Home » Ricoh Manuals » Printers » Ricoh Pro 1107 » Manual Viewer

Ricoh Pro 1107 Design Guide

Ricoh Pro 1107 Manual

View all Ricoh Pro 1107 manuals

Add to My Manuals
Save this manual to your list of manuals

Ricoh Pro 1107 manual content summary:

Ricoh Pro 1107 | Design Guide - Page 1
1357 LD360 LD360sp LD370 LD370sp LD380 LD380sp LD390 LD390sp LP37N RICOH SP C820DN SP C821DN Pro 907EX Pro 1107EX Pro 1357EX Pro 907 Pro 1107 Pro 1357 AFICIO MP 6001 MP 6001 SP MP 7001 MP 7001 SP MP 8001 MP 8001 SP MP 9001 MP 9001 SP AFICIO SP4210N SAVIN CLP340D CLP350D Pro 907EX Pro 1107EX Pro
Ricoh Pro 1107 | Design Guide - Page 2
Print Controller Design Guide for Information Security TABLE OF CONTENTS 1. Internal System Configuration 7 1-1 Hardware Configuration 7 1-1-1 MFP ...7 1-1-2 LP ...9 1-2 Software Configuration 11 1-2-1 Shared Service Layers 11 1-2-2 Principal Machine Functions 12 1-3 Data Security ...14 1-3-1
Ricoh Pro 1107 | Design Guide - Page 3
Print Controller Design Guide for Information Security 1-9-3 Capture Settings 41 1-9-4 Security Considerations 42 Job/Access Log Data Collection 45 2-1-8 Print Backup ...45 2-2 Printer ...47 2-2-1 Overview of Printer Operations 47 2-2-2 Data Flow...47 2-2-3 Data Security Considerations 51 2-3
Ricoh Pro 1107 | Design Guide - Page 4
Print Controller Design Guide for Information Security 2-4-2 Data Security Considerations 60 2-4-3 Protection of the Journal and Documents in Document Server Storage 61 2-4-4 Protection of FAX Transmission Operations 61 2-4-5 Protection
Ricoh Pro 1107 | Design Guide - Page 5
Print Controller Design Guide for Information Security (MFP models only) ...80 4-2-2 FAX Functions (MFP models only 80 4-2-3 Network Functions 81 4-2-4 Printer Functions 81 4-2-5 Machine Administrative Functions (MFP models only 81 4-2-6 Authentication Functions 81 4-3 Data Security
Ricoh Pro 1107 | Design Guide - Page 6
1357 LD360 LD360sp LD370 LD370sp LD380 LD380sp LD390 LD390sp LP37N RICOH SP C820DN SP C821DN Pro 907EX Pro 1107EX Pro 1357EX Pro 907 Pro 1107 Pro 1357 AFICIO MP 6001 MP 6001 SP MP 7001 MP 7001 SP MP 8001 MP 8001 SP MP 9001 MP 9001 SP AFICIO SP4210N SAVIN CLP340D CLP350D Pro 907EX Pro 1107EX Pro
Ricoh Pro 1107 | Design Guide - Page 7
Print Controller Design Guide for Information Security 1. Internal System Configuration 1-1 Hardware Configuration 1-1-1 MFP Controller Processing and Control Unit ・CPU ・RAM RAM - Page memory - Firmware Encryption Processor HDD - Image data -
Ricoh Pro 1107 | Design Guide - Page 8
Print Controller Design Guide for Information Security • Serial communication between the external charge device operations including firmware updates and settings changes. • SD card I/F: Used for performing service maintenance and as an interface for firmware storage media. • RAM, HDD: Image
Ricoh Pro 1107 | Design Guide - Page 9
Print Controller Design Guide for Information Security 1-1-2 LP RAM - Page memory - Firmware Encryption Processor HDD - Image data - Mgmt. data Flash ROM Operation Panel Engine Image Processing Printing TPM NVRAM -
Ricoh Pro 1107 | Design Guide - Page 10
Print Controller Design Guide for Information Security • RC Gate: Intermediary device connected to the LP via an Ethernet connection for performing remote diagnostic operations including firmware updates and settings changes. • SD card I/F: Used for performing service maintenance and as an interface
Ricoh Pro 1107 | Design Guide - Page 11
Machine Functions Print Controller Design Guide for Information Security 1-2 Software Configuration SDK Copier Scanner FAX Web DocBox Printer GW WS WebSys EAC VAS ECS MCS OCS FCS NCS DCS UCS CCS NRS LCS MIRS DESS SCS S Shared Service Layers SRM libc IMH Engine
Ricoh Pro 1107 | Design Guide - Page 12
Controller Design Guide for Information Security SCS (System Control Service) SRM (System Resource Manager) DCS (Delivery Control Service) MIRS (Machine Information Report Service) UCS (User Control Service) CCS (Certification Control Service) NRS (New Remote Service) LCS (Log Control Service) DESS
Ricoh Pro 1107 | Design Guide - Page 13
Guide also acts as a client to external Web services, including transferring the machine log data to specific with MFP/LP pricipal machine functions developed by Ricoh. VAS: An MFP/LP API that standardizes print jobs and scan jobs, as well as store Printer documents to the MFP HDD. In addition, this
Ricoh Pro 1107 | Design Guide - Page 14
