Page 73 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved. 
be reading document data and modifying the document data ACL. 
By the above, FMT_MSA.1 (Management of security attributes), FMT_MTD.1 (Management of TSF data), 
FMT_SMF.1 (Specification of management functions), and FMT_SMR.1 (Security roles) are satisfied. 
7.1.4.5  Management of Machine Control Data 
Management of machine control data allows setting of machine control data by specified users only. 
The TOE allows only specified users to use the functions that set the machine control data from specified 
operation interfaces. Table 32 shows for each item of machine control data, the range of values that can be 
set, the operations available, the authorised setter, and the operation interfaces allowed by the TOE. 
The TOE also allows the user administrator and general users to query the destination information when 
using the Deliver to Folder function. 
Table 32: Administrators authorised to specify machine control data 
Machine control 
data items 
Range of setting 
value 
Operations  Authorised setter 
Operation 
interfaces 
Number of Attempts 
before Lockout 
An integer 1-5 
(times) 
Query, 
modify 
Machine 
administrators 
Web Service 
Function 
Setting for Lockout 
Release Timer 
Active or Inactive 
Query, 
modify 
Machine 
administrators 
Web Service 
Function 
Lockout time  1-9999 (minutes) 
Query, 
modify 
Machine 
administrators 
Web Service 
Function 
Minimum Password 
Length 
An integer 8-32 
(digits) 
Query, 
modify 
User administrators 
Operation 
Panel 
Password Complexity 
Setting 
Level 1 or Level 
2 
Query, 
modify 
User administrators 
Operation 
Panel 
Query, 
modify 
Machine 
administrators 
Date and time of 
system clock 
Date, time (hour, 
minute, second) 
Query 
General users, 
user administrators, 
network 
administrators, 
file administrators, 
supervisor 
Operation 
Panel, 
Web Service 
Function 
Lockout Flag for 
general users 
Inactive 
Query, 
modify 
User administrators 
Web Service 
Function 
Lockout Flag for 
administrators 
Inactive 
Query, 
modify 
Supervisor 
Web Service 
Function 
Lockout Flag for 
supervisor 
Inactive 
Query, 
modify 
Machine 
administrators 
Web Service 
Function 
 
By the above, FIA_AFL.1 (Authentication failure handling), FMT_MTD.1 (Management of TSF data), 
FMT_SMF.1 (Specification of management function), and FMT_SMR.1 (Security roles) are satisfied.