CRP-C0142-01
Certification Report
Buheita Fujiwara, Chairman
Information-technology Promotion Agency, Japan
Target of Evaluation
Application date/ID 2007-06-21 (ITC-7172)
Certification No. C0142
Sponsor Fuji Xerox Co., Ltd.
Name of TOE Fuji Xerox ApeosPort-II C7500/C6500/C5400,
DocuCentre-II C7500/C6500/C5400 Series Controller
Software for Asia Pacific
Version of TOE Controller ROM V2.100.0
PP Conformance None
Conformed Claim EAL2
Developer Fuji Xerox Co., Ltd.
Evaluation Facility Information Technology Security Center
This is to report that the evaluation result for the above TOE is certified as
follows.
2008-01-25
Hideji Suzuki, Technical Manager
Information Security Certification Office
IT Security Center
Evaluation Criteria, etc.: This TOE is evaluated in accordance with the following
criteria prescribed in the “IT Security Evaluation and
Certification Scheme”.
- Common Criteria for Information Technology Security Evaluation Version 2.3
(ISO/IEC 15408:2005)
- Common Methodology for Information Technology Security Evaluation
Version 2.3 (ISO/IEC 18045:2005)
Evaluation Result: Pass
“Fuji Xerox ApeosPort-II C7500/C6500/C5400, DocuCentre-II
C7500/C6500/C5400 Series Controller Software for Asia Pacific Controller ROM
V2.100.0” has been evaluated in accordance with the provision of the “IT
Security Certification Procedure” by Information-technology Promotion Agency,
Japan, and has met the specified assurance requirements.
CRP-C0142-01
Notice:
This document is the English translation version of the Certification Report
published by the Certification Body of Japan Information Technology Security
Evaluation and Certification Scheme.
CRP-C0142-01
Table of Contents
1. Executive Summary ............................................................................... 1
1.1 Introduction ..................................................................................... 1
1.2 Evaluated Product ............................................................................ 1
1.2.1 Name of Product ......................................................................... 1
1.2.2 Product Overview ........................................................................ 1
1.2.3 Scope of TOE and Overview of Operation....................................... 2
1.2.4 TOE Functionality ....................................................................... 4
1.3 Conduct of Evaluation....................................................................... 4
1.4 Certificate of Evaluation .................................................................... 5
1.5 Overview of Report ............................................................................ 5
1.5.1 PP Conformance.......................................................................... 5
1.5.2 EAL ........................................................................................... 5
1.5.3 SOF ........................................................................................... 5
1.5.4 Security Functions ...................................................................... 5
1.5.5 Threat ........................................................................................ 6
1.5.6 Organisational Security Policy ..................................................... 6
1.5.7 Configuration Requirements ........................................................ 6
1.5.8 Assumptions for Operational Environment .................................... 6
1.5.9 Documents Attached to Product ................................................... 7
2. Conduct and Results of Evaluation by Evaluation Facility......................... 8
2.1 Evaluation Methods .......................................................................... 8
2.2 Overview of Evaluation Conducted ..................................................... 8
2.3 Product Testing ................................................................................ 8
2.3.1 Developer Testing........................................................................ 8
2.3.2 Evaluator Testing...................................................................... 10
2.4 Evaluation Result ........................................................................... 11
3. Conduct of Certification ....................................................................... 12
4. Conclusion.......................................................................................... 13
4.1 Certification Result ......................................................................... 13
4.2 Recommendations ........................................................................... 13
5. Glossary ............................................................................................. 14
6. Bibliography ....................................................................................... 17
CRP-C0142-01
1
1. Executive Summary
1.1 Introduction
This Certification Report describes the content of certification result in relation to IT
Security Evaluation of “Fuji Xerox ApeosPort-II C7500/C6500/C5400, DocuCentre-II
C7500/C6500/C5400 Series Controller Software for Asia Pacific Controller ROM
V2.100.0” (hereinafter referred to as “the TOE”) conducted by Information Technology
Security Center (hereinafter referred to as “Evaluation Facility”), and it reports to the
sponsor, Fuji Xerox Co., Ltd.
The reader of the Certification Report is advised to read the corresponding ST and
manuals (please refer to “1.5.9 Documents Attached to Product” for further details)
attached to the TOE together with this report. The assumed environment,
corresponding security objectives, security functional and assurance requirements
needed for its implementation and their summary specifications are specifically
described in ST. The operational conditions and functional specifications are also
described in the document attached to the TOE.
