Kyocera TASKalfa 3500i User manual

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i
Data Security Kit (E) Overseas Version Security Target
© 2011 KYOCERA MITA Corporation
uly 7, 2011
KYOCERA MITA Corporation
TASKalfa 3500i, TASKalfa 4500i,
TASKalfa 5500i
Data Security Kit (E)
Overseas Version
Security Target
Version 0.80
This document is a translation of the evaluated
and certified security target written in apanese.

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i
Data Security Kit (E) Overseas Version Security Target
© 2011 KYOCERA MITA Corporation
i
- Revision History -
Date Version
Content of revision Approver Drafter
Nov. 01, 2010
0.50 - Newly drafted Sato Sone
Apr. 21, 2011 0.60 - Updated of the information Sato Sone
May 19, 2011 0.70 - Revised specified items Sato Sone
May 27, 2011 0.75 - Revised specified items Sato Sone
ul. 7, 2011 0.80 - Revised specified items Sato Sone

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i
Data Security Kit (E) Overseas Version Security Target
© 2011 KYOCERA MITA Corporation
ii
- TABLE OF CONTENTS -
1. ST INTRODUCTION .............................................. 1
1.1. ST R EFERENCE ................................................................................................................................ 1
1.2. TOE R EFERENCE .............................................................................................................................. 1
1.3. TOE O VERVIEW ............................................................................................................................... 1
1.3.1 TOE Type ............................................................................................................................... 1
1.3.2 Usage and Major Security Features of TOE ................................................................... 1
1.3.3 Required Non TOE Hardware/Software/Firmware ....................................................... 2
1.4. TOE D ESCRIPTION .......................................................................................................................... 3
1.4.1. People Associated with the TOE ....................................................................................... 3
1.4.2. Physical Configuration of the TOE ................................................................................... 4
1.4.3. Logical Configuration of the TOE ..................................................................................... 5
1.4.4. Guidance ............................................................................................................................... 7
1.4.5. Assets Protected by the TOE ............................................................................................ 8
2. CONFORMANCE CLAIMS ....................................... 9
2.1. CC C ONFORMANCE C LAIMS ............................................................................................................. 9
2.2. PP C LAIMS ....................................................................................................................................... 9
2.3. P ACKAGE C LAIMS ............................................................................................................................. 9
2.4. C ONFORMANCE R ATIONALE .............................................................................................................. 9
3. SECURITY PROBLEM DEFINITION ........................ 10
3.1. T HREATS ........................................................................................................................................ 10
3.2. O RGANIZATIONAL S ECURITY P OLICIES ........................................................................................... 10
3.3. A SSUMPTIONS ................................................................................................................................ 10
4. SECURITY OB ECTIVES ...................................... 11
4.1. S ECURITY O B ECTIVES FOR THE TOE..............................................................................................11
4.2. S ECURITY O B ECTIVES FOR THE O PERATIONAL E NVIRONMENT ........................................................11
4.3. S ECURITY O B ECTIVES R ATIONALE .................................................................................................11

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i
Data Security Kit (E) Overseas Version Security Target
© 2011 KYOCERA MITA Corporation
iii
5. EXTENDED COMPONENTS DEFINITION................. 14
6. SECURITY REQUIREMENTS ................................. 15
6.1. TOE S ECURITY F UNCTIONAL R EQUIREMENTS ................................................................................. 15
6.2. TOE S ECURITY A SSURANCE R EQUIREMENTS ................................................................................. 18
6.3. S ECURITY R EQUIREMENTS R ATIONALE ........................................................................................... 18
6.3.1. Security Functional Requirements Rationale ............................................................... 18
6.3.2. Dependent Relations between TOE Security Functional Requirements ................ 19
6.3.3. Rationale for Security Assurance Requirements ........................................................ 20
7. TOE SUMMARY SPECIFICATION ........................... 21
7.1. E NCRYPTION F UNCTION ................................................................................................................. 21
7.2. O VERWRITE - ERASE F UNCTION ....................................................................................................... 22
8. ACRONYMS AND TERMINOLOGY .......................... 23
8.1. D EFINITIONS OF TERMS ................................................................................................................. 23
8.2. D EFINITIONS OF ACRONYMS ........................................................................................................... 24

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i
Data Security Kit (E) Overseas Version Security Target
© 2011 KYOCERA MITA Corporation
iv
- List of Figures -
F IGURE 1.1 A COMMON USAGE IN OFFICES ..................................................................................................... 2
F IGURE 1.2 P HYSICAL C ONFIGURATION OF THE TOE...................................................................................... 4
F IGURE 1.3 L OGICAL C ONFIGURATION OF THE TOE ....................................................................................... 5

