Fundamentals of Security for Konica Minolta bizhub Multifunctional Digital Office Machines
RAMSEY, NJ (Vocus) April 11, 2007
Amid growing concern for the security of documents being processed through network-connected multifunctional products (MFPs) and the pressure to comply with recent government laws and regulations regarding information security, Konica Minolta Business Solutions U.S.A., Inc. (Konica Minolta), a leading provider of advanced imaging and networking technologies announced today that it is among the first in the industry to achieve Evaluation Assurance Level (EAL) 3 and ISO 15408 (Common Criteria Certification or CC) for its line of bizhub™ and bizhub PRO™ color and monochrome MFPs. This certification includes CC certification for the bizhub C6500, the first Konica Minolta light production color MFP to be ISO 15408 certified. Furthermore, ISO 15408 is the only official security-based certification standard for digital office products.
"Public awareness of the importance of data security in the widespread use of MFPs has been raised by recent news warning of identity theft risks associated with hard drives in digital copiers," said Kevin Kern, vice president, product planning and development, Konica Minolta Business Solutions U.S.A., Inc. "Konica Minolta MFPs have achieved CC certification for over three years, which assures our customers that any Konica Minolta MFP in our current lineup can be used in environments that demand strict data security. Customers have the peace of mind of knowing that with Konica Minolta, they have the most secure MFPs on the market today."
ISO 15408 - Common Criteria
The International Common Criteria for Information Technology Security Evaluation establishes an internationally agreed upon language for specifying security functionality, as well as an evaluation methodology to assess the strength of security implementations embedded in various types of technology located on the network. The Common Criteria initiative has evolved into an international standard known as ISO 15408. In the United States it is managed by the National Information Assurance Partnership (NIAP), which is run by the National Security Agency and the National Institute of Standards and Technology (NIST).
Delivering Comprehensive Certification Solutions
While some manufacturers have ISO 15408 certification for a specific Data Security Kit, Data Protection Kit, software package or an image overwrite function, Konica Minolta's target of evaluation regarding ISO 15408 certification is the entire MFP system - providing end-to-end security. Konica Minolta's innovative and standard security functions can be found within the current, and recently launched, next-generation line of bizhub MFPs. In fact, Konica Minolta's Hard Drive Overwrite with Optional Encryption feature won a Buyers Laboratory Inc. (BLI) Fall 2006 "Pick of the Year" for Outstanding MFP Security Solution.
Common Criteria Standards Applicable to Konica Minolta Digital MFPs:
HDD and RAM Security
One particular fear is that data can be stolen from the MFP's Hard Disk Drive (HDD) or RAM, either by accessing the MFP remotely or removing the HDD or RAM and extracting the data. These concerns have been addressed and any potential security holes have been plugged.
Konica Minolta's award-winning Hard Drive Overwrite security function erases data stored on the device's HDD or memory by overwriting it with a series of characters and comes standard on the company's bizhub OP and workgroup product line. Hard Drive Overwrite is performed immediately upon completion of all copy, print, scan and fax jobs. Konica Minolta offers an extra level of security with a hard drive encryption kit using 128-bit Advanced Encryption Standard (AES). In addition, the bizhub HDD can be locked using a passcode of 20 alphanumeric characters and the data is protected, even if the drive is removed from the machine.
At the time of decommissioning, relocation or replacement of a bizhub MFP, the entire HDD can be overwritten so that all of the data is completely removed. This can be achieved using one of any eight modes and corresponding overwrite methods. Any leftover image data can overwritten up to seven times to military specifications. Supported overwrite standards include:
- US Navy (NAVSO P-5239-26)
- Department of Defense (DoD 5220.22M)
- Army Regulations (AR380-19)
- North Atlantic Treaty Organization - NATO Standard
- US Air Force (AFSSI5020)
Any MFP connected to a network may be vulnerable to unauthorized access. Konica Minolta includes the following features to prevent this:
- With the recent launch of the next-generation line of bizhub MFPs, Konica Minolta introduced the industry's first Biometric Authentication Unit, in which the vein patterns of a finger are scanned, encrypted and stored and are used to distinguish individuals.
- User Authentication - Requires User ID and Password. Up to 1000 user accounts can be stored.
- Virus Protection - Konica Minolta MFPs include an embedded, non-commercial operating system that is not susceptible to attacks by viruses and worms.
- Allow/Prohibit Functions by User - An advanced level of security allows or prohibits use and availability of specific features, such as scanning, user box, copying, faxing and printing as a remote function.
- Network Vulnerabilities - Open ports and protocols can be opened, closed or enabled or disabled at the machine or remotely by an administrator.
File Transmission Security
Since MFPs perform various functions including network printing, scanning and fax, special steps have to be taken to prevent unauthorized use or access. The following features are included in all current bizhub devices:
- Confidential print - Secure Print holds the job until released with the proper encrypted password; Secure Mailbox Print stores a print job in a user box where a user ID and password must be entered for that job to be accessed for printing, faxing or forwarding by Email.
- Scan/PDF Encryption - Scanned files can be encrypted as a PDF file and requires the receiver to have the decryption code to open the file.
- Copy Protection - A security watermark is placed on the original document as it is printed. If it is copied on any other MFP the secure watermark will appear.
- Advanced Email Security
- Advanced Fax Line Security
- Access History
- Account Tracking
- Audit and Job Logs
Konica Minolta continues to invest a tremendous amount of engineering resources in developing security-related features for bizhub MFPs, and uses independent security consultants to evaluate the technology. Whether the issue is network intrusion, data theft or compliance, Konica Minolta bizhub technology offers the security demanded by internal clients and federal legislation.
Konica Minolta Certifications and related documentation can be found at: http://www.commoncriteriaportal.org/public/consumer/index.php
For invitations to the press conference and/or to schedule booth tours, contact Rachel Reed at 781.782.5785, or via e-mail.
For more on Konica Minolta document security, a white paper entitled "Fundamentals of Security for Konica Minolta bizhub Multifunctional Digital Office Machines" can be requested through the contact above.
About Konica Minolta Business Solutions U.S.A.
Konica Minolta Business Solutions U.S.A., Inc. offers a broad range of multifunctional digital imaging solutions inspired by its bizhub brand of powerful solutions that serve as the central resource for document scanning, in-house printing, copying, faxing and electronic archiving and distribution. From high-quality color and monochrome bizhub systems for workgroups and small offices, to advanced high-volume bizhub PRO production printing systems for large corporations and print-for-pay services, Konica Minolta is leading the industry toward integrated, networked hardware/software solutions that are more simple, reliable, and cost-effective. Complementing its bizhub solutions, Konica Minolta also offers desktop laser printers, microform digital imaging systems, wide-format printers and scanning systems for specialized applications.
Headquartered in Ramsey, New Jersey, Konica Minolta delivers expert professional services and experienced, responsive client support, in addition to the world-class service provided through its extensive network of direct sales offices, authorized dealers, resellers and distribution partners in the United States, Canada, Mexico, Central America and South America. For more information, please visit Konica Minolta at http://www.kmbs.konicaminolta.us.
Konica Minolta Corporate Contact:
Konica Minolta Business Solutions U.S.A., Inc.
Konica Minolta Media Contact:
Lois Paul and Partners
Konica Minolta is a trademark of Konica Minolta Holdings, Inc. bizhub and bizhub PRO are trademarks of Konica Minolta Business Technologies, Inc. All other trademarks mentioned in this document are the property of their respective owners.