Ricoh Aficio MP 7001 SP Security Target - Page 13

of

87

System/Copy, Network Support, Fax, RemoteFax, Web Support, Web Uapl, Network DocBox,

animation, Option PCL, OptionPCLFont, LANG0, and LANG1. These are part of the TOE and are

included in the MFP Control Software.

Operation Panel Unit (hereafter "Operation Panel")

The Operation Panel is a user interface installed on the TOE and consists of the following devices: key

switches, LED indicators, an LCD touch screen, and Operation Control Board. The Operation Control

Board is connected to the key switches, LED indicators, and LCD touch screen. The Operation Panel

Control Software is installed on the Operation Panel Control Board. The Operation Panel Control

Software performs the following:

1.

Transfers operation instructions from the key switches and the LCD touch screen to the MFP

Control Software, which is on the Controller Board.

2.

Controls the LEDs and displays information on the LCD touch screen according to display

instructions from the MFP Control Software.

OpePanel, which is one of the components that constitute the TOE, is the identifier for the Operation

Panel Control Software.

Engine Unit

The Engine Unit consists of Scanner Engine that is an input device to read paper documents, Printer

Engine that is an output device to print and eject paper documents, and Engine Control Board. The

Engine Control Software is installed in the Engine Control Board. The Engine Control Software sends

status information about the Scanner Engine and Printer Engine to the MFP Control Software, and

operates the Scanner Engine or Printer Engine according to instructions from the MFP Control Software.

Engine, which is one of the components that constitute the TOE, is the identifier for the Engine Control

Software.

Fax Unit

The Fax Unit is a unit that has a modem function for connection to a telephone line. It also sends and

receives fax data to and from other fax devices using the G3 standard for communication. When

connected to the Controller Board, the Fax Unit sends and receives control information about the Fax

Unit and fax data to and from the MFP Control Software. FCU, which is one of the components that

constitute the TOE, is the identifier of the Fax Unit.

HDD

The HDD is a hard disk drive that is a non-volatile memory medium. It stores user documents, deleted

user documents, temporary documents and their fragments, login user names and login passwords of

normal users.

Ic Ctlr

The Ic Ctlr is a board that implements data encryption and decryption functions. It is provided with

functions for HDD encryption realisation.

The HDD encryption is an optional function, however, Ic Ctlr is a standard feature of this TOE.

Network Unit

The Network Unit is an external interface to an Ethernet (100BASE-TX/10BASE-T) LAN.

USB Port

The USB Port is an external interface to connect a client computer to the TOE for printing directly from

the client computer. During installation, this interface is disabled.

Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved.

Section	Page
1 ST Introduction	7
1.1 ST Reference	7
1.2 TOE Reference	7
1.3 TOE Overview	9
1.3.1 TOE Type	9
1.3.2 TOE Usage	9
1.3.3 Major Security Features of TOE	11
1.4 TOE Description	11
1.4.1 Physical Boundary of TOE	11
1.4.2 Guidance Documents	14
1.4.3 Definition of Users	17
1.4.3.1. Direct User	19
1.4.3.2. Indirect User	19
1.4.4 Logical Boundary of TOE	20
1.4.4.1. Basic Functions	20
1.4.4.2. Security Functions	23
1.4.5 Protected Assets	24
1.4.5.1. User Data	24
1.4.5.2. TSF Data	25
1.4.5.3. Functions	25
1.5 Glossary	25
1.5.1 Glossary for This ST	25
2 Conformance Claim	28
2.1 CC Conformance Claim	28
2.2 PP Claims	28
2.3 Package Claims	28
2.4 Conformance Claim Rationale	29
2.4.1 Consistency Claim with TOE Type in PP	29
2.4.2 Consistency Claim with Security Problems and Security Objectives in PP	29
2.4.3 Consistency Claim with Security Requirements in PP	29
3 Security Problem Definitions	32
3.1 Threats	32
3.2 Organisational Security Policies	33
3.3 Assumptions	33
4 Security Objectives	35
4.1 Security Objectives for TOE	35
4.2 Security Objectives of Operational Environment	36
4.2.1 IT Environment	36
4.2.2 Non-IT Environment	37
	37
4.3 Security Objectives Rationale	38
4.3.1 Correspondence Table of Security Objectives	38
4.3.2 Security Objectives Descriptions	39
5 Extended Components Definition	43
5.1 Restricted forwarding of data to external interfaces (FPT_FDI_EXP)	43
6 Security Requirements	45
6.1 Security Functional Requirements	45
6.1.1 Class FAU: Security audit	45
6.1.2 Class FCS: Cryptographic support	48
6.1.3 Class FDP: User data protection	49
6.1.4 Class FIA: Identification and authentication	53
6.1.5 Class FMT: Security management	56
6.1.6 Class FPT: Protection of the TSF	62
6.1.7 Class FTA: TOE access	62
6.1.8 Class FTP: Trusted path/channels	63
6.2 Security Assurance Requirements	63
6.3 Security Requirements Rationale	64
6.3.1 Tracing	64
6.3.2 Justification of Traceability	65
6.3.3 Dependency Analysis	71
6.3.4 Security Assurance Requirements Rationale	73

Ricoh Aficio MP 7001 SP Security Target - Page 13

Engine Control Software is installed in the Engine Control Board. The Engine Control Software sends

Page 13 highlights