Print Controller Design Guide for Information Security 1-3 Data Security 1-3-1 External I/F The MFP/LP is the Image Memory is managed by a memory control module called the MCS (Memory Control Service), which ensures that the data can only be accessed by specified machine function(s). In addition
Ricoh Pro 1107 | Design Guide - Page 15
Controller Design Guide for Information Security 4. Communication between the MFP/LP and its peripherals is conducted via the peripheral I/F using Ricoh-unique USB I/F (Type A) only allows connection with devices that support either IC card-based authentication or PictBridge printing functions. Each
Ricoh Pro 1107 | Design Guide - Page 16
Print Controller Design Guide for Information Security IC card-based authentication functions: Authentication is mutual and encrypted, which prevents impersonation and ensures that data is properly protected. Page 16 of 86
Ricoh Pro 1107 | Design Guide - Page 17
Guide authenticate the firmware when it is introduced in the field. 1. The Ricoh license server applies the SHA-1 algorithm (Secure Hash Algorithm 1) to the 3. The MFP/LP checks the firmware to identify the type (e.g. System, Printer, FAX, LCD). It then verifies that the model name is the same
Ricoh Pro 1107 | Design Guide - Page 18
Guide for are sent 2. Verification of model and target machine functions (Copier, Printer, etc.) 3. Verification of firmware version Program 5. Generate MD1 using MD1 = MD2 Digital signature Ricoh distribution server Program + digital signature Program Ricoh license server 1. Generate MD
Ricoh Pro 1107 | Design Guide - Page 19
Guide for Information Security Installation via RC-Gate Download RC-Gate Installation directly from @Remote Center @Remote Center Digital signature Program + digital signature Ricoh issued Digital signature Program + digital signature Ricoh license server Client PC Remote Firmware
Ricoh Pro 1107 | Design Guide - Page 20
Print Controller Design Guide for Information Security 1-4-2 Verification of Firmware/Program Validity Overview In order to continually ensure the validity of all controller core programs and application firmware installed
Ricoh Pro 1107 | Design Guide - Page 21
Print Controller Design Guide for Information Security 1-5 Authentication, Access Control 1-5-1 Authentication used in display languages such as Chinese, Japanese, Taiwanese, and Korean, they are not supported. Although usernames longer than 32 characters are invalid, the input field will accept up
Ricoh Pro 1107 | Design Guide - Page 22
Guide for Information Security in the MFP/LP. The communication path can be encrypted using SSL, however for environments that do not support SSL protocol, the password itself is encrypted using an encryption key specified by the Administrator. To do this, however, the Printer and GUID. Kerberos
Ricoh Pro 1107 | Design Guide - Page 23
Print Controller Design Guide for Information Security authentication process is successful. Active sessions will expire under the following conditions: When the "Logout" button is pressed in User Tools When
Ricoh Pro 1107 | Design Guide - Page 24
Print Controller Design Guide for Information Security 1-5-2 IC Card Authentication Overview IC Card stored to this IC card and then used to authenticate MFP/LP users. This feature supports IC cards built to Ricoh specifications. To use this option, it is necessary to install the "ADK" (
Ricoh Pro 1107 | Design Guide - Page 25
Print Controller Design Guide for Information Security 1-5-3 Access Control Users logged-in as to any address except those that have been approved. This is true for addresses that are entered manually as well as those registered in the Address Book. It is possible to prohibit unauthenticated users as
Ricoh Pro 1107 | Design Guide - Page 26
Print Controller Design Guide for Information Security 1-6 Administrator Settings In order to disperse the risk of malicious operations by a single individual with administrator-level access rights, the MFP/LP
Ricoh Pro 1107 | Design Guide - Page 27
Design Guide for Information from 1-9. In a comparison of the DoD method, NSA method, and Ricoh randomized value method (set at three or more passes), no single method is Erase/Overwrite option can be activated on the MFP/LP, a service or sales engineer must perform the setup procedure. If the SD
Ricoh Pro 1107 | Design Guide - Page 28
