Specifications
In addition to the wide variety of device and network security features that are standard on
imagePlatform-based devices, Canon offers advanced security options to assist companies in
meeting their internal privacy goals and address strict regulation guidelines.
Developed in accordance with extended security requirements of key customers and U.S. government
agencies, Canon offers advanced security features that include:
• Canon Advanced imageRUNNER Security Solutions
- HDD Data Encryption
- HDD Data Erase
- Job Log Conceal
• Other Optional Advanced Security Features
- HDD Format
- Removable HDD
3.1 – Canon Advanced imageRUNNER Security Solutions
HDD Dat
a Encryption Kit
The HDD Data Encryption Kit option ensures that all data stored on the internal disk drive is protected
using industry-standard algorithms. The HDD Data Encryption Kit is a dedicated plug-in board that
encrypts every byte of data before it is committed to the disk using 256-bit AES (Advanced Encryption
Standard) or 168-bit 3DES (Triple Data Encryption Standard) algorithms, depending on the device
model.
Encryption on the hard drive is achieved through a multi-step process to mitigate the risk of
unauthorized disclosure. First, the imageRUNNER/imagePRESS device uses mathematical
algorithms to scramble bits of data. The data is then encrypted using a secret key created in the
imageRUNNER/imagePRESS device before it is written to the internal disk drive, providing protection
for both temporary and permanent data such as documents stored in Mail Boxes. Finally, the data is
stored in random, non-contiguous locations on the imageRUNNER/imagePRESS device’s hard drive to
make the intelligible reconstruction of files infeasible in the event the disk is removed.
Canon’s HDD Data Encryption Kit for imageRUNNER/imagePRESS devices have received Common
Criteria Certification of Evaluation Assurance Level 3 (EAL3).
Please refer to the Addendum for information on the optional HDD Data Encryption Kit available for
each imageRUNNER/imagePRESS device.
HDD Data Erase Kit
Through the use of the optional HDD Data Erase Kit, security conscious customers can configure their
imageRUNNER/imagePRESS systems to overwrite the internal image server hard disk, erasing
previous data stored as part of routine job processing. The HDD Data Erase Kit offers
administrative options that allow the system administrators to configure the level of overwrite
protection.
Section 3 — Advanced Security Features
21
White Paper: Canon imageRUNNER/imagePRESS Security