Canon imageRUNNER 2870, Руководство по обслуживанию

Страница: 14 / 37

Chapter 2
2-1
2.1
New Function
2.1.1 Security Function
0008-5636
When the Security function is enabled using this kit, the following functions can be
validated.
- HDD encryption
- Full initialization of the HDD
- Enabling/Disabling display of Job Log
2.1.2 HDD Encryption
0008-5637
Device's HDD records temporally image data like scanned images and PDL data, etc. at any
time. After the printing operation is completed, the normal operation is that only
management information is deleted, so the image data information remains on HDD.
Therefore, it is concerned that HDD is taken by the third party, the data is analyzed by
accessing directly using Disk Editor, and the original data is recovered. As the
countermeasure, information is always encrypted in the areas where the data like images
and PDL data are saved temporarily. By doing so, recovering the original image data in the
HDD will be too difficult. This function is automatically enabled when the license key
registration of the security kit is completed. You cannot disable this function.
Mechanism of data encryption
Data encryption uses 3DES encryption algorism with a data encryption key. When the
security kit is started its operations, the data encryption key is generated, based on random
numbers in the device. Then, when information is read and written in the encrypted area of
HDD, the data encryption key is used for encrypting and decoding. There is no way to take
this data encryption key to the outside of the HDD. This key is saved in the separate
locations other than HDD, so it is too hard to obtain this data encryption key.
Data encryption key to be regenerated
User can execute the regeneration of the data encryption key used for the HDD encryption
from the following User mode. When the device itself is damaged or HDD is stolen by the
third party, the user can regenerate the data encryption key, so that the current HDD data
cannot be accessed.
Actual operations are as follows.