Canon Paper Shredder - Manual (Page 24)

24
White Paper: Canon imageRUNNER ADVANCE Security
Section 3 — Information Security
Workflow Composer
Canon imageRUNNER ADVANCE Workflow Composer enables users and administrators to
create custom workflows that automate redundant tasks and provide integration with back-end
systems via connectors. Administrators are able to create workflows for users to reduce errors
when sending documents and limit access to only designated individuals for operations that
interact with back-end systems.
Trusted Platform Module (TPM)
Every imageRUNNER ADVANCE system includes a Trusted Platform Module (TPM), a tamper-
resistant open standards security chip that is responsible for encrypting and decrypting information
such as passwords, certificates, IDs and cryptographic keys. TPM protects information on the
internal hard disk drive by storing the encryption key in a separate location. Once enabled, the
device will not launch if the TPM chip is removed to protect against physical attacks.
TPM functionality is disabled by default. The feature can be enabled on Canon
imageRUNNER ADVANCE devices within the Additional Functions menu. Once enabled, it
is important to back up the TPM key in the event of failure through USB memory.
HDD Lock
New to the Next Generation imageRUNNER ADVANCE devices is a feature of HDD Lock. HDD
Lock provides the capability of securing the HDD with a Password that is unique with each
imageRUNNER ADVANCE, so even if the HDD is physically removed from the device, it’s data
cannot be accessed.
Data in Transit
Encrypted Secured Print
Encrypted Secured Print utilizes strong AES 256 bit encryption to protect your print job data while
in transmission over the network. To protect print jobs from being output at the device unattended,
the Encrypted Secured Print feature holds the job in a queue until the user-defined password is
entered on the control panel.
Encrypted PDF
The Encrypted PDF feature of imageRUNNER ADVANCE systems support 40-bit/128-bit RC4
encryption and 128-bit AES (Advanced Encryption Standard) for greater security when sending
documents. When sending a 128-bit AES encrypted PDF, Acrobat 7.0 or later is required to open
the file. For the Next Generation imageRUNNER ADVANCE devices, 256-Bit AES encrypted
PDF is supported.
For more information, please refer to the Document Security section, under Information Security.
3.3 – Fax Security
Super G3 Fax Board and Multi Line Fax Board
Canon imageRUNNER ADVANCE systems that support Super G3 fax capabilities with the optional Super
G3 Fax Board installed can be connected to the Public Switched Telephone Network for sending and
receiving of fax data. In order to maintain the security of customer’s networks in relation to this potential
interface, Canon has designed its Super G3 Fax Boards to function in accordance with the following
security considerations: