Page 74 of 80
Copyright (c) 2009,2010 RICOH COMPANY, LTD. All Rights Reserved.
7.1.7 SF.NET_PROT Network Communication Data Protection Function
This protects document data and print data in transit on internal networks from leakage, and also detects
attempts at tampering.
Following are explanations of each functional item in " SF.NET_PROT Network Communication
Data Protection Function" and their corresponding security functional requirements.
7.1.7.1 Use of Web Service Function from Client Computer
Whenever it receives a request from a client computer for use of the Web Service Function, the TOE
communicates with the client computer using the SSL protocol to create a trusted path.
By the above, FTP_TRP.1 (Trusted path) is satisfied.
7.1.7.2 Printing and Faxing from Client Computer
Whenever it receives a request from a client computer for printing or transmitting faxes, the TOE
communicates with the client computer using the SSL protocol to create a trusted path.
By the above, FTP_TRP.1 (Trusted path) is satisfied.
7.1.7.3 Sending by E-mail from TOE
When sending document data by e-mail to a client computer, the TOE attaches the document data to e-mail
and sends the e -mail using S/MIME. The S/MIME destination information is registered as S/MIME user
information within general user information. Users can send e-mail referring to the registered destination
details only.
By the above, FTP_TRP.1 (Trusted path) is satisfied.
7.1.7.4 Delivering to Folders from TOE
When sending (delivering) data to folders on SMB or FTP server, the TOE connects to the server using the
IPSec protocol to create a trusted channel. The destination information for the Deliver to Folders function is
registered in advance and managed by the TOE as machine control data. Users can send files referring to the
registered folder information only.
By the above, FTP_ITC.1 (Inter-TSF trusted channel) is satisfied.
7.1.8 SF.FAX_LINE Protection Function for Intrusion via Telephone Line
When it receives fax data from the telephone line, the TOE passes the data to the Controller Board. If the
received data is not fax data, the TOE discards it.
By the above, FDP_IFC.1 (Subset information flow control) and FDP_IFF.1 (Simple security attributes) are
satisfied.
7.1.9 SF.GENUINE MFP Control Software Verification Function
At every TOE start -up, th e MFP Control Software Verification Function verifies the integrity of the MFP
Control Software that is installed in the FlashROM.
To Next Page
Loading...
