Ricoh’s challenge &Example of hardcopy PP “Secure MFP PP – Lite”

19 Apr 2004Yusuke Ohta, Ricoh (Tokyo)

Contents

1. Ricoh’s challenge (so far)– Introduction of 3 certified products

2. “Secure MFP PP – Lite”– Proposal of PP for discussion at P2600

1. Ricoh’s challenge

TrustyCabinet UX V1– document management system, EAL3, in 2001

imagio Neo 350/450 series– multi-functional printer, EAL3, in 2002

DataOverwriteSecurity Unit Type A/B– optional kit of the MFP, EAL3, in 2004

All evaluations/certifications were performed by German CC company “TUViT”.

2. “Secure MFP PP – Lite”

Consider it is just one example of the hardcopy device, and it is…– Not “proposal”, because it was written in

2002, i.e. not for P2600.– Incomplete PP, because it is not for official

certification.

But I think it might be good example.

Basic concept of PP

SecurityEnvironment

SecurityObjectives

IT SecurityRequirements

Threats AssumptionsOSPs

SOsfor the TOE

SOs for the Environment

TOE SRsSRs for the

IT Env.SRs for the Non-IT Env.