Canon Paper Shredder - Manual (Page 29)

29
White Paper: Canon imageRUNNER ADVANCE Security
Section 4 — Network Security
Authentication and Encryption Method:
One of the following methods must be set for the device.
 AH (Authentication Header)
A protocol for certifying authentication by detecting modifications to the communicated data,
including the IP header. The communicated data is not encrypted.
 ESP (Encapsulating Security Payload)
A protocol that provides confidentiality via encryption while certifying the integrity and
authentication of only the payload part of communicated data.
Key Exchange Protocol
Supports IKEv1 (Internet Key Exchange version 1) for exchanging keys based on ISAKMP (Internet
Security Association and Key Management Protocol). IKE includes two phases; in phase 1 the SA used for
IKE (IKE SA) is created, and in phase 2 the SA used for IPSec (IPSec SA) is created.
To set authentication with the pre-shared key method, it is necessary to decide upon a pre-shared key in
advance, which is a keyword (24 characters or less) used for both devices to send and receive data. Use the
control panel of the device to set the same pre-shared key as the destination to perform IPSec
communications with, and perform authentication with the pre-shared key method.
To select authentication with the digital signature method, it is necessary to install a key pair file and CA
certificate file created on a PC in advance using the Remote UI, and then register the installed files using
the control panel of the device. Authentication is conducted with the destinations for IPSec communication
using the CA certificate.
The types of key pair and CA certificate that can be used for authentication with the digital signature
method are indicated below.
 RSA algorithm
 X.509 certificate
 PKCS#12 format key pair
Wireless LAN
Canon imageRUNNER ADVANCE systems support wireless networking through the installation of an
optional Wireless LAN Board. The Wireless LAN Board is IPv6 compliant and supports the latest wireless
encryption standards, including WEP, WPA and WPA2, in addition to support for the IEEE802.1X
authentication standard.
The Wireless LAN Board and the standard network interface of imageRUNNER ADVANCE systems
cannot be used simultaneously, eliminating the possibility of maliciously using the device as a router or
bridge to inter-connect two networks. Network communication functionality is automatically disabled for
the standard network interface when the Wireless LAN Board is enabled.
The Next Generation imageRUNNER ADVANCE models no longer support the wireless LAN Board, but
can connect to wireless networks via the Silex Wireless Bridge SX-2500CG. This device Includes security
features such as Open System or Shared Key support withWired Equivalent Privacy (WEP) encoding,
WPA (Wi-Fi Protected Access) Personal (WPA-PSK) with a choice of TKIP or AES encryption methods,
and WPA2, which adds Advanced Encryption Standard (AES) to encryption.
IEEE 802.1X
Canon imageRUNNER ADVANCE systems support IEEE 802.1x, which is a standard protocol for port-
based Network Access Control. The protocol provides authentication to devices attached to a LAN port and