01 1.01:08 1.01 1.01 1.01 Hardware 01020714 01 Keywords : Digital MFP, Documents, Copy, Print, Scanner, Network, Office, Fax Page 8 of 91 1.3 TOE Overview This section defines TOE Type, TOE Usage... and Major Security Features of TOE. 1.3.1 TOE Type This TOE is an MFP, which is an IT device that inputs, stores, and outputs documents. 1.3.2 TOE Usage The operational environment of the TOE ...
Security Target
Page 10
...TOE is the TOE itself, and hardware and software other than the TOE. MFP A machinery that is connected to the local area network (hereafter "LAN") and telephone lines, as a document. Copyright (c) 2011 RICOH COMPANY, LTD. Users can store it as shown in the TOE environment. Also..., the TOE receives information via telephone lines and can operate the TOE from the Operation Panel of the MFP: - Various settings for the MFP, which is used in Figure 1. ...
...TOE is the TOE itself, and hardware and software other than the TOE. MFP A machinery that is connected to the local area network (hereafter "LAN") and telephone lines, as a document. Copyright (c) 2011 RICOH COMPANY, LTD. Users can store it as shown in the TOE environment. Also..., the TOE receives information via telephone lines and can operate the TOE from the Operation Panel of the MFP: - Various settings for the MFP, which is used in Figure 1. ...
Security Target
Page 11
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. Firewall A device to its folders. ... in the TOE. Telephone line A public line for @Remote is connected to relay communications between the MFP and maintenance centre. A transfer path to other external interface for input information from the client computer are...Web browser installed on the client computer, - Various settings for @Remote. FTP Server A server used for the MFP using the printer driver installed on the client computer, - Storage and printing of documents using the fax driver installed...
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. Firewall A device to its folders. ... in the TOE. Telephone line A public line for @Remote is connected to relay communications between the MFP and maintenance centre. A transfer path to other external interface for input information from the client computer are...Web browser installed on the client computer, - Various settings for @Remote. FTP Server A server used for the MFP using the printer driver installed on the client computer, - Storage and printing of documents using the fax driver installed...
Security Target
Page 12
...Residual Data Overwrite Function - Document Access Control Function - Software Verification Function - All rights reserved. Audit Function - Copyright (c) 2011 RICOH COMPANY, LTD. Fax Line Separation Function 1.4 TOE Description This section describes Physical Boundary of TOE, Guidance Documents, Definition of Users..., Logical Boundary of TOE, and Protected Assets. 1.4.1 Physical Boundary of TOE The physical boundary of the TOE is the MFP, which consists of confidentiality and integrity for those documents, the TOE has the following hardware components (shown in it, and...
...Residual Data Overwrite Function - Document Access Control Function - Software Verification Function - All rights reserved. Audit Function - Copyright (c) 2011 RICOH COMPANY, LTD. Fax Line Separation Function 1.4 TOE Description This section describes Physical Boundary of TOE, Guidance Documents, Definition of Users..., Logical Boundary of TOE, and Protected Assets. 1.4.1 Physical Boundary of TOE The physical boundary of the TOE is the MFP, which consists of confidentiality and integrity for those documents, the TOE has the following hardware components (shown in it, and...
Security Target
Page 13
... processed by the MFP Control Software on the Controller Board. Page 12 of 91 Figure 2 : Hardware Configuration of the TOE Controller Board The Controller Board is stored. - The following describes the components of random number generation, cryptographic key generation Copyright (c) 2011 RICOH COMPANY, LTD. Ic Key A security chip that contains Processors, RAM...
... processed by the MFP Control Software on the Controller Board. Page 12 of 91 Figure 2 : Hardware Configuration of the TOE Controller Board The Controller Board is stored. - The following describes the components of random number generation, cryptographic key generation Copyright (c) 2011 RICOH COMPANY, LTD. Ic Key A security chip that contains Processors, RAM...
