KME_7145_04.qxd 08.10.2004 14:54 Uhr Seite 3
www.konicaminoltaeurope.com Office system Konica Minolta 7145

Konica Minolta 7145

More versatility and productivity for workgroups
KME_7145_04.qxd 08.10.2004 14:55 Uhr Seite 4
Konica Minolta 7145 office system
Get organised and improve your effectiveness
The Konica Minolta 7145 provides a comprehensive office system to streamline your business processes, boost productivity and reduce your ongoing costs. Besides functioning as a highperformance duplex printer with various finishing options, it also features scan, email, fax and digital copier functions. It provides the power and performance to replace your entire range of conventional office equipment.

Increase your

office efficiency.
KME_7145_04.qxd 08.10.2004 14:55 Uhr Seite 5
Experience life in the fast lane
Beyond the impressive 45 ppm printing and copying speeds, the Konica Minolta 7145 offers significant timesaving capabilities. Offering expansive paper capacity, a generous range of automatic finishing options as well as a convenient pre-programming function for up to five consecutive jobs, this system ensures you can commit your time to more productive pursuits.
Cut costs, gain performance
The Konica Minolta 7145 formula for success is simple: combine an attractive purchase price and unbeatable running costs to provide superior performance. The features speak for themselves: Speedy 45 ppm (A4) / 23 ppm (A3) Generous 4,550 paper input capacity Paper weight range: g/m2 Paper sizes: A5 to A3 Wide range of finishing options: stapling, punching, sorting, folding Scanning (standard) Duplex printing Polymerised toner for professional imaging Adjustable user-friendly touch-screen operation panel Remote diagnostic system Modular concept in a compact design
Extensive versatility through integration
Easily integrated into the office IT network environment, the Konica Minolta 7145 is truly the heart of your business processing system. The entire office will experience the benefits of centralised and automated printing, copying, faxing and scanning functions which are integral in todays network and business environment.
KME_7145_04.qxd 08.10.2004 14:55 Uhr Seite 6

Satisfy your needs

To remain competitive in todays business environment, you must be adaptive to change in order to effectively handle the range of challenges you face. Flexibility and versatility have become essential traits for anyone in the workforce. These criterion are not limited to personnel alone they are also highly relevant for your office equipment. The Konica Minolta 7145 has the versatility to accommodate nearly every departmental need. Its multitude of functions far exceeds mere document production to provide you with flexibility to meet all of todays changing requirements.

Enhance your

office workflow.

stapling (standard)

Exceptional image quality and finishing options
Ultimately, the end product is the final test. With its polymerised toner for exceptional image quality, the Konica Minolta 7145 guarantees professional, high-quality results. The output tray holds up to 3,250 sheets and the systems sorting options ensure individual sets are clearly separated. For online finishing, it offers high capacity stapling, stapling with punching, as well as half-folding.

half-fold

two-holepunching
KME_7145_04.qxd 08.10.2004 14:55 Uhr Seite 7

Work smarter, not harder

The Konica Minolta 7145 can help streamline work processes so effectively it will set new standards for efficiency and productivity. Its multiple scanning functions provide peerless, fingertip document control to simplify the previous complexity inherent in your business processes: Scan-to-eMail to internal or external recipients Scan-to-FTP to share information or for archiving 80 double-sided documents can be scanned in 1 shot via the ADF especially useful for archiving Scan-to-HDD (hard disk) to make print jobs, such as frequently used forms or sales leaflets, available any time Scan documents directly into your editing or layout applications via TWAIN Support of PDF and TIFF as scan file formats for easy, automatic creation of PDF brochures Scan-to-SMB (Server Message Block)

Combine as you please

With fax-to-box, print-to-box and scan-to-box you can create one document from a variety of different sources. Scanned images are easily combined with text to create new documents, incoming faxes can be read and viewed on your PC and outgoing faxes sent via the Internet.