Print Controller Design Guide for Information Security whether or is no longer used by the MFP/LP. In addition, it is also possible to manually erase data that was intentionally saved to the HDD, such as Document Server documents. Note: settings contained in SP mode and UP mode. Page 28 of 86
Ricoh Pro 1107 | Design Guide - Page 29
Print Controller Design Guide for Information Security 1-7-2 Encryption of Stored Data Overview By encrypting the data stored in the HDD, NVRAM, and flash ROM memories, it is possible to
Ricoh Pro 1107 | Design Guide - Page 30
Print Controller Design Guide for Information Security The encryption described above will be applied even in cases where the target data has already been encrypted once using a separate MFP/
Ricoh Pro 1107 | Design Guide - Page 31
Print Controller Design Guide for Information Security to the HDD, it still exists inside de-allocated HDD memory, where it will remain until it is overwritten. If the operator wishes to manually overwrite this data, it is necessary to use the Data Erase/Overwrite option explained in 1.7.1 above.
Ricoh Pro 1107 | Design Guide - Page 32
Guide SD card. This data can be encrypted before it is stored if the Printer/Scanner option is installed. Admin. Detailed User Info. General Info. Data Username*1 Authent. Password*1, *2 Protection Code 00001 Taroh Ricoh [email protected] 1234-5678 Taroh ********** **** General Users Groups
Ricoh Pro 1107 | Design Guide - Page 33
Print Controller Design Guide for Information Security *1: This item does not appear in the Address the document protection setting in the MFP Address Book can be disabled for all users in Service Program mode (SP5-401-103). The Document Administrator can also change the passwords for individual
Ricoh Pro 1107 | Design Guide - Page 34
Print Controller Design Guide for Information Security General Info. Detailed User Info Document No. Document Name Thumbnails Bibliographic Info. Pg. 1 Image Data Pg. 2 Image Data ・・・ 00001 Meeting files Document
Ricoh Pro 1107 | Design Guide - Page 35
Print Controller Design Guide for Information Security 1-8 Job/Access Logs Job logs and access logs for the principal machine functions in sections 2.1-2.7 contain entries for job status-related events (
Ricoh Pro 1107 | Design Guide - Page 36
Print Controller Design Guide for Information Security The MFP/LP does not allow any details on which specific log items are accessible by Machine Administrators, see the Operator's Manual for Web SmartDeviceMonitor Professional IS. Job Log Event/Data Logged Print jobs Jobs involving transmission
Ricoh Pro 1107 | Design Guide - Page 37
Print Controller Design Guide for Information Security Access Log Login Not logged Logout Not logged Creation of stored document Not logged Deletion of stored document Not logged Batch deletion
Ricoh Pro 1107 | Design Guide - Page 38
Print Controller Design Guide for Information Security Storage capacity of job and access logs For cases in which the log data cannot be transferred to Web SmartDeviceMonitor Professional IS,
Ricoh Pro 1107 | Design Guide - Page 39
Print Controller Design Guide for Information Security disable the function. The type of capture can be set to Auto, Manual, Compulsory (Name Fixed), Compulsory (Name Available), or Do Not Capture. , and only when the user specifies if Manual is selected. Note: The MFP itself is able to capture
Ricoh Pro 1107 | Design Guide - Page 40
Print Controller Design Guide for Information Security Function Copier Operation Copy job Copy job + of LAN FAX file to HDD for later transmission Transmission of LAN FAX file stored in HDD Printer Printing out of LAN FAX transmission file stored in HDD or SAF memory Print job (incl. Normal Print
Ricoh Pro 1107 | Design Guide - Page 41
Print Controller Design Guide for Information Security 1-9-3 Capture Settings ScanRouter is used to : panel: Compulsory (Name Fixed) No Yes Compulsory (Name Available) Yes Yes Auto Yes Yes Manual Yes No (Do Not Capture) No No Programmable by non-Administrator users: No No Yes Yes
Ricoh Pro 1107 | Design Guide - Page 42
Print Controller Design Guide for Information Security 1-9-4 Security Considerations Three transfer protocols also perform the following settings as needed to provide additional security. Prohibit access to SP Mode without authorization from the user. Restrict the performing of operations on jobs in
Ricoh Pro 1107 | Design Guide - Page 43
