Security Target
Page 8
... of Scanner and Printer are not displayed. TOE is identified by the MFP names and the versions of components that constitute the TOE. Table 1 : Identification Information of MFP MFP Names TOE Versions Ricoh Aficio MP 2352, Ricoh Aficio MP 2852, Ricoh Aficio MP 3352, Savin MP 2352, Savin MP 2852, Savin MP 3352, Lanier MP 2352, Lanier MP 2852, Lanier MP 3352, nashuatec MP 2352, nashuatec MP 2852, nashuatec MP 3352, Rex-Rotary MP...
... of Scanner and Printer are not displayed. TOE is identified by the MFP names and the versions of components that constitute the TOE. Table 1 : Identification Information of MFP MFP Names TOE Versions Ricoh Aficio MP 2352, Ricoh Aficio MP 2852, Ricoh Aficio MP 3352, Savin MP 2352, Savin MP 2852, Savin MP 3352, Lanier MP 2352, Lanier MP 2852, Lanier MP 3352, nashuatec MP 2352, nashuatec MP 2852, nashuatec MP 3352, Rex-Rotary MP...
Security Target
Page 9
All rights reserved. NetworkDocBox Web Support Web Uapl animation Scanner Printer PCL PCL Font Data Erase Onb GWFCU3.5-1(WW) Engine OpePanel LANG0 LANG1 Ic Key Ic Hdd 1.00 1.01 1.00... 1.02 1.00 1.12 1.03m 01.00.01 1.01:08 1.01 1.01 1.01 Hardware 01020714 01 Keywords : Digital MFP, Documents, Copy, Print, Scanner, Network, Office, Fax Page 8 of 91 1.3 TOE Overview This section defines TOE Type, TOE Usage and Major Security Features of TOE. 1.3.1 TOE Type... of the TOE is illustrated below and the usage of the TOE is outlined in this section. Copyright (c) 2011 RICOH COMPANY, LTD.
All rights reserved. NetworkDocBox Web Support Web Uapl animation Scanner Printer PCL PCL Font Data Erase Onb GWFCU3.5-1(WW) Engine OpePanel LANG0 LANG1 Ic Key Ic Hdd 1.00 1.01 1.00... 1.02 1.00 1.12 1.03m 01.00.01 1.01:08 1.01 1.01 1.01 Hardware 01020714 01 Keywords : Digital MFP, Documents, Copy, Print, Scanner, Network, Office, Fax Page 8 of 91 1.3 TOE Overview This section defines TOE Type, TOE Usage and Major Security Features of TOE. 1.3.1 TOE Type... of the TOE is illustrated below and the usage of the TOE is outlined in this section. Copyright (c) 2011 RICOH COMPANY, LTD.
Security Target
Page 14
... paper documents, and Engine Control Board. GWFCU3.5-1(WW), which is one of the components that constitute the TOE, is the identifier of Scanner Engine that is an input device to read paper documents, Printer Engine that constitute the TOE, is the identifier for the Operation Panel ...Control Software. Copyright (c) 2011 RICOH COMPANY, LTD. These are part of normal users. It stores documents, login user names and login passwords of the TOE and are installed:...
... paper documents, and Engine Control Board. GWFCU3.5-1(WW), which is one of the components that constitute the TOE, is the identifier of Scanner Engine that is an input device to read paper documents, Printer Engine that constitute the TOE, is the identifier for the Operation Panel ...Control Software. Copyright (c) 2011 RICOH COMPANY, LTD. These are part of normal users. It stores documents, login user names and login passwords of the TOE and are installed:...
Security Target
Page 15
...to open the cover of the SD Card Slot during the TOE operation. MP 2352/MP 2852/MP 3352 MP 2352/MP 2852/MP 3352 Aficio MP 2352/MP 2852/MP 3352 Operating Instructions Troubleshooting D120-7533 - Quick Reference Copy Guide D120-7517 - Scanner, Printer, PCL, and PCL Font are written on the sales area and...from the client computer. Details of the document sets are available for Product - Quick Reference Printer Guide D595-7305 Copyright (c) 2011 RICOH COMPANY, LTD. USB Port The USB Port is provided with individual TOE component. During installation, this interface is a board that...
