Specifications

CRP-C0239-01
20
Ricoh imagio MP 5000SPF, Ricoh Aficio MP 4000SPF were used for machines
with Fax function.
- Telephone Switchboard Simulator
TLE-101III (manufactured by LSI JAPAN CO., LTD.) was used for machines
to be considered equivalent to public lines.
The configuration of the developer testing covers the TOE configuration which is
identified in this ST except for MFP as the TOE. Since the configuration of the
developer testing also covers the properties (print speed, domestic or overseas
machines, with/without Fax Function) of each MFP identified in this ST, it is
considered as covering each MFP for the TOE identified in ST.
2) Outlining of Developer Testing
Outlining of the testing performed by the developer is as follows:
a. Test configuration
The test configuration which the developers implemented is shown in Figure 2-1.
The developer testing is implemented in the environment to be considered as
covering the TOE configuration identified in ST.
b. Testing Approach
Testing, mainly from the usage of the desired TOE (operate the Operation Panel,
internal network or client PC which is connected with USB, operate Fax
machines), stimulated an external interface to the TOE and performed in a way
to eye-check and observe the results. Sometimes it is inappropriate to use such
ways. In that case, the following approach was used:
1. To ensure that the communication over the internal network is SSL, IPSec
protocol, capture the communication over the internal network using
WireShark, and then check it.
2. To ensure the operation which is inside of the TOE, replace MFP control
software with the embedded code to output the debug information and then
check the output debug information.
3. To ensure the function of checking the integrity for MFP control software,
replace the MFP control software with the code, "which is embedded to output
the debug information and in which the integrity is damaged", and then check
the output debug information.
c. Scope of Testing Performed
This testing is implemented by the developers for approximately 642 items.
It detected that the coverage analysis was implemented and all of the security
functions and external interfaces described in the function specifications were
completely tested. Also, it detected that the depth analysis was implemented
and that all of the subsystems and subsystem interfaces described in the
upper-level design were fully tested.
d. Result
The test results by the developers verified that the expected test results and the
actual test results met. The evaluators confirmed the implementation methods