Fuji Xerox C2265 - Hard Disk Data Overwrite (TSF_IOW)

Fuji Xerox C2265/C2263 Security Target
- 110 - Copyright

2016 by Fuji Xerox Co., Ltd
Security Functions
Security Functional
Requirements
TSF_IOW TSF_CIPHER TSF_USER_AUTH TSF_FMT TSF_CE_LIMIT TSF_FAU TSF_NET_PROT TSF_INF_FLOW TSF_S_TEST
FTA_SSL.3 
FTP_ITC.1 
FPT_FDI_EXP.1 
FPT_STM.1 
FPT_TST.1 
The summary of each TOE security function and the corresponding security functional
requirements are described below.
7.1.1. Hard Disk Data Overwrite (TSF_IOW)
According to Hard Disk Data Overwrite setting which is configured by a system administrator
with the system administrator mode, the used document data in the internal HDD are deleted
by either one or three pass overwrite procedure on the document data area when each job of
copy, print, scan, network scan, fax , or internet fax send is completed.
This is because whether to prioritize efficiency or security depends on the usage environment of
the MFD.
When efficiency is prioritized, one pass overwrite procedure is applied. When security is
prioritized, three pass overwrite procedure is applied. Three pass overwrite has lower processing
speed than one pass but can provide more solid overwrite function. Therefore, three pass is an
appropriate number of times to overwrite.
(1) FDP_RIP.1 Subset residual information protection
To control the overwrite function conducted after each job, two options are available: one
pass (zero) overwrite procedure and three pass (random number / random number / zero)
overwrite procedure.
List of the used document data which are to be overwritten and deleted is on the internal
HDD. When the existence of the used document data are found in this list at the time of
booting the TOE, the overwrite function is performed.