Printing

Scanning

Faxing

Copying

Print-to-box

Scan-to-eMail

PC-Fax PC-fax

Black and white

Scan-to-HDD

Duplex

Scan-to-SMB

Fax-G3

Scan-to-FTP

Fax-to-box

Scan-to-box

KME_7145_04.qxd 08.10.2004 14:55 Uhr Seite 8

Dependable security

The Konica Minolta 7145 delivers both exceptional functionality with dependable security. Meeting the latest ISO 15408 EAL3 security standards, your data remain safe and protected at all times. Files remain safe from prying eyes and the network security eliminates need of worry. Besides secure print functionality and authentification, log files establish a list of users, times, and actions. With the support of the Windows Active Directory, scanning access is only granted after the Windows user name and password have been correctly entered. To access the integrated hard disk, a password will be requested to prevent any unauthorised removal.

Explore the

potential.
Making heads and tails of costs
In addition to almost certainly lowering your overall expenditure, the Konica Minolta 7145 offers you even more. Each different department or cost centre that uses the system can be defined and its usage precisely logged. This allows an exact break-down of costs to enable a fair distribution between users.
KME_7145_04.qxd 08.10.2004 14:56 Uhr Seite 9
Configurations to suit your needs
With its modular design concept, the Konica Minolta 7145 is configurable to meet your requirements precisely.
PK-114 punch kit SK-114 saddle kit 64/128/256 MB memory HD-103A hard disk ET-101 exit tray BK-114 additional bin kit IT-101 inner output tray FK-103 fax kit IP-432 (PCL) controller (PS-344, CF-101, 64/128 MB memory)

FS-114 finisher

LT-203 large capacity tray

RU-101 relay unit

Konica Minolta 7145 basic system

FS-113 finisher

7145 pedestal

DB-411 drawer base

DB-211 drawer base
KME_7145_04.qxd 08.10.2004 14:54 Uhr Seite 2

Technical specifications

Copier specifications
1st copy 3.8 sec. Copy speed A4 Up to 45 copies/min. Copy speed A3 Up to 23 copies/min. Copy resolution Max. 600 x 600 dpi Gradations Equivalent to 256 gradations Magnification 25% - 400% in 0.1% steps Multiple copies 1 - 999, countdown, interruption mode Copy memory 64 MB + 64/128/256 MB Copier HDD (optional) 20 GB Copy features Image insertion, chapter/cover & sheet insertion, frame & fold, image rotation, watermark, stamp function Print memory 64 MB (max.192 MB) Printer HDD Compact Flash 128MB Operating system Win 95/98/Me/NT4.0/2000/XP, Mac OS (PS3 only) Network utilities Page Scope NetCare/Web Connection/ Network Setup/NDPS Gateway/EMS Plug-ins

System specifications

Automatic document feeder (optional) RADF for 50-80 pages A5-A3 Original Size A5 to A3 Printable Size A5 to A3 Paper weight 50-130 g/m2 Paper input capacity Standard: 1,050 pages Max.: 4,550 pages Sheet bypass Multi-bypass tray 50 sheets Paper output capacity Max.: 3,250 Finishing mode Stapling Sorting Punching Folding Booklet Warm-up time Approx. 30 sec. System dimensions (WxDxH,mm) 595 x 655 x 815 System weight Approx. 91 kg
Fax specifications (optional)
Fax transmission time 2 seconds Fax modem speed 33.6 Kbps Coding MH, MR, MMR, JBIG Fax memory 16 MB Standard Fax features Internet fax, PC network fax, delayed transmission, broadcasting, polling, memory receiving
Printer specifications (optional)
Print speed A4 Up to 45 copies/min. Print speed A3 Up to 23 prints/min.

