Samsung X4220 Instruction Manual page 18

Samsung Multifunction MultiXpress X4220, X4250, X4300, X401, K4250, K4300, K4350, K401 Series
The TOE provides an encryption function during the data storage procedure and a decryption
function in the process of accessing stored data from hard disk drive.
The TOE generates cryptographic keys when the TOE is initialized at the first setout the
secret key (256 bits) is used for encrypting and decrypting user data and TSF data that is
stored on the HDD. Access to this key is not allowed to any U.USER including
U.ADMINISTRATOR.
The TSF shall destroy cryptographic keys in accordance with overwriting a used
cryptographic key with a newly generated cryptographic key. Before storing temporary data,
document data, and system data on the HDD of the MFP, the TOE encrypts the data using
AES 256 algorithm and cryptographic key.
When accessing stored data, the TOE decrypts the data using the same algorithm and key.
Therefore, the TOE protects data from unauthorized reading and falsification even if the
HDD is stolen.
Fax Data Control (TSF_FLW)
If the received fax data includes malicious content, it may threaten the TOE asset. To prevent
this kind of threat, the TOE inspects whether the received fax image is standardized with
MMR, MR, or MH of T.4 specification or not before forwarding the received fax image to e-
mail or SMB/FTP. U. ADMINISTRATOR can restrict this forwarding function. When non-
standardized format data are discovered, the TOE destroys the fax image.
Self Testing (TSF_STE)
During initial start-up, the TOE performs self test. Self testing executes TSF function to
verify the correct operation of the HDD encryption function. Also, the TOE verifies the
integrity of the encryption key data and TSF executable code by the self testing.
Secure Communication (TSF_SCO)
The TOE also provides secure communication between the TOE and the other trusted IT
product to protect communicated data from modification or disclosure by IPSec. The network
which connected without IPSec shall not be allowed to communicate with MFP.
Non-TSF Function
TOE includes the local user interface based on Android platform. Although the Android
platform is used to TOE's user interface, local user interface does not provide any core
Android system application such as Android system setting, Search, Brower, Contacts,
Gallery, and Music. Therefore, U.USER cannot access any core Android system application
and its related setting interfaces.
18

Copyright 2014 SAMSUNG ELECTRONICS Co., Ltd., All rights reserved