Ricoh Mp C3001 Instruction Manual

    Page 80 of 93 
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. 
7  TOE Summary Specification 
This section describes the TOE summary specification for each security function. The security functions are 
described for each corresponding security functional requirement.   
7.1 Audit Function 
The Audit Function is to generate the audit log of TOE use and security-relevant events (hereafter, audit 
events). This function provides the recorded audit log in a legible fashion for users to audit...

    Page 81 of 93 
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. 
Termination of session by auto logout 
Web Function communication 
Folder transmission 
E-mail transmission 
Printing via networks 
LAN Fax via networks 
Storing document data 
Reading document data (print, download, fax transmission, e-mail transmission, and 
folder transmission) 
Deleting document data 
Success and failure of creation, modification, and deletion of S/MIME user information 
Success and failure of creation,...

    Page 82 of 93 
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. 
 Communicating e-mail 
address Communicating e-mail address for 
e-mail transmission - E-mail transmission 
7.2  Identification and Authentication Function 
The Identification and Authentication Function is to verify whether persons who intend to use the TOE are 
authorised users (MFP administrator, supervisor, normal users, and RC Gate) by referring to the 
identification and authentication information obtained from the...

    Page 83 of 93 
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. 
When the sent login user name and login password are identified and authenticated, the user is allowed to use 
the TOE according to the identified user role. 
FIA_USB.1, FIA_ATD.1, and FMT_SMR.1 
If a user is identified and authenticated as a result of checking FIA_UAU.1(a), FIA_UID.1(a), 
FIA_UAU.1(b), and FIA_UID.1(b), the use of the TOE by the user is allowed as the identified user role 
(normal user, MFP administrator, or...

    Page 84 of 93 
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. 
Supervisor MFP administrator 
MFP administrator  Supervisor 
FIA_SOS.1 
Login passwords for users can be registered only if these passwords meet the following conditions: 
(1)  Usable characters and types: 
Upper-case letters: [A-Z] (26 letters) 
Lower-case letters: [a-z] (26 letters) 
Numbers: [0-9] (ten digits) 
Symbols: SP (space) !  # $ % &  ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _ ` { | } ~ (33 symbols) 
(2)  Registrable...

    Page 85 of 93 
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. 
(1)  Access control rule on document data 
The TOE provides users with the interface for stored documents to be printed, downloaded to the client 
computers, sent by fax, sent by e-mail, sent to folders, and deleted. The interface enables users to delete 
all the stored documents. 
Users authorised to operate stored documents are MFP administrator and normal users. The supervisor 
and RC Gate are not allowed to operate stored...

    Page 86 of 93 
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. 
Web browser Document Server 
Function Document Server documents Print 
Delete 
Web browser Document Server 
Function Scanner documents E-mail transmission 
Folder transmission 
Download 
Delete 
(Operations above are 
authorised only if normal 
users are privileged to use 
Scanner Function) 
Web browser Document Server 
Function Fax transmission documents Fax transmission 
Download 
Print 
Delete 
(Operations above are...

    Page 87 of 93 
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. 
FDP_ACC.1(b) and FDP_ACF.1(b) 
The TOE verifies the role for an authorised TOE user who attempts to start operating Copy Function, Printer 
Function, Scanner Function, Document Server Function, and Fax Function. 
If the role is that of normal user, the user can operate only functions that are included in the available 
function list set for each normal user. 
If the role is that of MFP administrator, the user can operate Fax...

    Page 88 of 93 
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. 
applies the method specified by the MFP administrator and overwrites the area on the HDD where the digital 
image data of the document data is stored. Also, when a user job is complete, the TOE applies the method 
specified by the MFP administrator and overwrites the area on the HDD where temporary documents that are 
created while a user job is executed or the fragments of those temporary documents are stored. 
For batch...

    Page 89 of 93 
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. 
FMT_MSA.1(a), FMT_MSA.1(b), FMT_MSA.3(a), FMT_MTD.1, FMT_SMF.1 and FMT_SMR.1 
The TOE allows operations for TSF data according to the rules described in Table 40. 
Table 40 : Management of TSF Data 
TSF Data Operation 
Interface 
Operations Users 
Newly create, 
query, 
modify, 
delete MFP administrator 
Login user names of normal users 
when Basic Authentication is 
applied Operation Panel, 
Web browser 
Query Applicable...