Scanner specifications

Scan speed Up to 65 scans/min. Scan resolution Max. 600 x 600 dpi Scan modes TWAIN scan Scan-to-FTP Scan-to-eMail Scan-to-box (document folder) Scan-to-SMB Scan-to-HDD
Common Criteria Validated
Print resolution Max. 600 x 600 dpi Page description language PCL5e/PCL6 compatible (standard), PS3 (optional) Interface IEEE1284/RJ45/USB 2.0
All specifications relating to paper capacity refer to A4-sized paper of 80 g/m2 quality. All specifications relating to scanning, copying or printing speeds refer to A4-sized paper that is scanned, copied or printed crosswise in multipage, simplex mode. The memory capacities listed refer to A4-sized paper with the toner coverage detailed in the respective foot note. Some of the product illustrations contain optional accessories. Konica Minolta does not warrant that any prices or specifications mentioned will be error-free. Specifications are subject to change without notice. Microsoft, Windows, and the Windows logo are trademarks, or registered trademarks of Microsoft Corporation in the United States and/or other countries. All other brand and product names may be registered trademarks or trademarks of their respective holders and are hereby acknowledged. Printed in Germany on chlorine-free bleached paper. Copyright 2004 Konica Minolta Business Solutions Europe GmbH
Your Konica Minolta Business Solutions Partner:
Europaallee Langenhagen Germany Tel.: +49 (0) 04-0 Fax: +49 (0) 10 50

51012071450/10-04/Kuthal

Konica Minolta Business Solutions Europe GmbH

All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. x

ST Introduction

ST Identification
1.1.1. ST Identification Name: Version: Creation Date: Producer: Multi-Functional Printer (Digital Copier) 7145 Series Security Target Version 13 March 1, 2004 Konica-Minolta Business Technologies, Inc.
1.1.2. TOE Identification Name: 7145 System Control Software (Japan) 7145 Control Software (Overseas) Version: Developer: 25.0000 Konica-Minolta Business Technologies, Inc.
7145 System Control Software (Japan) and 7145 Control Software (Overseas) are identical that differ only in their name. The name 7145 System Control Software is used hereafter as for TOE. 1.1.3. Used CC version JIS X 5070:2000 Note: The Japanese versions are used as for the following materials. Common Criteria for Information Technology Security Evaluation Part 1: Overview and General Model, version 2.1, August 1999, CCIMB-99-031 (Japanese) Common Criteria for Information Technology Security Evaluation Part 2: Security Structure Requirements, version 2.1, August 1999, CCIMB-99-032 (Japanese) Common Criteria for Information Technology Security Evaluation Part 3: Security Assurance Requirements, version 2.1, August 1999, CCIMB-99-033 (Japanese)

ST Overview

This ST describes 7145 System Control Software loaded into Sitios 7145 Series digital copiers (hereafter, called as 7145 Series). 7145 System Control Software is a product of Konica-Minolta Business Technologies, Inc. 7145 System Control Software includes the following functions such as used for copying, printing and faxing: copy, print, fax, scan to FTP, scan to email, PC-Fax save, i-Fax. The TOE is 7145 System Control Software. The assets handled by TOE functions are document data.
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 1

CC Conformance Claim

The TOE, which is the subject of this ST, conforms to the following.
For security function requirements Part 2 conformant For security assurance requirements Part 3 conformant Evaluation assurance level EAL 3 conformant

Reference Materials

Common Criteria for Information Technology Security Evaluation Part 1: Introduction and general model August 1999 Version 2.1 CCIMB-99-031

Common Criteria for Information Technology Security Evaluation Part 2: Security functional requirements August 1999 Version 2.1 CCIMB-99-032
Common Criteria for Information Technology Security Evaluation Part 3: Security assurance requirements August 1999 Version 2.1 CCIMB-99-033
Common Criteria CCIMB Interpretations-0210 Common Criteria Supplement 0210 ISO/IEC 15408, Information Technology - Security techniques - Evaluation criteria for IT security - Part 1, 99/12 ISO/IEC 15408, Information Technology - Security techniques - Evaluation criteria for IT security - Part 2, 99/12 ISO/IEC 15408, Information Technology - Security techniques - Evaluation criteria for IT security - Part 3, 99/12
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 2

TOE Description

TOE Type
Digital copier software products containing network functions.

Terminology

Term User BOX Document Data Paper Documents Explanation Directory storing document data (see No. 2). Data for digitized information such as letters and figures. Paper-based documents bearing information such as letters and figures. Touch panel display and operation buttons integrated into 7145 Series cabinet. Network as LAN in organization introducing 7145 Series. Connected to the client PC and each server (Mail server, FTP server, etc.). Network other than the internal network (See No. 5). Internet, etc.