Print Controller Design Guide for Information Security 2. Principal Machine Functions 2-1 Copier (MFP Models Only) 2-1-1 Overview of Copier Operations When a copy job is initiated, the scanning engine scans the original
Ricoh Pro 1107 | Design Guide - Page 44
Print Controller Design Guide for Information Security of these access privileges cannot perform any of these operations, and are also prohibited from selecting documents in the document list screen.
Ricoh Pro 1107 | Design Guide - Page 45
Print Controller Design Guide for Information Security 2-1-5 Protection of Copier/Document Server Features When Machine For Production. For more on this data flow, see 2.5.2 Data Flow. The supported file formats for this operation are: JPEG2000, JPEG, TIFF, PDF (single-page) and PDF Page 45 of 86
Ricoh Pro 1107 | Design Guide - Page 46
Print Controller Design Guide for Information Security (multi-page). The file format must be selected from the MFP operation panel before the Copy job is started. When sending the
Ricoh Pro 1107 | Design Guide - Page 47
soon as the job is completed. Note: The Document Server and all related Printer functions described below are supported by MFP models only. 2-2-2 Data Flow Printing Unencrypted Image Data • As stated above, the printer language-encoded data sent from the host computer is interpreted by the language
Ricoh Pro 1107 | Design Guide - Page 48
Guide for Information Security • From the printer on the method used, since some operations are not supported with some printer languages (see below). • With Normal Print, the data stored in the HDD is stored in volatile RAM memory in Ricoh original format. It is erased at the conclusion of the job,
Ricoh Pro 1107 | Design Guide - Page 49
Print Controller Design Guide for Information Security Server is selected as the print job, , which retrieves the information via a Ricoh-original MIB over an SNMP connection. *1: The "print management data" is managed and maintained by the Printer function itself, and contains information such
Ricoh Pro 1107 | Design Guide - Page 50
Print Controller Design Guide for Information Security • When Spooling is enabled, the incoming encrypted data is stored directly to the spooling area of the HDD. Following this, the first
Ricoh Pro 1107 | Design Guide - Page 51
Print Controller Design Guide for Information Security 2-2-3 Data Security Considerations Printing Unencrypted contain this information is destroyed, preventing the introduction of illegal data. When the Printer's authentication mode is set to Simple Authentication, the MFP/LP does not perform
Ricoh Pro 1107 | Design Guide - Page 52
Design Guide for Information Security possible to protect the password from being stolen by selecting IPP over SSL as the network communication protocol, which will encrypt the communication path. • Although any authenticated user can view the "Spool Printing" list (WebImageMonitor), printer job
Ricoh Pro 1107 | Design Guide - Page 53
Print Controller Design Guide for Information Security • The language processing system is only capable of processing legal data in pre-defined formats. Therefore, even in the case that illegal
Ricoh Pro 1107 | Design Guide - Page 54
Print Controller Design Guide for Information Security 2-3 Scanner (MFP Models Only) 2-3-1 Overview of Scanner Operations • Depending on the settings selected, the Scanner function does one of the following: 1) Saves
Ricoh Pro 1107 | Design Guide - Page 55
Guide for that does not conform to the predetermined protocol of the command interface. The supported protocols are SNMPv1, v2 and v3. When using SNMP v3, it addresses in the MFP, whether obtained from an LDAP server or entered manually. • In order for the MFP Scanner to retrieve the address book
Ricoh Pro 1107 | Design Guide - Page 56
Print Controller Design Guide for Information Security is not able to obtain any data at all (Basic Authentication enabled, ScanRouter V1). The data obtained from the forwarding server is
Ricoh Pro 1107 | Design Guide - Page 57
Print Controller Design Guide for Information Security • It is also possible to assign a password to individual documents when scanning them for storage in the Document Server. After this, the
Ricoh Pro 1107 | Design Guide - Page 58
Print Controller Design Guide for Information Security MFP are actually forwarded to their services that manage items such as user address books. • SMB (Server Message Block): A protocol used to enable file sharing between Windows PCs. Note: The Ricoh MFP(s) to which this document applies support
