Ricoh Aficio MP 8001 sec - Page 42

Class FDP: User data protection, FDP_ACC.1, Subset access control, FDP_ACF.1, Security attribute

Page 42 highlights

Key type HDD cryptographic key Table 7: List of cryptographic operations Page 41 of 82 Standard FIPS197 Cryptographic algorithm AES Cryptographic key size 256 bits Cryptographic operations - Encryption when writing the document data on HDD. - Encryption when reading the document data from HDD. 6.1.3 Class FDP: User data protection FDP_ACC.1 Subset access control Hierarchical to: No other components. Dependencies: FDP_ACF.1 Security attribute based access control. FDP_ACC.1.1 The TSF shall enforce the [assignment: MFP access control SFP] on [assignment: List of Subjects, Objects, and Operation among Subjects and Objects in Table 8 Table 8: List of subjects, objects, and operations among subjects and objects Subjects Administrator process General user process Objects Document data Document data Operations among subjects and objects Deleting document data Storing document data Reading document data Deleting document data FDP_ACF.1 Security attribute based access control Hierarchical to: No other components. Dependencies: FDP_ACC.1 Subset access control FMT_MSA.3 Static attribute initialisation. FDP_ACF.1.1 The TSF shall enforce the [assignment: MFP access control SFP] to objects based on the following: [assignment: subjects or objects, and their corresponding security attributes shown Table 9 Table 9: Subjects, objects and security attributes Types Subjects Subjects Objects Subjects or objects Administrator process General user process Document data Security attributes - Administrator IDs - Administrator roles - General user ID - Document data default ACL - Document data ACL Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83

Page 41 of 82
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.
Table 7: List of cryptographic operations
Key type
Standard
Cryptographic
algorithm
Cryptographic
key size
Cryptographic operations
HDD
cryptographic
key
FIPS197
AES
256 bits
-
Encryption
when
writing
the
document data on HDD.
- Encryption when reading the
document data from HDD.
6.1.3
Class FDP: User data protection
FDP_ACC.1
Subset access control
Hierarchical to:
No other components.
Dependencies:
FDP_ACF.1 Security attribute based access control.
FDP_ACC.1.1 The TSF shall enforce the
[assignment: MFP access control SFP]
on
[assignment: List of
Subjects, Objects, and Operation among Subjects and Objects in Table 8
].
Table 8: List of subjects, objects, and operations among subjects and objects
Subjects
Objects
Operations among subjects and objects
Administrator process
Document data
Deleting document data
General user process
Document data
Storing document data
Reading document data
Deleting document data
FDP_ACF.1
Security attribute based access control
Hierarchical to:
No other components.
Dependencies:
FDP_ACC.1 Subset access control
FMT_MSA.3 Static attribute initialisation.
FDP_ACF.1.1
The TSF shall enforce the
[assignment: MFP access control SFP]
to objects based on the
following:
[assignment: subjects or objects, and their corresponding security attributes
shown Table 9
]
.
Table 9: Subjects, objects and security attributes
Types
Subjects or objects
Security attributes
Subjects
Administrator process
- Administrator IDs
- Administrator roles
Subjects
General user process
- General user ID
- Document data default ACL
Objects
Document data
- Document data ACL