Xerox WorkCentre 5135/5150 Multifunction ... - Common Criteria

Xerox WorkCentre 5135/5150
Multifunction Systems Security Target
Interface (LUI) with keypad, a document scanner, a document feeder and
a document output.
1.3.2. Logical Scope of the TOE
The logical scope of the TOE includes all software and firmware that are
installed on the product (see Table 2). The TOE logical boundary is
composed of the security functions provided by the product.
The following security functions are controlled by the TOE:
Image Overwrite (TSF_IOW)
Authentication (TSF_ AUT)
Network Identification (TSF_NET_ID)
Security Audit (TSF_FAU).
Cryptographic Operations (TSF_FCS)
Management Data Protection – SSL (TSF_FDP_SSL)
User Data Protection – IP Filtering (TSF_FDP_FILTER)
Information Flow Security (TSF_ FLOW)
Security Management (TSF_FMT)
User Data Protection - AES (TSF_EXP_UDE)
1.3.2.1. Image Overwrite (TSF_IOW)
The TOE has an “Image Overwrite” function that overwrites files created
during the printing, network scan, scan-to-email, and LanFax processes.
This overwrite process is implemented in accordance with DoD 5200.28-M
and will be activated at the completion of each print, network scan, scan to
e-mail, or LanFax job, once the MFD is turned back on after a power
failure or on demand of the MFD system administrator.
The TOE has an “Image Overwrite” function that overwrites files created
during the embedded fax process. This overwrite process is implemented
as a single-pass zeroization of the embedded fax card flash memory and
will be activated at the completion of each embedded fax job, once the
MFD is turned back on after a power failure or on demand of the MFD
system administrator. The embedded fax card flash memory overwrite is
not compliant with DoD 5200.28-M. LanFax jobs are overwritten on the
hard disk after the image is transferred from the Network Controller to
Copy Controller, and zeroized on the fax card flash memory once the
image has been sent. The Fax mailbox and dial directory are only
zeroized when the administrator commands a full On-Demand Image
Overwrite (ODIO) operation.
User image files associated with the Copy/Print, Store and Reprint feature
may be stored long term for later reprinting. When a job is selected for
reprint, the stored job is resubmitted to the system. Temporary files
13
Copyright 2009 Xerox Corporation, All rights reserved