Security Target
Page 14
The Operation Panel Control Software performs the following software components are included in the MFP Control Software. Engine Unit The Engine Unit consists of the following devices: key switches... Onb. All rights reserved. Operation Panel Unit (hereafter "Operation Panel") The Operation Panel is connected to instructions from the MFP Control Software. The Operation Control Board is a user interface installed on the TOE and consists of Scanner Engine that is... Control Board. GWFCU3.5-1(WW), which is one of the Fax Controller Unit. Copyright (c) 2011 RICOH COMPANY, LTD.
The Operation Panel Control Software performs the following software components are included in the MFP Control Software. Engine Unit The Engine Unit consists of the following devices: key switches... Onb. All rights reserved. Operation Panel Unit (hereafter "Operation Panel") The Operation Panel is connected to instructions from the MFP Control Software. The Operation Control Board is a user interface installed on the TOE and consists of Scanner Engine that is... Control Board. GWFCU3.5-1(WW), which is one of the Fax Controller Unit. Copyright (c) 2011 RICOH COMPANY, LTD.
Security Target
Page 15
... for English Version-1 TOE Components MFP Guidance Documents for Product - Guidance document sets will be inserted into or removed from the client computer. MP 2352/MP 2852/MP 3352 MP 2352/MP 2852/MP 3352 Aficio MP 2352/MP 2852/MP 3352 Operating Instructions Troubleshooting D120-7533 - Quick Reference Printer Guide D595-7305 Copyright (c) 2011 RICOH COMPANY, LTD. Details of the document...
... for English Version-1 TOE Components MFP Guidance Documents for Product - Guidance document sets will be inserted into or removed from the client computer. MP 2352/MP 2852/MP 3352 MP 2352/MP 2852/MP 3352 Aficio MP 2352/MP 2852/MP 3352 Operating Instructions Troubleshooting D120-7533 - Quick Reference Printer Guide D595-7305 Copyright (c) 2011 RICOH COMPANY, LTD. Details of the document...
Security Target
Page 16
.../MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Manuals and Safety Information for Product - All rights reserved. Quick Reference Scanner Guide D595-7317 - Quick Reference Printer Guide D595-7304 - Manuals for Users MP 2352/MP 2852/MP 3352 Aficio MP 2352/MP 2852/MP 3352 D595-7804 - Manuals for Users MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Copyright (c) 2011 RICOH...
.../MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Manuals and Safety Information for Product - All rights reserved. Quick Reference Scanner Guide D595-7317 - Quick Reference Printer Guide D595-7304 - Manuals for Users MP 2352/MP 2852/MP 3352 Aficio MP 2352/MP 2852/MP 3352 D595-7804 - Manuals for Users MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Copyright (c) 2011 RICOH...
Security Target
Page 17
...MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Manuals and Safety Information for Product - Help 83NHCCENZ1.00 v122 FCU None [English version-3] Table 4 : Guidance for English Version-3 TOE Components MFP Guidance Documents for This Machine D120-7502 - Quick Reference Copy Guide D120-7518 - MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP...-2009 D120-7553 - Operating Instructions Notes on Hard Disk Data Encryption D120-7550 Copyright (c) 2011 RICOH COMPANY, LTD.
...MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Manuals and Safety Information for Product - Help 83NHCCENZ1.00 v122 FCU None [English version-3] Table 4 : Guidance for English Version-3 TOE Components MFP Guidance Documents for This Machine D120-7502 - Quick Reference Copy Guide D120-7518 - MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP...-2009 D120-7553 - Operating Instructions Notes on Hard Disk Data Encryption D120-7550 Copyright (c) 2011 RICOH COMPANY, LTD.
Security Target
Page 18
...users and indirect users are described as the supervisor and the MFP administrator. A normal user is allowed to perform user management, machine management, network Copyright (c) 2011 RICOH COMPANY, LTD. Copy Function, Fax Function, Scanner Function, Printer...LICENSE AGREEMENT D376-7900 - Manuals for Administrators MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP D595-7801 - Manuals for Users MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP D595-7810 - All rights reserved. An...
