Home
Ricoh
All in One Printer
Gestetner MP 4001
Ricoh Gestetner MP 4001 User Manual
4
of 1
of 1 rating
81 pages
Give review
Manual
Specs
To Next Page
To Next Page
Loading...
Page
1
of
81
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.
Aficio
MP
4001
/
5001 series
with Fax Option Type 5001
Security Target
Author
:
RICOH
COMPANY, LTD., Yasushi FUNAKI
Date
:
2010
-
06
-
17
Version
:
1.00
2
Table of Contents
Default Chapter
3
Table of Contents
3
1 ST Introduction
7
ST Reference
7
TOE Reference
7
TOE Overview
8
TOE Type
8
TOE Usage and Major Security Features of TOE
8
Environment for TOE Usage and Non-TOE Configuration Items
8
Figure 1: Example TOE Environment
9
TOE Description
10
Physical Boundaries of TOE
10
Figure 2: Hardware Configuration of TOE
11
Guidance Documents
13
User Roles
16
Responsible Manager of MFP
16
Administrator
16
Supervisor
16
General User
16
Table 1: List of Administrator Roles
16
Customer Engineer
17
Logical Boundaries of TOE
17
Basic Functions
17
Figure 3: Logical Boundaries of TOE
17
Security Functions
19
Table 2: Correspondence between Operations Authorised by Permissions to Process Document Data and Operations Possible on Document Data
21
Protected Assets
23
Document Data
23
Print Data
23
2 Conformance Claims
25
CC Conformance Claim
25
PP Claims, Package Claims
25
Conformance Rationale
25
3 Security Problem Definitions
26
Threats
26
Organisational Security Policies
26
Assumptions
27
4 Security Objectives
28
Security Objectives for TOE
28
Security Objectives of Operational Environment
29
Security Objectives Rationale
29
Tracing
29
Tracing Justification
30
Table 3: Relationship between Security Environment and Security Objectives
30
5 Extended Components Definition
33
6 Security Requirements
34
Security Functional Requirements
34
Class FAU: Security Audit
34
Table 4: List of Auditable Events
34
Class FCS: Cryptographic Support
38
Class FDP: User Data Protection
39
Table 5: List of Cryptographic Key Generation
39
Table 6: List of Cryptographic Operations
39
Table 7: List of Subjects, Objects, and Operations Among Subjects and Objects
40
Table 8: Subjects, Objects and Security Attributes
40
Table 9: Rules Governing Access
40
Table 10: Rules Governing Access Explicitly
41
Table 11: List of Subjects, Information and Operation
41
Class FIA: Identification and Authentication
42
Table 12: Security Attributes Corresponding to Subjects or Information
42
Table 13: List of Authentication Events
42
Table 14: Lockout Release Actions
43
Class FMT: Security Management
45
Table 15: Rules for Initial Association of Attributes
45
Table 16: Management Roles of Security Attributes
45
Table 17: Characteristics of Static Attribute Initialisation
46
Table 18: List of TSF Data Management
47
Table 19: List of Specifications of Management Functions
48
Class FPT: Protection of the TSF
51
Class FTP: Trusted Path/Channels
52
Table 20: Services Requiring Trusted Paths
53
Security Assurance Requirements
54
Table 21: TOE Security Assurance Requirements (EAL3)
54
Security Requirements Rationale
55
Tracing
55
Table 22: Relationship between Security Objectives and Functional Requirements
55
Justification of Traceability
56
Dependency Analysis
60
Table 23: Correspondence of Dependencies of TOE Security Functional Requirements
60
Security Assurance Requirements Rationale
62
7 TOE Summary Specification
63
TOE Security Function
63
Table 24: Relationship between TOE Security Functional Requirements and TOE Security Functions
63
SF.AUDIT Audit Function
64
Generation of Audit Logs
64
Table 25: Auditable Events and Auditable Information
65
Reading Audit Logs
66
Protection of Audit Logs
66
Time Stamps
66
SF.I&A User Identification and Authentication Function
66
User Identification and Authentication
67
Actions in Event of Identification and Authentication Failure
67
Table 26: User Roles and Authentication Methods
67
Password Feedback Area Protection
68
Password Registration
68
Table 27: Unlocking Administrators for each User Role
68
SF.DOC_ACC Document Data Access Control Function
69
General User Operations on Document Data
69
Table 28: Default Value for Document Data ACL
69
File Administrator Operations on Document Data
70
SF.SEC_MNG Security Management Function
70
Management of Document Data ACL
70
Table 29: Operations of Document Data ACL and Authorised Users
70
Management of Administrator Information
71
Table 30: Access to Administrator Information
71
Management of Supervisor Information
72
Management of General User Information
72
Table 31: Authorised Operations on General User Information
72
Management of Machine Control Data
73
Table 32: Administrators Authorised to Specify Machine Control Data
73
SF.CE_OPE_LOCK Service Mode Lock Function
74
SF.CIPHER Encryption Function
74
Encryption of Document Data
74
Table 33: List of Encryption Operations on Data Stored on the HDD
74
SF.FAX_LINE Protection Function for Intrusion Via Telephone Line
75
SF.NET_PROT Network Communication Data Protection Function
75
Use of Web Service Function from Client Computer
75
Printing and Faxing from Client Computer
75
Sending by E-Mail from TOE
75
Delivering to Folders from TOE
75
SF.GENUINE MFP Control Software Verification Function
76
8 Appendix
77
Definitions of Terminology
77
Table 34: Specific Terms Used in this ST
77
References
80
Other manuals for Ricoh Gestetner MP 4001
Quick Start Guide
44 pages
4
Based on 1 rating
Ask a question
Give review
Questions and Answers:
Need help?
Do you have a question about the Ricoh Gestetner MP 4001 and is the answer not in the manual?
Ask a question
Ricoh Gestetner MP 4001 Specifications
General
Brand
Ricoh
Model
Gestetner MP 4001
Category
All in One Printer
Language
English
Related product manuals
Ricoh Aficio MP 4001
81 pages
Ricoh Gestetner 5430
128 pages
Ricoh MP 6503
228 pages
Ricoh MP C306
216 pages
Ricoh MP 2001
156 pages
Ricoh MP 9003
228 pages
Ricoh MP C3004
2154 pages
Ricoh MP C4503
240 pages
Ricoh MP C3003
48 pages
Ricoh MP C2504
1923 pages
Ricoh MP C2011
184 pages
Ricoh MP C3503
19 pages
Need help?
General
To Next Page
