Security Function
Security Management
2.2. Controller
2.2.1. Purpose
The controller provides both network and direct-connect external interfaces, and enables print, email, network scan,
server fax, internet FAX, and LanFAX functionality. Network scanning, server fax, internet fax, and LanFax, are
standard features. Image Overwrite, which is included as a standard feature, enables both Immediate and On-
Demand overwrite of any temporary image data created on disk. The controller also incorporates an open-source
web server (Apache) that exports a Web User Interface (WebUI) through which users can submit jobs and check job
and machine status, and through which system administrators can remotely administer the machine.
The controller contains the image path, which uses proprietary hardware and algorithms to process the scanned
images into high-quality reproductions. Scanned images may be temporarily buffered in DRAM to enable electronic
pre-collation, sometimes referred to as scan-once/print-many. When producing multiple copies of a document, the
scanned image is processed and buffered in the DRAM in a proprietary format. Extended buffer space for very large
documents is provided on the network disk. The buffered bitmaps are then read from DRAM and sent to the Image
Output Terminal (IOT) for marking on hardcopy output. For long documents, the production of hardcopy may begin
before the entire original is scanned, achieving a level of concurrency between the scan and mark operations.
The controller operating system is Wind River Linux, kernel v. 2.6.20+. (Note: Consistent with Flaw Remediation, this
baseline may be updated as indicated by the '+' sign. Unnecessary services such as rsh, telnet and finger are
disabled in the OS. FTP is used in client-only mode by the network scanning feature for the filing of scanned images
and the retrieval of Scan Templates; however the controller does not contain an FTP server.
The controller works with the Graphical User Interface (GUI) assembly to provide system configuration functions. A
System Administrator PIN must be entered at the GUI in order to access these functions.
2.2.2. Memory Components
Volatile Memory Description
Type (SRAM, DRAM, etc)
DDR SDRAM
DDR SDRAM
ASICs, Registers, RAM Buffers, etc.
Additional Information:
All memory listed above contains code for execution and configuration information. No user or job data is permanently stored in these
locations.
Scan to Remote File is supported on this device.
Ver. 1.00, May 2010
XEROX WorkCentre 6400 Information Assurance Disclosure Paper
Table 1 Security Functions allocated to Subsystems
Size
User Modifiable
(Y/N)
512MB
N
512MB
N
various
N
Subsystem
Controller
Graphical User Interface
Function or Use
Executable code, control data, buffer
memory (temporarily contains
incoming image data) [NC]
Executable code, control data, buffer
memory (temporarily contains image
data) [CC]
Image manipulation, image transfer
(temporarily contains image data).
8
Process to Clear:
Power Off System
Power Off System
Power Off System
Page 8 of 44
Drukuj stronę