Operation Panel

Internal Network

External Network

TOE Overview
The TOE is 7145 Control Software. The 7145 Series loaded with the TOE is a series of digital copiers with network functions, and it offers functions such as copy/print/fax, operational control of the 7145 Series, and maintenance control of the 7145 Series. Figure 2-1. 7145 Series Operating Environment illustrates a typical office environment using the 7145 Series.
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 3
Figure 2-1. 7145 Series Operating Environment The TOE has functions for sending and receiving document data through internal networks and public telephone line networks. Accordingly, the 7145 Series loaded with the TOE is connected to an internal network and a public telephone line network as shown in Figure 2-1. 7145 Series Operating Environment. The internal network connects a mail server and FTP server to allow sending data by general user client PCs and the 7145 Series. The TOE does not have an external network interface. When an external network is connected, it shall be connected through a firewall in order to protect each device on the internal network.

7145 Series Participants and Roles
7145 Series participants and roles are described as follows.

General Users

General users belong to the organization introducing the 7145 Series and utilize the user functions such as copying, printing, and faxing in 7145 Series. By registering with the TOE, general users can own a User Box on the optional HDD of 7145 Series.

Administrators

Administrators belong to the organization introducing the 7145 Series and perform operational administration management of the 7145 Series. Administrators use operational administration functions provided by the 7145 Series. All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 4

Managers

Managers belong to the organization introducing the 7145 Series and designate administrators. CE (Customer Engineers)
CE belongs to the company entrusted to maintain the 7145 Series. CE use operational administration functions provided by the 7145 Series. CE makes 7145 Series maintenance contracts with managers and administrators.

Fax Users

Fax users utilize the fax function connected through the public telephone line network and send document data to the 7145 Series. General users, administrators and CE are called as product related personnel.

TOE Structure

Figure 2-2. TOE Structure illustrates the structure of this TOE.
Figure 2-2. TOE Structure All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 5
The 7145 Series is composed of hardware, OS, and 7145 System Control Software. The hardware includes 7145 Series main unit components, a printer option, a HDD option, a fax option, an operations panel, and a network card. The 7145 Series main unit components include a scanner for digitizing paper documents. The USB interface is used for connection to a computer when installing the TOE. The printer option prints letters and graphics on printer paper. The HDD option provides a memory storage device. The fax option provides a public telephone line port for connection to a public telephone line network and a modem for converting analog signals to digital signals. VxWorks 5.4 is used as the OS. The 7145 System Control Software operates on the OS (VxWorks 5.4). The OS controls input/output of document data for the hardware and for the 7145 System Control Software. User Boxes are created on the memory storage of the optional HDD by operation of 7145 System Control Software. Document data files storing document data are in the User Box. Multiple User Boxes can be created on the 7145 Series. The range of TOE control is shown by the shaded area of Figure 2-2. TOE Structure. The 7145 Series receives requests for processing from fax users or CE through a public telephone line network, or from users through the operation panel, or from users through a network. The TOE executes those processing requests.

7145 System Control Software Structure
The 7145 System Control Software has the following functions. 2.6.1. Basic Functions Basic functions are functions that utilize the document data stored in the User Box by a general user or fax user. The User Box is identified by a User Box identifier, and a User Box password is set for each User Box in order to confirm the authenticity of the owner of each User Box. An overview of basic functions is shown in Figure 2-3. Basic Functions Processing Concepts.
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 6
Figure 2-3. Basic Functions Processing Concepts Basic functions are writing, reading and deleting of document data. As shown in Table 2-1. User Viewable Functions and Basic Functions Support, executions of functions visible to the user are enabled by execution of basic functions. Basic functions will be described as follows. Table 2-1. User Viewable Functions and Basic Functions Support No. 7 Functions Visible to the User Copy function Fax function i-Fax function Printer function PC-Fax function Scan to Email function Scan to FTP function Basic Functions Scanner function and printing function Scanner function and fax sending function; fax receiving function and printing function PC data receiving function and email function PC data receiving function and printing function PC data receiving function and fax sending function Scanner function and email function Scanner function and FTP function
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 7
Document data deleting function

