Samsung MFP Security White Paper: Samsung Security Framework Secure Secure Management User Secure Secure Data Document Secure Network...
Samsung Electronics provides this guide for information purposes only. All information included herein is subject to change without notice. Samsung Electronics is not responsible for any direct or indirect damages that may occur when you use this guide or that you relate to the use of this guide.
IT managers to demand better security features from the manufacturers of the devices they use. Samsung has responded to the requests of our IT customers and created security features for our MFPs that protect valuable data from unauthorized access.
However these accounting tools do not help the IT professional implement security. Samsung has targeted the MFP security as the area of information security where we can add the most value for our IT customers. MFPs offer many features that process information electronically and on paper. This means that the security objectives for MFPs must address and target the vulnerabilities of these features.
Some of the most common results associated with an unsecured MFP include the following: • Unauthorized use by a malicious user • Identity theft • Stolen information • Lawsuits from stolen information • Loss of access • Loss of productivity. Page - 8 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
Samsung is continuously working with our industry partners to create compatible MFPs that meet the regulatory requirements of today’s information infrastructure. The MFP security features presented in this paper are able to meet or exceed the current regulatory requirements of our customers.
Samsung MFP devices employ high levels of security to meet or exceed today’s business security requirements. We are also working with our business customers to continuously improve our MFP security features.
Department of Health and Human Services apply to HIPAA covered entities and any of their business associates that “access, maintain, retain, modify, record, store, destroy, or otherwise hold, use, or disclose unsecured PHI.” Page - 11 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
Protecting the integrity of information and controlling access to resources are not only essential elements for the preservation of a company but are also requirements for compliance. Page - 12 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
The Common criteria conformances were either to Samsung Security Target or to IEEE-2600-2009.1 Protection Profile. Samsung Security Target includes a set of security claims that have been validated by a Common Criteria certified lab. For more details, refer to the listings on the following web page: http://www.commoncriteriaportal.org/.
IEEE standard requirements. By complying with the IEEE 2600.1™-2009 standard, Samsung also complies with the IEEE 2600-2009.2 standard. Samsung is a proud sponsor of this new standard and the new MFPs are now certified for the IEEE 2600.2-2009 standards.
SAMSUNG MFP SECURITY WHITE PAPER Samsung’s Security Framework Samsung defines its security framework with five security categories to cover all areas of security in the business environment. This framework is built to protect your most important information and keep your documents safe throughout the document life cycle.
WHITE PAPER SAMSUNG MFP SECURITY Secure User The Secure User category of the Samsung Security Framework includes the features needed to protect the MFP from access by unauthorized users. These features include the following: • System Authentication (for Administrators) •...
SAMSUNG MFP SECURITY WHITE PAPER Authentication Authentication is used by Samsung MFPs to confirm that a user has rights to access the MFP. MFP authentication includes the following security checks: • System Authentication • Local Authentication • N/W Authentication •...
MFP. The Administrator can select from the following methods: No Authentication, Local Authentication, Network Authentication (Kerberos, SMB, and LDAP), and XOA-E/XOA Web Authentication. Local UI: SyncThru Web Service UI: Page - 18 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
Authorization, Authentication and Accounting can be controlled by Group/Role definitions. For example, when Group “A” has only “Copy” authority, a user in that group can only use 1 Copy feature but not other features like Faxing or Scanning. Page - 19 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
Scan To PC • Address Book • Job Quese • Admin Setting Each feature can be given one of the following permissions: • Unlocked • Locked Visible • Locked Hidden. Page - 20 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
Standard and Network Accounting Samsung MFPs track User Accounting for each impression of each job. Based on the User’s ID, the Administrator can count each job for Users and Groups. This allows you to see the cost for MFP usage by User and Group.
This section describes the benefits provided by the Samsung Secure User category of the Samsung Security Framework. 7.8.1 Good Basic Security “Secure User” protects the Samsung MFP from unauthenticated or unknown user access. This is a very basic step in protecting your valuable data and information on the MFP. 7.8.2...
Encryption of the hard drives, scans and Network printing, and hard drive image overwriting. Encryption Encryption is the process of changing data into useless characters that must be unscrambled by using a key. The Samsung Secure Data feature uses the following methods: •...
National Security Agency (NSA) and NIST. Samsung offers our optional Common Criteria certified Secure Data Kit. This Secure Data Kit includes security features such as image overwrite options, Hard Drive encryption, and SSL/TLS. This kit provides up-to-date security technology,...
This feature can be enabled from the Printer Driver and it is transparent to the User. There is no visible printing performance deterioration even when the encryption is enabled. Page - 25 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
Secure PDF - PDF Encryption Samsung Secure Data allows you to encrypt a PDF document to protect its contents from unauthorized access. Encryption applies to all strings and streams (Scanned Images) in the document’s PDF file, but not to other object types such as integers and Boolean values, which are used primarily to convey information about the document’s structure rather than...
CA (Certificate Authority). This certificate is more reliable than the Self Signed Device Certificate. To get CA Signed Device Certificate, a Certificate Signing Request should be sent to the CA. Page - 27 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
SMTP server over secured network (SSL/TLS). By using this feature, users can always ensure that the e-mail data is sent to SMTP server with encrypted. This feature is managed through the Web UI. Page - 28 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
When a power failure interrupts the manual overwrite, the process will restart automatically after the power returns allowing it to finish overwriting all of the remaining files (Manual Image Overwrite). Examples of MFP menus for Image Overwrite: Page - 29 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
Asterisks as many as fixed count except first char • Asterisks as many as fixed counts Note: Secure information includes Secure Print, and Secure Received Fax jobs. Example of Information Hiding menu: Page - 30 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
Administrator would experience various option methods using Web & Local UI. Even a general user has a chance to choose the best way to protect their data with many option items. Page - 31 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
SNMPv3 security features support authentication and encryption. The SNMPv3 used on Samsung MFPs can support authentication by using the SHA algorithm and can support one account to read and write. Samsung MFPs with SNMPv3 support the DES encryption algorithm.
MFP responds with its credentials when polled. The authenticator transfers the MFP’s credentials to an authentication server called ‘RADIUS’ and finally RADIUS decides whether to permit the connection or not. 802.1x Network Security protocol uses some Extensible Authentication Protocols (EAP). Samsung MFPs support the following EAPs: •...
In general, Samsung MFP does not provide network access abilities thru the USB port/device. Therefore, the malicious users cannot access the network thru any other interface. Therefore, even if the Samsung MFP is installed within a LAN and a PC is connected thru USB additionally with the device, PC cannot access the network thru the MFP. Samsung Printing Division assures that any users cannot access the network thru any USB port/device.
10.2 Secure Fax The Samsung Secure Fax feature restricts unauthorized access to received fax documents. When the Secure Fax Option is enabled, all received fax documents are stored in memory. These stored fax documents are protected by a password. You can only print out or disable this feature when you have the password.
You can also create your own watermark and modify the following parameters: • Page • Text Color • Size • Position • Darkness Examples of Watermark menus from the Local UI: Page - 37 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
You can also modify the following parameters: • Position (Top, Bottom) • Appearance (Opaque, Transparent) Example of the Stamp process: Example of the Stamp feature menu in the Local UI: Page - 38 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
This feature allows you to perform periodic backups (Daily/Weekly/Monthly) or Manual backups to the Backup Server (SMB/FTP) using the comma separated (.csv) file format. Example of Log process: Page - 40 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
Example of Log enablement menus from the Local and Web UIs: Example of Log report menus from the Local UI: Example of Log viewer: Example of the Log back-up process from the SyncThru Web Service UI: Page - 41 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
Email Notification The Samsung MFPs are capable of using your e-mail system to notify you when the MFP needs your attention. This process allows you to respond to MFP issues faster and increase productivity. The e-mail notification feature can notify you when the device needs your attention.
WHITE PAPER 11.4.1 Device Alert Notification When a Samsung MFP experiences an event that needs your attention such as, out of paper or low toner, the MFP can send you an e-mail. This feature requires the following settings in the MFP to be configured: •...
Cloud Connector • Secure Login Manager • SecuThru Lite 2 • Usage Tracker Each of these core business MFP security solutions are discussed in detail in the following section. Page - 44 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
SmarThru Workflow Lite Samsung SmarThru™ Workflow Lite is an automated document capturing, scanning, and routing solution that creates a seamless and intuitive infrastructure for repetitive digital document handling. It enables users to capture, process, and distribute documents digitally, which is a core component for operating an optimized business environment.
Zone-OCR, or based on barcode scans using the barcode recognition function. Samsung OCR and Zone-OCR, standard features with this solution, provide broad support for 27 languages allowing accurate document conversion and processing. Businesses can save resources by eliminating the need for an additional server, gaining the added benefit of automated save folder naming and creation by Zone-OCR and of automated naming of saved files by barcode recognition.
WHITE PAPER 12.2 Cloud Connector With the Samsung Cloud Connector solution, users can directly scan to, and print from, the Cloud. Users can also preview the content before uploading to the Cloud. Easy, Secure Access to the Cloud Cloud Connector supports a variety of Cloud services and provides an easy way to upload, scan, and access content for printing directly without an additional server.
In today’s fast-paced business environment, it is essential that companies protect valuable devices from unauthorized access and use. To ensure that only authorized users log in to the systems, Samsung has developed Secure Login Manager. This authentication security solution supports a variety of authentication methods and types for SMBs.
Safely and conveniently allows sharing of print jobs while protecting confidential documents. Delivers print jobs securely, only to authorized users, through a flexible authentication process supporting up to 500 users. Page - 49 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
This output management solution helps SMBs reduce printing cost by providing pull printing capabilities that reduce paper usage from unclaimed printouts. Additionally, the solution allows SMBs to save expenses by eliminating the costly need for an additional server. Page - 50 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.
12.5 Usage Tracker The Samsung Usage Tracker solution provides businesses with the ability to remotely manage and monitor functionality of multiple devices, which offers a big advantage to any business. This advantage is especially important for SMBs that need to keep operating costs at a minimum.
10.1” Color touch Panel LCD. It provides easy, Intuitive, expansible user experience. To ensure that your MFP maintain a high level of quality and offers a consistent experience for your users, Samsung was certified to have passed through Google’s CTS (Compatibility Test Suite) certification.
The Samsung MFPs offer you the Samsung Security Framework – a five point fortress against unauthorized access to your data. Now your MFP security is one less thing you need to worry about. Samsung offers certified high level security that is also convenient and affordable.
Common Criteria and comply with IEEE 2600 security standards. Now enterprises and IT managers have a choice for low TCO MFPs with built-in security. The “Out of the Box” built-in MFP security features are perfect for most enterprises and they do not require you to buy a “Security Kit” to ensure your system security.