Last Updated 2013-05-08
- Product Name :
- MX-FR33
- Version of TOE :
- C.10
- Product Type :
- data protection function in Multi Function Device
- Certification No. :
- C0370
- Date :
- 2012-09-06
- Conformance Claim :
- EAL3
- PP Identifier :
- None
- Vendor :
- Sharp Corporation
-
- POC :
- Kohji Yakushiji
- Division :
- Product Planning Department, Document Systems Division
- Phone :
- +81-743-53-5521
- E-mail :
- Evaluation Facility :
- Information Technology Security Center Evaluation Department
- Certification/Validation Report :
(238 KB)(2012-12-20) - CC Certificate Image :
(405 KB)(2012-11-02) - Security Target :
(697 KB)(2012-12-20)
PRODUCT DESCRIPTION
Description of TOE
The TOE is an IT product, composed of 2 parts, to protect data in a Multi Function Device (hereafter referred to as an "MFD").
One part is a hardware part in an MFD and provided in the form of an MFD. The other part is a firmware product and provided as an upgrade kit for the firmware of the MFD.
An MFD is an office machine that has imaging functions such as copy, printer, image scanning and fax.
TOE security functions
The TOE counters unauthorized disclosure of image data by:
- | the encryption function, which encrypts data, such as image data that the MFD handles, before storing the data to the HDD or the Flash memory in the MFD, |
- | the cryptographic key generation function, generates a seed for a cryptographic key once when the TOE is installed, and generates a constant cryptographic key from the seed whenever the MFD is powered, and stores the key in a volatile memory for the encryption function, |
- | the data erasure function, which automatically overwrites to erase image data no longer in use in storages such as HDD, and overwrites to erase all data when invoked by the administrator of an MFD in use or no longer in use, |
- | the authentication function, which authenticates the TOE administrator with a password, and provides the TOE administrator with a management function for changing his password, |
- | the confidential file function, which provides image data filed by users with password protection, and |
- | the network protection functions, which counters malicious attempts (of unauthorized network-accesses, communication data wiretaps, and network settings falsifications), and |
- | the fax flow control function, which counters attempts to access to the internal network via the MFD network interface from public telephone networks on the MFD fax interface. |