untitled

Size: px

Start display at page:

Download "untitled"

あいねいいはた
4 years ago
Views:

( ) TOE TOE PP 21 10 29 (IT 9274) C0259 bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo + 360 / ineo + 280 / ineo + 220 / VarioLink 3622c / VarioLink 2822c / VarioLink

1 ( ) TOE TOE PP (IT 9274) C0259 bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo / ineo / ineo / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo / ineo / ineo / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c Control Software A0ED0Y GM0-22 EAL3 TOE IT

2 bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo / ineo / ineo / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo / ineo / ineo / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c Control Software A0ED0Y GM0-22 IT

3 PP TOE TOE

4 1 1.1 bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo / ineo / ineo / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo / ineo / ineo / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c Control Software A0ED0Y GM0-22 ( TOE) ( ) IT TOE ST TOE TOE ST TOE TOE IT TOE EAL PP PP TOE bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo / ineo / ineo / VarioLink 3622c / VarioLink 2822c / 1

5 1.2.2 VarioLink 2222c bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo / ineo / ineo / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c Control Software A0ED0Y GM0-22 TOE bizhub C360 bizhub C280 bizhub C220 bizhub C7728 bizhub C7722 ineo ineo ineo VarioLink 3622c VarioLink 2822c VarioLink 2222c FAX (Multi Functional Peripheral MFP) TOE MFP MFP" bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo / ineo / ineo / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c " MFP MFP HDD ASICHDD TOE HDD FAX FAX TOE TOE TOE (1) MFP MFP (2) MFPMFPMFP 2

6 (3) MFP MFP MFP (4) MFP MFP MFP (5) MFP MFP MFP TOE TOE TOE TOE MFPMFP MFP ON RAM TOE MFP1-1 I/F FAXMFP TOE I/F Bluetooth FAXFAX 3

7 1-1 TOE TOE (1) TOEMFP TOE (2) NVRAM TOEMFP (3) ASIC HDDHDD (4) HDD 250GB (5) MFP (6) MFP (7) / (8) MFP (9) Ethernet 10BASE-T 100BASE-TX Gigabit Ethernet (10) USB TOE 4

8 Bluetooth I/FUSB (11) RS-232C D-sub9 ( ) (12) FAX FAX ( ) FAX MFP FAX TOE ( ) MFP PCTOE TOE (1) MFP FAX TOE MFP RAM HDD( PC ) MFP FAX (2) (3) & 5

9 (4) HDD 3 TOE PC (5) TOE MFP TOE MFP ID TOE MFPHDD ID MFP MFP ID LAN ID MFP Active Directory (6) TOE MFP IDID 6

10 ID ID (7) TOE (8) TOE (9) ASIC HDD (TOE ) TOE (10) FAX RS-232C WebDAV MFP MFP ( ) (11) TOE TOE TOE 1Ethernet FTP ( TOE ) (12) TOE PC MFP MFP SSL/TLS (13) S/MIME S/MIME (ITU-T X.509 ) 7

11 ID (14) FAX FAX FAX MFP (15) TOE TOE TOE MFP & & & MFPHDD & & 8

12 HDD ( ) HDD TOE & MFP HDD NVRAM TOE HDD NVRAM TOE ASIC HDD PC TOE S/MIMEMFPPC MFP TOE 9

13 1.3 IT IT [2] IT [3] IT [4] TOE TOE TOE TOE CC CEM TOEbizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo / ineo / ineo / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c A0ED0Y GM0-22 ( ST)[1] TOE TOE TOE CC1([5][8]) A CC 2([6][9]) TOE CC3([7][10]) bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo / ineo / ineo / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c ()[13] CEM([11][12]) 1.4 TOE 22 6 TOE CC CEM 10

14 2 TOE 2.1 TOE TOE T.DISCARD-MFP (MFP ) MFP MFP HDD NVRAM & HDD T.BRING-OUT-STORAGE (HDD) MFP HDD & HDD MFP HDD HDD & HDD HDD 11

15 T.ACCESS-PRIVATE-BOX ( ) T.ACCESS-PUBLIC-BOX ( ) T.ACCESS-GROUP-BOX ( ) T.ACCESS-SECURE-PRINT ( & ) T.UNEXPECTED-TRANSMI SSION ( ) () () ( ) () & () & ( FTP ) <> SMTP DNS TOE MFP MFP MFP TOE MFP (NetBIOS AppleTalk IP) & TSI 12

16 T.ACCESS-SETTING ( ) T.BACKUP-RESTORE ( ) PC-FAX PC-FAX & & TOE P.COMMUNICATION-DATA ( ) P.REJECT-LINE () IT ( &) MFP FAX IT PC MFP 13

17 2.1.3 TOE2-3 TOE 2-3 TOE A.ADMIN () A.SERVICE ( ) A.NETWORK (MFP ) A.SECRET ( ) A.SETTING ( ) TOE MFPLAN TOE MFPLAN MFP TOE TOE MFP TOE TOE bizhub C360 / C280 / C220 Ver.1.02 bizhub C360 / C280 / C220 User's Guide [Security Operations] Ver.1.02 bizhub C7728 / C7722 User's Guide [Security Operations] Ver.1.02 ineo / 280 / 220 User's Guide [Security Operations] Ver.1.02 VarioLink 3622c / 2822c / 2222c User's Guide [Security Operations] Ver