Ricoh Pro 1107 | Design Guide - Page 59
Print Controller Design Guide for Information Security 2-4 FAX (MFP Models Only) 2-4-1 FAX data received as an Internet FAX is converted into image data and then forwarded on to the printer engine for printing out. • It is possible to store transmission files in the Document Server for sending
Ricoh Pro 1107 | Design Guide - Page 60
Print Controller Design Guide for Information Security 2-4-2 Data Security Considerations • The FCU supports only G3 and G4 FAX protocols. ensures that no illegal data can be introduced via these lines. • Internet FAX supports TIFF files and text-based e-mail only, which is true for both reception
Ricoh Pro 1107 | Design Guide - Page 61
Print Controller Design Guide for Information Security • When User Authentication is enabled, it is possible to set the authenticated user as the "Sender" of the FAX data. Similarly, for
Ricoh Pro 1107 | Design Guide - Page 62
Print Controller Design Guide for Information Security 2-4-5 Protection of FAX Features Settings • When Administrator Authentication or User Authentication is enabled, authentication is required in order to view or change
Ricoh Pro 1107 | Design Guide - Page 63
Print Controller Design Guide for Information Security 2-4-9 Preventing FAX Transmission to Unintended Destination(s) To prevent a FAX from being sent to the wrong destination, it is possible to require the
Ricoh Pro 1107 | Design Guide - Page 64
Print Controller Design Guide for Information Security 2-5 NetFile (GWWS) 2-5-1 Overview of NetFile Operations • Editor For Production. Restoring Files Back to the MFP (MFP models only) • When Copier or Printer files that were originally sent from the MFP to Desk Top Editor For Production in TIFF or
Ricoh Pro 1107 | Design Guide - Page 65
Guide for delete, pause, or resume any individual print job sent from the printer driver. From inside Web SmartDeviceMonitor Professional IS, it is possible to once or the job in progress. 2-5-2 Data Flow • Netfile supports SOAP for the sending and receiving of XML messages. 2-5-3 Supplementary
Ricoh Pro 1107 | Design Guide - Page 66
Print Controller Design Guide for Information Security Authentication using such tickets is possible when performing the following operations from SmartDeviceMonitor for Client: - Forwarding of stored documents via ScanRouter - Operations
Ricoh Pro 1107 | Design Guide - Page 67
Print Controller Design Guide for Information Security 2-5-4 Data Security Considerations Usage of Documents Stored in the MFP (MFP models only) The protections provided for documents stored in the MFP
Ricoh Pro 1107 | Design Guide - Page 68
Print Controller Design Guide for Information Security Viewing and Changing Machine Settings Stored in mentioned above, the operator can delete, pause, or resume a print job from DeskTopBinder. The printer driver uses a track ID to identify each individual print job. When the operator initiates the
Ricoh Pro 1107 | Design Guide - Page 69
Print Controller Design Guide for Information Security 2-6 Web Applications 2-6-1 Web Server Framework The MFP/LP Web Server was developed exclusively by Ricoh, Co. Ltd. Encrypted Communication Support The Web server installed on the MFP/LP supports SSL communication. Since the MFP/LP is accessed
Ricoh Pro 1107 | Design Guide - Page 70
Guide to shut down. WebImageMonitor prevents such trouble by limiting the length of the URL personal data from the view by changing the Service mode settings in the WebImageMonitor GUI. In such that were saved to the MFP HDD using the Copier, Printer, Scanner and FAX functions, as well as those that
Ricoh Pro 1107 | Design Guide - Page 71
Guide for Information Security Data Flow WebDocBox supports HTTP, a protocol used by Web browsers installed on network-connected computers. The session is initiated when the first request for connection is received from the Web browser, after which WebDocBox sends commands to the shared service
Ricoh Pro 1107 | Design Guide - Page 72
Print Controller Design Guide for Information Security Job Log Data An entry is added to the job log stored in the HDD for each individual job performed. The entry
Ricoh Pro 1107 | Design Guide - Page 73
Guide for Information Security 3. Optional Features 3-1 @Remote 3-1-1 Overview of @Remote Operations "@Remote" refers to a remote machine management service to and from the MFP/LP is only possible when the relevant SP mode switch has been turned ON. It is therefore possible to prohibit communication
