RICOH MP C3503/C3003 Security Target - Common …

1 Copyright (c) 2013 RICOH COMPANY, LTD. All rights reserved. RICOH MP C3503/C3003 Security Target Author : RICOH COMPANY, LTD. Date : 2013-07-31 Version : Portions of RICOH MP C3503/C3003 Security Target are reprinted with written permission from IEEE, 445 Hoes Lane, Piscataway, New Jersey 08855, from IEEE , Protection Profile for Hardcopy Devices, Operational Environment A, Copyright 2009 IEEE. All rights reserved. This document is a translation of the evaluated and certified Security Target written in Japanese. Page 1 of 90 Copyright (c) 2013 RICOH COMPANY, LTD. All rights reserved. Revision History Version Date Author Detail 2013-07-31 RICOH COMPANY, LTD.

2 Publication version. Page 2 of 90 Copyright (c) 2013 RICOH COMPANY, LTD. All rights reserved. Table of Contents 1111 ST IntroductionST IntroductionST IntroductionST Introduction .. 7777 ST ReferenceST ReferenceST ReferenceST Reference .. 7777 TOE ReferenceTOE ReferenceTOE ReferenceTOE Reference .. 7777 TOE OverviewTOE OverviewTOE OverviewTOE Overview .. 7777 TOE Type .. 7 TOE 7 Major Security Features of 10 TOE DescriptionTOE DescriptionTOE DescriptionTOE 10101010 Physical Boundary of TOE .. 10 Guidance Documents .. 13 Definition of Users .. 13 Direct User .. 13 Indirect User .. 14 Logical Boundary of TOE .. 16 Basic 16 Security 19 Protected Assets .. 21 User Data .. 21 TSF Data.

3 21 Functions .. 22 22222222 Glossary for This ST .. 22 2222 Conformance ClaimConformance ClaimConformance ClaimConformance 26262626 CC Conformance ClaimCC Conformance ClaimCC Conformance ClaimCC Conformance 26262626 PP ClaimsPP ClaimsPP ClaimsPP Claims .. 26262626 Package ClaimsPackage ClaimsPackage ClaimsPackage Claims .. 26262626 Conformance Claim RationaleConformance Claim RationaleConformance Claim RationaleConformance Claim Rationale .. 27272727 Consistency Claim with TOE Type in 27 Consistency Claim with Security Problems and Security Objectives in 27 Consistency Claim with Security Requirements in 28 3333 Security Problem DefinitionsSecurity Problem DefinitionsSecurity Problem DefinitionsSecurity Problem Definitions.

4 31313131 Page 3 of 90 Copyright (c) 2013 RICOH COMPANY, LTD. All rights reserved. ThreaThreaThreaThreatstststs .. 31313131 Organisational Security PoliciesOrganisational Security PoliciesOrganisational Security PoliciesOrganisational Security 32323232 AssumptionsAssumptionsAssumptionsAssumpt ions .. 32323232 4444 Security ObjectivesSecurity ObjectivesSecurity ObjectivesSecurity 34343434 Security Objectives for TOES ecurity Objectives for TOES ecurity Objectives for TOES ecurity Objectives for 34343434 Security Objectives of Operational EnvironmentSecurity Objectives of Operational EnvironmentSecurity Objectives of Operational EnvironmentSecurity Objectives of Operational Environment .. 35353535 IT 35 Non-IT 36 Security Objectives RSecurity Objectives RSecurity Objectives RSecurity Objectives Rationaleationaleationaleationale.

5 37373737 Correspondence Table of Security Objectives .. 37 Security Objectives Descriptions .. 38 5555 Extended Components DefinitionExtended Components DefinitionExtended Components DefinitionExtended Components Definition .. 42424242 Restricted forwarding of data to external interfaces (FPT_FDI_EXP)Restricted forwarding of data to external interfaces (FPT_FDI_EXP)Restricted forwarding of data to external interfaces (FPT_FDI_EXP)Restricted forwarding of data to external interfaces (FPT_FDI_EXP) .. 42424242 6666 Security RequirementsSecurity RequirementsSecurity RequirementsSecurity 44444444 Security Functional RequirementsSecurity Functional RequirementsSecurity Functional RequirementsSecurity Functional Requirements.

