The TOE is the software that drives the imageRUNNER copier and contains the Complete Erase feature. During print, scan, fax, and copy job processing, the imageRUNNER stores images as files on the hard disk drive. Consequently, there is a risk that these images could be disclosed during subsequent jobs. To mitigate this risk, the Complete Erase feature provides the capability to completely overwrite files on the imageRUNNER hard disk drive once the images are no longer needed.
\r\nIt should be noted that the imageRUNNER devices are not delivered with the “Complete Erase” functionality enabled; it is the responsibility of the consumer to ensure an authorized Canon Service Technician (CST) applies Security Kit B1 and sets the erase mode. Once this Security Kit is installed, the consumer must ensure that the “Complete Erase” function is enabled using the System Manager interface. If these steps are not taken by the consumer, the residual information protection offered by this TOE will not be employed.
\r\n
The evaluation was performed under the Common Criteria Evaluation and Validation Scheme (CCEVS). The purpose of the evaluation was to demonstrate that the Canon imageRUNNER 2200/2800/3300 Software Version 50.06 with Security Kit B1 Sensitive Data Protection product meets the EAL3 security assurance requirements according to the Common Criteria for Information Technology Security Evaluation, Version 2.1 and Part 2 of the Common Methodology for Information Technology Security Evaluation, Version 1.0. Validators on behalf of the CCEVS Validation Body monitored the evaluation carried out by COACT, Inc. CAFE Lab. The evaluation was completed on 10 May 2004. The results of the Canon imageRUNNER 2200/2800/3300 Software Version 50.06 with Security Kit B1 Sensitive Data Protection product evaluation can be found in Canon imageRUNNER 2200/2800/3300 Software Version 50.06 with Security Kit B1 Validation Report, CCEVS-VR-04-0063, prepared by the CCEVS Validation Team.
","environmental_strengths":"The TOE provides a Residual Information Protection Security Policy through the implementation of the following security functions:
\r\nComplete Erase: Eliminates residual information by overwriting the data memory space with either: NULL data once, random data once, or random data three times.\r\n
\r\nSystem Manager Logon: The System Manager Logon feature ensures that only authorized System Managers can access the interface used to activate and deactivate the Complete Erase function. The System Manager credentials, a seven digit password and a numeric user id, are set using the System Manager Settings user interface. Once set, the credentials can only be changed by an authorized System Manager. The System Manager Logon feature is invoked before access to the Complete Erase feature settings is allowed. Entering invalid credentials results in a failed logon attempt and a redisplay of the logon screen after a one second delay.
\r\nSecurity Management: Once the System Manager successfully logs in to the administrative interface, the System Manager has the ability to activate or deactivate the Complete Erase functionality.
","features":[]}