ColorQube 9301/9302/9303 Information Assurance Disclosure Paper v1.1

Human Interface

Original

Documents

Power Button

Ethernet Port,

USB Target Port, USB

Host Ports, Scanner

Interface, Serial Port,

Foreign Device Interface

Power Cord

Scanner /

Document Handler

B ut to ns

a nd

D is pl ay

TOE inte rnal wirin g (prop rietary)

Physical external Interfaces Controller/GUI

TOE internal wiring

(proprietary)

Image Output

Terminal (also known as Marking

Engine)

Paper output interface

Hardcopy

(Finisher)

Po we r I nt er fa ce

Physical external

Interface

Power Supply

Fax Module

TOE Physical Boundary

PSTN (RJ-11 Port)















Network Controller Services

Open Source

Developed by Xerox

Application Layer *

*

*

Security Manager

Connectivity Layer

OS Layer

*

*

*

OpenSSL Utility

*

*

Samba

*

*

*

Disk Driver

*

netsnmp

*

**

OpenSSL Library

* *

mod_ssl

*

* *

*

*

USB Driver

*

*

*

*

«interface»

Linux API

*

*

*

*

*

*

Network Driver

*

*

IPtables

*

*

*

Apache

*

Application Layer

NTP snmp v1/v2 snmp v3

WSD

DHCP pop3 smtp LDAP http ipp DNS lpr Kerberos ftp sftp

SMB ssl/tls

NETBIOS NCP

SAP

Port 9100 udp tcp SPX

Transport Layer

IPSec

IPv4 IPX

Internet Layer

NDS AFP

ZIP/ASP/PAP

RTMP, NBP, ATP, AEP

DDP/AARP

Network Layer

IEEE 802.1X

IEEE 802.3

Application Layer

snmp v1/v2 snmp v3

WSD

DHCP udp smtp LDAP http ipp DNS lpr Kerberos ftp sftp ssl/tls

NDS AFP

Port 9100 tcp

NCP

SAP

SPX

ZIP/ASP/PAP

RTMP, NBP, ATP, AEP

Transport Layer

IPSec

IPv6 IPX DDP/AARP

Internet Layer

IEEE 802.1X

IEEE 802.3









Network

Network Controller

request

http server

response

I n t e r n a l

request response

machine information

A

P

I

Local UI Authentication and Authorization

Subsystem

Web UI

Virtual keyboard / Secure Access / CAC

[ User presses 'Access' button]

[ User selects 'Properties' page]

Enable SSL to ensure secure communication between client and device

Get Credentials Get Credentials

Authentication

Local UI

Kerberos / NDS / SMB / LDAP

Web UI

User authenticated against Local Accounts database User authenticated by network domain controller

Domain Controller

Authentication Failure

Authorization

Authentication Failure

Authorization against Local Roles Database

Group membership determined at domain controler.

Role definition for the group is in the Local Database.

Domain Controller

Device provides access to authorized services

Authentication and Authorization complete; user continues with tasks

SUBNET 1

1

2

Router

1

2

Domain Controller

SUBNET 2

Xerox Device

5

3

4

LDAP Server

Domain

Controller

3

4

Router

3

4

Xerox

Device

1 2

5

6

7

LDAP Server

DNS Server

















































1

On color machines XSA can track color copy or color print usage.