...to open the cover of the SD Card Slot during the TOE operation. MP 2352/MP 2852/MP 3352 MP 2352/MP 2852/MP 3352 Aficio MP 2352/MP 2852/MP 3352 Operating Instructions Troubleshooting D120-7533 - Quick Reference Copy Guide D120-7517 - Scanner, Printer, PCL, and PCL Font are written on the sales area and...from the client computer. Details of the document sets are available for Product - Quick Reference Printer Guide D595-7305 Copyright (c) 2011 RICOH COMPANY, LTD. USB Port The USB Port is provided with individual TOE component. During installation, this interface is a board that...
Security Target
Page 16
... - Notes on Security Functions D120-7556 - MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Manuals and Safety Information for Administrators MP 2352/MP 2852/MP 3352 Aficio MP 2352/MP 2852/MP 3352 D595-7795 - Manuals for Users MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Copyright (c) 2011 RICOH COMPANY, LTD. Notes on Hard Disk Data...
... - Notes on Security Functions D120-7556 - MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Manuals and Safety Information for Administrators MP 2352/MP 2852/MP 3352 Aficio MP 2352/MP 2852/MP 3352 D595-7795 - Manuals for Users MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Copyright (c) 2011 RICOH COMPANY, LTD. Notes on Hard Disk Data...
Security Target
Page 17
... Hard Disk Data Encryption D120-7550 Copyright (c) 2011 RICOH COMPANY, LTD. MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Operating Instructions About This Machine D120-7525 - All rights reserved. MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Operating Instructions Troubleshooting D120-7535 - Notes...
... Hard Disk Data Encryption D120-7550 Copyright (c) 2011 RICOH COMPANY, LTD. MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Operating Instructions About This Machine D120-7525 - All rights reserved. MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Operating Instructions Troubleshooting D120-7535 - Notes...
Security Target
Page 18
... to perform user management, machine management, network Copyright (c) 2011 RICOH COMPANY, LTD. Up to normal users. Notes for TOE management...Scanner Function, Printer Function, and Document Server Function. An administrator performs management operations, which include issuing login names to four MFP administrators can use the TOE. Manuals for Administrators MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP D595-7801 - Manuals for Users MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP...
... to perform user management, machine management, network Copyright (c) 2011 RICOH COMPANY, LTD. Up to normal users. Notes for TOE management...Scanner Function, Printer Function, and Document Server Function. An administrator performs management operations, which include issuing login names to four MFP administrators can use the TOE. Manuals for Administrators MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP D595-7801 - Manuals for Users MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP 3352SP Aficio MP 2352SP/MP 2852/MP 2852SP/MP 3352/MP...
Security Target
Page 21
.... If locked print, hold print, and sample print. Deleting printer documents by the TOE The deletion of TOE is complete. Copyright (c) 2011 RICOH COMPANY, LTD. Operating from a Web browser The TOE can print or delete printer documents according to the destination folders in a server that the...be stored on the HDD as Document Server documents. Operating from the Operation Panel The TOE can be sent to this function. Scanner Function The Scanner Function is not subject to folders or by e-mail. The documents stored in the TOE and with which is used for ...
.... If locked print, hold print, and sample print. Deleting printer documents by the TOE The deletion of TOE is complete. Copyright (c) 2011 RICOH COMPANY, LTD. Operating from a Web browser The TOE can print or delete printer documents according to the destination folders in a server that the...be stored on the HDD as Document Server documents. Operating from the Operation Panel The TOE can be sent to this function. Scanner Function The Scanner Function is not subject to folders or by e-mail. The documents stored in the TOE and with which is used for ...