Note that the Certification Report presents the certification result based on assurance
requirements conformed to the TOE, and does not certify individual IT product itself.
Note: In this Certification Report, IT Security Evaluation Criteria and IT
Security Evaluation Method prescribed by IT Security Evaluation and
Certification Scheme are named CC and CEM, respectively.
1.2 Evaluated Product
1.2.1 Name of Product
The target product by this Certificate is as follows:
Name of Product: ApeosPort-II/DocuCentre-II C7500/C6500/C5400 Series
(Including its option, Data Security Kit)
ROM Version: Controller ROM Ver. 2.100.0
Developer: Fuji Xerox Co., Ltd.
1.2.2 Product Overview
This Product is ApeosPort-II/DocuCentre-II C7500/C6500/C5400 series, Multi
Function Peripheral (hereinafter referred to as “MFP”), which has copy, print, and
scan functions. A data security kit is an option of the MFP.
The MFP is assumed to be used, at general office, from the control panel, clients (for
general user and system administrator) and servers which are linked to the MFP via
internal network, and general user client which is directly linked to the MFP.
The TOE of this certification is the controller software of the above product. The TOE
provides the following functions:
- Hard Disk Data Overwrite
- Hard Disk Data Encryption
- System Administrator’s Security Management
- Customer Engineer Operation Restriction
CRP-C0142-01
2
1.2.3 Scope of TOE and Overview of Operation
Figure 1-1 shows TOE physical scope and configuration of each unit.
: TOE
Control Panel buttons, lamps, touch screen panel
System Administrator
Client,
General User Client,
Mail Server,
FTP Server,
SMB Server
General User Client
(USB)
Internal HDD
NVRAM
SEEPROM
DRAM
Ethernet
USB
(device)
IEEE
1284
Controller ROM
Copy-/
Scan-
Control
Hard Disk
Data
Overwrite
Hard Disk
Data
Encryption
Print
Control
(decompose)
CWIS
Customer
Engineer
Operation
Restriction
System
Administrator’s
Security
Management
CPU
Controller Board
IIT
IIT Board
IIT
ROM
IOT
IOT Board
IOT
ROM
ADF
ADF Board
ADF
ROM
General User Client
(IEEE1284)
System
Administrator,
General User
Figure 1-1: TOE Physical Scope and Configuration
Figure 1-2 shows the MFP operational environment to use TOE functions.
CRP-C0142-01
3
TOE
CE
General User System
Administrator
General User
General User Client
-Print Driver
Mail Server
FTP Server
SMB Server
External
Network
Firewall
Internal
Network
System
Administrator
System Administrator
Client
-Web Browser
General User Client
-Print Driver
-Network Scan Utility
-Web Browser
General User
USB
IEEE1284
Figure 1-2: Operational Environment
The following are the overview of MFP operation and operational environment to use
TOE functions.
(1) Control panel:
A general user can use such functions as copy, scan, and print.
A system administrator can configure, refer to, and change TOE configuration
data.
(2) General user client:
When a client is linked to the MFP via the internal network and the print driver /
Network Scan Utility are installed to a client, the general user can request the
MFP to print/retrieve the document data.
The user can also request the MFP to retrieve the scanned document data via Web
browser. Additionally, the user can change the configurations which user
registered to the MFP: Mailbox name, password, access control, and automatic
deletion of document.
Note: In this certification, the function to protect Mailbox with password and
access control is not treated as a security function. Therefore, protection of
the contents within Mailbox is not assured.
When the client is linked to the MFP directly via USB or IEEE1284 and print
driver is installed to the client, the user can request the MFP to print the
CRP-C0142-01
4
document data.
(3) System administrator client:
A system administrator can refer to and change TOE configuration data via Web
browser.
(4) Mail server:
The MFP can send the document data to Mail server via mail protocol. (The
document data was created by a general user using scan function of MFP.)
(5) FTP server:
The MFP can send the document data to FTP server via FTP. (The document data
was created by a general user using scan function of MFP.)
(6) SMB server:
The MFP can send the document data to SMB server via SMB (a network file
sharing protocol for Windows). (The document data was created by a general user
using scan function of MFP.)
