Specifications

ManualsBrandsCanon ManualsAll in One PrinteriR2870 Series

CRP-C0036-01

Certification Report

Buheita Fujiwara, Chairman

Information-Technology Promotion Agency, Japan

Target of Evaluation

Application date/ID September 30, 2005 (ITC-5070)

Certification No. C0036

Sponsor Canon Inc.

Name of TOE Canon iR4570/iR3570/iR2870/iR2270 Series

iR Security Kit-B2 (Japanese version)

iR Security Kit-B2 (International version)

Version of TOE Version 2.03

PP Conformance None

Conformed Claim EAL3

TOE Developer Canon Inc.

Evaluation Facility Electronic Commerce Security Technology

Laboratory Inc. Evaluation Center

This is to report that the evaluation result for the above TOE is certified as

follows.

January 18, 2006

Haruki Tabuchi, Technical Manager

Information Security Certification Office

IT Security Center

Information-Technology Promotion Agency, Japan

Evaluation Criteria, etc.: This TOE is evaluated in accordance with the following

criteria prescribed in the “General Requirements for IT

Security Evaluation Facility”.

- Common Criteria for Information Technology Security Evaluation Version 2.1

(ISO/IEC 15408:1999)

- Common Methodology for Information Technology Security Evaluation

Version 1.0

- CCIMB Interpretations (as of 01 December 2003)

Evaluation Result: Pass

“Canon iR4570/iR3570/iR2870/iR2270 Series iR Security Kit-B2 Version 2.03

(Japanese version) iR Security Kit-B2 Version 2.03 (International version)” has

been evaluated in accordance with the provision of the “IT Security Certification

Procedure” by Information-Technology Promotion Agency, Japan, and has met

the specified assurance requirements.

Summary of content (24 pages)