18 bizhub C360 / C380 / C220 Ver.1.02 bizhub C360 / C280 / C220 / C7728 / C7722 SERVICE MANUAL SECURITY FUNCTION Ver.1.02 ineo / 280 / 220 SERVICE MANUAL SECURITY FUNCTION Ver.1.02 VarioLink 3622c / 2822c / 2222c SERVICE MANUAL SECURITY FUNCTION Ver TOE Windows Windows Server 2000( ) Active Directory 2.2 TOE (1) T.DISCARD-MFP(MFP ) MFP TOE HDDNVRAM ( )MFP HDD NVRAM (2) T.BRING-OUT-STORAGE(HDD) MFPHDD HDD HDD TOE ASIC TOE HDD ( )ASIC 15

19 ( ASIC ) HDD HDD (3) T.ACCESS-PRIVATE-BOX( ) TOE MFP () ( ) ( ) TOETOE Active Directory () (4) T.ACCESS-PUBLIC-BOX( ) TOE MFP () ( ) () TOETOE Active Directory () 16

20 (5) T.ACCESS-GROUP-BOX( ) TOE MFP () ( ) () TOETOE Active Directory () (6) T.ACCESS-SECURE-PRINT( & ) & TOE MFP () & & & () ( ) & TOETOE Active Directory 17

21 () (7) T.UNEXPECTED-TRANSMISSION( ) MFP PC-FAXTSI TOE PC-FAX TSI () PC-FAXTSI (8) T.ACCESS-SETTING( ) & TOE ( SNMP ) ( ) ( SNMP ) & (9) T.BACKUP-RESTORE( ) & & TOE () & 18

22 (10) P.COMMUNICATION-DATA( ) & MFPPC 1 TOE& MFP () S/MIME S/MIME ( S/MIME ) S/MIME ( ) (11) P.REJECT-LINE() MFP FAXFAX MFP FAX TOE FAXFAX ( FAX ) FAXFAX 19

23 3 3.1 CC3CEM TOE CEM )

24 3-1 ST TOE TOE 2) a. 21

25 KONICA MINOLTA C360 Series PCL/XPS Ver Internet Explorer Ver (Win2000) Ver (WinXP) 3-1 bizhub C360/C280/C220CD PC PSWC SSL/TLS Fiddler Ver http Web MFPPC HTTP Open API Ver SocketDebugger Ver WireShark Ver Mozilla Thunderbird Ver Open SSL Ver k(25-May-2009) MG-SOFT MIB Browser Professional SNMPv3 Edition ( MIB Browser) Ver Open API Open API TCP-Socket LAN PC S/MIME SSL MIBSNMP 22

26 Tera Term Pro Ver Ver Stirling Ver FFFTP Ver. 1.92a MIME Base64 / Ver. 1.0 PageScope Data Administrator with Device Set-Up and Utilities Ver HDD Backup Utility () Ver PageScope Box Operator (PSBO) Ver sslproxy Ver. 1.2 Black Jumbo Dog Ver CSRC Ver PC MFPTOE MFP HDD S/MIME FTP MIME Base64 / S/MIME Encode/Decode MFP ( ) HDD Backup Utility MFP( ) ( )( ) PC PC SSL SSLsslproxy SSL Fiddler SocketDebugger FTP CSRC 23

27 b. 223 TOE c ) ST TOE TOE TOE MFP bizhub C280 bizhub C7728 / bizhub C7722 / ineo / ineo / ineo / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c bizhub C360 / bizhub C280 / bizhub C220 bizhub C360 / bizhub C280 / bizhub C220/ 2) a. 24

28 TSFI b

29 WebDAV FAX Bluetooth c. TOE ) a. TOE ON/OFF 26

30 b. 3-2 LAN PC LAN LAN HUB PC MFP bizhub C280 FAX MFP bizhub C TOE PC TOE PC 27

31 (TOE) PC PC bizhub C280 TOE ( A0ED0Y GM0-22) MFP Windows XP(SP2) PC 3-1(Fiddler OpenAPI SocketDebugger ) PSWC(PageScope Web Connection ) HTTPS TCPSocket OpenAPI SNMPMFP TamperIE PCWindows XP SP2 PC MFP ( ) snmpwalk Version MIB openssl Version 0.9.8m (25-Feb-2010) SSL Nessus (build 4G1046-Q) TamperIE Internet Explorer Web Web sslproxy v /01/29 SSL- Fiddler MS HTTP Web WireShark Nikto Version 2.03 CGI 28