Ricoh Pro 1107 | Design Guide - Page 74
Design Guide for or printing out the document for the first time from the printer driver, a pre-defined pattern will be embedded in the background copy of an image containing the embedded pattern on an MFP (incl. non-Ricoh products) on which the optional Copy Data Security Unit is not installed,
Ricoh Pro 1107 | Design Guide - Page 75
Print Controller Design Guide for Information Security visible when a copy of the document is job is performed is virtually the same as that of regular print jobs (see 2.2 Printer). The printer language-encoded data sent from the host computer is interpreted by the language processing subsystem,
Ricoh Pro 1107 | Design Guide - Page 76
Print Controller Design Guide for Information Security Special pattern embedded when image is Data Security setting disabled, ・ MFP without Copy Data Security Unit, or ・ Non-Ricoh product Buzzer Contract ‥J‥a‥n‥. ‥1‥'05 ‥‥‥ Previous deterrent feature still used Pattern cannot be detected
Ricoh Pro 1107 | Design Guide - Page 77
Guide for Information Security 4. Device SDK Applications (DSDK) 4-1 Overview of Operations DSDK applications developed by Vendors are able to make use of the scanning, printing and other functions of the MFP/LP by calling the VAS (Virtual Application Service . Ricoh APL Type 1 APL Type 2 APL
Ricoh Pro 1107 | Design Guide - Page 78
Print Controller Design Guide for Information Security 4-1-1 Installation DSDK applications are installed via Type 1 or Type 2 SD cards into partitions and directories in the MFP/LP HDD or SD card itself that are specifically allocated for DSDK applications. The SAS (SDK Application Service) in the
Ricoh Pro 1107 | Design Guide - Page 79
Print Controller Design Guide for Information Security 4-1-2 Overview of SDK Application Functions GWWS FCS ECS MCS OCS NCS DCS UCS CCS NRS LCS MIRS DESS SCS MFP only Shared Service Layers SRM libc IMH NetBSD Engine I/F Scanning Engine MFP only Printing Engine FCU MFP only HDD
Ricoh Pro 1107 | Design Guide - Page 80
Design Guide for Information Only). The Image Library calls the ECS, MCS (IMH) and SCS service layers via the VAS and GW-API, after which Scanner or Copier operations the raw file is read out of HDD memory and then converted from Ricoh-original format to Unix FFS (Fast File System) format. The image
Ricoh Pro 1107 | Design Guide - Page 81
Design Guide for In addition to the principal machine functions of the MFP (e.g. Printer, GWWS), once installed, the SDK application can be selected The DMP enables this functionality by using the GWWS function as a Java Web service client. Java applications on the PC are also able to use the DMP
Ricoh Pro 1107 | Design Guide - Page 82
Print Controller Design Guide for Information Security Set up their own customized authentication system by adding an external server and then using this in place of the servers explained in section 1.5.1 Page 82 of 86
Ricoh Pro 1107 | Design Guide - Page 83
Print Controller Design Guide for Information Security 4-3 Data Security Considerations 4-3-1 Preventing agreements made between both sides. Having agreed to the terms of the contract, the Vendor requests Ricoh to assign and provide a product ID for the proposed application. In addition to being a
Ricoh Pro 1107 | Design Guide - Page 84
Print Controller Design Guide for Information Security inside randomly-generated data. The locations of these hash values inside the key file are not disclosed to the Vendor. Using a special tool, Ricoh generates a unique key file for every SDK application that is approved. Among the entire group of
Ricoh Pro 1107 | Design Guide - Page 85
Print Controller Design Guide for Information Security 4-3-3 Prevention of Access to Address Book proper method for measuring VM is described in the SDK Development Kit provided by Ricoh to the Vendor. Ricoh then performs tests on the proposed application to verify that the actual VM consumption
Ricoh Pro 1107 | Design Guide - Page 86
been tested. These results are then documented (If deemed necessary, Ricoh may perform further testing on the application). As mentioned in section 3.1, if Ricoh determines that the application poses no particular issues or problems, the Vendor is provided with the necessary authentication files. By

