Ricoh Aficio MP 3352 Security Target - Page 83

Document Access Control Function

Get Ricoh Aficio MP 3352 PDF manuals and user guides View all Ricoh Aficio MP 3352 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 83 highlights

Page 82 of 91 FIA_SOS.1 Login passwords for users can be registered only if these passwords meet the following conditions: (1) Usable characters and types: Upper-case letters: [A-Z] (26 letters) Lower-case letters: [a-z] (26 letters) Numbers: [0-9] (ten digits) Symbols: SP (space 33 symbols) (2) Registrable password length: - For normal users No less than the minimum character number for password (8-32 characters) specified by the MFP administrator and no more than 128 characters. - For MFP administrators and a supervisor No less than the minimum character number for password (8-32 characters) specified by the MFP administrator and no more than 32 characters. (3) Combination of character types: The number of combined character types specified by the MFP administrators (two types or more, or three types or more). FIA_UAU.2, FIA_UID.2, and FIA_USB.1 A certificate is a set of identification and authentication information of RC Gate. When the TOE receives a certificate from an IT device to access the TOE via RC Gate communication interface, the TOE checks if the certificate matches another certificate installed in the TOE. Only if the certificate sent from the IT device matches the one installed in the TOE so that the IT device is identified as RC Gate, the IT device whose user role is RC Gate is allowed to use the TOE. FPT_FDI_EXP.1 The TOE inputs information after the TSF reliably identifies and authenticates the input information from the Operation Panel or the client computer via LAN interface. Therefore, the input information cannot be forwarded unless the TSF is not involved in information identification and authentication. 7.3 Document Access Control Function The Document Access Control Function is to allow authorised TOE users to operate document data and user jobs in accordance with the provided user role privilege or user privilege. FDP_ACC.1(a) and FDP_ACF.1(a) The TOE controls user operations for document data and user jobs in accordance with (1) access control rule on document data and (2) access control rule on user jobs. (1) Access control rule on document data Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
Page 82 of
91
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved.
FIA_SOS.1
Login passwords for users can be registered only if these passwords meet the following conditions:
(1) Usable characters and types:
Upper-case letters: [A-Z] (26 letters)
Lower-case letters: [a-z] (26 letters)
Numbers: [0-9] (ten digits)
Symbols: SP (space) ! " # $ % & ' ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _ ` { | } ~ (33 symbols)
(2) Registrable password length:
- For normal users
No less than the minimum character number for password (8-32 characters) specified by the MFP
administrator and no more than 128 characters.
- For MFP administrators and a supervisor
No less than the minimum character number for password (8-32 characters) specified by the MFP
administrator and no more than 32 characters.
(3) Combination of character types:
The number of combined character types specified by the MFP administrators (two types or more, or
three types or more).
FIA_UAU.2, FIA_UID.2, and FIA_USB.1
A certificate is a set of identification and authentication information of RC Gate.
When the TOE receives a certificate from an IT device to access the TOE via RC Gate communication
interface, the TOE checks if the certificate matches another certificate installed in the TOE. Only if the
certificate sent from the IT device matches the one installed in the TOE so that the IT device is identified as
RC Gate, the IT device whose user role is RC Gate is allowed to use the TOE.
FPT_FDI_EXP.1
The TOE inputs information after the TSF reliably identifies and authenticates the input information from the
Operation Panel or the client computer via LAN interface. Therefore, the input information cannot be
forwarded unless the TSF is not involved in information identification and authentication.
7.3
Document Access Control Function
The Document Access Control Function is to allow authorised TOE users to operate document data and user
jobs in accordance with the provided user role privilege or user privilege.
FDP_ACC.1(a) and FDP_ACF.1(a)
The TOE controls user operations for document data and user jobs in accordance with (1) access control rule
on document data and (2) access control rule on user jobs.
(1) Access control rule on document data