1.2.4 TOE Functionality
The TOE provides the basic functions of control panel, copy, print, scan, and CWIS to
general user.
Regarding the above basic functions, the TOE also provides the following functions to
ensure the security of assets to be protected:
- Hard Disk Data Overwrite
- Hard Disk Data Encryption
- System Administrator’s Security Management
- Customer Engineer Operation Restriction
1.3 Conduct of Evaluation
Based on the IT Security Evaluation/Certification Program operated by the
Certification Body, TOE functionality and its assurance requirements are being
evaluated by evaluation facility in accordance with those publicized documents such as
“IT Security Evaluation and Certification Scheme”[2], “IT Security Certification
Procedure”[3] and “Evaluation Facility Approval Procedure”[4].
Scope of the evaluation is as follow.
- Security design of the TOE shall be adequate;
- Security functions of the TOE shall be satisfied with security functional
requirements described in the security design;
- This TOE shall be developed in accordance with the basic security design;
- Above mentioned three items shall be evaluated in accordance with the CC Part 3
and CEM.
More specific, the evaluation facility examined “Fuji Xerox ApeosPort-II
C7500/C6500/C5400, DocuCentre-II C7500/C6500/C5400 Series Controller Software
for Asia Pacific Security Target” as the basis design of security functions for the TOE
(hereinafter referred to as “the ST”)[1], the evaluation deliverables in relation to
development of the TOE and the development, manufacturing and shipping sites of the
TOE. The evaluation facility evaluated if the TOE is satisfied both Annex B of CC Part
1 (either of [5], [8] or [11]) and Functional Requirements of CC Part 2 (either of [6], [9]
or [12]) and also evaluated if the development, manufacturing and shipping
environments for the TOE is also satisfied with Assurance Requirements of CC Part 3
(either of [7], [10] or [13]) as its rationale. Such evaluation procedure and its result are
presented in “Fuji Xerox ApeosPort-II C7500/C6500/C5400, DocuCentre-II
C7500/C6500/C5400 Series Controller Software for Asia Pacific Evaluation Technical
CRP-C0142-01
5
Report” (hereinafter referred to as “the Evaluation Technical Report”) [17]. Further,
evaluation methodology should comply with the CEM (either of [14], [15] or [16]).
1.4 Certification
The Certification Body verifies the Evaluation Technical Report and Observation
Report prepared by the evaluation facility and evaluation evidence materials, and
confirmed that the TOE evaluation is conducted in accordance with the prescribed
procedure. Certification review is also prepared for those concerns found in the
certification process. Evaluation is completed with the Evaluation Technical Report
dated 2008-01 submitted by the evaluation facility and those problems pointed out by
the Certification Body are fully resolved and confirmed that the TOE evaluation is
appropriately conducted in accordance with CC and CEM. The Certification Body
prepared this Certification Report based on the Evaluation Technical Report submitted
by the evaluation facility and concluded fully certification activities.
1.5 Overview of Report
1.5.1 PP Conformance
There is no PP to be conformed.
1.5.2 EAL
Evaluation Assurance Level of TOE defined by this ST is EAL2 conformance.
1.5.3 SOF
This ST claims “SOF-basic” as the minimum strength of TOE functions.
This TOE assumes the attackers have “low-level” attack-ability. Thus, it is adequate to
claim the SOF-Basic as the minimum strength of TOE functions.
1.5.4 Security Functions
Security functions of the TOE are as follow.
- Hard Disk Data Overwrite
This TOE prevents unauthorized disclosure of used document data. The document
data created during each job processing is temporarily stored in the internal HDD.
After each job is completed, the used data is overwritten with new data.
- Hard Disk Data Encryption
This TOE prevents unauthorized disclosure of the document data which was created
during each job processing. The document data is encrypted before stored into the
internal HDD.
- System Administrator’s Security Management
This TOE restricts access to the system administrator mode to system administrator
for according a privilege to a specific user. Thus, only the authenticated system
administrator can configure and change the configurations of TOE security functions
from the control panel or Web browser.
CRP-C0142-01
6
- Customer Engineer Operation Restriction
This TOE enables a system administrator to inhibit CE from configuring the TOE
security functions. Thus, an attacker who is impersonating CE cannot configure or
change the configurations.
1.5.5 Threat
This TOE assumes such threats presented in Table 1-1 and provides functions for
countermeasure to them.