Deleting function

Functions utilizing the User Box illustrated in Figure 2-3. Basic Functions Processing Concepts are described below. 2.6.1.1. Document Data Write Function
This function provides a process to write document data additionally in the User Box by following three methods. (It cannot overwrite.) (1) Scanner Function A general user enters instructions from the operation panel, then the information of the paper document is read by the scanner and converted to document data, and the document data is saved in the User Box. (2) PC Data Receive Function A general user enters instructions from a client PC, and document data is routed through the internal network and saved in the User Box. (3) Fax Receive Function A fax user sends a fax, then the document data is received from the fax device connected to the public telephone line network, and the document data is saved in the User Box. 2.6.1.2. Document Data Read Function
This function provides a process to read document data from the User Box by following four methods, while ensuring that the data is protected from output processing by another user. This function can only be used from the operation panel. (1) Print Function A general user enters the User Box identifier and User Box password using the operation panel and prints only document data contained in the User Box belonging to the user. (2) Fax Send Function A general user enters the User Box identifier and User Box password using the operation panel and sends to a fax device connected to a public telephone line network only document data contained in the User Box belonging to the user. (3) Email Function A general user enters the User Box identifier and User Box password using the operation panel, attaches to an email only document data contained in the User Box belonging to the user, and sends the mail to the mail server. (4) FTP Function A general user enters the User Box identifier and User Box password using the operation panel and sends to the FTP server only document data contained in the User Box belonging to the user. All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 8

2.6.1.3.

Document Data Delete Function
A general user enters the User Box identifier and User Box password and is able to delete only document data contained in the users own User Box. This function can only be used from the operation panel. 2.6.2. Management Functions Management functions can be used by administrators, only after identification and authentication have been completed. These functions are available only through the operation panel. Administrators use control functions to set TOE network information and establish operational settings for functions belonging to the TOE. In addition, control functions manage information related to operation of the digital copier, such as creating/modifying/deleting the attributes of User Boxes, printing audit information, initializing the HDD, controlling the number of printed copies, troubleshooting, and checking the shortage of toner. 2.6.3. CE Functions CE functions can be used by CE for the following functions only after identification and authentication have been completed. Service Setting Mode
CE use the operation panel to utilize service setting mode functions and execute password registration and changes for administrators. KRDS
CE use a computer connected through a public line network to collect information for the purpose of maintaining the hardware, such as number of prints, number of jams, and toner shortage. KRDS also communicates along with the procedures that conform to International Standards Agreement G3 for fax transmission set by CCITTT.30. ISW
CE use a computer connected through USB interface to the 7145 Series to perform operations and establish initial settings for updating the TOE.

Assets to be protected

Assets to be protected by the TOE are listed below. Document data stored in the User Box.
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 9

TOE Security Environment

Assumptions
ASM.PLACE TOE Installation Conditions The TOE is connected to the internal network, and it is installed in a physically protected area and is allowed to be used only by product related personnel. ASM.PHYSICAL Chassis Protection
The HDD storing the document data cannot be removed by anyone other than CE. ASM.NET Internal Network Installation Conditions
The TOE is connected to the internal network so that does not cause any disclosure of document data. ASM.ADMIN Trusted Administrators
Administrators are personnel with sufficient skill and trustworthiness for controlling the TOE, and they do not engage in inappropriate actions. ASM.CE CE Conditions
CE does not engage in inappropriate actions. ASM.USR Management of General Users
Administrators control and encourage general users to keep in proper operation from the security viewpoint. ASM.SECMODE Security Functions Execution

All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 22
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 23
FDP_RIP.1 Hierarchical to: No other components. FDP_RIP.1.1
Subset residual information protection
The TSF shall ensure that any previous information content of a resource is made unavailable upon the [selection: allocation of the resource to, deallocation of the resource from] the following objects: [assignment: list of objects]. [selection: allocation of the resource to, deallocation of the resource from] Delete allotted resources from
[assignment: list of objects] User Box
Dependencies: No dependencies
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 24
FAU_GEN.1 Hierarchical to: No other components. FAU_GEN.1.1

