Specifications

CRP-C0036-01
8
Department ID Management function is not active, the function is invoked when the
System Settings Screen is displayed on the Control Panel or in the Remote UI window.
The TOE identifies and authenticates the user as the System Manager only after
verifying that the user-given ID and password are the correct System Manager ID and
System Password. If an incorrect System Manager ID or System Password is entered
from the Control Panel or via the Remote UI, the TOE imposes a 1-second wait time
before redisplaying the Password Entry Screen. Once authorized, the user, if accessing
from the Control Panel, is maintained by the TOE as the System Manager with
permissions to configure system management settings, manipulate any inbox and
execute inbox management functions, until the System Management mode is canceled
with the ID key on the Control Panel. If the user is accessing from the Remote UI, the
TOE maintains the user the System Manager until the Web browser is closed.
System Manager Management
The TOE assigns the following privileges to the System Manager only:
・ The System Manager can modify the System Manager ID and System Password,
and can also delete (unset) the System Manager ID. The System Password is
limited to a 7-digit number by the TOE. The TOE limits the System Password to a
7-digit number.
・ The System Manager can activate or deactivate the Secure Communication
(Remote UI) function.
Secure Communication (Remote UI)
The TOE uses SSL for secure communications between the Remote UI and a user’s Web
browser in order to protect the transmitted data from unauthorized modification and
disclosure.
1.5.5 Threat
This TOE assumes such threats presented in Table 1-1 and provides functions for
countermeasure to them.