MX-FR14
C.10

Product Name :

MX-FR14

Version of TOE :

 C.10

Product Type :

Data protection function in Multi Function Device

Certification No. :

C0245

Date :

2010-02-25

Version of Common Criteria:

3.1

Conformance Claim :

EAL3

PP Identifier :

None

Vendor :

Sharp Corporation

 

POC :

Kohji Yakushiji

Division :

Product Planning Department, Document Systems Division

Phone :

+81-743-53-5521

E-mail :

Evaluation Facility :

Mizuho Information & Research Institute, Inc.
Center for Evaluation of Information Security

PRODUCT DESCRIPTION

Description of TOE

The TOE is an IT product, composed of 2 parts, to protect data in a Multi Function Device (hereafter referred to as an “MFD”.
One part is a hardware part in an MFD and provided in the form of an MFD. The other part is a firmware product and provided as an upgrade kit for the firmware of the MFD. ROMs in this product replace standard firmware ROMs in an MFD. Among MFD models that the TOE supports, some MFD models require a Sharp genuine option that contains an HDD, in order that the TOE can run on them.
An MFD is an office machine that has imaging functions such as copy, printer, image scanning and fax.

 

TOE security functionality

The TOE counters unauthorized disclosure of image data by:

a)	The encryption function, which encrypts data, such as image data that the MFD handles, before storing the data to the HDD or the Flash memory in the MFD,
b)	The cryptographic key generation function, generates a seed for a cryptographic key once when the TOE is installed, and generates a constant cryptographic key from the seed whenever the MFD is powered, and stores the key in a volatile memory for the encryption function,
c)	The data erasure function, which automatically overwrites to erase image data no longer in use in storages such as HDD, and overwrites to erase all data when invoked by the administrator of an MFD in use or no longer in use,
d)	The authentication function, which authenticates the TOE administrator with a password, and provides the TOE administrator with a management function for changing his password,
e)	The confidential file function, which provides image data filed by users with password protection, and
f)	The network protection functions, which are:
	-	The IP/MAC address filter function, which refuses unauthorized network accesses,
	-	The SSL function, which protects communications data against wiretapping, and
	-	The network settings protection function, which provides only the TOE administrator with management functions of network settings such as IP address and DNS, and protects them from other users.