Audit data generation

The TSF shall be able to generate an audit record of the following auditable events: (a) Start-up and shutdown of the audit functions; (b) All auditable events for the [selection: minimum, basic, detailed, not specified] level of audit; and (c) [assignment: other specifically defined auditable events]. [selection: minimum, basic, detailed, not specified] Not defined
[assignment: other specifically defined auditable events] Audit events are recorded in Table 5-1.
Table 5-1. Events That Become Audit Targets Function Component FIA_UID.2 Audit(Log) Data
Successful or unsuccessful identification at time of identifying administrators, CE, and general users possessing User Boxes. Successful or unsuccessful authentication at time of authenticating administrators, CE, and general users possessing User Boxes. Unsuccessful authentications reaching threshold for administrators, CE, and general users possessing User Boxes. Denial or acceptance of authentication data at time of registration or modification for acceptable values of authentication data. Successful or unsuccessful request at execution of operations for object. Use of control functions (FIA_UID.2, FIA_UAU.2, FMT_MTD.1, MFT_MSA.1, FMT_MSA.3, FMT_SMR.1)

All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 29
FAU_SAR.2 Hierarchical to: No other components. FAU_SAR.2.1

Restricted audit review

The TSF shall prohibit all users read access to the audit records, except those users that have been granted explicit read-access. Dependencies: FAU_SAR.1 Audit review
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 30
FMT_MTD.1[1] Hierarchical to: No other components. FMT_MTD.1.1

Management of TSF data

The TSF shall restrict the ability to [selection: change default, query, modify, delete, clear, [assignment: other operations]] the [assignment: list of TSF data] to [assignment: the authorized identified roles]. [assignment: list of TSF data] Administrator password
[selection: change default, query, modify, delete, clear, [assignment: other operations]] Change, Other operation
[assignment: other operations] Register
[assignment: the authorized identified roles] CE
Dependencies: FMT_SMR.1 Security roles FMT_SMF.1 Specification of management functions
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 31
FMT_MTD.1[2] Hierarchical to: No other components. FMT_MTD.1.1
The TSF shall restrict the ability to [selection: change default, query, modify, delete, clear, [assignment: other operations]] the [assignment: list of TSF data] to [assignment: the authorized identified roles]. [assignment: list of TSF data] CE password
[selection: change default, query, modify, delete, clear, [assignment: other operations]] Change
[assignment: other operations] None
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 32
FMT_MTD.1[3] Hierarchical to: No other components. FMT_MTD.1.1
The TSF shall restrict the ability to [selection: change default, query, modify, delete, clear, [assignment: other operations]] the [assignment: list of TSF data] to [assignment: the authorized identified roles]. [assignment: list of TSF data] User Box password
[assignment: the authorized identified roles] Administrator
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 33
FMT_MTD.1[4] Hierarchical to: No other components. FMT_MTD.1.1
[selection: change default, query, modify, delete, clear, [assignment: other operations]] Other operation [assignment: other operations] Change only the User Box password of the general user who possesses the User Box.
[assignment: the authorized identified roles] General user who possesses the User Box
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 34

FMT_MSA.1 Management of security attributes Hierarchical to: No other components. FMT_MSA.1.1 The TSF shall enforce the [assignment: access control SFP, information flow control SFP] to restrict the ability to [selection: change default, query, modify, delete, [assignment: other operations]] the security attributes [assignment: list of security attributes] to [assignment: the authorized identified roles]. [assignment: list of security attributes] User Box identifier
[selection: change default, query, modify, delete, [assignment: other operations]] Delete Other operation
[assignment: access control SFP, information flow control SFP] Access Control Policy 2
Dependencies: [FDP_ACC.1 Subset access control or FDP_IFC.1 Subset information flow control] FMT_SMR.1 Security roles FMT_SMF.1 Specification of management functions
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 35
FMT_MSA.3 Static attribute initialization Hierarchical to: No other components. FMT_MSA.3.1 The TSF shall enforce the [assignment: access control SFP, information flow control SFP] to provide [selection: restrictive, permissive, other property] default values for security attributes that are used to enforce the SFP. [selection: restrictive, permissive, other property] Restrictive
Details: Security Attributes User Box Identifier FMT_MSA.3.2 The TSF shall allow the [assignment: the authorized identified roles] to specify alternative initial values to override the default values when an object or information is created. [assignment: the authorized identified roles] Administrators FMT_MSA.1 Management of security attributes FMT_SMR.1 Security roles

