Kyocera TASKalfa 3500i Manuel utilisateur

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i

Data Security Kit (E) Overseas Version Security Target

uly 7, 2011

KYOCERA MITA Corporation

TASKalfa 3500i, TASKalfa 4500i,

TASKalfa 5500i

Data Security Kit (E)

Overseas Version

Security Target

Version 0.80

This document is a translation of the evaluated

and certified security target written in apanese.

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i

Data Security Kit (E) Overseas Version Security Target

- Revision History -

Date Version

Content of revision Approver Drafter

Nov. 01, 2010

0.50 - Newly drafted Sato Sone

Apr. 21, 2011 0.60 - Updated of the information Sato Sone

May 19, 2011 0.70 - Revised specified items Sato Sone

May 27, 2011 0.75 - Revised specified items Sato Sone

ul. 7, 2011 0.80 - Revised specified items Sato Sone

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i

Data Security Kit (E) Overseas Version Security Target

- TABLE OF CONTENTS -

ST INTRODUCTION .............................................. 1

1.1.

EFERENCE

................................................................................................................................ 1

1.2.

TOE

EFERENCE

.............................................................................................................................. 1

1.3.

TOE

VERVIEW

............................................................................................................................... 1

1.3.1

TOE Type

............................................................................................................................... 1

1.3.2

Usage and Major Security Features of TOE

................................................................... 1

1.3.3

Required Non TOE Hardware/Software/Firmware

....................................................... 2

1.4.

TOE

ESCRIPTION

.......................................................................................................................... 3

1.4.1.

People Associated with the TOE

....................................................................................... 3

1.4.2.

Physical Configuration of the TOE

................................................................................... 4

1.4.3.

Logical Configuration of the TOE

..................................................................................... 5

1.4.4.

Guidance

............................................................................................................................... 7

1.4.5.

Assets Protected by the TOE

............................................................................................ 8

CONFORMANCE CLAIMS ....................................... 9

2.1.

ONFORMANCE

LAIMS

............................................................................................................. 9

2.2.

LAIMS

....................................................................................................................................... 9

2.3.

ACKAGE

LAIMS

............................................................................................................................. 9

2.4.

ONFORMANCE

ATIONALE

.............................................................................................................. 9

SECURITY PROBLEM DEFINITION ........................ 10

3.1.

HREATS

........................................................................................................................................ 10

3.2.

RGANIZATIONAL

ECURITY

OLICIES

........................................................................................... 10

3.3.

SSUMPTIONS

................................................................................................................................ 10

SECURITY OB ECTIVES ...................................... 11

4.1.

ECURITY

B ECTIVES FOR THE

TOE..............................................................................................11

4.2.

ECURITY

B ECTIVES FOR THE

PERATIONAL

NVIRONMENT

........................................................11

4.3.

ECURITY

B ECTIVES

ATIONALE

.................................................................................................11

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i

Data Security Kit (E) Overseas Version Security Target

iii

EXTENDED COMPONENTS DEFINITION................. 14

SECURITY REQUIREMENTS ................................. 15

6.1.

TOE

ECURITY

UNCTIONAL

EQUIREMENTS

................................................................................. 15

6.2.

TOE

ECURITY

SSURANCE

EQUIREMENTS

................................................................................. 18

6.3.

ECURITY

EQUIREMENTS

ATIONALE

........................................................................................... 18

6.3.1.

Security Functional Requirements Rationale

............................................................... 18

6.3.2.

Dependent Relations between TOE Security Functional Requirements

................ 19

6.3.3.

Rationale for Security Assurance Requirements

........................................................ 20

TOE SUMMARY SPECIFICATION ........................... 21

7.1.

NCRYPTION

UNCTION

................................................................................................................. 21

7.2.

VERWRITE

ERASE

UNCTION

....................................................................................................... 22

ACRONYMS AND TERMINOLOGY .......................... 23

8.1.

EFINITIONS OF TERMS

................................................................................................................. 23

8.2.

