Ricoh Aficio MP C305 Security Target - Page 88

Page 87 of 91 Table 38 : List of Cryptographic Operations for Stored Data Protection Encryption-triggering Operations Writing data to HDD Reading data from HDD Cryptographic Operations Encrypt Decrypt Standard FIPS197 Cryptographic Algorithm AES Key Size 256 bits Following operations by the MFP administrator, the TOE generates a cryptographic key. If a login user is the MFP administrator, the screen to generate an HDD cryptographic key is provided from the Operation Panel. If the MFP administrator gives instructions to generate an HDD cryptographic key from the Operation Panel, the TOE uses a genuine random number generator and generates random numbers that conform to the standard BSI-AIS31. 7.8 Security Management Function The Security Management Function consists of functions to 1) control operations for TSF data, 2) maintain user roles assigned to normal users, MFP administrator, or supervisor to operate the Security Management Function, and 3) set appropriate default values to security attributes, all of which accord with user role privileges or user privileges that are assigned to normal users, MFP administrator, or supervisor. FMT_MSA.1(a), FMT_MSA.1(b), FMT_MSA.3(a), FMT_MTD.1, FMT_SMF.1 and FMT_SMR.1 The TOE allows operations for TSF data according to the rules described in Table 39. Table 39 : Management of TSF Data TSF Data Operation Interface Login user names of normal users when Basic Authentication is applied Operation Panel, Web browser Login user names of normal users when External Authentication is applied (*1) Login user name of supervisor Login user name of MFP administrator Operation Panel, Web browser Operation Panel, Web browser Operation Panel, Web browser Operations Newly create, query, modify, delete Query Newly create, query, modify, delete Query, modify Newly create Query, modify Users MFP administrator Applicable normal user MFP administrator Supervisor MFP administrator Applicable MFP administrator Copyright (c) 2012 RICOH COMPANY, LTD. All rights reserved.