Ricoh’s challenge & Example of hardcopy PP “Secure MFP PP – Lite”

Ricoh’s challenge &Example of hardcopy PP “Secure MFP PP – Lite” 19 Apr 2004Yusuke Ohta, Ricoh (Tokyo)

Contents • Ricoh’s challenge (so far) • Introduction of 3 certified products • “Secure MFP PP – Lite” • Proposal of PP for discussion at P2600

1. Ricoh’s challenge • TrustyCabinet UX V1 • document management system, EAL3, in 2001 • imagio Neo 350/450 series • multi-functional printer, EAL3, in 2002 • DataOverwriteSecurity Unit Type A/B • optional kit of the MFP, EAL3, in 2004 All evaluations/certifications were performed by German CC company “TUViT”.

2. “Secure MFP PP – Lite” • Consider it is just one example of the hardcopy device, and it is… • Not “proposal”, because it was written in 2002, i.e. not for P2600. • Incomplete PP, because it is not for official certification. • But I think it might be good example.

Basic concept of PP Assumptions Security Environment Threats OSPs SOsfor the TOE SOs for the Environment Security Objectives IT Security Requirements SRs for the IT Env. SRs for the Non-IT Env. TOE SRs

Ricoh’s challenge & Example of hardcopy PP “Secure MFP PP – Lite”