32 Nessus Nessus () OFF/ON c TOE CEM

33 4 CEM 30

34 5 5.1 TOE CC3 EAL3 5.2 Active Directory TOE TOE Active Directory FAX FAX 31

35 6 CC CC Common Criteria for Information Technology Security Evaluation () CEM Common Methodology for Information Technology Security Evaluation () EAL Evaluation Assurance Level ( ) PP Protection Profile () ST Security Target ( ) TOE Target of Evaluation ( ) TSF TOE Security Functionality (TOE) TOE API Application Programming Interface (API) DNS Domain Name System (DNS) FTP File Transfer Protocol (FTP) HDD Hard Disk Drive ( ) HTTPS HyperText Transfer Protocol Security (HTTPS) MFP Multiple Function Peripheral ( ) MIB Management Information Base (MIB) NVRAM Non-Volatile Random Access Memory (NVRAM) RAM Random Access Memory (RAM) SMB Server Message Block (SMB) SMTP Simple Mail Transfer Protocol (SMTP) SNMP Simple Network Management Protocol (SNMP) SSL/TLS Secure Socket Layer/Transport Layer Security (SSL/TLS) S/MIME Secure Multipurpose Internet Mail Extensions (S/MIME) TSI Transmitting Subscriber Identification (TSI) USB Universal Serial Bus (USB) WebDAV Web-based Distributed Authoring and Versioning (WebDAV) Bluetooth DNS FTP m IP TCP/IP 32

36 33 HTTPS Web SSL MIB SNMP NVRAM PageScope Web Connection MFP / PC-FAX FAX SMB Windows SMTP TCP/IP SNMP SNMP TOESNMP v3 Privacy Authentication SSL/TLS S/MIME RSA TSI WebDAV HTTP1.1 Web ASIC LAN TOE MFP TOE LAN MFP

37 MFP EEPROM 34

38 7 [1] bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo / ineo / ineo / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c A0ED0Y GM [2] IT 19 5 CCS-01 [3] IT 19 5 CCM-02 [4] IT 19 5 CCM-03 [5] Common Criteria for Information Technology Security Evaluation Part1: Introduction and general model Version 3.1 Revision 3 July 2009 CCMB [6] Common Criteria for Information Technology Security Evaluation Part2: Security functional components Version 3.1 Revision 3 July 2009 CCMB [7] Common Criteria for Information Technology Security Evaluation Part3: Security assurance components Version 3.1 Revision 3 July 2009 CCMB [8] 1: CCMB ( ) [9] 2: CCMB ( ) [10] 3: CCMB ( ) [11] Common Methodology for Information Technology Security Evaluation : Evaluation methodology Version 3.1 Revision 3 July 2009 CCMB [12] : CCMB ( ) [13] bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo / ineo / ineo / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c

39 サーベイランス報告書発行日 : 資料番号 : SRP-C 下記評価対象 ( 以下本 TOE という ) について IT セキュリティ認証申請手続等に関する規程 (CCM-02)8.1 に基づきサーベイランスが実施されたことを報告いたします認証報告書と合わせて参照願います評価対象認証番号認証申請者 TOEの名称 TOEのバージョン PP 適合適合する保証パッケージ開発者評価機関の名称 C0259 コニカミノルタビジネステクノロジーズ株式会社日本語名 : bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo / ineo / ineo / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c 全体制御ソフトウェア英語名 : bizhub C360 / bizhub C280 / bizhub C220 / bizhub C7728 / bizhub C7722 / ineo / ineo / ineo / VarioLink 3622c / VarioLink 2822c / VarioLink 2222c Control Software A0ED0Y GM0-22 なし EAL3 コニカミノルタビジネステクノロジーズ株式会社みずほ情報総研株式会社情報セキュリティ評価室サーベイランス実施報告本 TOEにおける一部の機能に関し認証を維持することが適切かどうかを判断するために2011 年 4 月から同年 8 月にかけてサーベイランスを実施しましたサーベイランスを実施した結果本 TOEを利用する際のS/MIMEの証明書の有効性について以下の注意事項に関する十分な理解を管理者に確実にさせるための手段が必要と判断いたしました本 TOEはボックスファイルをメール送信する際にS/MIMEの方式で暗号化をするその際に利用されるS/MIMEの証明書の有効性は管理者自身が維持する必要がある具体的には管理者はS/MIMEの証明書が有効かどうかを本 TOEの機能には頼らずに把握できている必要がある S/MIMEの証明書が有効でなくなった際には管理者は証明書の入れ替えなどを適宜実施する必要がある 1/2

40 現在本注意事項は開発者より以下のURLで情報発信が行われています本 TOEの運用においては当該情報を確認願います複合機のS/MIME 証明書の有効性の確認について Notes: Effectiveness confirmation of the S/MIME certificate to the Konica Minolta MFP product サーベイランス結果上記情報の提供および本報告書により本 TOE を安全に消費者が利用することが可能であり本 TOE に対する認証は維持されます以上 2/2

untitled

untitled TOE 21 7 22 IT 9053 C0217 TOE bizhub C652 / bizhub C552 / ineo + 652 / ineo + 552 / VarioLink 6522c / VarioLink 5522c bizhub C652 / bizhub C552 / ineo + 652 / ineo + 552 / VarioLink 6522c / VarioLink 5522c