Ricoh Aficio MP 6001 SP Security Target - Page 76

of

87

Table 37: List of Cryptographic Operations for Stored Data Protection

Encryption-triggering

Cryptographic

Cryptographic

Key

Standard

Operation

Operations

Algorithm

Size

Writing data to HDD

Encrypt

FIPS197

AES

256 bits

Reading data from HDD

Decrypt

FDP_ACC.1(a) (Subset access control)

The TOE restricts the following: deleting operation on user documents by the MFP administrator process,

operations including deleting, printing, downloading, e-mail transmission, folder transmission, and fax

transmission on user documents by the normal user process, and operations on user documents by the

supervisor process. It also restricts the deleting operation on user jobs by the MFP administrator process, and

deleting operation on own user jobs by the normal user process.

FDP_ACC.1(b) (Subset access control)

The TOE restricts the execution of the MFP applications (Copy Function, Printer Function, Scanner Function,

Fax Function and Document Server Function) by the normal user process.

FDP_ACF.1(a) (Security attribute based access control)

The TOE defines the rule between each user role that is allowed to access the user document and user job,

and operations allowed to each user role as shown in Table 17, Table 18, Table 19 and Table 20. The TOE

provides each user who is allowed to access to the user documents and user jobs with the appropriate

operation according to this rule.

For the access to the user document by the normal user, the available document type of user document is

determined by the operation interface for normal user, and MFP application executed by the normal user as

follows:

- If the MFP application executed from the Operation Panel is the Document Server Function, it is

allowed to print and delete the Document Server user document and fax document.

- If the MFP application executed from the Operation Panel is the Scanner Function, it is allowed to

e-mail and delete the scanner user document and deliver the scanner user document to a folder.

- If the MFP application executed from the Operation Panel is the Fax Function, it is allowed to fax, print

and delete the fax document and deliver the fax document to a folder, and to print and delete the

received fax document from the Operation Panel.

- If the MFP application executed from a Web browser is the Document Server Function, it is allowed to

print and delete the Document Server user document, to e-mail, download and delete the scanner user

document and deliver the scanner user document to a folder, to fax, print, download and delete the fax

document. The normal user is required the operation permission for Scanner Function to perform the

operation on scanner user document. For the operation for fax document, operation permission for Fax

Function is required.

- If the MFP application executed from a Web browser is the Fax Function, it is allowed to print,

download and delete the received fax document. The normal user is required the operation permission

for Document Server Function to perform the operation on received fax document.

Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved.

Section	Page
1 ST Introduction	7
1.1 ST Reference	7
1.2 TOE Reference	7
1.3 TOE Overview	9
1.3.1 TOE Type	9
1.3.2 TOE Usage	9
1.3.3 Major Security Features of TOE	11
1.4 TOE Description	11
1.4.1 Physical Boundary of TOE	11
1.4.2 Guidance Documents	14
1.4.3 Definition of Users	17
1.4.3.1. Direct User	19
1.4.3.2. Indirect User	19
1.4.4 Logical Boundary of TOE	20
1.4.4.1. Basic Functions	20
1.4.4.2. Security Functions	23
1.4.5 Protected Assets	24
1.4.5.1. User Data	24
1.4.5.2. TSF Data	25
1.4.5.3. Functions	25
1.5 Glossary	25
1.5.1 Glossary for This ST	25
2 Conformance Claim	28
2.1 CC Conformance Claim	28
2.2 PP Claims	28
2.3 Package Claims	28
2.4 Conformance Claim Rationale	29
2.4.1 Consistency Claim with TOE Type in PP	29
2.4.2 Consistency Claim with Security Problems and Security Objectives in PP	29
2.4.3 Consistency Claim with Security Requirements in PP	29
3 Security Problem Definitions	32
3.1 Threats	32
3.2 Organisational Security Policies	33
3.3 Assumptions	33
4 Security Objectives	35
4.1 Security Objectives for TOE	35
4.2 Security Objectives of Operational Environment	36
4.2.1 IT Environment	36
4.2.2 Non-IT Environment	37
	37
4.3 Security Objectives Rationale	38
4.3.1 Correspondence Table of Security Objectives	38
4.3.2 Security Objectives Descriptions	39
5 Extended Components Definition	43
5.1 Restricted forwarding of data to external interfaces (FPT_FDI_EXP)	43
6 Security Requirements	45
6.1 Security Functional Requirements	45
6.1.1 Class FAU: Security audit	45
6.1.2 Class FCS: Cryptographic support	48
6.1.3 Class FDP: User data protection	49
6.1.4 Class FIA: Identification and authentication	53
6.1.5 Class FMT: Security management	56
6.1.6 Class FPT: Protection of the TSF	62
6.1.7 Class FTA: TOE access	62
6.1.8 Class FTP: Trusted path/channels	63
6.2 Security Assurance Requirements	63
6.3 Security Requirements Rationale	64
6.3.1 Tracing	64
6.3.2 Justification of Traceability	65
6.3.3 Dependency Analysis	71
6.3.4 Security Assurance Requirements Rationale	73

Ricoh Aficio MP 6001 SP Security Target - Page 76

Table 37: List of Cryptographic Operations for Stored Data Protection

Page 76 highlights