Ricoh Aficio MP 6001 SP Security Target - Page 23

of

87

1.4.4.2.

Security Functions

The Security Functions are described as follows:

- Audit Function

The Audit Function is to generate the audit log when security events occur so that the operation status of the

TOE can be checked and any security intrusion can be detected. Also, this function can be used only by the

MFP administrator to view and delete the recorded audit log. To view and delete the audit log, the Web

Function will be used.

- Identification and Authentication Function

The Identification and Authentication Function is to identify and authenticate persons when they use the

TOE, to lockout persons who consecutively fail authentication attempts, and to protect the authentication

feedback area where the login password is entered using the Operation Panel. To use the Printer or Fax

Function from the printer or fax driver, users will be identified and authenticated by entering the login user

name and login password received from the printer or fax drivers.

- Document Access Control Function

The Document Access Control Function is to control the operations for user documents and user jobs by the

authorised TOE users who are authenticated by Identification and Authentication Function. It controls user's

operation on the user documents and user jobs based on the privileges for the user role, or the operation

permissions for each user.

- Use-of-Feature Restriction Function

The Use-of-Feature Restriction Function is to control the operations of functions (Copy Function, Printer

Function, Scanner Function, Document Server Function and Fax Function) by the authorised TOE users who

are authenticated by Identification and Authentication Function. It controls the use of functions based on the

privileges for the user role, or the operation permissions for each user.

- Network Protection Function

The Network Protection Function is to prevent information leakage through wiretapping on the LAN and

detect data tampering. The protection function can be enabled using a Web browser to specify the URL for

possible encrypted communication. If the Printer Function is used, the protection function can be enabled

using the printer driver to specify encrypted communication. If the folder transmission function of Scanner

Function is used, the protection function can be enabled through encrypted communication. If the e-mail

transmission function of Scanner Function is used, the protection function can be enabled through encrypted

communication with communication requirements that are specified for each e-mail address. If the LAN-Fax

Transmission Function of Fax Function is used, the protection function can be enabled using the fax driver to

specify encrypted communication.

Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved.

Section	Page
1 ST Introduction	7
1.1 ST Reference	7
1.2 TOE Reference	7
1.3 TOE Overview	9
1.3.1 TOE Type	9
1.3.2 TOE Usage	9
1.3.3 Major Security Features of TOE	11
1.4 TOE Description	11
1.4.1 Physical Boundary of TOE	11
1.4.2 Guidance Documents	14
1.4.3 Definition of Users	17
1.4.3.1. Direct User	19
1.4.3.2. Indirect User	19
1.4.4 Logical Boundary of TOE	20
1.4.4.1. Basic Functions	20
1.4.4.2. Security Functions	23
1.4.5 Protected Assets	24
1.4.5.1. User Data	24
1.4.5.2. TSF Data	25
1.4.5.3. Functions	25
1.5 Glossary	25
1.5.1 Glossary for This ST	25
2 Conformance Claim	28
2.1 CC Conformance Claim	28
2.2 PP Claims	28
2.3 Package Claims	28
2.4 Conformance Claim Rationale	29
2.4.1 Consistency Claim with TOE Type in PP	29
2.4.2 Consistency Claim with Security Problems and Security Objectives in PP	29
2.4.3 Consistency Claim with Security Requirements in PP	29
3 Security Problem Definitions	32
3.1 Threats	32
3.2 Organisational Security Policies	33
3.3 Assumptions	33
4 Security Objectives	35
4.1 Security Objectives for TOE	35
4.2 Security Objectives of Operational Environment	36
4.2.1 IT Environment	36
4.2.2 Non-IT Environment	37
	37
4.3 Security Objectives Rationale	38
4.3.1 Correspondence Table of Security Objectives	38
4.3.2 Security Objectives Descriptions	39
5 Extended Components Definition	43
5.1 Restricted forwarding of data to external interfaces (FPT_FDI_EXP)	43
6 Security Requirements	45
6.1 Security Functional Requirements	45
6.1.1 Class FAU: Security audit	45
6.1.2 Class FCS: Cryptographic support	48
6.1.3 Class FDP: User data protection	49
6.1.4 Class FIA: Identification and authentication	53
6.1.5 Class FMT: Security management	56
6.1.6 Class FPT: Protection of the TSF	62
6.1.7 Class FTA: TOE access	62
6.1.8 Class FTP: Trusted path/channels	63
6.2 Security Assurance Requirements	63
6.3 Security Requirements Rationale	64
6.3.1 Tracing	64
6.3.2 Justification of Traceability	65
6.3.3 Dependency Analysis	71
6.3.4 Security Assurance Requirements Rationale	73

Ricoh Aficio MP 6001 SP Security Target - Page 23

Audit Function, Identification and Authentication Function, Document Access Control Function, Use-of

Page 23 highlights