Security Objectives; Security Objectives For The Toe; Security Objectives For The Operational Environment; Security Objectives Rationale - Kyocera TASKalfa 3500i User Manual

Data Security Kit (E) Overseas Version Security Target

4. SECURITY OBJECTIVES

This chapter describes the security objectives for the TOE, the security objectives for
the operational environment and the security objectives rationale.

4.1. Security Objectives for the TOE

The security objectives for the TOE are described as follows:
O.OVERWRITE: Overwrite-erase of the residue data
The TOE must ensure that any previous information content of a resource (the actual
data area) is made unavailable upon the deallocation of the resource from the image
data file stored in the HDD.
O.ENCRYPT: Prevention of the stored data from being decoded
The TOE must ensure that the image data stored in the HDD is encrypted and is not
illegally decoded.

4.2. Security Objectives for the Operational Environment

The security objectives to be implemented by the TOE operational environment are
described as follows:
OE.LOCATION: Protection of the TOE and assets in the environment
The MFP should operate in the managed environment, and prevent the attack to
hardware that composes MFP.
OE.NETWORK: Prevention of the TOE from the external network
The TOE-connected internal network must prevent the attacks from the external
network by placing the devices such as the firewall etc.
OE.CE: Confirmation of the service person
When the service person performs maintenance on the TOE, confirmation must be
made if the person is an authorized service person.

4.3. Security Objectives Rationale

The corresponding relations between assumptions, threats and organizational
security policies, and security objectives are shown in the table below. It indicates
that the security objectives correspond to at least one of assumptions, threats and
organizational security policies.
TASKalfa 3500i, TASKalfa 4500i, TASKalfa 5500i
© 2011 KYOCERA MITA Corporation
11