...users and indirect users are described as the supervisor and the MFP administrator. A normal user is allowed to perform user management, machine management, network Copyright (c) 2011 RICOH COMPANY, LTD. Copy Function, Fax Function, Scanner Function, Printer...LICENSE AGREEMENT D376-7900 - Manuals for Administrators MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP D595-7801 - Manuals for Users MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP D595-7810 - All rights reserved. An...
Security Target
Page 19
Authorised to manage normal users. Copyright (c) 2011 RICOH COMPANY, LTD. Authorised to specify MFP device behaviour (network behaviours excluded). This privilege allows configuration of device settings and view of normal user...Customer engineer The customer engineer is a person who has all management privileges (Table 6). Definition of Administrator Supervisor MFP administrator Table 6 : List of the MFP administrator. Authorised to modify the login password of Administrative Roles Management Privileges Supervisor User management privilege Machine management privilege ...
Authorised to manage normal users. Copyright (c) 2011 RICOH COMPANY, LTD. Authorised to specify MFP device behaviour (network behaviours excluded). This privilege allows configuration of device settings and view of normal user...Customer engineer The customer engineer is a person who has all management privileges (Table 6). Definition of Administrator Supervisor MFP administrator Table 6 : List of the MFP administrator. Authorised to modify the login password of Administrative Roles Management Privileges Supervisor User management privilege Machine management privilege ...
Security Target
Page 21
...be ensured. For Document Server storage, the received documents will be stored in the TOE, so that the MFP administrator pre-registers in the TOE and with which secure communication can print or delete printer documents according to ... on printing methods. Folder transmission can be applied only to the destination folders in a server that the MFP administrator pre-registers in the TOE and with which secure communication can be ensured. It also allows users to... and sample print. Operating from the Operation Panel or a Web browser. - Copyright (c) 2011 RICOH COMPANY, LTD.
...be ensured. For Document Server storage, the received documents will be stored in the TOE, so that the MFP administrator pre-registers in the TOE and with which secure communication can print or delete printer documents according to ... on printing methods. Folder transmission can be applied only to the destination folders in a server that the MFP administrator pre-registers in the TOE and with which secure communication can be ensured. It also allows users to... and sample print. Operating from the Operation Panel or a Web browser. - Copyright (c) 2011 RICOH COMPANY, LTD.
Security Target
Page 22
...Web browser. Operation Function for fax transmission in the TOE. - Operation Function for fax transmission are pre-registered in the TOE. The MFP administrator must pre-register the destination server that are called fax documents. According to the guidance document, users first install the specified fax...can be used to receive documents from the fax driver installed on the client computer to external faxes (Fax Transmission Function). Copyright (c) 2011 RICOH COMPANY, LTD. Page 21 of Fax Data A function to send fax documents to folders by fax, and they can be printed, deleted...
...Web browser. Operation Function for fax transmission in the TOE. - Operation Function for fax transmission are pre-registered in the TOE. The MFP administrator must pre-register the destination server that are called fax documents. According to the guidance document, users first install the specified fax...can be used to receive documents from the fax driver installed on the client computer to external faxes (Fax Transmission Function). Copyright (c) 2011 RICOH COMPANY, LTD. Page 21 of Fax Data A function to send fax documents to folders by fax, and they can be printed, deleted...
Security Target
Page 23
From a Web browser, users can send scanner documents to folders or by e-mail, download and delete them. Copyright (c) 2011 RICOH COMPANY, LTD. Also, users can print and delete Document Server documents, fax, print, download, and delete fax documents. Maintenance Function The Maintenance Function ... log in the TOE by using the Operation panel or a Web browser. All rights reserved. Also, users can be used only by the MFP administrator to view and delete the recorded audit log. Page 22 of 91 Document Server Function The Document Server Function is to operate documents stored...
From a Web browser, users can send scanner documents to folders or by e-mail, download and delete them. Copyright (c) 2011 RICOH COMPANY, LTD. Also, users can print and delete Document Server documents, fax, print, download, and delete fax documents. Maintenance Function The Maintenance Function ... log in the TOE by using the Operation panel or a Web browser. All rights reserved. Also, users can be used only by the MFP administrator to view and delete the recorded audit log. Page 22 of 91 Document Server Function The Document Server Function is to operate documents stored...
