CRP-C0266-01
1
1. Executive Summary
This Certification Report describes the content of certification result in relation to IT
Security Evaluation of "Following MFP with FCU (Fax Option Type C5000). MFP: Ricoh
Aficio MP C2800, Ricoh Aficio MP C2800G, Ricoh Aficio MP C3300, Ricoh Aficio MP
C3300G, Savin C2828, Savin C2828G, Savin C3333, Savin C3333G, Lanier LD528C,
Lanier LD528CG, Lanier LD533C, Lanier LD533CG, Lanier MP C2800, Lanier MP C3300,
Gestetner MP C2800, Gestetner MP C3300, nashuatec MP C2800, nashuatec MP C3300,
Rex-Rotary MP C2800, Rex-Rotary MP C3300, infotec MP C2800, infotec MP C3300 FCU:
Fax Option Type C5000 MFP Software/Hardware Version: Software System/Copy 1.22,
Network Support 8.27, Scanner 01.23, Printer 1.22, Fax 04.00.00, Web Support 1.10, Web
Uapl 1.08, Network Doc Box 1.03, Hardware Ic Key 1100, Ic Ctlr 03, FCU Version:
GWFCU3-13(WW) 04.04.00" (hereinafter referred to as "the TOE") developed by RICOH
COMPANY, Ltd., and evaluation of the TOE was finished on 2010-7-29 by Information
Technology Security Center Evaluation Department (hereinafter referred to as "Evaluation
Facility"). It reports to the sponsor, RICOH COMPANY, Ltd. and provides information to
the users and system operators who are interested in this TOE.
The reader of the Certification Report is advised to read the Security Target (hereinafter
referred to as "the ST") that is the appendix of this report together. Especially, details of
security functional requirements, the assurance requirements for TOE and rationale for
sufficiency of those requirements of the TOE are described in ST.
This certification report assumes "the person who managed this TOE" to be a reader. Note
that the Certification Report presents the certification result based on assurance
requirements to which the TOE conforms, and does not guarantee individual IT product
itself.
1.1 Product Overview
Overview of the TOE functions and operational conditions are as follows. Refer to and after
Chapter 2 for details.
1.1.1 Assurance Package
Assurance package of the TOE requires EAL3.
1.1.2 TOE and Security Functionality
The subject device of this certification is a digital MFP (hereafter "MFP") made by RICOH
COMPANY, LTD., and which provides the functions of copier, scanner, printer, and fax
(option). However, the target of this certification is a device equipped with the optional Fax
Function. This product is used for inputting, storing and outputting document data in the
environments which handle office documents in general offices.
This TOE contains the functions to encrypt the document data when storing into the TOE,
and the communicating document data when sending out of the TOE, in order to protect the
document data from accidental disclosure. Also, in order to allow only the specified users to
operate the document data stored in the TOE, the device prevents performing the function to
handle the document data and reading and writing the document data. It provides storing,
printing, and sending the document data from the trusted TOE.
For managing these Security Functions, this TOE enforces the identification and
authentication to prevent TOE users (general user, administrator, and supervisor) from the
unauthorised operation of the Security Management Functions and it protects the Security
(231 paginas)
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales