Class Fia: Identification And Authentication; Table 22: Rules Governing The Operation For Mfp Application (B); Table 23: List Of Authentication Events And Unsuccessful Authentication Attempts - Ricoh Aficio MP 7001 SP Manual

Table 22: Rules Governing the Operation for MFP Application (b)

Subject
Normal user Execution of MFP application
process
FDP_ACF.1.3(b) The TSF shall explicitly authorise access of subjects to objects based on the following
additional rules: [assignment: rules that the Fax Reception Function operated using
administrator permission is surely permitted].
FDP_ACF.1.4(b) The TSF shall explicitly deny access of subjects to objects based on the following additional
rules: [assignment: no rules, based on security attributes, that explicitly deny access of
subjects to objects].
FDP_RIP.1 Subset residual information protection
Hierarchical to: No other components.
Dependencies: No dependencies.
FDP_RIP.1.1 The TSF shall ensure that any previous information content of a resource is made unavailable
upon the [selection: deallocation of the resource from] the following objects: [assignment:
user documents].
6.1.4

Class FIA: Identification and authentication

FIA_AFL.1 Authentication failure handling
Hierarchical to: No other components.
Dependencies: FIA_UAU.1 Timing of authentication
FIA_AFL.1.1 The TSF shall detect when [selection: an administrator configurable positive integer within
[assignment: 1 to 5]] unsuccessful authentication attempts occur related to [assignment: the
authentication events shown in Table 23].

Table 23: List of Authentication Events and Unsuccessful Authentication Attempts

User authentication using the Operation Panel
User authentication using the TOE from client computer Web
browser
User authentication when printing from the client computer
User authentication when using LAN Fax from client computer
Copyright (c) 2011 RICOH COMPANY, LTD. All rights reserved.
Operation on Object
Authentication Events
Rule That Controls Operation
When the function type associated with the MFP
application is included in the available function list
associated with the normal user process, execution of that
MFP application is allowed for the normal user process.
The MFP administrator registers the available MFP
applications for each normal user on the available
function list in advance.
Page 52 of 87