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i
Data Security Kit (E) Overseas Version Security Target
© 2011 KYOCERA MITA Corporation
v
- List of Tables -
T ABLE 1.1 TOE C OMPATIBLE P RODUCTS ........................................................................................................ 3
T ABLE 1.2 E VALUATED W EB BROWSER ............................................................................................................ 7
T ABLE 1.3 G UIDANCE THAT COMPOSES TOE................................................................................................... 8
T ABLE 4.1 C ORRESPONDENCES BETWEEN ORGANIZATIONAL SECURITY POLICIES AND ASSUMPTIONS , AND
SECURITY OB ECTIVES ........................................................................................................................... 12
T ABLE 6.1 TOE S ECURITY A SSURANCE R EQUIREMENTS ............................................................................... 18
T ABLE 6.2 C ORRESPONDENCES BETWEEN SECURITY OB ECTIVES AND TOE SECURITY FUNCTIONAL
REQUIREMENTS ...................................................................................................................................... 19
T ABLE 6.3 D EPENDENT RELATIONS BETWEEN TOE SECURITY FUNCTIONAL REQUIREMENTS ........................... 20
T ABLE 7.1 TOE SECURITY FUNCTIONS AND SECURITY FUNCTIONAL REQUIREMENTS ...................................... 21
T ABLE 8.1 D EFINITIONS OF TERMS USED IN THIS ST.................................................................................... 23
T ABLE 8.2 D EFINITIONS OF ACRONYMS USED IN THIS ST ............................................................................. 24

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i
Data Security Kit (E) Overseas Version Security Target
© 2011 KYOCERA MITA Corporation
1
1. ST INTRODUCTION
1.1. ST Reference
ST Title: TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i Data Security Kit
(E) Overseas Version Security Target
ST Version: Version 0.80
Creation Date: uly 7, 2011
Author: KYOCERA MITA Corporation
1.2. TOE Reference
TOE Name: TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i, TASKalfa 3500iG,
TASKalfa 4500iG, TASKalfa 5500iG, CS 3500i, CS 4500i, CS 5500i,
CD 1435, CD 1445, CD 1455, DC 2435, DC 2445, DC 2455
Data Security Kit (E)
TOE Version: V1.00E
Manufacturer: KYOCERA MITA Corporation
1.3. TOE Overview
1.3.1 TOE Type
This TOE defined by this ST, includes the firmware that controls the Multi Function
Printer (hereinafter referred to as “MFP”) having mainly copy function, scan function
and print function, and ASIC having the security algorithm function. The TOE is
installed to be used for the MFPs manufactured by KYOCERA MITA Corporation,
namely, “TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i, TASKalfa 3500iG, TASKalfa
4500iG, TASKalfa 5500iG, CS 3500i, CS 4500i, CS 5500i, CD 1435, CD 1445, CD
1455, DC 2435, DC 2445, DC 2455”. Major security features of the TOE protect the
image data stored in the internal HDD inside the MFP from being removed through an
unauthorized interface.
1.3.2 Usage and Major Security Features of TOE
The MFP in which this TOE is installed is able to perform coping (duplication), printing
(paper outputting) and network scanning (electronization) of various documents
handled by users. The MFP is located in general office and is not only utilized as a
standalone but also connected to LAN for the use in the network environment. In the
network environment, the MFP is assumed to be used by connecting to client PCs or
server on the internal network protected from unauthorized access on the external
network by firewall. And, the MFP is assumed to be used by connecting to Local Port

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i
Data Security Kit (E) Overseas Version Security Target
© 2011 KYOCERA MITA Corporation
2
(USB Port).
In this user environment, the above-mentioned operational functions can be
performed through operations on the operation panel or from client PCs on the
network or of the local connection.
Figure 1.1 shows a typical user environment.
Figure 1.1 A common usage in offices
The TOE security functions can activate upon agreement and registration of the
license of the optional “Data Security Kit (E)” for the MFP “TASKalfa 3500i, TASKalfa
4500i, TASKalfa 5500i, TASKalfa 3500iG, TASKalfa 4500iG, TASKalfa 5500iG, CS
3500i, CS 4500i, CS 5500i, CD 1435, CD 1445, CD 1455, DC 2435, DC 2445, DC
2455”.
The TOE provides the protected functions against leakage of the user image data
temporarily stored in the internal HDD inside the MFP during and after processing of
each function. When storing the image data into the internal HDD, the image data is
encrypted. When receiving an instruction for deletion of the image data, it disables
re-usage of the data so that even if the HDD is removed and directly accessed
through an interface of the HDD, leakage of the image data can be protected.
1.3.3 Required Non-TOE Hardware/Software/Firmware
To activate the TOE, a certain models of the MFP manufactured by KYOCERA MITA
Corporation are needed. Products in which this TOE can be installed are listed in
Table 1.1.