Security Target
Page 24
... the Basic Authentication only, this and for possible encrypted communication. minimum password length) and obligatory character types the MFP administrator specifies, so that the user can be protected. If the e-mail Copyright (c) 2011 RICOH COMPANY, LTD. Use-of-Feature Restriction Function The Use-of-Feature Restriction Function is entered using a Web browser...
... the Basic Authentication only, this and for possible encrypted communication. minimum password length) and obligatory character types the MFP administrator specifies, so that the user can be protected. If the e-mail Copyright (c) 2011 RICOH COMPANY, LTD. Use-of-Feature Restriction Function The Use-of-Feature Restriction Function is entered using a Web browser...
Security Target
Page 25
...received and unauthorised intrusion from the telephone lines to the LAN can be prevented. 1.4.5 Protected Assets Assets to normal users, MFP administrator, and supervisor. Copyright (c) 2011 RICOH COMPANY, LTD. If the LAN-Fax Transmission Function of Fax Function is used, the protection function can be trusted. Fax... data, TSF data, and functions. 1.4.5.1. User Data The user data is to verify the integrity of the executable codes of the MFP Control Software and FCU Control Software and to ensure that they can be enabled using the fax driver to control operations for each e-...
...received and unauthorised intrusion from the telephone lines to the LAN can be prevented. 1.4.5 Protected Assets Assets to normal users, MFP administrator, and supervisor. Copyright (c) 2011 RICOH COMPANY, LTD. If the LAN-Fax Transmission Function of Fax Function is used, the protection function can be trusted. Fax... data, TSF data, and functions. 1.4.5.1. User Data The user data is to verify the integrity of the executable codes of the MFP Control Software and FCU Control Software and to ensure that they can be enabled using the fax driver to control operations for each e-...
Security Target
Page 26
...confidential data. Table 8 defines TSF data according to This ST Definitions A software component installed in FlashROM and SD Card. Functions The MFP applications (Copy Function, Document Server Function, Printer Function, Scanner Function, and Fax Function) that identify the TOE include System/Copy, ... LANG1 and Data Erase Onb. The TOE identifies users by users without viewing permissions. Login user name, Number of specific terms. Terms MFP Control Software Login user name Login password Table 9 : Specific Terms Related to these data types. Login password, audit log, and HDD...
...confidential data. Table 8 defines TSF data according to This ST Definitions A software component installed in FlashROM and SD Card. Functions The MFP applications (Copy Function, Document Server Function, Printer Function, Scanner Function, and Fax Function) that identify the TOE include System/Copy, ... LANG1 and Data Erase Onb. The TOE identifies users by users without viewing permissions. Login user name, Number of specific terms. Terms MFP Control Software Login user name Login password Table 9 : Specific Terms Related to these data types. Login password, audit log, and HDD...
Security Target
Page 27
... of TOE users who are authorised to Windows Authentication using the login user names and the login passwords registered on the TOE. Copyright (c) 2011 RICOH COMPANY, LTD. Page 26 of particular users. A function for paper documents and electronic documents used as +PRT, +SCN, +CPY, +FAXOUT...FAXIN, and +DSR. One of each TOE function (Copy Function, Document Server Function, Scanner Function, Printer Function and Fax Function) from the MFP. This auto logout time is cancelled, the job will be changed by e-mail or sent to as "fixed auto logout time". External Authentication ...
... of TOE users who are authorised to Windows Authentication using the login user names and the login passwords registered on the TOE. Copyright (c) 2011 RICOH COMPANY, LTD. Page 26 of particular users. A function for paper documents and electronic documents used as +PRT, +SCN, +CPY, +FAXOUT...FAXIN, and +DSR. One of each TOE function (Copy Function, Document Server Function, Scanner Function, Printer Function and Fax Function) from the MFP. This auto logout time is cancelled, the job will be changed by e-mail or sent to as "fixed auto logout time". External Authentication ...