EFINITIONS OF ACRONYMS

........................................................................................................... 24

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i

Data Security Kit (E) Overseas Version Security Target

- List of Figures -

IGURE

1.1

COMMON USAGE IN OFFICES

..................................................................................................... 2

IGURE

1.2

HYSICAL

ONFIGURATION OF THE

TOE...................................................................................... 4

IGURE

1.3

OGICAL

ONFIGURATION OF THE

TOE ....................................................................................... 5

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i

Data Security Kit (E) Overseas Version Security Target

- List of Tables -

ABLE

1.1

TOE

OMPATIBLE

RODUCTS

........................................................................................................ 3

ABLE

1.2

VALUATED

EB BROWSER

............................................................................................................ 7

ABLE

1.3

UIDANCE THAT COMPOSES

TOE................................................................................................... 8

ABLE

4.1

ORRESPONDENCES BETWEEN ORGANIZATIONAL SECURITY POLICIES AND ASSUMPTIONS

AND

SECURITY OB ECTIVES

........................................................................................................................... 12

ABLE

6.1

TOE

ECURITY

SSURANCE

EQUIREMENTS

............................................................................... 18

ABLE

6.2

ORRESPONDENCES BETWEEN SECURITY OB ECTIVES AND

TOE

SECURITY FUNCTIONAL

REQUIREMENTS

...................................................................................................................................... 19

ABLE

6.3

EPENDENT RELATIONS BETWEEN

TOE

SECURITY FUNCTIONAL REQUIREMENTS

........................... 20

ABLE

7.1

TOE

SECURITY FUNCTIONS AND SECURITY FUNCTIONAL REQUIREMENTS

...................................... 21

ABLE

8.1

EFINITIONS OF TERMS USED IN THIS

ST.................................................................................... 23

ABLE

8.2

EFINITIONS OF ACRONYMS USED IN THIS

ST ............................................................................. 24

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i

Data Security Kit (E) Overseas Version Security Target

1. ST INTRODUCTION

1.1. ST Reference

ST Title: TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i Data Security Kit

(E) Overseas Version Security Target

ST Version: Version 0.80

Creation Date: uly 7, 2011

Author: KYOCERA MITA Corporation

1.2. TOE Reference

TOE Name: TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i, TASKalfa 3500iG,

TASKalfa 4500iG, TASKalfa 5500iG, CS 3500i, CS 4500i, CS 5500i,

CD 1435, CD 1445, CD 1455, DC 2435, DC 2445, DC 2455

Data Security Kit (E)

TOE Version: V1.00E

Manufacturer: KYOCERA MITA Corporation

1.3. TOE Overview

1.3.1 TOE Type

This TOE defined by this ST, includes the firmware that controls the Multi Function

Printer (hereinafter referred to as “MFP”) having mainly copy function, scan function

and print function, and ASIC having the security algorithm function. The TOE is

installed to be used for the MFPs manufactured by KYOCERA MITA Corporation,

namely, “TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i, TASKalfa 3500iG, TASKalfa

4500iG, TASKalfa 5500iG, CS 3500i, CS 4500i, CS 5500i, CD 1435, CD 1445, CD

1455, DC 2435, DC 2445, DC 2455”. Major security features of the TOE protect the

image data stored in the internal HDD inside the MFP from being removed through an

unauthorized interface.

1.3.2 Usage and Major Security Features of TOE

The MFP in which this TOE is installed is able to perform coping (duplication), printing

(paper outputting) and network scanning (electronization) of various documents

handled by users. The MFP is located in general office and is not only utilized as a

standalone but also connected to LAN for the use in the network environment. In the

network environment, the MFP is assumed to be used by connecting to client PCs or

server on the internal network protected from unauthorized access on the external

network by firewall. And, the MFP is assumed to be used by connecting to Local Port

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i

Data Security Kit (E) Overseas Version Security Target

(USB Port).

In this user environment, the above-mentioned operational functions can be

performed through operations on the operation panel or from client PCs on the

network or of the local connection.

Figure 1.1 shows a typical user environment.