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i
Data Security Kit (E) Overseas Version Security Target
© 2011 KYOCERA MITA Corporation
3
Table 1.1 TOE Compatible Products
TOE Name/Version Compatible Product
TASKalfa 3500i, TASKalfa 4500i,
TASKalfa 5500i, TASKalfa 3500iG,
TASKalfa 4500iG, TASKalfa 5500iG,
CS 3500i, CS 4500i, CS 5500i,
CD 1435, CD 1445, CD 1455,
DC 2435, DC 2445, DC 2455
Data Security Kit (E)
V1.00E
TASKalfa 3500i, TASKalfa 4500i,
TASKalfa 5500i, TASKalfa 3500iG,
TASKalfa 4500iG, TASKalfa 5500iG,
CS 3500i, CS 4500i, CS 5500i,
CD 1435, CD 1445, CD 1455,
DC 2435, DC 2445, DC 2455
In order to use the normal functions of the MFP, printer driver, TWAIN driver
(identified by Guidance) and Web browser are needed for client PCs and SMTP server,
SMB server and FTP server are needed for server in the common usage in offices as
shown in Figure 1.1.
1.4. TOE Description
1.4.1. People Associated with the TOE
Roles of people related to the use of the MFP in which the TOE is installed, are defined
as follows:
-Machine Administrator:
A person registered as an administrator of the MFP in which the TOE is installed.
The administrator holds privileges regarding the MFP. He/she installs and uses
devices comprising the MFP in which the TOE is installed, as well as the TOE, and
operates and manages them.
-TOE User:
A person who can use the MFP in which the TOE is installed. He/she can utilize
the copy function, print function, network scan function and document
management box function.
-Service Person:
A person certified by KYOCERA MITA Corporation as a service person of the MFP
in which the TOE is installed. When the service person installs the TOE, she/he
activates and setups (enables operation of) the TOE. Also, she/he performs
maintenance of devices comprising the MFP in which the TOE is installed, as well
as the TOE.

TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i
Data Security Kit (E) Overseas Version Security Target
© 2011 KYOCERA MITA Corporation
4
1.4.2. Physical Configuration of the TOE
The conceptual figure of physical configuration of the TOE is shown in Figure 1.2.
Figure 1.2 Physical Configuration of the TOE
The MFP in which the TOE is installed consists of an operation panel, a scanner unit,
a printer unit, a main board and HDD hardware.
Controller firmware on the main board to control a copy function, a network scan
function, a print function, a document management box function, an administrator
authentication function, a solution platform, an overwrite-erase function and an
encryption function are included in the TOE.
Additionally, special custom IC (ASIC) which share with the control firmware in
installing the security functions is included in the TOE. The ASIC includes a security
algorithm function module, an image processing module and an interface controller
module. From the above-mentioned, the security algorithm function module
overwrites over the specified area in the HDD regarding the overwrite-erase function,
and encrypts the image data when reading and writing into the HDD regarding the
encryption function.
The firmware term as described in this ST includes the meaning of ASIC as well as
Local Port
Intra-net
MFP
Printer Unit
Printer Unit
Product User
TOE
Operation Panel / Scanner Unit
Operation Panel / Scanner Unit
HDD
Main oard
Controller Firmware
Ethernet
Ethernet EEPROM EEPROM
Volatile
Memory
Volatile
Memory
Encryption Function
Copy
Function
User Interface Function
Overwrite-erase Function
Administrator Authentication
Function
Print
Function
Network Scan
Function Box Function
USB
USB
HyPAS Function
ASIC
ASIC
Security
Algorithm Function
Image
Processing
Interface
Control
Local Port
Intra-net
MFP
Printer Unit
Printer Unit
Product User
TOE
Operation Panel / Scanner Unit
Operation Panel / Scanner Unit
HDD
Main oard
Controller Firmware
Ethernet
Ethernet EEPROM EEPROM
Volatile
Memory
Volatile
Memory
Encryption Function
Copy
Function
User Interface Function
Overwrite-erase Function
Administrator Authentication
Function
Print
Function
Network Scan
Function Box Function
USB
USB
HyPAS Function
ASIC
ASIC
Security
Algorithm Function
Image
Processing
Interface
Control
Solution Platform
Product User
TOE