Security Target
Page 23
...LAN. @Remote Service Function A function for the TOE to communicate with RC Gate via networks for @Remote Service. Copyright (c) 2011 RICOH COMPANY, LTD. Also, users can be implemented using the Operation Panel and a Web browser. Management Function The Management Function is malfunctioning.... This function can send scanner documents to folders or by using the Operation panel or a Web browser. When analysing causes of the malfunction, a customer engineer ...
...LAN. @Remote Service Function A function for the TOE to communicate with RC Gate via networks for @Remote Service. Copyright (c) 2011 RICOH COMPANY, LTD. Also, users can be implemented using the Operation Panel and a Web browser. Management Function The Management Function is malfunctioning.... This function can send scanner documents to folders or by using the Operation panel or a Web browser. When analysing causes of the malfunction, a customer engineer ...
Security Target
Page 24
...password quality can use the TOE from the Operation Panel or via the network. To use of Copy Function, Printer Function, Scanner Function, Document Server Function and Fax Function by Identification and Authentication Function. This function includes protection functions for possible encrypted communication....administrator-specified procedure, whereas the MFP administrator and supervisor can be verified as the authorised user. If the e-mail Copyright (c) 2011 RICOH COMPANY, LTD. To use the TOE only when confirmed as a normal user. In addition to use the Printer or Fax ...
...password quality can use the TOE from the Operation Panel or via the network. To use of Copy Function, Printer Function, Scanner Function, Document Server Function and Fax Function by Identification and Authentication Function. This function includes protection functions for possible encrypted communication....administrator-specified procedure, whereas the MFP administrator and supervisor can be verified as the authorised user. If the e-mail Copyright (c) 2011 RICOH COMPANY, LTD. To use the TOE only when confirmed as a normal user. In addition to use the Printer or Fax ...
Security Target
Page 25
..." is to overwrite specific patterns on the HDD. Software Verification Function The Software Verification Function is to control operations for each e-mail address. Copyright (c) 2011 RICOH COMPANY, LTD. Residual Data Overwrite Function The Residual Data Overwrite Function is to verify the integrity of the executable codes of the MFP Control Software...and unauthorised intrusion from the telephone lines to these data types. User Data The user data is used . Page 24 of 91 transmission function of Scanner Function is classified into two types: document data and function data.
..." is to overwrite specific patterns on the HDD. Software Verification Function The Software Verification Function is to control operations for each e-mail address. Copyright (c) 2011 RICOH COMPANY, LTD. Residual Data Overwrite Function The Residual Data Overwrite Function is to verify the integrity of the executable codes of the MFP Control Software...and unauthorised intrusion from the telephone lines to these data types. User Data The user data is used . Page 24 of 91 transmission function of Scanner Function is classified into two types: document data and function data.
Security Target
Page 26
... this ST, "protected data", listed below , is exposed to as protected assets, whose use is stored in the TOE. Copyright (c) 2011 RICOH COMPANY, LTD. Table 8 defines TSF data according to as "TSF protected data". In this ST, "confidential data", listed below , is...understanding of this identifier. Functions The MFP applications (Copy Function, Document Server Function, Printer Function, Scanner Function, and Fax Function) that identify the TOE include System/Copy, Network Support, Scanner, Printer, Fax, RemoteFax, Web Support, Web Uapl, NetworkDocBox, animation, PCL, PCL Font, ...
... this ST, "protected data", listed below , is exposed to as protected assets, whose use is stored in the TOE. Copyright (c) 2011 RICOH COMPANY, LTD. Table 8 defines TSF data according to as "TSF protected data". In this ST, "confidential data", listed below , is...understanding of this identifier. Functions The MFP applications (Copy Function, Document Server Function, Printer Function, Scanner Function, and Fax Function) that identify the TOE include System/Copy, Network Support, Scanner, Printer, Fax, RemoteFax, Web Support, Web Uapl, NetworkDocBox, animation, PCL, PCL Font, ...
