Specifications

Print Controller Design Guide for Information Security:
Page 76 of 92
The NCS module communicates with RC Gate via the host I/F over an SSL connection. The
authentication process uses the information on the relevant digital certificates to verify the identity
of both machines. To do this, the NRS module uses the DESS module and checks the information
contained in the digital certificates. If both machines judge that the other is the legitimate
server/client, SSL encrypted communication is established, whereby the MFP/LP sends the
relevant information to RC Gate in an encrypted state via the host I/F.
When the MFP/LP communicates with RC Gate as a server (e.g. taking a counter reading)
Requests for information sent by RC Gate to the MFP/LP are received by the host I/F and then
forwarded to the NCS module. Before establishing the communication session, the NCS module
initiates a two-way authentication process whereby the contents of both machines’ digital
certificates are verified. To do this, the NRS module uses the DESS module and checks the
information contained in the digital certificates. As described above, if both machines judge that
the other is the legitimate server/client, SSL encrypted communication is established. The
MFP/LP receives the information request from RC Gate, after which the information is decrypted
by the NCS module and then sent along to the NRS module. The NRS module retrieves the
required information from the SCS module, converts the data into @Remote-transmission format,
and then forwards the data to the NCS module. The NCS module encrypts the data for SSL
transmission and sends it to RC Gate.
Communicating with the @Remote Center Directly (via the Internet)
Functionally, the server/client relationship between the MFP/LP and @remote center is two-way,
as described below. However in terms of actual data flow, the MFP/LP is always an https client of
the @remote center.
When the MFP/LP communicates with the @Remote Center as a client (e.g. notifying the center of a
malfunction)
When the SCS detects an abnormal condition in the MFP/LP or other status-related notification, it
will notify the NRS module. After this, the NRS module obtains more detailed information via the
SCS and then converts it into a special format for transmission to the @Remote Center. Finally,
the data is SSL-encrypted and sent to the @Remote Center via the NCS module.