Surveillance
Surveillance has been conducted on this TOE in accordance with JISEC Scheme Documents.
Readers are advised to confirm the “Surveillance Report” attached to the Certification Report.
- Product Name :
- Japanese : bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo+ 360 / ineo+ 280 / ineo+ 220 / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c Zentai Seigyo Software
English : bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo+ 360 / ineo+ 280 / ineo+ 220 / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c Control Software
- Version of TOE :
- A0ED0Y0-0100-GM0-22
- Product Type :
- Control Software for digital MFP
- Certification No. :
- C0259
- Date :
- 2010-06-29
(Surveillance completed on 2011-12-05)
- Version of Common Criteria:
- 3.1
- Conformance Claim :
- EAL3
- PP Identifier :
- None
- Vendor :
- Konica Minolta Business Technologies, Inc.
-
- POC :
- Yasuhiro Nakagami
- Division :
- R&D Administration Division,
R&D Headquarters
- Phone :
- +81-533-89-7940
- E-mail :
- Evaluation Facility :
- Mizuho Information & Research Institute, Inc.
Center for Evaluation of Information Security
- Certification/Validation
Report :
(508 KB)(2011-12-14) - CC
Certificate Image :
(513 KB)(2010-07-26) - Security Target :
(756 KB)(2010-08-24)
PRODUCT DESCRIPTION
Description of TOE
TOE is the software that controls the entire operation of MFP, including the operation control processing and the image data management triggered by the panel of the main body of digital multi-function products (Multi Functional Peripheral. Hereinafter referred to as “MFP”) or through the network, and provides the protection from exposure of the highly confidential documents stored in MFP. Moreover, for the danger of illegally bringing out HDD, which stores image data in MFP, TOE can encrypt all the data written in HDD including image data using ASIC (Application Specific Integrated Circuit). Besides, TOE provides the function that deletes all the data of HDD completely by deletion method compliant with various overwrite deletion standards, and the function that controls the access from the public telephone line against the danger using Fax function as a steppingstone to access internal network.
TOE security functionality
TOE provides the following security functions.
-
- Administrator function
- SNMP administrator function
- Service mode function
- User function
- User box function
- Secure print function
- ID & print function
- All area overwrite deletion function
- Encryption key generation function
- Authentication Failure Frequency Reset function
- Trusted Channel function
- S/MIME encryption processing function
- External Server authentication operation support function
- ASIC support function
- WebDAV administrator function
- Fax unit control function
Security functional requirements
This TOE implements the following security functional requirements.
| Security audit | Non-repudiation of origin/receipt | Cryptographic functionality | Access control |
| Data authentication | Export data protection | Information flow control | Import data protection |
| Internal transfer data protection | Residual information protection | Rollback | Stored data integrity |
| Transfer data confidentiality | Transfer data integrity | Identification and authentication | Security management |
| Privacy Control | Security functionality protection | Resource utilisation management | TOE access control |
| Trusted path/channels |