Specifications

Print Controller Design Guide for Information Security:
Page 29 of 92
10. Job/Access Logs
• Job logs and access logs for the principal machine functions in contain entries for job status-related
events (initiation, completion, any changes during the job), while the access log contains entries for
MFP/LP operational events (authentication, operations performed on documents, administrator
operations). Therefore, not every single operational or status-related event is recorded in the log.
• Both logs are saved to the HDD by the LCS, and contain a date and time for each entry. By saving
the data to the log along with the time and date of the operation performed, it is possible to then
retrace the sequence of operations performed leading up to a machine failure. In addition, making it
known that the time and date are recorded together with the operations can serve as a deterrent to
unauthorized use.
• The specific events for which log entries are created vary slightly with each principal machine
function. The events common to all principal machine functions are: SMC printout, log-in, log-out,
storage or deletion of a file in the Document Server (MFP HDD), deletion of all Document Server
documents in a single operation, HDD format, deletion of all log entries in a single operation, and
changes to log settings. For the events that are unique to each principal machine function, please
refer to sections below.
• It is then possible to have the MFP/LP send the log data to Web SmartDeviceMonitor for Admin (a
log data server utility) whenever any of the events described above occurs, after which the data is
stored in an MSDE or SQL Server database. Only users who are registered with an
administrator-level User Account in Web SmartDeviceMonitor for Admin can access the contents
from a Web SmartDeviceMonitor for Admin client station. In addition, these administrators are the
only persons who can perform any changes to the log data transfer settings.
The log data is encrypted before being saved to the HDD, which prevents any illegal acquisition or
alteration of the data through unauthorized access to the HDD. In addition, the encrypted data is
sent via the LCS and GWWS to Web SmartDeviceMonitor for Admin over an SSL connection.
• Before log data can be transferred from the MFP/LP to Web SmartDeviceMonitor for Admin, it is
necessary to assign MFP/LP administrator types 1-4 described in Administrator Settings to a single
account, and then create an administrator-level Access Account in Web SmartDeviceMonitor for
Admin with the same name and password. It is also necessary to enable the settings for log data
sending in the MFP/LP and in Web SmartDeviceMonitor for Admin.
Note: For more information on the transfer of this data, please refer to Netfile.