Dependence:

All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 36
FMT_SMR.1 Security roles Hierarchical to: No other components. FMT_SMR.1.1 The TSF shall maintain the roles [assignment: the authorized identified roles]. [assignment: the authorized identified roles] Administrators CE General users possessing a User Box

FMT_SMR.1.2 The TSF shall be able to associate users with roles. Dependencies: FIA_UID.1 Timing of identification
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 37
FMT_MOF.1 Management of security functions behaviour Hierarchical to: No other components. FMT_MOF.1.1 The TSF shall restrict the ability to [selection: determine the behaviour of, disable, enable, modify the behaviour of] the functions [assignment: list of functions] to [assignment: the authorized identified roles]. [assignment: list of functions] Security Intensification function: Function enabling all security functions
[selection: determine the behaviour of, disable, enable, modify the behaviour of] Allow operation
[assignment: the authorized identified roles] Administrators FMT_SMR.1 Security roles FMT_SMF.1 Specification of management functions
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 38
FMT_SMF.1 Specification of management functions The TSF shall be capable of performing the following security management functions: [assignment: list of security management functions to be provided by the TSF]. [assignment: list of security management functions to be provided by the TSF] Shown in Table 5-2. Control Requirement Item List.
Table 5-2. Control Requirement Item List Function Requirement FIA_UID.2 Control Requirement Management of user identification data Management of authentication data by related user Control Item User Box identifier
Administrator password CE password User Box password
Management of authentication data by user related to this data

FIA_UAU.7 FIA_SOS.1

None Management of measure used for verification of password No management item because measure used for password verification can be modified No management item because threshold is fixed and cannot be modified No management item because actions are fixed and cannot be modified
Management of threshold for unsuccessful authentication attempts
Management of actions available at authentication failure event
FDP_ACC.1[1] FDP_ACC.1[2]

None None

All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 39

Function Requirement FDP_ACF.1[1]
Control Requirement Management of properties used in decision based on explicit access or denial Management of properties used in decision based on explicit access or denial Selection of time when protection of remaining data is executed (specifically, for allotment or cancellation of allotment) is available for setting for TOE None None Preservation of actions available at audit storage failure
Control Item User Box identifier

FDP_ACF.1[2]

User Box identifier

FDP_RIP.1

No management item because protection of remaining data is always executed
FAU_GEN.1 FAU_STG.1 FAU_STG.4
No management item because actions available at audit storage failure cannot be modified No management item because only administrators possess read privileges for audit records and this cannot be modified

FAU_SAR.1

Preservation of user groups having read privileges for log records(deleting, modifying, adding)

FAU_SAR.2 FMT_MTD.1[1]

None Management of groups which give reciprocally influence with TSF data Management of groups which give reciprocally influence with TSF data Management of groups which give reciprocally influence with TSF data Management of groups which give reciprocally influence with TSF data CE password

FMT_MTD.1[2]

CE password

FMT_MTD.1[3]

Administrator password

FMT_MTD.1[4]

User Box password
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 40
Function Requirement FMT_MSA.1
Control Requirement Management of groups which give reciprocally influence with security properties Management of groups which specify the initial set data Management of permission and restriction for default value settings of prescribed access control SFP
Control Item Administrator password

FMT_MSA.3

No management item because default values are fixed

FMT_SMR.1

Management of user groups which is a part of roles
CE password Administrator password User Box password

FPT_SEP.1 FMT_MOF.1

None Management of groups which give reciprocally influence with TSF function None None Administrator password

FMT_SMF.1 FMT_RVM.1

Dependencies: No Dependencies
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 41
FPT_RVM.1 Hierarchical to: No other components. FPT_RVM.1.1