Table 1-1 Assumed Threats
Threat (Identifier) Description
Unauthorized retrieval of document data stored in the internal HDD
T.RECOVER
An attacker may remove the internal HDD and connect it to
commercial tools so that he/she can read out and leak the used
document data inside.
Unauthorized access to TOE configuration data
T.CONFDATA
An attacker may access, read, or alter, from control panel or
Web browser, the TOE configuration data which only a system
administrator is allowed to access.
1.5.6 Organisational Security Policy
There is no organisational security policy the TOE must comply with.
1.5.7 Configuration Requirements
This TOE is operated in “ApeosPort-II/DocuCentre-II C7500/C6500/C5400” series with
its option of data security kit installed. The “ApeosPort-II/DocuCentre-II
C7500/C6500/C5400” series is the MFP manufactured by Fuji Xerox Co.,Ltd.
Besides, one of the OSs (Windows 2000, Windows XP, or Windows VISTA) should be
also installed for TOE use from the remote clients of general user and system
administrator.
1.5.8 Assumptions for Operational Environment
Assumptions required in environment using this TOE presents in the Table 1-3.
The effective performance of the TOE security functions are not assured unless these
preconditions are satisfied.
Table 1-3 Assumptions in Use of the TOE
Assumption
(Identifier)
Description
Personnel Confidence
A.ADMIN
A system administrator shall have the necessary knowledge
of TOE security functions to perform the given role of
managing the TOE and shall not operate it viciously.
Protection Mode
A.SECMODE
A system administrator shall configure the TOE as follows:
• Use of password entered from MFP control panel in user
CRP-C0142-01
7
Assumption
(Identifier)
Description
authentication: enabled
• Length of system administrator password: 7 characters
or more
• Access denial due to authentication failure of system
administrator ID: enabled
• Allowable number of system administrator’s
authentication failures before access denial: 5
• Customer Engineer Operation Restriction: enabled
• Hard Disk Data Overwrite: enabled
• Hard Disk Data Encryption: enabled
• Size of cryptographic seed key for Hard Disk Data
Encryption: 12 characters
Network Connection Assumption
A.NET
• Interception on the internal network of the MFP with the
TOE installed shall be disabled.
• When the internal network of the MFP with the TOE
installed is linked to the external network, access to the
MFP from the external network shall be disabled.
1.5.9 Documents Attached to Product
Documents attached to the TOE are listed below.
• Fuji Xerox ApeosPort-II C7500/C6500/C5400, DocuCentre-II C7500/C6500/C5400
Administrator Guide : DE3694E2-1
• Fuji Xerox ApeosPort-II C7500/C6500/C5400, DocuCentre-II C7500/C6500/C5400
Security Function Supplementary Guide : S-3228
CRP-C0142-01
8
2. Conduct and Results of Evaluation by Evaluation Facility
2.1 Evaluation Methods
Evaluation was conducted by using the evaluation methods prescribed in CEM in
accordance with the assurance requirements in CC Part 3. Details for evaluation
activities are report in the Evaluation Technical Report. It described the description of
overview of the TOE, and the contents and verdict evaluated by each work unit
prescribed in CEM.
2.2 Overview of Evaluation Conducted
The history of evaluation conducted was present in the Evaluation Technical Report as
follows.
Evaluation has started on 2007-09 and concluded by completion the Evaluation
Technical Report dated 2008-01. The evaluation facility received a full set of
evaluation deliverables necessary for evaluation provided by developer, and examined
the evidences in relation to a series of evaluation conducted. Additionally, the
evaluation facility directly visited the development and manufacturing sites on
2007-11 and examined procedural status conducted in relation to each work unit for
delivery and operation by investigating records and staff hearing. Further, the
evaluation facility executed sampling check of conducted testing by developer and
evaluator testing by using developer testing environment at developer site on 2007-11.
Concerns found in evaluation activities for each work unit were all issued as
Observation Report and were reported to developer. These concerns were reviewed by
developer and all problems were solved eventually.
As for concerns indicated during evaluation process by the Certification Body, the
certification review was sent to the evaluation facility. These were reflected to
evaluation after investigation conducted by the evaluation facility and the developer.
2.3 Product Testing
Overview of developer testing evaluated by evaluator and evaluator testing conducted
by evaluator are as follows.
