Canon imageRUNNER ADVANCE C5255, Руководство по обслуживанию, Страница: 65 / 1443

2
2
2-27
2-27
Technology > Controller System > Controls > HDD Encryption/ Mirroring Kit (optional)
Technology > Controller System > Controls > HDD Encryption/ Mirroring Kit (optional)
■
HDD Encryption/ Mirroring Kit (optional)
This option enables to generate the encryption key inside the encryption board and to encrypt
the whole HDD including the system software. Encryption allows leaks of confidential data,
even when the HDD is stolen, including image data (temporarily generated at Copy or Print
jobs) and user data stored in BOX/ Advanced BOX. In addition, the data written into the two
hard disks are also encrypted when the HDD mirroring functionality is enabled. The following
descriptions focus on the HDD encryption function. See the previous section for the mirroring
functionality.
● HDD Encryption Functionality
The HDD of the host machine holds temporary image data including scanned images or PDL
data as well as user data in BOX and Advanced BOX. Such images or user file information
are saved in the HDD only with system information cleared. Under this condition, the data
or images can be restored by accessing directly to the stolen HDD using the access editor
and the like. To counter such threats against securities, data written to the disk should be
always encrypted to protect them from illegal restoration of image data or others. This product
employs an unconventional approach to achieve HDD encryption and mirroring functionality
with the dedicated chipset on a board (Canon MFP Security Chip Version 2.00). Since the two
functions are operated in a HDD, the encryption functionality can be independently enabled.
● Data Encryption Mechanism
The encryption board receives signals transmitted from the controller board, and encrypts
and saves them in the HDD.
The encryption board receives the encrypted data saved in the HDD to decode and send
them to the controller.
The encryption board can be configured with a HDD and an encryption/ mirroring board, or
with 2 HDDs and an encryption/ mirroring board.
● Conditions for Encryption Board Operation
The encryption board has the function to recognize and authenticate the host machine. An
error is triggered if a second-hand HDD encryption/ mirroring board is installed to the other
machine.
● Compatibility among Device, Encryption Board and HDD
E602-2000 error may occur if the unmatched authentication information is found between the
controller and the HDD encryption board and the encryption board is mounted.
The device, the encryption board and HDD can be connected in 4 use cases.
The following shows the statuses for each use case.
Case 1: Normally operated
Case 2: HDD-related error occurs because the system on the HDD cannot be read (other
than E602-2000 error)
Case 3: E602-2000 is triggered by failure in mutual authentication
Case 4: Unable to decode properly due to unmatched key for the encryption board
Correct HDD
Correct
controller
Correct
controller
two-way authentication
Correct
encryption
board
Correct
encryption
board
Encryption
Encryption
Correct HDD
(Protection property)
Correct HDD
(Protection property)
Correct HDD
(Protection property)
It is not possible to decode.
It is not possible to decode.
It is not possible two-way authentication
Encryption board
not authorized
(Protection property)
Controller
not authorized
F-2-40