FIA_SOS.1 FMT_MTD.1[1] FMT_SMF.1 FMT_SMR.1 FPT_SEP.1 FPT_RVM.1
IA.ADM_ADD Administrator Registration
IA.ADM_ADD registers administrators in the TOE. Only CE operates IA.ADM_ADD. CE registers the passwords of administrators. IA.ADM_ADD presents an interface for administrator registration. The administrator registration interface requests password input for registering administrator. For passwords input by administrators, following rules are used to verify the permitted values.
The password must be 8 characters The password must be composed of English upper case letters, English lower case letters, or numerals The password prohibits the values which are identical to the last password to be used The password prohibits a series of the same characters to be used
In verification of permitted values, administrators are registered when the above rules are observed. When the above rules are not observed, registration is denied.
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 46

Function Name

Security Function Specification
TOE Security Function Requirement
FIA_UID.2 FIA_UAU.2 FIA_UAU.7 FIA_AFL.1 FPT_SEP.1 FPT_RVM.1
IA.ADM_AUTH Administrator Identification and Authentication
IA.ADM_AUTH identifies that an administrator is registered in the TOE and authenticates that the operator is the administrator before the operator can use the TOE. IA.ADM_AUTH does not permit any operation of administrator functions before identification and authentication of the administrator. The interface for administrator identification and authentication requests input of the password registered by IA.ADM_ADD or modified by IA_PASS. IA.ADM_AUTH identifies administrators through the interface display for administrator identification and authentication, and it authenticates the administrator by the input password. When the administrator inputs the password, dummy characters (*) are shown in place of the input password. When authentication is unsuccessful, the interface for administrator identification and authentication is displayed after 5 seconds.

IA.CE_AUTH CE Identification and Authentication
IA.CE_AUTH identifies that a CE is registered in the TOE and authenticates that the operator is the CE before the operator can use the TOE. IA.CE_AUTH does not permit any operation of CE functions before identification and authentication of the CE. It requests input of the password modified by IA_PASS. IA.CE_AUTH identifies CE through the interface display for CE identification and authentication, and it authenticates the CE by the input password. When the CE inputs the password, dummy characters (*) are shown in place of the input password. When authentication is unsuccessful, the interface for CE identification and authentication is displayed after 5 seconds.
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 47
FIA_SOS.1 FMT_MTD.1[1] FMT_MTD.1[2] FMT_MTD.1[3] FMT_MTD.1[4] FMT_SMF.1 FMT_SMR.1 FPT_SEP.1 FPT_RVM.1
IA.PASS Password Modification
IA.PASS modifies an administrator password, CE password or User Box password that is the authentication data for the administrator, CE or general user possessing a User Box. IA.PASS presents an interface for password modification and requests input of a new password. Password modification is available depending on the user as follows. CE: CE passwords, administrator passwords
Administrator: User Box passwords General user possessing a User Box: The User Box password for users own User Box. For the password input by product related personnel, acceptable values are verified according to the following rules.
The password must be 8 characters The password must be formed with English upper case letters, English lower case letters, or numerals The password prohibits values which are identical to the last password to be used The password prohibits a series of the same characters to be used
In verification of permitted values, password is modified when the above rules are observed.
All Rights Reserved, Copyright 2004 by Konica-Minolta Business Technologies, Inc. 48
6.1.2. Access Control The Access Control function provides the following security functions group. Function Name Security Function Specification TOE Security Function Requirement
FIA_UID.2 FIA_UAU.2 FIA_UAU.7 FIA_AFL.1 FIA_ACC.1[1] FIA_ACF.1[1] FPT_SEP.1 FPT_RVM.1
ACL.USR General User Access Rules and Control
ACL.USR identifies and authenticates a general user possessing a User Box, and controls the available range of operations for a general user by the following access rules after the general user is authenticated. ACL.USR identifies and authenticates the general user possessing a User Box based on the User Box password and User Box identifier. Dummy characters (*) are displayed for the entered User Box password when the User Box password is input. After authentication, the following operations are permitted to the document data in the User Box identified by the authenticated User Box identifier.