Specifications

Print Controller Design Guide for Information Security:
Page 13 of 92
9. The USB I/F (Type A) only allows connection with devices that support either IC card-based
authentication or PictBridge printing functions. Each function can be enabled/disabled individually.
PictBridge printing functions (color MFP/LPs only):
After the identity of the connected PictBridge device is verified, the interface and device exchange only
pre-defined commands and/or data. Access to data stored inside the MFP/LP is not possible. In
addition, if User Authentication has been enabled, the machine will not accept commands or data from
any PictBridge functions that do not require authentication.
IC card-based authentication functions:
Authentication is mutual and encrypted, which prevents impersonation and ensures that data is
properly protected.
4. Firmware Update
It is possible to update the firmware and application programs stored in the MFP/LP using an SD card or
via a remote connection.
Firmware Installation Using an SD Card
• Since SD cards themselves are generic items that are widely available for purchase in the field, the
following process is used to prevent the illegal introduction of data and programs into the MFP/LP via
this storage media. Briefly stated, a license server assigns a digital signature to the software, which is
then used by the MFP/LP to authenticate the program.
1. The Ricoh license server applies the SHA-1 algorithm (Secure Hash Algorithm 1) to the program to
generate the value MD1. A private key is used to encrypt this value, which is then used as the
firmware’s digital signature.
2. The firmware in the SD card is introduced into the MFP/LP from the SD card slot.
3. The MFP/LP checks the firmware to identify the type (e.g. Printer, FAX, Copier), verify that the
model name is the same as its own, and verify that the firmware version is newer that the one
already installed.
4. The MFP/LP then applies SHA-1 to the program to generate MD1, after which it uses a public key
to decrypt the digital signature to generate MD2.
5. If MD1 = MD2, the firmware update process begins.