2.3.1 Developer Testing
1) Developer Test Environment
Test configuration performed by the developer is showed in the Figure 2-1.
CRP-C0142-01
9
TOE
MFP
Interface converter
General User Client 1
-Print Driver
-Network Scan
Utility
-Web Browser
System Administrator
Client
-Web Browser
External
Network
Internal
Network
Tester B
CE
Key operator
Firewall
IDE monitor
Tester C
Debug serial tool
Figure 2-1 Configuration of Developer Testing
2) Outlining of Developer Testing
Outlining of the testing performed by the developer is as follow.
a. Test configuration
The test configuration used by the developer is shown in Figure 2-1. In the
developer testing, the CPFS model of Fuji Xerox ApeosPort-II C6500 was tested
as an operational environment of the TOE. The evaluator confirmed that all
security functions of “ApeosPort-II/DocuCentre-II C7500/6500/5400” series were
tested by the developer testing of CPFS model.
The developer conducted the testing in almost the same TOE operational
environment as identified in the ST.
b. Testing Approach
For the testing, following approach was used.
(1) The MFP for testing is connected, via the network (Ethernet) for testing, to
the user client 1 (PC) on which print driver, network scan utility, and Web
browser are installed.
(2) The system administrator client accesses the MFP for testing via the
network (Ethernet) for testing from Web browser.
(3) The debug serial tool is connected to the MFP via the unique
interface-converter and is used to check the final status of data in the HDD,
i.e. the overwritten/encrypted data by Hard Disk Data Overwrite / Hard
Disk Data Encryption.
(4) The IDE monitor is connected to the controller board and the HDD within the
MFP. The IDE monitor is used to check the contents of data transmitted
CRP-C0142-01
10
between the board and HDD, i.e. the data to be overwritten/encrypted by
Hard Disk Data Overwrite / Hard Disk Data Encryption.
(5) The test on the operation error of Hard Disk Data Overwrite is conducted by
generating HDD pseudo errors. This is enabled by connecting the trunk
cable which has an HDD-power-off switch to the HDD.
c. Scope of Testing Performed
The developer conducted 26 tests.
The following show the number of tests conducted for each security function:
- Hard Disk Data Overwrite: 17 tests
- Hard Disk Data Encryption: 4 tests
- System Administrator’s Security Management: 4 tests
- Customer Engineer Operation Restriction: 1 test
The scope of testing covers all behavior of each function. The quantity and scope
of testing conducted are satisfactory as a whole.
d. Result
The evaluator confirmed consistencies between the expected test results and the
actual test results provided by the developer. The evaluator confirmed that the
developer testing approach and tested items were legitimate and that the
approach and results of actual tests matched those described in the test plan.
2.3.2 Evaluator Testing
1) Evaluator Test Environment
The evaluator used almost the same test configuration which was used by the
developer. Figure 2-2 shows its schematic.
TOE1 TOE2
IDE monitor
Server
(Mail) PC Debug Seirial
Tool
PC
HUB
Figure 2-2: Evaluator Test Configuration
2) Outlining of Evaluator Testing
Outlining of testing performed by the evaluator is as follow.
a. Test configuration
CRP-C0142-01
11
The test configuration used by the evaluator is shown in Figure 2-2. The
evaluator conducted testing in almost the same TOE operational environment as
identified in the ST.
b. Testing Approach
The evaluator conducted testing in almost the same approach and TOE
operational environment as those used in the developer testing.
c. Scope of Testing Performed
The evaluator conducted 29 tests in total: 3 independent tests and 26 tests
sampling the developer tests. The following were considered as the selection
criteria of the tests.
(1) Independent testing
Exactitude of developer testing for security functions: the testing was
conducted based on parameter-threshold analysis, and the detailed
functions which were not tested by the developer were also tested.
(2) Sampling of developer tests
In fact, sampling method was not adopted but all the developer tests were
tested.
d. Result
All evaluator testing conducted was completed correctly. The evaluator
confirmed the behavior of the TOE and that all the behavior shown in the test
results matched the expected one.
2.4 Evaluation Result
The evaluator had the conclusion that the TOE satisfies all work units prescribed in
CEM by submitting the Evaluation Technical Report.
CRP-C0142-01
12
3. Conduct of Certification
The following certification was conducted based on each materials submitted by
evaluation facility during evaluation process.