Section	Page
04/23/2010	1
For these details, please refer to the Operating Instructions for the specific machine in question.	6
Hardware Configuration	7
MFP	7
LP	9
TPM (Trusted Platform Module): When the MFP/LP main power is turned on, this security module (chip) performs a verification on the validity of the software installed on the hardware platform, which includes checking for any illegal alterations.	10
Shared Service Layers	11
Principal Machine Functions	12
Data Security	14
External I/F	14
Protection of Program Data from Illegal Access via an External Device	14
IC card-based authentication functions: Authentication is mutual and encrypted, which prevents impersonation and ensures that data is properly protected.	16
Firmware Installation/Update	17
Remote Firmware Installation via Web SmartDeviceMonitor Professional IS (performed by the end user)	19
Verification of Firmware/Program Validity	20
Note: Produced by STMicroelectronics, TPM is a product of the ST19WP18 family, which has earned Common Criteria certification (EAL5+).	20
Authentication	21
IC Card Authentication	24
Access Control	25
In addition, it is possible to create an access control list (ACL) for each individual Address Book entry and Document Server document at both the individual user and group levels.	25
If the MLP/LP is initialized in this way, all of the user information, document data, and settings stored in the MLP/LP since installation will be initialized (erased).	26
Data Erase/Overwrite	27
To execute the overwrite, the operator can choose from two options: \	28
The execution of this feature does not clear engine-related information such as the value of the total counter, or engine-related adjustment settings contained in SP mode and UP mode.	28
Through this arrangement, the copy of the HDD storage key is automatically decrypted once the Encryption Key Restore has been completed.	31
Document Server Documents (MFP models only)	33
Access Privileges and Operations for Stored Documents	34
Without HDD: 500 entries	38
Overview of Capture Operations	39
Operations that Generate Captured Images	39
Capture Settings	41
Security Considerations	42
Captured Documents and Log Data	42
Additional Methods for Increased Security	42
(Authentication not required)	42
Copier (MFP Models Only)	43
Overview of Copier Operations	43
Data Security Considerations	43
Protection of Copy Jobs in Progress	43
Protection of Document Server Documents	43
Refer to 1.7.2 Document Server Documents (MFP models only) for details on the Document Lock feature.	44
Restricting the Available Functions for Each Individual User	45
Job/Access Log Data Collection	45
Print Backup	45
(printing out, editing, copying).	46
Overview of Printer Operations	47
Data Flow	47
Data Security Considerations	51
The \	53
Overview of Scanner Operations	54
Data Flow Security Considerations	54
Protection of Data when Performing Scanning and Sending Operations	55
Protection of Document Server Documents	56
Protection of Sending Results and Status Information	57
Protection of the Scanner Features Settings	57
Data Stored in the Job Log	58
Terminology	58
FTP (File Transfer Protocol): A protocol used when transferring files over a TCP/IP network.	58
Overview of FAX operations	59
Data Security Considerations	60
Protection of the Journal and Documents in Document Server Storage	61
Protection of FAX Transmission Operations	61
Protection of FAX Features Settings	62
The \	62
Job Log	62
Protection of Internet FAX Transmissions using S/MIME	62
Preventing FAX Transmission to Unintended Destination(s)	63
This prevents a FAX from being sent to an unintended destination when, for example, the operator accidentally touches an additional Quick Dial key.	63
Overview of NetFile Operations	64
Data Flow	65
Supplementary	65
Network Topology for a System Using Integration Server Authentication (Sample)	66
As long as the track ID is not stolen from the communication path between the PC and MFP/LP (which can be protected against by enabling SSL encryption) or from the PC itself, it is impossible to perform any unauthorized operations on these print jobs	68
Web Server Framework	69
WebDocBox (MFP models only)	70
For more details on job and access logs, please refer to 1.9 Job/Access Logs.	72
@Remote	73
Overview of @Remote Operations	73
Data Security Considerations	73
Security is increased even further by the fact that the symmetric key used is not a static key, but rather one that is generated every time a new session is initiated.	73
Overview of Copy Data Security Operations	74
Data Flow	75
Following this, an entry for the event itself is stored in the access log, along with the username.	75
Overview of Operations	77
1	77
Overview of SDK Application Functions	79
3: DSDK Œ MFP/LP Hardware Configuration	79
Scanning Functions: Sending Data Over the Network with the Copier and Scanner (MFP models only)	80
FAX Functions (MFP models only)	80
Network Functions	81
Printer Functions	81
Machine Administrative Functions (MFP models only)	81
Authentication Functions	81
Data Security Considerations	83
Preventing the Installation of Illegal Applications	83
Authentication of SDK Applications at Installation	83
Prevention of Access to Address Book Data and Machine Management Data	85
Protection Against Attacks on Principal MFP/LP Functions, Prevention of Damage to the System	85
Protection Against Attacks from External Sources	85