Security Target
Page 27
... Panel or Web Function before the predetermined auto logout time elapses. Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. There are four types of each TOE function (Copy Function, Document Server Function, Scanner Function, Printer Function and Fax Function) from the MFP. In this cannot be ...Server Authentication. The TOE authenticates TOE users by the MFP administrator within 60 to the MFP via LAN. For these operations the Scanner Function is attempted from the client computer, or documents stored in the TOE by using the client computer. One of the procedures ...
... Panel or Web Function before the predetermined auto logout time elapses. Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. There are four types of each TOE function (Copy Function, Document Server Function, Scanner Function, Printer Function and Fax Function) from the MFP. In this cannot be ...Server Authentication. The TOE authenticates TOE users by the MFP administrator within 60 to the MFP via LAN. For these operations the Scanner Function is attempted from the client computer, or documents stored in the TOE by using the client computer. One of the procedures ...
Security Target
Page 28
...to operate the TOE. One of the document data attributes. Copyright (c) 2011 RICOH COMPANY, LTD. Documents sent by using Fax Function. This includes Document Server documents, printer documents, scanner documents, fax documents, and received fax documents. A general term for each ...Terms +CPY +FAXOUT +FAXIN +DSR Document user list Stored documents Stored document type Document Server documents Printer documents Scanner documents Fax documents Received fax documents MFP application Available function list Operation Panel Users for stored and received documents Definitions ...
...to operate the TOE. One of the document data attributes. Copyright (c) 2011 RICOH COMPANY, LTD. Documents sent by using Fax Function. This includes Document Server documents, printer documents, scanner documents, fax documents, and received fax documents. A general term for each ...Terms +CPY +FAXOUT +FAXIN +DSR Document user list Stored documents Stored document type Document Server documents Printer documents Scanner documents Fax documents Received fax documents MFP application Available function list Operation Panel Users for stored and received documents Definitions ...
Security Target
Page 29
The destination folder includes the path information to as "PC FAX". Uniquely provided for the TOE. Copyright (c) 2011 RICOH COMPANY, LTD. The documents that can be delivered using FTP protocol. S/MIME protects the communication for realising this function. One ...for realising this function. The TOE displays the Repair Request Notification screen on client computer. IPSec protects the communication for e-mail transmission using Scanner Function. Destination information for users to request a repair to the maintenance centre via RC Gate from the TOE. A function to send documents...
The destination folder includes the path information to as "PC FAX". Uniquely provided for the TOE. Copyright (c) 2011 RICOH COMPANY, LTD. The documents that can be delivered using FTP protocol. S/MIME protects the communication for realising this function. One ...for realising this function. The TOE displays the Repair Request Notification screen on client computer. IPSec protects the communication for e-mail transmission using Scanner Function. Destination information for users to request a repair to the maintenance centre via RC Gate from the TOE. A function to send documents...
Security Target
Page 31
... do not affect any security problems and security objectives defined in the communication between the TOE and RC Gate. Copyright (c) 2011 RICOH COMPANY, LTD. Also, the protected assets are concerned with TOE Type in chapter 3. Augmentation of P.STORAGE_ENCRYPTION and O.STORAGE.ENCRYPTED ...the security problem definitions in chapter 3 and security objectives in chapter 4. Described below are translated from the requirements of the scanner device and print device, and have , and equips the functions that its description deviates from English into Japanese. Although the ...
... do not affect any security problems and security objectives defined in the communication between the TOE and RC Gate. Copyright (c) 2011 RICOH COMPANY, LTD. Also, the protected assets are concerned with TOE Type in chapter 3. Augmentation of P.STORAGE_ENCRYPTION and O.STORAGE.ENCRYPTED ...the security problem definitions in chapter 3 and security objectives in chapter 4. Described below are translated from the requirements of the scanner device and print device, and have , and equips the functions that its description deviates from English into Japanese. Although the ...