6 44444444 Class FAU: Security audit .. 44 Class FCS: Cryptographic support .. 48 Class FDP: User data protection .. 49 Class FIA: Identification and authentication .. 53 Class FMT: Security 57 Class FPT: Protection of the 62 Class FTA: TOE access .. 63 Class FTP: Trusted 63 Security Assurance RequirementsSecurity Assurance RequirementsSecurity Assurance RequirementsSecurity Assurance Requirements .. 64646464 Security Requirements RationaleSecurity Requirements RationaleSecurity Requirements RationaleSecurity Requirements Rationale .. 64646464 Tracing .. 65 Justification of 66 Dependency Analysis .. 73 Security Assurance Requirements 74 7777 TOE Summary SpecificationTOE Summary SpecificationTOE Summary SpecificationTOE Summary 76767676 Audit FunctionAudit FunctionAudit FunctionAudit Function.

7 76767676 Identification and Authentication FunctionIdentification and Authentication FunctionIdentification and Authentication FunctionIdentification and Authentication Function .. 78787878 Page 4 of 90 Copyright (c) 2013 RICOH COMPANY, LTD. All rights reserved. Document Access Control FunctionDocument Access Control FunctionDocument Access Control FunctionDocument Access Control Function .. 81818181 UseUseUseUse----ofofofof----Feature Restriction FunctionFeature Restriction FunctionFeature Restriction FunctionFeature Restriction Function .. 83838383 network Protection FunctionNetwork Protection FunctionNetwork Protection FunctionNetwork Protection 83838383 Residual Data Overwrite FunctionResidual Data Overwrite FunctionResidual Data Overwrite FunctionResidual Data Overwrite 84848484 Stored Data Protection FunctionStored Data Protection FunctionStored Data Protection FunctionStored Data Protection Function.

8 85858585 Security Management FunctionSecurity Management FunctionSecurity Management FunctionSecurity Management Function .. 85858585 Software Verification FunctionSoftware Verification FunctionSoftware Verification FunctionSoftware Verification Function .. 90909090 Fax Line Separation FunctionFax Line Separation FunctionFax Line Separation FunctionFax Line Separation Function .. 90909090 Page 5 of 90 Copyright (c) 2013 RICOH COMPANY, LTD. All rights reserved. List of Figures Figure 1 : Example of TOE Environment .. 8 Figure 2 : Hardware Configuration of the TOE .. 11 Figure 3 : Logical Scope of the TOE .. 16 List of Tables Table 1 : Definition of 14 Table 2 : List of Administrative Roles .. 14 Table 3 : Definition of User Data.

9 21 Table 4 : Definition of TSF 21 Table 5 : Specific Terms Related to This ST .. 22 Table 6 : Rationale for Security 37 Table 7 : List of Auditable 45 Table 8 : List of Cryptographic Key 48 Table 9 : List of Cryptographic Operation .. 48 Table 10 : List of Subjects, Objects, and Operations among Subjects and Objects (a).. 49 Table 11 : List of Subjects, Objects, and Operations among Subjects and Objects (b).. 49 Table 12 : Subjects, Objects and Security Attributes (a) .. 50 Table 13 : Rules to Control Operations on Document Data and User Jobs (a) .. 50 Table 14 : Additional Rules to Control Operations on Document Data and User Jobs (a).. 51 Table 15 : Subjects, Objects and Security Attributes (b).. 52 Table 16 : Rule to Control Operations on MFP Applications (b).

10 52 Table 17 : List of Authentication Events of Basic Authentication .. 53 Table 18 : List of Actions for Authentication 53 Table 19 : List of Security Attributes for Each User That Shall Be Maintained .. 54 Table 20 : Rules for Initial Association of Attributes .. 56 Table 21 : User Roles for Security Attributes (a) .. 57 Table 22 : User Roles for Security Attributes (b).. 58 Table 23 : Authorised Identified Roles Allowed to Override Default 59 Table 24 : List of TSF 60 Table 25 : List of Specification of Management 61 Table 26 : TOE Security Assurance Requirements (EAL3+ ).. 64 Table 27 : Relationship between Security Objectives and Functional Requirements .. 65 Table 28 : Results of Dependency Analysis of TOE Security Functional Requirements.