Ricoh Aficio MP 6001 SP Security Target - Page 26

of

87

Terms

Definitions

Auto logout

A function for automatic user logout if no access is attempted from the

Operation Panel or Web Function before the predetermined auto logout time

elapses.

Auto logout time for the Operation Panel:

Auto logout time specified by the MFP administrator (180 seconds)

Auto logout time for the Web Function:

30 minutes (this cannot be changed by users). This auto logout time is also

referred to as "fixed auto logout time".

Minimum

Password

Length

The minimum number of registrable password digits.

Password

Complexity

Setting

The minimum combination of the characters and symbols that can be used as

registrable passwords.

There are four types of characters: uppercase and lower case alphabets, digits

and symbols.

There are Level 1 and Level 2 Password Complexity Settings. Level 1 requires a

password to be a combination of two or more types of characters and symbols

specified above. Level 2 requires a password to be a combination of three or

more types of characters and symbols specified above.

HDD

An abbreviation of hard disk drive. In this document, unless otherwise specified,

"HDD" indicates the HDD installed on the TOE.

User job

A sequence of operations of each TOE function (Copy Function, Document

Server Function, Scanner Function, Printer Function and Fax Function) from

beginning to end. A user job may be suspended or cancelled by users during

operation. If a user job is cancelled, the job will be terminated.

Documents

TOE digital image data that is generated through application of Copy Function,

Printer Function, Scanner Function, Fax Function, and Document Server

Function. "Document" is a general term for documents (or "user documents", so

explicitly referred to in this ST) operated by users from the Operation Panel or a

Web browser, deleted documents, temporary documents and their fragments.

Document user list

A list of the login user names of the normal users who are allowed to access a

user document. This list is assigned as an attribute of each user document. The

login user names of the MFP administrators are not included in this list, although

access privileges are provided for them.

Document type

One of the attributes associated with user documents. Determining which access

control rules or operations can be applied to user documents depends on

document types, which include the following:

- Document Server user document: The value for the documents stored in the

Document Server using Copy Function, Document Server Function, and Printer

Function.

- Scanner user document: The value for the documents stored using Scanner

Function.

- Fax document: The value for the documents scanned and stored using Fax

Function, and those stored using the LAN Fax.

- Received fax document: The value for the fax data received and stored. This

document is externally received, and its user cannot be identified.

Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved.

Section	Page
1 ST Introduction	7
1.1 ST Reference	7
1.2 TOE Reference	7
1.3 TOE Overview	9
1.3.1 TOE Type	9
1.3.2 TOE Usage	9
1.3.3 Major Security Features of TOE	11
1.4 TOE Description	11
1.4.1 Physical Boundary of TOE	11
1.4.2 Guidance Documents	14
1.4.3 Definition of Users	17
1.4.3.1. Direct User	19
1.4.3.2. Indirect User	19
1.4.4 Logical Boundary of TOE	20
1.4.4.1. Basic Functions	20
1.4.4.2. Security Functions	23
1.4.5 Protected Assets	24
1.4.5.1. User Data	24
1.4.5.2. TSF Data	25
1.4.5.3. Functions	25
1.5 Glossary	25
1.5.1 Glossary for This ST	25
2 Conformance Claim	28
2.1 CC Conformance Claim	28
2.2 PP Claims	28
2.3 Package Claims	28
2.4 Conformance Claim Rationale	29
2.4.1 Consistency Claim with TOE Type in PP	29
2.4.2 Consistency Claim with Security Problems and Security Objectives in PP	29
2.4.3 Consistency Claim with Security Requirements in PP	29
3 Security Problem Definitions	32
3.1 Threats	32
3.2 Organisational Security Policies	33
3.3 Assumptions	33
4 Security Objectives	35
4.1 Security Objectives for TOE	35
4.2 Security Objectives of Operational Environment	36
4.2.1 IT Environment	36
4.2.2 Non-IT Environment	37
	37
4.3 Security Objectives Rationale	38
4.3.1 Correspondence Table of Security Objectives	38
4.3.2 Security Objectives Descriptions	39
5 Extended Components Definition	43
5.1 Restricted forwarding of data to external interfaces (FPT_FDI_EXP)	43
6 Security Requirements	45
6.1 Security Functional Requirements	45
6.1.1 Class FAU: Security audit	45
6.1.2 Class FCS: Cryptographic support	48
6.1.3 Class FDP: User data protection	49
6.1.4 Class FIA: Identification and authentication	53
6.1.5 Class FMT: Security management	56
6.1.6 Class FPT: Protection of the TSF	62
6.1.7 Class FTA: TOE access	62
6.1.8 Class FTP: Trusted path/channels	63
6.2 Security Assurance Requirements	63
6.3 Security Requirements Rationale	64
6.3.1 Tracing	64
6.3.2 Justification of Traceability	65
6.3.3 Dependency Analysis	71
6.3.4 Security Assurance Requirements Rationale	73

Ricoh Aficio MP 6001 SP Security Target - Page 26

Terms, Definitions

Page 26 highlights