PAGE 1
CRP-C0036-01 Certification Report Buheita Fujiwara, Chairman Information-Technology Promotion Agency, Japan Target of Evaluation Application date/ID Certification No. Sponsor Name of TOE Version of TOE PP Conformance Conformed Claim TOE Developer Evaluation Facility September 30, 2005 (ITC-5070) C0036 Canon Inc. Canon iR4570/iR3570/iR2870/iR2270 Series iR Security Kit-B2 (Japanese version) iR Security Kit-B2 (International version) Version 2.03 None EAL3 Canon Inc.
PAGE 2
CRP-C0036-01 Notice: This document is the English translation version of the Certification Report published by the Certification Body of Japan Information Technology Security Evaluation and Certification Scheme.
PAGE 3
CRP-C0036-01 Table of Contents 1. Executive Summary ........................................................................................... 1 1.1 Introduction ................................................................................................. 1 1.2 Evaluated Product ........................................................................................ 1 1.2.1 Name of Product ........................................................................................... 1 1.2.
PAGE 4
CRP-C0036-01 1. Executive Summary 1.1 Introduction This Certification Report describes the content of certification result in relation to IT Security Evaluation of “Canon iR4570/iR3570/iR2870/iR2270 Series iR Security Kit-B2 Version 2.03 (Japanese version) iR Security Kit-B2 Version 2.03 (International version)” (hereinafter referred to as “the TOE”) conducted by Electronic Commerce Security Technology Laboratory Inc.
PAGE 5
CRP-C0036-01 By installing this product, security enhancements can be added to the multifunction product, helping users counter the threat of unauthorized disclosure of their temporary image data created on the HDD and image data stored in the inboxes and image data that is transmitted over the Remote UI communication path. 1.2.3 Scope of TOE and Overview of Operation Figure 1-1 depicts a typical operating environment of the multifunction product with the TOE installed.
PAGE 6
CRP-C0036-01 Control Software (software: TOE) Remote UI Contents (software: TOE) Pre-installed MEAP App (software: TOE) Optional MEAP App (software: outside TOE) Controller (hardware: outside TOE) Scan Engine/ADF (hardware: outside TOE) Printer Engine (hardware: outside TOE) Control Panel (hardware: outside TOE) Note: The cross-hatched portion indicates the scope of the TOE.
PAGE 7
CRP-C0036-01 clear the password for that inbox. The user assigned as the System Manager can log in to the System Management Mode by entering the System Manager ID and the System Password on the Control Panel of the multifunction product. While in the System Management mode, the System Manager can not only modify or clear any inbox’s password, but also can modify the System Manager ID and the System Password themselves.
PAGE 8
CRP-C0036-01 A function to send scanned documents or documents stored in a User Inbox or the Memory Reception Inbox as faxes or TIFF or PDF format files to an outside e-mail address or a shared folder on an external PC. This function also allows network faxing from a user ’s desktop through the use of a fax driver. The Universal Send function involves the process of creating temporary image data on the HDD of the multifunction product.
PAGE 9
CRP-C0036-01 and CEM. More specific, the evaluation facility examined “Canon iR4570/iR3570/iR2870/iR2270 Series iR Security Kit-B2 V2 Security Target Version 1.03” as the basis design of security functions for the TOE (hereinafter referred to as “the ST”)[1], the evaluation deliverables in relation to development of the TOE and the development, manufacturing and shipping sites of the TOE.
PAGE 10
CRP-C0036-01 1.5.4 Security Functions Security functions of the TOE are as follow. HDD Data Encryption The TOE generates 168-bit Triple DES cryptographic keys using the Canon iR cryptographic key generation algorithm. Whenever writing image data to the HDD, the TOE uses a FIPS PUB 46-3-compliant 168-bit Triple DES algorithm for encryption of the image data. Whenever reading out image data from the HDD, the TOE uses a FIPS PUB 46-3-compliant 168-bit Triple DES algorithm for decryption of the image data.
PAGE 11
CRP-C0036-01 Department ID Management function is not active, the function is invoked when the System Settings Screen is displayed on the Control Panel or in the Remote UI window. The TOE identifies and authenticates the user as the System Manager only after verifying that the user-given ID and password are the correct System Manager ID and System Password.
PAGE 12
CRP-C0036-01 Table 1-1 Assumed Threats Threat A malicious individual may attempt to disclose temporary image data or inbox-stored image data on the HDD of the multifunction product by removing the HDD from the multifunction product and directly accessing the HDD using disk editor tools, etc. T.UNAUTH: An unauthorized inbox user (except the System Operation Attempts Manager) may attempt to disclose inbox-stored by Unauthorized image data by operating the Control Panel or the Users Remote UI. T.
PAGE 13
CRP-C0036-01 Web browser Any of the Web browsers shown in the following table can be used. Table 1-4: Web browsers that can run the Remote UI OS Windows Macintosh Web Browser Microsoft Internet Explorer Netscape Communicator Microsoft Internet Explorer Required SP 5.01 SP2 or later 4.6 or later 5.0 or later Netscape Communicator 5.x and Netscape 6.x are not in the scope of evaluation.
PAGE 14
CRP-C0036-01 - iR4570/iR4570F iR3570/iR3570F iR2870/iR2870F iR2270/iR2270F Network Guide, FA7-9033 iR4570/iR4570F iR3570/iR3570F iR2870/iR2870F iR2270/iR2270F MEAP SMS Administrator Guide, FA7-9034 iR4570/iR4570F iR3570/iR3570F iR2870/iR2870F iR2270/iR2270F MEAP Authentication System Setting Guide, FA7-9035 Note: These document titles were translated from the original Japanese titles. (2) Documents attached to the Canon iR4570/iR3570/iR2870/iR2270 Series iR Security Kit-B2 Version 2.
PAGE 15
CRP-C0036-01 2. Conduct and Results of Evaluation by Evaluation Facility 2.1 Evaluation Methods Evaluation was conducted by using the evaluation methods prescribed in CEM Part 2 in accordance with the assurance requirements in CC Part 3. Details for evaluation activities are report in the Evaluation Technical Report. It described the description of overview of the TOE, and the contents and verdict evaluated by each work unit prescribed in CEM Part 2. 2.
PAGE 16
CRP-C0036-01 Table 2-1: Developer test configuration Version Japanese version: Ver.2.03, International version: Ver.2.
PAGE 17
CRP-C0036-01 described in the ST. b. Testing Approach For the testing, following approach was used. 1. The developer stimulated each security function at each external interface by operating the multifunction product’s Control Panel or the Remote UI, and observed its behavior. 2.
PAGE 18
CRP-C0036-01 1. Security functions whose behavior could not be observed from outside 2. Security functions with changeable parameters The evaluator sampled 24 (23%) of the developer ’s 107 tests for sample testing in a way that all the functions would be covered.
PAGE 19
CRP-C0036-01 3. Conduct of Certification The following certification was conducted based on each materials submitted by evaluation facility during evaluation process. 1. Contents pointed out in the Observation Report shall be adequate. 2. Contents pointed out in the Observation Report shall properly be reflected. 3. Evidential materials submitted were sampled, its contents were examined, and related work units shall be evaluated as presented in the Evaluation Technical Report. 4.
PAGE 20
CRP-C0036-01 4. Conclusion 4.1 Certification Result The Certification Body verified the Evaluation Technical Report, the Observation Report and the related evaluation evidential materials submitted and confirmed that all evaluator action elements required in CC Part 3 are conducted appropriately to the TOE. The Certification Body verified the TOE is satisfied the EAL3 assurance requirements prescribed in CC Part 3. 4.
PAGE 21
CRP-C0036-01 5. Glossary The abbreviations used in this report are listed below. CC: Common Criteria for Information Technology Security Evaluation CEM: Common Methodology for Information Technology Security Evaluation EAL: Evaluation Assurance Level PP: Protection Profile SOF: Strength of Function ST: Security Target TOE: Target of Evaluation TSF: TOE Security Functions The glossaries used in this report are listed below.
PAGE 22
CRP-C0036-01 Inbox user: A regular user of an inbox. Each inbox user can password-protect his desired inbox to prevent access by other regular users. In-memory-rec eption: An act of receiving incoming faxes/I-faxes in memory for storage in the Memory Reception Inbox, without printing. MEAP: Short for Multifunctional Embedded Application Platform, which is a platform for running applications on the multifunction product.
PAGE 23
CRP-C0036-01 6. Bibliography [1] Canon iR4570/iR3570/iR2870/iR2270 Series iR Security Kit-B2 V2 Security Target Version 1.03 (November 17, 2005) Canon Inc.
PAGE 24
CRP-C0036-01 [17] Common Methodology for Information Technology Security Evaluation CEM-99/045 Part 2: Evaluation Methodology Version 1.0 August 1999 [18] Common Methodology for Information Technology Security Evaluation CEM-99/045 Part 2: Evaluation Methodology Version 1.0 August 1999 (Translation Version 1.