Ricoh Mp C3001 Instruction Manual

							    Page 90 of 93 
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. 
Function types No operation 
interfaces available No operations 
allowed - 
User roles No operation 
interfaces available No operations 
allowed - 
Newly create, 
modify MFP administrator Login passwords of normal users 
when Basic Authentication is 
applied Operation Panel, 
Web browser 
Modify Applicable normal 
user 
Login password of supervisor Operation Panel, 
Web browser Modify Supervisor 
Modify Supervisor 
Newly create  MFP administrator Login password of MFP 
administrator Operation Panel, 
Web browser 
Modify Applicable MFP 
administrator 
Number of Attempts before 
Lockout when Basic Authentication 
is applied Operation Panel, 
Web browser Query MFP administrator 
Settings for Lockout Release Timer 
when Basic Authentication is 
applied Web browser  Query  MFP administrator 
Lockout time for Basic 
Authentication Web browser  Query  MFP administrator 
Query, 
modify MFP administrator 
Date settings (year/month/day) Operation Panel, 
Web browser 
Query Supervisor, 
normal user 
Query, 
modify MFP administrator 
Time Operation Panel, 
Web browser 
Query Supervisor, 
normal user 
Minimum character number of 
password for Basic Authentication Operation panel  Query  MFP administrator 
Password complexity setting for 
Basic Authentication Operation panel  Query  MFP administrator 
Audit log  Web browser Query, 
delete MFP administrator 
HDD cryptographic key  Operation panel  Newly create  MFP administrator 
S/MIME user information Operation Panel, 
Web browser Newly create, 
modify, 
query, 
delete MFP administrator  
						

							    Page 91 of 93 
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. 
  Query, 
(Query 
operation for a 
user certificate 
is unavailable 
for External 
Authentication) Normal user 
Newly create, 
modify, 
query, 
delete MFP administrator 
Destination folder Operation Panel, 
Web browser 
Query Normal user 
Users for stored and received 
documents Operation Panel, 
Web browser Query, 
modify MFP administrator 
User authentication procedures Operation Panel, 
Web browser Query MFP administrator 
-: No user roles whose operations are allowed by the TOE 
(*1): The login user name of a normal user that is registered on an external authentication server is not 
changed even though the MFP administrator newly creates, modifies, and deletes the login user name of the 
normal user. 
(*2): If the MFP administrator modifies stored and received document users, and if the stored document type 
of the document user list of document data is received fax document, the list will be modified to the values of 
the stored and received document users. 
FMT_MSA.3(a) and FMT_MSA.3(b) 
The TOE sets default values for objects and subjects according to the rules described in Table 41 when those 
objects and subjects are generated.  
						

							    Page 92 of 93 
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. 
Table 41 : List of Static Initialisation for Security Attributes of Document Access Control SFP 
Objects/Subjects Security attributes Default values 
Document data  Document data attribute  +PRT: Documents printed from the client 
computer with direct print, locked print, hold 
print, and sample print. 
+SCN: Documents sent by e-mail or to folders 
from the MFP. 
+CPY: Documents copied using the MFP. 
+FAXOUT: Documents sent by fax from the 
MFP or client computer. 
+FAXIN: Documents received from a 
telephone line. 
+DSR: Documents stored in the TOE by using 
Copy Function, Scanner Function, Document 
Server Function and Fax Data Storage 
Function. Documents printed using Document 
Server printing or stored print from the client 
computer. 
Document data (stored 
document types are 
Document Server 
document, scanner 
document and fax 
document) Document user list  Default values of a document user list assigned 
to each user. 
Document data 
(stored document type is 
printer document) Document user list  Login user name of a normal user who stored 
the document data. 
Document data 
(stored document type is 
fax received document) Document user list  Login user name of a normal user included in 
the stored and received document user list. 
User jobs  Login user name of 
normal user Login user name of a normal user who newly 
creates a user job. 
Normal user  Available function lists  Values to indicate whether or not Copy 
Function, Printer Function, Scanner Function, 
Document Server Function, or Fax Function is 
available. 
For Basic Authentication, these values are 
specified by the MFP administrator. For 
External Authentication, the values indicate 
that none of the functions is available.  
						

							    Page 93 of 93 
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved. 
Each MFP application 
(Copy Function, Printer 
Function, Scanner 
Function, Document 
Server Function and Fax 
Function) Function type  The values specified for each function type is 
as follows: 
For Copy Function, values to identify Copy 
Function. 
For Document Server Function, values to 
identify Document Server Function. 
For Printer Function, values to identify Printer 
Function. 
For Scanner Function, values to identify 
Scanner Function. 
For Fax Function, values to identify Fax 
Function. 
7.9  Software Verification Function 
The Software Verification Function is to verify the integrity of the executable codes of the MFP Control 
Software and FCU Control Software and confirm that these codes can be trusted. 
FPT_TST.1 
The TOE verifies software at the TOE start-up. 
The TOE verifies the integrity of the MFP Control Software first by using the hash and then by checking the 
certificate. If the hash does not match its original value or the certificate verification fails, the TOE displays 
the error message and becomes unavailable. If the hash matches its original value and the certificate is 
verified, the TOE becomes available. The TOE also verifies the integrity of the audit log data files. 
The TOE outputs the information used for integrity verification so that the integrity of the FCU Control 
Software can be verified. To check the integrity of the FCU Control Software, the information the TOE 
outputs will be compared with the information described in the guidance documents, so that the integrity of 
the FCU Control Software can be verified. 
7.10  Fax Line Separation Function 
The Fax Line Separation Function is to receive only faxes as input information from telephone lines so that 
unauthorised intrusion from telephone lines can be prevented. This function also can be used to prohibit 
transmissions of received faxes so that unauthorised intrusion from telephone lines to the LAN can be 
prevented. 
FPT_FDI_EXP.1 
The TOE receives fax data only as input information from telephone lines. If any communication that does 
not comply with the fax protocol is performed, the line is disconnected. Since the TOE is set to prohibit 
forwarding of received fax data during installation, received fax data will not be forwarded.