Match case Limit results 1 per page

Print Controller Design Guide for Information Security



2010 RICOH Americas Corporation.

Page 1 of 86

Visit our Knowledgebase at:

http://www.ricoh-usa.com/support/knowledgebase.asp

04/23/2010

Print Controller Design Guide for

Information Security:

Product

Code

GESTETNER

LANIER

RICOH

SAVIN

G188

G189

C8140ND

C8150ND

LP540C

LP550C

SP C820DN

SP C821DN

CLP340D

CLP350D

D059

D060

D061

Pro 907EX

Pro 1107EX

Pro 1357EX

Pro 907EX

Pro 1107EX

Pro 1357EX

Pro 907EX

Pro 1107EX

Pro 1357EX

Pro 907EX

Pro 1107EX

Pro 1357EX

M002

M003

M004

Pro 907

Pro 1107

Pro 1357

Pro 907

Pro 1107

Pro 1357

Pro 907

Pro 1107

Pro 1357

Pro 907

Pro 1107

Pro 1357

D062

D063

D065

D066

MP6001

MP6001 SP

MP 7001

MP 7001SP

MP 8001

MP 8001SP

MP 9001

MP 9001SP

LD360

LD360sp

LD370

LD370sp

LD380

LD380sp

LD390

LD390sp

AFICIO MP 6001

MP 6001 SP

MP 7001

MP 7001 SP

MP 8001

MP 8001 SP

MP 9001

MP 9001 SP

9060

9060sp

9070

9070sp

9080

9080sp

9090

9090sp

M001

SP 4210N

LP37N

AFICIO SP4210N

MLP37N