1. Contents pointed out in the Observation Report shall be adequate.
2. Contents pointed out in the Observation Report shall properly be reflected.
3. Evidential materials submitted were sampled, its contents were examined, and
related work units shall be evaluated as presented in the Evaluation Technical
Report.
4. Rationale of evaluation verdict by the evaluator presented in the Evaluation
Technical Report shall be adequate.
5. The Evaluator’s evaluation methodology presented in the Evaluation Technical
Report shall conform to the CEM.
Concerns found in certification process were prepared as certification review, which
were sent to evaluation facility.
The Certification Body confirmed such concerns pointed out in Observation Report and
certification review were solved in the ST and the Evaluation Technical Report.
CRP-C0142-01
13
4. Conclusion
4.1 Certification Result
The Certification Body verified the Evaluation Technical Report, the Observation
Report and the related evaluation evidential materials submitted and confirmed that
all evaluator action elements required in CC Part 3 are conducted appropriately to the
TOE. The Certification Body verified the TOE is satisfied the EAL2 assurance
requirements prescribed in CC Part 3.
4.2 Recommendations
Although the TOE provides the function to protect Mailbox with password and access
control, the function is not treated as a security function. Therefore, protection of the
contents within Mailbox is not assured.
CRP-C0142-01
14
5. Glossary
The abbreviations used in this report are listed below.
CC: Common Criteria for Information Technology Security
Evaluation
CEM: Common Methodology for Information Technology Security
Evaluation
EAL: Evaluation Assurance Level
PP: Protection Profile
SOF: Strength of Function
ST: Security Target
TOE: Target of Evaluation
TSF: TOE Security Functions
The specific abbreviations for the TOE used in this report are listed below.
ADF Auto Document Feeder
G3/G4 Group 3 Facsimile / Group 4 Facsimile
IIT Image Input Terminal
IOT Image Output Terminal
MFP Multi Function Peripheral
NVRAM Non Volatile Random Access Memory
SEEPROM Serial Electronically Erasable and Programmable Read Only
Memory
SMB Server Message Block
The glossaries used in this report are listed below. (Relevant terms are included for
better understanding.)
Term Definition
General User Any person who uses copy, scan, and print functions of MFP.
System
Administrator
An authorized user who manages MFP maintenance and
configures TOE security functions. This term covers both key
operator and SA.
Customer
Service
Engineer (CE)
A Xerox engineer who maintains and repairs MFP.
Attacker A malicious user of TOE.
CRP-C0142-01
15
Term Definition
Control Panel
A panel of MFP on which buttons, lamps, and a touch screen
panel are mounted to operate the MFP.
General User
Client
A client for general user and SA to operate the MFP.
System
Administrator
Client
A client for system administrator. An administrator can refer
to and rewrite TOE configuration data of MFP via Web
browser.
CentreWare
Internet Service
(CWIS)
A service to retrieve the document data scanned by MFP from
Mailbox.
It also enables a system administrator to refer to and rewrite
TOE configuration data via Web browser.
System
Administrator
Mode
An operation mode that enables a system administrator to
refer to and rewrite TOE configuration for device operation
and that for security functions according to the operational
environment. This mode is distinguished from the operation
mode that enables a general user to use the MFP functions.
Print Driver
Software for a general user to convert the data on a general
user client into print data written in page description
language (PDL), a readable format for MFP.
Network Scan
Utility
Software for a general user client to retrieve the document
data stored in Mailbox of MFP.
Decompose
Function
A function to analyze and convert the print data written in
PDL into bitmap data.
Decompose
To analyze and convert the data written in PDL into bitmap
data by decompose function.
Print Function
A function to decompose and print out the print data
transmitted by a user client.
Print Control
Function
A function to control the device to enable print operation.
Copy Function
A function in which original is read from IIT and then printed
out from IOT according to the general user’s instruction from
the control panel. When more than one copy is ordered for one
original, the data read from IIT is first stored into the MFP
internal HDD. Then, the stored data is read out from the
HDD as needed so that required number of copies can be
made.
Scan Function
According to the general user’s instruction from the control
panel, the original data is read from IIT and then stored into
Mailbox within the MFP internal HDD.
The stored document data can be retrieved via standard Web
browser by CWIS or Network Scan Utility function.
