Ricoh Aficio MP C3001 Series User Manual

Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved.
Aficio MP C3001/C3501 series
Security Target
Author : RICOH COMPANY, LTD.
Date : 2011-07-18
Version : 1.00
Portions of Aficio MP C3001/C3501 series Security
Target are reprinted with
written permission from IEEE, 445 Hoes Lane, Piscataway, New Jersey
08855, from IEEE 2600.1, Protection Profile for Hardcopy Devices,
Operational Environment A, Copyright © 2009 IEEE. All rights reserved.
This document is a trans
lation of the evaluated and certified security target
written in Japanese.

Ricoh Aficio MP C3001 Series Specifications

General

Type	Color Laser Multifunction Printer
Functions	Print, Copy, Scan, Fax
Print Technology	Laser
Print Resolution	1200 x 1200 dpi
Copy Resolution	600 x 600 dpi
Fax Transmission Speed	33.6 Kbps
Automatic Document Feeder (ADF)	Yes
ADF Capacity	100 sheets
First Print Time (Black)	7.8 seconds
First Print Time (Color)	10.8 seconds
Memory (Standard)	1 GB
Print Speed	30 pages per minute (ppm)
Copy Speed	30 copies per minute (cpm)
Scan Resolution	600 x 600 dpi
Duplex Printing	Yes
Connectivity	USB, Ethernet
PDL	PCL6, PostScript 3, PDF
Operating System Compatibility	Windows, Mac OS, Linux

Summary

1 ST Introduction

1.1 ST Reference

Describes identification information for the ST, including title, version, date, and author.

1.2 TOE Reference

Identifies the TOE (MFP and FCU) and its components, listing product names and versions.

1.3 TOE Overview

1.3.1 TOE Type

Defines the product as a digital multi-function product (MFP) that inputs, stores, and outputs documents.

1.3.2 TOE Usage

Describes the operational environment and usage of the TOE, including network and telephone line connections.

1.3.3 Major Security Features of TOE

1.4 TOE Description

1.4.1 Physical Boundary of TOE

Describes the physical components of the MFP, including the Controller Board, Operation Panel, Engine, Fax Unit, and HDD.

1.4.2 Guidance Documents

1.4.3 Definition of Users

1.4.3.1 Direct User

Defines normal users, administrators, and RC Gate as direct users of the TOE.

1.4.3.2 Indirect User

1.4.4 Logical Boundary of TOE

1.4.4.1 Basic Functions

Overview of the TOE's basic operational functions like Copy, Printer, Scanner, and Fax.

1.4.4.2 Security Functions

1.4.5 Protected Assets

1.4.5.1 User Data

Defines the types of user data managed by the TOE, including document and function data.

1.4.5.2 TSF Data

1.4.5.3 Functions

1.5 Glossary

1.5.1 Glossary for This ST

Provides definitions for specific terms used throughout the Security Target document.

2 Conformance Claim

2.1 CC Conformance Claim

Details the Common Criteria conformance version and its parts.

2.2 PP Claims

States conformance to a specific Protection Profile (PP) for Hardcopy Devices.

2.3 Package Claims

Lists the SAR package (EAL3+ALC_FLR.2) and selected SFR Packages from the PP.

2.4 Conformance Claim Rationale

2.4.1 Consistency Claim with TOE Type in PP

Explains the consistency of the TOE type (MFP) with the Protection Profile's definition.

2.4.2 Consistency Claim with Security Problems and Security Objectives in PP

Justifies consistency of security objectives and problems with the Protection Profile.

2.4.3 Consistency Claim with Security Requirements in PP

3 Security Problem Definitions

3.1 Threats

Defines assumed threats related to TOE use, including document disclosure and alteration.

3.2 Organisational Security Policies

3.3 Assumptions

4 Security Objectives

4.1 Security Objectives for TOE

Lists the security objectives specifically for the TOE, such as protection of documents and TSF data.

4.2 Security Objectives of Operational Environment

4.2.1 IT Environment

Details security objectives for the IT environment, focusing on audit log protection and access control.

4.2.2 Non-IT Environment

4.3 Security Objectives Rationale

4.3.1 Correspondence Table of Security Objectives

Maps security objectives to threats, assumptions, and organizational policies.

4.3.2 Security Objectives Descriptions

5 Extended Components Definition

5.1 Restricted forwarding of data to external interfaces (FPT_FDI_EXP)

Defines an extended component to restrict direct forwarding of unprocessed data between external interfaces.

6 Security Requirements

6.1 Security Functional Requirements

Lists the functional requirements for the TOE's security, based on CC Part2 and the PP.

6.1.1 Class FAU: Security audit

Specifies requirements for security auditing, including event generation, recording, and protection.

6.1.2 Class FCS: Cryptographic support

6.1.3 Class FDP: User data protection

6.1.4 Class FIA: Identification and authentication

6.1.5 Class FMT: Security management

6.1.6 Class FPT: Protection of the TSF

6.1.7 Class FTA: TOE access

6.1.8 Class FTP: Trusted path/channels

6.2 Security Assurance Requirements

6.3 Security Requirements Rationale

6.3.1 Tracing

Shows the relationship between security objectives and functional requirements in a table.

6.3.2 Justification of Traceability

6.3.3 Dependency Analysis

6.3.4 Security Assurance Requirements Rationale

7 TOE Summary Specification

7.1 Audit Function

Summarizes the TOE's audit logging capabilities, including event recording and review.

7.2 Identification and Authentication Function

7.3 Document Access Control Function

7.4 Use-of-Feature Restriction Function

7.5 Network Protection Function

7.6 Residual Data Overwrite Function

7.7 Stored Data Protection Function

7.8 Security Management Function

7.9 Software Verification Function

7.10 Fax Line Separation Function