Figure 1.1 A common usage in offices

The TOE security functions can activate upon agreement and registration of the

license of the optional “Data Security Kit (E)” for the MFP “TASKalfa 3500i, TASKalfa

4500i, TASKalfa 5500i, TASKalfa 3500iG, TASKalfa 4500iG, TASKalfa 5500iG, CS

3500i, CS 4500i, CS 5500i, CD 1435, CD 1445, CD 1455, DC 2435, DC 2445, DC

2455”.

The TOE provides the protected functions against leakage of the user image data

temporarily stored in the internal HDD inside the MFP during and after processing of

each function. When storing the image data into the internal HDD, the image data is

encrypted. When receiving an instruction for deletion of the image data, it disables

re-usage of the data so that even if the HDD is removed and directly accessed

through an interface of the HDD, leakage of the image data can be protected.

1.3.3 Required Non-TOE Hardware/Software/Firmware

To activate the TOE, a certain models of the MFP manufactured by KYOCERA MITA

Corporation are needed. Products in which this TOE can be installed are listed in

Table 1.1.

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i

Data Security Kit (E) Overseas Version Security Target

Table 1.1 TOE Compatible Products

TOE Name/Version Compatible Product

TASKalfa 3500i, TASKalfa 4500i,

TASKalfa 5500i, TASKalfa 3500iG,

TASKalfa 4500iG, TASKalfa 5500iG,

CS 3500i, CS 4500i, CS 5500i,

CD 1435, CD 1445, CD 1455,

DC 2435, DC 2445, DC 2455

Data Security Kit (E)

V1.00E

TASKalfa 3500i, TASKalfa 4500i,

TASKalfa 5500i, TASKalfa 3500iG,

TASKalfa 4500iG, TASKalfa 5500iG,

CS 3500i, CS 4500i, CS 5500i,

CD 1435, CD 1445, CD 1455,

DC 2435, DC 2445, DC 2455

In order to use the normal functions of the MFP, printer driver, TWAIN driver

(identified by Guidance) and Web browser are needed for client PCs and SMTP server,

SMB server and FTP server are needed for server in the common usage in offices as

shown in Figure 1.1.

1.4. TOE Description

1.4.1. People Associated with the TOE

Roles of people related to the use of the MFP in which the TOE is installed, are defined

as follows:

-Machine Administrator:

A person registered as an administrator of the MFP in which the TOE is installed.

The administrator holds privileges regarding the MFP. He/she installs and uses

devices comprising the MFP in which the TOE is installed, as well as the TOE, and

operates and manages them.

-TOE User:

A person who can use the MFP in which the TOE is installed. He/she can utilize

the copy function, print function, network scan function and document

management box function.

-Service Person:

A person certified by KYOCERA MITA Corporation as a service person of the MFP

in which the TOE is installed. When the service person installs the TOE, she/he

activates and setups (enables operation of) the TOE. Also, she/he performs

maintenance of devices comprising the MFP in which the TOE is installed, as well

as the TOE.

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i

Data Security Kit (E) Overseas Version Security Target

1.4.2. Physical Configuration of the TOE

The conceptual figure of physical configuration of the TOE is shown in Figure 1.2.

Figure 1.2 Physical Configuration of the TOE

The MFP in which the TOE is installed consists of an operation panel, a scanner unit,

a printer unit, a main board and HDD hardware.

Controller firmware on the main board to control a copy function, a network scan

function, a print function, a document management box function, an administrator

authentication function, a solution platform, an overwrite-erase function and an

encryption function are included in the TOE.

Additionally, special custom IC (ASIC) which share with the control firmware in

installing the security functions is included in the TOE. The ASIC includes a security

algorithm function module, an image processing module and an interface controller

module. From the above-mentioned, the security algorithm function module

overwrites over the specified area in the HDD regarding the overwrite-erase function,

and encrypts the image data when reading and writing into the HDD regarding the

encryption function.

