MX-FRX8
Version M.10

Product Name :

MX-FRX8

Version of TOE :

Version M.10

Product Type :

data protection function in Multi Function Device

Certification No. :

C0188

Date :

2008-10-30

Version of Common Criteria:

3.1

Conformance Claim :

EAL3

PP Identifier :

None

Vendor :

Sharp Corporation

 

POC :

Kohji Yakushiji

Division :

Product Planning Department, Document Systems Division

Phone :

+81-743-53-5521

E-mail :

Evaluation Facility :

Mizuho Information & Research Institute, Inc.
Center for Evaluation of Information Security

PRODUCT DESCRIPTION

Description of TOE

The TOE is an IT product composed of 2 parts for a Multi Function Device (hereafter referred as to "MFD") to reduce the risk that image data stored or remaining in the HDD and the Flash Memory be disclosed. One part is a hardware part in an MFD and provided in the form of an MFD. The other part is a firmware product and provided as an upgrade kit for the firmware of the MFD.

TOE security functions

The TOE counters unauthorized disclosure of image data by:

- the encryption function, that encrypts and spools image data that the MFD handles
  for jobs (of copy, printer, image-scanning, fax transmission/reception and PC-Fax),
- the erasure function, that overwrites the spooled data area when each job is completed,
- the confidential file function, that protects image data that a user files with a password,
- the IP/MAC address filter function, that refuses unauthorized network accesses, and
- the SSL function, that protects communications data against wiretapping.

Security functional requirements

This TOE implements the following security functional requirements.

Security audit	Non-repudiation of origin/receipt	Cryptographic functionality	Access control
Data authentication	Export data protection	Information flow control	Import data protection
Internal transfer data protection	Residual information protection	Rollback	Stored data integrity
Transfer data confidentiality	Transfer data integrity	Identification and authentication	Security management
Privacy Control	Security functionality protection	Resource utilisation management	TOE access control
Trusted path/channels