Ricoh Aficio MP 7001 SP Security Target - Page 7

of

87

1 ST Introduction

This section describes ST Reference, TOE Reference, TOE Overview and TOE Description.

1.1

ST Reference

The following are the identification information of this ST.

Title

: Aficio MP 9001/8001/7001/6001 series with DataOverwriteSecurity Unit Type H

Security Target

Version

: 1.00

Date

: 2011-04-12

Author

: RICOH COMPANY, LTD.

1.2

TOE Reference

This TOE is identified by the following: digital multi function product (hereafter "MFP"), Fax Controller

Unit (hereafter "FCU"), Security Card (residual data overwrite option), and HDD Encryption Unit, all of

which constitute the TOE. The MFP is identified by its product name and version. Although the MFP

product names vary depending on sales areas and/or sales companies, the components are identical. MFP

versions consist of software and hardware versions. The FCU and Security Card are identified by their names

and versions, and HDD Encryption Unit is identified by its name. Some MFPs include the Scanner/Printer

Function (hereafter, "S/P function") as a standard feature, and some include the S/P function as an optional

feature. As for the MFP that includes the S/P function as an optional feature, to have the configuration equal

to that of the TOE, Printer/Scanner Unit Type 9001 must be installed in the MFP. Table 1 shows the

identification information of the TOE.

Table 1 : Identification Information of TOE

Names

Versions

MFPs

Software

System/Copy

1.18

Network Support

8.69.1

Scanner(*1)

01.20

Printer(*1)

1.16e

Fax

03.00.00

RemoteFax

03.00.00

Web Support

1.13.1

- MFPs with S/P function as a standard feature

Ricoh Aficio MP 6001 SP,




Gestetner MP 6001 SP,




infotec MP 6001 SP,

infotec MP 7001 SP,

Web Uapl

1.05

Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved.

Section	Page
1 ST Introduction	7
1.1 ST Reference	7
1.2 TOE Reference	7
1.3 TOE Overview	9
1.3.1 TOE Type	9
1.3.2 TOE Usage	9
1.3.3 Major Security Features of TOE	11
1.4 TOE Description	11
1.4.1 Physical Boundary of TOE	11
1.4.2 Guidance Documents	14
1.4.3 Definition of Users	17
1.4.3.1. Direct User	19
1.4.3.2. Indirect User	19
1.4.4 Logical Boundary of TOE	20
1.4.4.1. Basic Functions	20
1.4.4.2. Security Functions	23
1.4.5 Protected Assets	24
1.4.5.1. User Data	24
1.4.5.2. TSF Data	25
1.4.5.3. Functions	25
1.5 Glossary	25
1.5.1 Glossary for This ST	25
2 Conformance Claim	28
2.1 CC Conformance Claim	28
2.2 PP Claims	28
2.3 Package Claims	28
2.4 Conformance Claim Rationale	29
2.4.1 Consistency Claim with TOE Type in PP	29
2.4.2 Consistency Claim with Security Problems and Security Objectives in PP	29
2.4.3 Consistency Claim with Security Requirements in PP	29
3 Security Problem Definitions	32
3.1 Threats	32
3.2 Organisational Security Policies	33
3.3 Assumptions	33
4 Security Objectives	35
4.1 Security Objectives for TOE	35
4.2 Security Objectives of Operational Environment	36
4.2.1 IT Environment	36
4.2.2 Non-IT Environment	37
	37
4.3 Security Objectives Rationale	38
4.3.1 Correspondence Table of Security Objectives	38
4.3.2 Security Objectives Descriptions	39
5 Extended Components Definition	43
5.1 Restricted forwarding of data to external interfaces (FPT_FDI_EXP)	43
6 Security Requirements	45
6.1 Security Functional Requirements	45
6.1.1 Class FAU: Security audit	45
6.1.2 Class FCS: Cryptographic support	48
6.1.3 Class FDP: User data protection	49
6.1.4 Class FIA: Identification and authentication	53
6.1.5 Class FMT: Security management	56
6.1.6 Class FPT: Protection of the TSF	62
6.1.7 Class FTA: TOE access	62
6.1.8 Class FTP: Trusted path/channels	63
6.2 Security Assurance Requirements	63
6.3 Security Requirements Rationale	64
6.3.1 Tracing	64
6.3.2 Justification of Traceability	65
6.3.3 Dependency Analysis	71
6.3.4 Security Assurance Requirements Rationale	73

Ricoh Aficio MP 7001 SP Security Target - Page 7

ST Introduction - aficio mp software

Page 7 highlights