The firmware term as described in this ST includes the meaning of ASIC as well as

Local Port

Intra-net

MFP

Printer Unit

Product User

TOE

Operation Panel / Scanner Unit

HDD

Main oard

Controller Firmware

Ethernet

Ethernet EEPROM

EEPROM

Volatile

Memory

Volatile

Memory

Encryption Function

Copy

Function

User Interface Function

Overwrite-erase Function

Administrator Authentication

Function

Network Scan

Function Box Function

USB

HyPAS Function

ASIC

Security

Algorithm Function

Image

Processing

Interface

Control

Local Port

Intra-net

MFP

Printer Unit

Product User

TOE

Operation Panel / Scanner Unit

HDD

Main oard

Controller Firmware

Ethernet

Ethernet EEPROM

EEPROM

Volatile

Memory

Volatile

Memory

Encryption Function

Copy

Function

User Interface Function

Overwrite-erase Function

Administrator Authentication

Function

Network Scan

Function Box Function

USB

HyPAS Function

ASIC

Security

Algorithm Function

Image

Processing

Interface

Control

Solution Platform

Product User

TOE

Autres manuels pour TASKalfa 3500i

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Kyocera Imprimante tout-en-un

Kyocera

Kyocera TASKalfa 352ci Manuel utilisateur

Kyocera

Kyocera TASKalfa 2550ci Manuel d'installation et d'exploitation

Kyocera

Kyocera FS FS-C8500DN Guide de référence

Kyocera

Kyocera C5020N - FS Color LED Printer Manuel utilisateur

Kyocera

Kyocera ECOSYS M3040idn Manuel utilisateur

Kyocera

Kyocera FS-1028MFP DP Manuel utilisateur

Kyocera

Kyocera FS-7000 Manuel utilisateur

Kyocera

Kyocera TASKALFA 300I Manuel utilisateur

Kyocera

Kyocera FS-C1020MFP Manuel utilisateur

Kyocera

Kyocera TASKalfa 2551ci Manuel utilisateur

Kyocera

Kyocera FS-6025MFP Manuel utilisateur

Kyocera

Kyocera FS-C2026MFP+ Manuel utilisateur

Kyocera

Kyocera TASKalfa 250ci Manuel utilisateur

Kyocera

Kyocera TASKalfa 1801 Manuel utilisateur

Kyocera

Kyocera ECOSYS FS-C2526MFP Manuel utilisateur

Kyocera

Kyocera KYOCERA FS-C8100DN Manuel utilisateur

Kyocera

Kyocera KM-2540 Manuel utilisateur

Kyocera

Kyocera KM-5050 Manuel utilisateur

Kyocera

Kyocera KM-8030 Manuel utilisateur

Kyocera

Kyocera TASKalfa 8000i Manuel d'installation et d'exploitation

Kyocera

Kyocera KM-C4008 Manuel utilisateur

Kyocera

Kyocera ECOSYS MA2100cwfx Manuel utilisateur

Kyocera

Kyocera ECOSYS P6035cdn Manuel utilisateur

Kyocera

Kyocera TASKalfa 3051ci Manuel utilisateur

Manuels Imprimante tout-en-un populaires d'autres marques

Triumph Adler

Triumph Adler DC 2016 Manuel

Epson

Epson WorkForce WF-2510 Guide de l'utilisateur

Epson

Epson Stylus Scan 2000 Manuel d'installation et d'exploitation

Epson

Epson PictureMate Snap PM 240 Mode d’emploi

Konica Minolta

Konica Minolta bizhub C35 Manuel utilisateur

Brother

Brother MFC-J430w Manuel utilisateur

Konica Minolta

Konica Minolta BIZHUB 558 Manuel utilisateur

Lexmark

Lexmark MX710 Series Manuel

Brother

Brother MFC-9760 Manuel utilisateur

Lexmark

Lexmark XC8155 Manuel utilisateur

Lexmark

Lexmark X642E Manuel utilisateur

Sharp

Sharp MX-2310U Mode d’emploi

Aficio

Aficio 200 Manuel utilisateur

Canon

Canon ImageCLASS 2300 Manuel

Ricoh

Ricoh Pro C900 Manuel utilisateur

Lexmark

Lexmark X925 Manuel utilisateur

Brother

Brother Business Smart MFC-J4510dw Manuel utilisateur

Epson

Epson Stylus CX8400 Series Manuel utilisateur