Ricoh Aficio MP 7001 SP Security Target - Page 22

of

87

-

Operation Function for Fax Documents

A function to print or delete fax documents. Normal users operate this function using

the Operation Panel.

-

Folder Transmission Function of Fax Data

A function to send fax documents to folders using the Operation Panel. The destination

server must be pre-registered by the MFP administrator so that secure communication

with the TOE can be ensured. Users select the destination server from the servers that

the MFP administrator pre-registers, and send data to the folder.

-

Fax Reception Function

A function to receive information from external faxes via the telephone line and store

the received information in the TOE. The stored documents in the TOE are called

received fax documents.

-

Operation Function for Received Fax Documents

A function for normal users to operate the received fax documents from the Operation

Panel or a Web browser. Normal users can print and delete the documents from the

Operation Panel. Also, normal users can print, delete and download those documents

from a Web browser.

- Document Server Function

Normal users can use this function from the Operation Panel and a Web browser.

From the Operation Panel, normal users can store, print and delete Document Server user documents. Also,

they can print and delete fax documents.

From a Web browser, normal users can print and delete Document Server user documents, fax, print,

download, and delete fax documents. Also, normal users can send scanner user documents to folders, send

them by e-mail, download, and delete them.

- Management Function

The Management Function is to control the MFP's overall behaviour. This function can be implemented

using the Operation panel or a Web browser.

- Maintenance Function

The Maintenance Function is to perform maintenance service for the MFP if it is malfunctioning. When

analysing causes of the malfunction, a customer engineer performs this function from the Operation Panel.

The customer engineer will implement this function following the procedures that are allowed to customer

engineers only. If the MFP administrator sets the Service Mode Lock Function to "ON", the customer

engineer cannot use this function.

In this ST, the Service Mode Lock Function is set to "ON" for the target of evaluation.

- Web Function

A function for the TOE user to remotely control the TOE from the client computer. To control the TOE

remotely, the TOE user needs to install the designated Web browser on the client computer following the

guidance documents and connect the client computer to the TOE via the LAN.

Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved.

Section	Page
1 ST Introduction	7
1.1 ST Reference	7
1.2 TOE Reference	7
1.3 TOE Overview	9
1.3.1 TOE Type	9
1.3.2 TOE Usage	9
1.3.3 Major Security Features of TOE	11
1.4 TOE Description	11
1.4.1 Physical Boundary of TOE	11
1.4.2 Guidance Documents	14
1.4.3 Definition of Users	17
1.4.3.1. Direct User	19
1.4.3.2. Indirect User	19
1.4.4 Logical Boundary of TOE	20
1.4.4.1. Basic Functions	20
1.4.4.2. Security Functions	23
1.4.5 Protected Assets	24
1.4.5.1. User Data	24
1.4.5.2. TSF Data	25
1.4.5.3. Functions	25
1.5 Glossary	25
1.5.1 Glossary for This ST	25
2 Conformance Claim	28
2.1 CC Conformance Claim	28
2.2 PP Claims	28
2.3 Package Claims	28
2.4 Conformance Claim Rationale	29
2.4.1 Consistency Claim with TOE Type in PP	29
2.4.2 Consistency Claim with Security Problems and Security Objectives in PP	29
2.4.3 Consistency Claim with Security Requirements in PP	29
3 Security Problem Definitions	32
3.1 Threats	32
3.2 Organisational Security Policies	33
3.3 Assumptions	33
4 Security Objectives	35
4.1 Security Objectives for TOE	35
4.2 Security Objectives of Operational Environment	36
4.2.1 IT Environment	36
4.2.2 Non-IT Environment	37
	37
4.3 Security Objectives Rationale	38
4.3.1 Correspondence Table of Security Objectives	38
4.3.2 Security Objectives Descriptions	39
5 Extended Components Definition	43
5.1 Restricted forwarding of data to external interfaces (FPT_FDI_EXP)	43
6 Security Requirements	45
6.1 Security Functional Requirements	45
6.1.1 Class FAU: Security audit	45
6.1.2 Class FCS: Cryptographic support	48
6.1.3 Class FDP: User data protection	49
6.1.4 Class FIA: Identification and authentication	53
6.1.5 Class FMT: Security management	56
6.1.6 Class FPT: Protection of the TSF	62
6.1.7 Class FTA: TOE access	62
6.1.8 Class FTP: Trusted path/channels	63
6.2 Security Assurance Requirements	63
6.3 Security Requirements Rationale	64
6.3.1 Tracing	64
6.3.2 Justification of Traceability	65
6.3.3 Dependency Analysis	71
6.3.4 Security Assurance Requirements Rationale	73

Ricoh Aficio MP 7001 SP Security Target - Page 22

Document Server Function, Management Function, Maintenance Function, Web Function - services

Page 22 highlights