Security Target
Page 84
...Operation Panel Operation Panel Operation Panel Operation Panel Available Functions for Users Document Server Function Document Server Function Printer Function Scanner Function Operation Panel Operation Panel Fax Function Fax Function Types of Stored Documents displayed in "7.8 Security Management Function". ... Delete Print Delete Print Delete E-mail transmission Folder transmission Delete Fax transmission Folder transmission Print Delete Print Delete Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. When a normal user logs in from the Operation Panel or a Web browser, the...
...Operation Panel Operation Panel Operation Panel Operation Panel Available Functions for Users Document Server Function Document Server Function Printer Function Scanner Function Operation Panel Operation Panel Fax Function Fax Function Types of Stored Documents displayed in "7.8 Security Management Function". ... Delete Print Delete Print Delete E-mail transmission Folder transmission Delete Fax transmission Folder transmission Print Delete Print Delete Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. When a normal user logs in from the Operation Panel or a Web browser, the...
Security Target
Page 85
...Feature Restriction Function is to authorise TOE users to operate user jobs. Copyright (c) 2011 RICOH COMPANY, LTD. Other users are privileged to use Copy Function, Printer Function, Scanner Function, Document Server Function and Fax Function in the TOE. 7.4 Use-of-Feature ...Web browser Document Server Function Web browser Printer Function Web browser Fax Function Page 84 of 91 Document Server documents Scanner documents Fax transmission documents Printer documents Fax reception documents Print Delete E-mail transmission Folder transmission Download Delete (E-mail transmission...
...Feature Restriction Function is to authorise TOE users to operate user jobs. Copyright (c) 2011 RICOH COMPANY, LTD. Other users are privileged to use Copy Function, Printer Function, Scanner Function, Document Server Function and Fax Function in the TOE. 7.4 Use-of-Feature ...Web browser Document Server Function Web browser Printer Function Web browser Fax Function Page 84 of 91 Document Server documents Scanner documents Fax transmission documents Printer documents Fax reception documents Print Delete E-mail transmission Folder transmission Download Delete (E-mail transmission...
Security Target
Page 86
... data included in the available function list set for an authorised TOE user who attempts to start operating Copy Function, Printer Function, Scanner Function, Document Server Function, and Fax Function. FDP_RIP.1 Methods to overwrite specific patterns on communicating devices. Table 39 : Encrypted Communications... sequential overwriting, the TOE constantly monitors the information on the HDD. If the user deletes document data, the TOE Copyright (c) 2011 RICOH COMPANY, LTD. If the role is that of supervisor and RC Gate, using any existing residual data is that of normal user...
... data included in the available function list set for an authorised TOE user who attempts to start operating Copy Function, Printer Function, Scanner Function, Document Server Function, and Fax Function. FDP_RIP.1 Methods to overwrite specific patterns on communicating devices. Table 39 : Encrypted Communications... sequential overwriting, the TOE constantly monitors the information on the HDD. If the user deletes document data, the TOE Copyright (c) 2011 RICOH COMPANY, LTD. If the role is that of supervisor and RC Gate, using any existing residual data is that of normal user...
Security Target
Page 88
... applied (*1) Login user name of supervisor Login user name of MFP administrator Document data attributes Document user list Stored document types are Document Server document, scanner document, fax document and printer document (with stored print) Document user list Stored document type is fax received document(*2) Default values of 91 FMT_MSA.1(a), FMT_MSA... administrator Supervisor None Operation Panel, Web browser Query, modify MFP administrator, applicable normal user who stored the documents MFP administrator Applicable normal user Copyright (c) 2011 RICOH COMPANY, LTD.
... applied (*1) Login user name of supervisor Login user name of MFP administrator Document data attributes Document user list Stored document types are Document Server document, scanner document, fax document and printer document (with stored print) Document user list Stored document type is fax received document(*2) Default values of 91 FMT_MSA.1(a), FMT_MSA... administrator Supervisor None Operation Panel, Web browser Query, modify MFP administrator, applicable normal user who stored the documents MFP administrator Applicable normal user Copyright (c) 2011 RICOH COMPANY, LTD.