Ricoh Aficio MP 4002 - User Manual

Copyright (c) 2012 RICOH COMPANY, LTD. All rights reserved.
Aficio MP 4002/5002 series
Security Target
Author : RICOH COMPANY, LTD.
Date : 2012-04-11
Version : 1.00
Portions of Aficio MP 4002/5002 series Security Target are reprinted with
written permission from IEEE, 445 Hoes Lane, Piscataway, New Jerse
y
08855, from IEEE 2600.1, Protection Profile for Hardcopy Devices,
Operational Environment A, Copyright © 2009 IEEE. All rights reserved.
This document is a translation of the evaluated and certified security target
written in Japanese.

Ricoh Aficio MP 4002 Specifications

General

Print Resolution	600 x 600 dpi
Copy Resolution	600 x 600 dpi
Duplex	Yes
Monthly Duty Cycle	150, 000 pages
Functions	Print, Copy, Scan, Fax
Maximum Paper Size	11" x 17"
Type	Monochrome Laser Multifunction Printer
Print Speed	40 ppm
Scan Resolution	600 dpi
Paper Capacity	Maximum: 4, 400 sheets
Connectivity	USB 2.0, Ethernet 10/100Base-TX
First Print Time	4.1 seconds
Zoom Range	25% - 400%
Fax Transmission Speed	Less than 3 seconds per page

Summary

ST Introduction

1.1 ST Reference

Identifies the Security Target with title, version, date, and author.

1.2 TOE Reference

Identifies the TOE by MFP names and component software versions.

1.3 TOE Overview

Defines the TOE Type, Usage, and Major Security Features.

1.4 TOE Description

Details the TOE's physical boundary, guidance, users, and logical boundary.

1.5 Glossary

Provides definitions for specific terms used throughout the Security Target.

Conformance Claim

2.1 CC Conformance Claim

States conformance to Common Criteria versions and components.

2.2 PP Claims

Identifies the Protection Profile (PP) to which the TOE is conformant.

2.3 Package Claims

Lists the SAR Packages and selected SFR Packages from the PP.

2.4 Conformance Claim Rationale

Explains the consistency of the TOE with the PP's type, problems, and requirements.

Security Problem Definitions

3.1 Threats

Defines assumed threats related to the TOE's use and environment.

3.2 Organisational Security Policies

Lists the organizational security policies that are applied to the TOE.

3.3 Assumptions

Outlines the assumptions related to the TOE usage environment.

Security Objectives

4.1 Security Objectives for TOE

Specifies the security objectives that the TOE must achieve.

4.2 Security Objectives of Operational Environment

Defines the security objectives for the TOE's operational environment.

4.3 Security Objectives Rationale

Provides rationale for security objectives satisfying threats, assumptions, and policies.

Extended Components Definition

5.1 Restricted forwarding of data to external interfaces (FPT_FDI_EXP)

Defines requirements to restrict direct data forwarding between external interfaces.

Security Requirements

6.1 Security Functional Requirements

Lists the TOE's security functional requirements based on CC Part2 and PP.

6.2 Security Assurance Requirements

Lists the assurance components for the TOE's evaluation level (EAL3+ALC_FLR.2).

6.3 Security Requirements Rationale

Describes the rationale for the security requirements and their traceability.

TOE Summary Specification

7.1 Audit Function

Describes how the TOE generates, stores, and manages audit logs.

7.2 Identification and Authentication Function

Details user identification and authentication methods for TOE access.

7.3 Document Access Control Function

Authorizes TOE users to operate document data and user jobs based on roles.

7.4 Use-of-Feature Restriction Function

Authorizes users to use specific TOE functions based on roles and privileges.

7.5 Network Protection Function

Provides network monitoring to prevent information leakage and detect tampering.

7.6 Residual Data Overwrite Function

Overwrites HDD data to prevent reuse of residual data.

7.7 Stored Data Protection Function

Encrypts data on HDD to prevent data leakage and ensure integrity.

7.8 Security Management Function

Controls TSF data, manages user roles, and sets default security attributes.

7.9 Software Verification Function

Verifies the integrity of executable codes of MFP and FCU control software.

7.10 Fax Line Separation Function

Prevents unauthorised intrusion via telephone lines and restricts fax data forwarding.