Network Scan
Function
A function in which original data is read from IIT and then
transmitted to FTP server, SMB server, or Mail server
according to the information set in the MFP. This function is
operated according to the general user’s instruction from the
control panel.
Mailbox
A logical box created in the MFP internal HDD. Mailbox
stores the scanned document data or the data to be printed
later.
CRP-C0142-01
16
Term Definition
Document Data
Document data means all the image data transmitted across
the MFP when any of copy, print, or scan function is operated
by a general user. The document data includes:
Bitmap data read from IIT and printed out from IOT (copy
function),
Print data sent by general user client and its decomposed
bitmap data (print function),
Bitmap data read from IIT and then stored into the internal
HDD (scan function).
Used Document
Data
The remaining data in the MFP internal HDD even after
deletion. The document data is first stored into the internal
HDD, used, and then only its file is deleted.
TOE
Configuration
Data
The data which is created by TOE or for TOE and may affect
TOE operations. Specifically, it includes the information
regarding the functions of Hard Disk Data Overwrite, Hard
Disk Data Encryption, System Administrator’s Security
Management, Customer Engineer Operation Restriction, and
Mailbox.
Overwrite
To write over the area of the document data stored in the
internal HDD when deleting the data.
External
Network
The network which cannot be managed by the organization
that manages TOE. This does not include the internal
network.
Internal
Network
Channels between MFP and highly reliable remote server /
client PC. The channels are located in the network of the
organization, the owner of TOE, and are protected from the
security risks coming from the external network.
CRP-C0142-01
17
6. Bibliography
[1] Fuji Xerox ApeosPort-II C7500/C6500/C5400, DocuCentre-II C7500/C6500/C5400
Series Controller Software for Asia Pacific Security Target Version 1.0.7
(December 20, 2007) Fuji Xerox Co., Ltd.
[2] IT Security Evaluation and Certification Scheme, May 2007,
Information-technology Promotion Agency, Japan CCS-01
[3] IT Security Certification Procedure, May 2007, Information-technology
Promotion Agency, Japan CCM-02
[4] Evaluation Facility Approval Procedure, May 2007, Information-technology
Promotion Agency, Japan CCM-03
[5] Common Criteria for Information Technology Security Evaluation Part 1:
Introduction and general model Version 2.3 August 2005 CCMB-2005-08-001
[6] Common Criteria for Information Technology Security Evaluation Part 2:
Security functional requirements Version 2.3 August 2005 CCMB-2005-08-002
[7] Common Criteria for Information Technology Security Evaluation Part 3:
Security assurance requirements Version 2.3 August 2005 CCMB-2005-08-003
[8] Common Criteria for Information Technology Security Evaluation Part 1:
Introduction and general model Version 2.3 August 2005 CCMB-2005-08-001
(Translation Version 1.0 December 2005)
[9] Common Criteria for Information Technology Security Evaluation Part 2:
Security functional requirements Version 2.3 August 2005 CCMB-2005-08-002
(Translation Version 1.0 December 2005)
[10] Common Criteria for Information Technology Security Evaluation Part 3:
Security assurance requirements Version 2.3 August 2005 CCMB-2005-08-003
(Translation Version 1.0 December 2005)
[11] ISO/IEC 15408-1:2005 - Information Technology - Security techniques -
Evaluation criteria for IT security - Part 1: Introduction and general model
[12] ISO/IEC 15408-2:2005 - Information technology - Security techniques -
Evaluation criteria for IT security - Part 2: Security functional requirements
[13] ISO/IEC 15408-3:2005 - Information technology - Security techniques -
Evaluation criteria for IT security - Part 3: Security assurance requirements
[14] Common Methodology for Information Technology Security Evaluation:
Evaluation Methodology Version 2.3 August 2005 CCMB-2005-08-004
[15] Common Methodology for Information Technology Security Evaluation:
Evaluation Methodology Version 2.3 August 2005 CCMB-2005-08-004
(Translation Version 1.0 December 2005)
[16] ISO/IEC 18045:2005 Information technology - Security techniques - Methodology
for IT security evaluation
[17] Fuji Xerox ApeosPort-II C7500/C6500/C5400, DocuCentre-II C7500/C6500/C5400
Series Controller Software for Asia Pacific Evaluation Technical Report Version
1.2, January 9, 2008, Information Technology Security Center