1. 복합기의 보안 기술
디지털 프린팅 사업부
삼성전자

2. Contents Introduction
Case Study: MFP(Multi-Function Peripheral)’s Security Functions
MFP’s Security Functions
Security Target Comparison
HP’s Recommendation
Samsung’s Security Reference Model
Standards and Regulations
IEEE P2600
보안적합성
Regulatory Compliance
Trusted Computing Group (TCG)
Printing Working Group (PWG)
Conclusion
References

3. Hardcopy Security Overview
Security Vulnerability in the Office Environment
Hardcopy Security Solution
User Access Security
Accidental Discovery
Output Security
Manipulation
Image/Data Security
Source of Serious Threats
Deletion
Device Security
Internal : External
2 : 1
Theft
Audit/Tracking

4. Increasing Concern on Security
Arising from the terrorist attacks of September 11, 2001
Provisions of various pieces of legislation
The National Information Assurance Acquisition Policy of National Security Telecommunications and Information Systems Security Committee
Common Criteria Certification is required
Health Insurance Portability and Accountability Act
Family Education Rights and Privacy Act
Federal law that protects the privacy of student education records
Product Differentiation
Security is an ideal differentiator because it has universal appeal

5. MFP’s Security Functions
Area
Function
Sh사 X사 C사 R사
User access control
Network authentication for scanning function
Yes
Access code : User/Department
IC Card Authentication/Biometrics ㅿ
Data Security
Hard-disk removal No
Hard-disk overwrite
Hard-drive encryption
RAM/ROM overwrite
Fax data(ROM) overwrite
RAM/ROM encryption
IPSec(IPv6)
Output security
Secure print(PW or PIN)
Document rights: View,print,copy with date/time expiry/control
AirZip FileSECURE
Omtool
Genidocs
Working w/ AirZip
Secure document technologies:
Copy denial patterns, invisible marks, embedded data/codes
Glossmark,Invisible Control Marks
Copy Denial Patterns

6. Area
Function
Sharp
Xerox
Canon
Ricoh
Network
(Device)
Security
IP Filtering
Yes No
MAC address filtering
Port blocking
Protocol management
Fax security
Audit and tracking
Users
Equitrac
Jobs
Omtool
NetSpot
Scans
Pharos
eCopy

7. 자세한 내용은 발표시간에 공개하도록 하겠습니다!

8. References
“Securing Printers: Intelligent Technology Resources in the Enterprise”, RSA Conference 2008
“IEEE P2600™ Draft Standard for Information Technology: Hardcopy System and Device Security”
“Hewlett Packard Security Framework”, Hewlett Packard Security Office, 2008
CC Validated Product List
IT 보안인증 사무국
Trusted Computing Group
Printer Working Group