Ricoh Mp 3351 User Guide

  Page 71 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.  If the logged-in user is a general user, the TOE allows that user to perform operations only on document data 
ACLs for which the user has full control authorisation. These operations are changing the document file 
owners operation permissions for the document data, and newly registering and deleting document file users 
and changing their operation permissions. However, even if full control authorisation is not set for...

  Page 72 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.  7.1.4.3 Management of Supervisor Information 
Management of supervisor information allows only supervisors to query and change supervisor IDs, and to 
change supervisor authentication information from the Operation Panel or Web Service Function. If the 
logged-in user from the Operation Panel or a client computer is a supervisor, the TOE allows that user to 
query and change supervisor IDs and to change supervisor...

  Page 73 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.  By the above, FMT_MSA.1 (Management of security attributes), FMT_MTD.1 (Management of TSF data), 
FMT_SMF.1 (Specification of management functions), and FMT_SMR.1 (Security roles) are satisfied. 
7.1.4.5 Management of Machine Control Data 
Management of machine control data allows setting of machine control data by specified users only. 
The TOE allows only specified users to use the functions that set the machine control data...

  Page 74 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.  7.1.5 SF.CE_OPE_LOCK Service Mode Lock Function 
The Service Mode Lock Function restricts use of the Maintenance Functions to CEs only, based on the 
Service Mode Lock Function setting specified by the machine administrator. 
The TOE allows the machine administrator to set the Service Mode Lock Function from the Operation Panel, 
and allows all authorised users to view the value of the setting. If the Service Mode Lock Function...

  Page 75 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.  By the above, FCS_CKM.1 (Cryptographic key generation), FCS_COP.1 (Cryptographic operation), 
FMT_MTD.1 (Management of TSF data), and FPT_TST.1 (TSF testing) are satisfied. 
7.1.7 SF.NET_PROT Network Communication Data Protection Function 
This protects document data and print data in transit on internal networks from leakage, and also detects 
attempts at tampering. 
Following are explanations of each functional item in...

  Page 76 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.  7.1.9 SF.GENUINE  MFP Control Software Verification Function 
At every TOE start-up, the MFP Control Software Verification Function verifies the integrity of the MFP 
Control Software that is installed in the FlashROM. 
The TOE verifies the integrity of the executable code of the MFP Control Software each time the TOE starts 
up. The TOE becomes available for users only if the integrity of the control software can be verified....

  Page 77 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.  8 Appendix 
8.1 Definitions of Terminology 
For ease of reader understanding, Table 34 provides definitions of the terms used in this ST. 
Table 34: Specific terms used in this ST Terms Definitions D-BOX A storage area for document data on the HDD. FTP server A server for sending files to a client computer and receiving files from a client 
computer using File Transfer Protocol. HDD An abbreviation of Hard Disk Drive. Refers to...

  Page 78 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved. Terms Definitions SMTP server A server for sending e-mail using Simple Mail Transfer Protocol. Address Book A database containing general user information for each general user. Back Up/Restore 
Address Book A function for backing up the Address Book to SD cards and restoring the 
TOE Address Book from backups made on SD cards.. Internet Fax A function that reads a fax original then converts the scanned image to an 
e-mail...

  Page 79 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved. Terms Definitions Number of Attempts 
before Lockout The number of consecutive failed authentication attempts that can be made 
using the same user ID before the user is locked out. Lockout A function that prohibits access to the TOE to the specific user IDs. Lockout Flag An item of data that is assigned to each authorised user. The Lockout Flag for 
a locked-out user is set to Active, and the Lockout Flag for a...

  Page 80 of 81 
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved. Terms Definitions Administrator role Management Functions given to administrators. There are four types of 
administrator role: user administration, machine administration, network 
administration, and file administration. Each administrator role is assigned to a 
registered administrator. Machine administration An administrator role that assigns responsibility for machine management and 
performing audits. The machine...