e-STUDIO Security Features
Security Statement (PDF, 272KB) .jpg)
Security FAQ
Toshiba e-STUDIO has a whole series of security features to ensure data and information stored and transmitted in and out of the MFP are strictly controlled and secured.
• Advanced Encryption Standard
Advanced Encryption Standard or AES is a128-bit standard built-in encryption software to encrypt data within the hard disk drive during the encoding and decoding processes. This encryption standard prevents any unauthorized person from gaining access to the stored data. The data are safe even if the hard disk drive is physically stolen.
• IPSec
IPsec (IP Security Protocol) protects communication in the IP layer. It provides authenticated and encrypted submission of print jobs from desktop to Toshiba MFPs.
• Data Overwrite Kit
Data overwriting ensures that the hard disk drive is absolutely clear of readable data. It works by overwriting the actual data with random and numerical characters. In addition, the disk is automatically cleared immediately after the device is done using the information after every job, preventing the data from being recovered by unauthorized users. It is recommended that users seek data overwrite technologies that exceed the DoD guidelines of a three-pass standard for secure overwriting, of which all of Toshiba MFPs achieve when the data overwrite kit is installed.
• Department and User Management through the use of:
Department Codes
User/Department Codes – Not only do user codes control access, they also provide beneficial data tracking and usage information. User codes require users to enter a code in order to use the MFP device. Codes may be required for all walk-up functions, including copying, scanning and faxing, as well as printing from the desktop. Users are required to input a five-digit code either at the control panel for copy, fax or scan functions, or within the print driver when sending print jobs from a computer. Device administrators are able to easily track and view the volume and type of jobs being produced by each department or user. Additionally, these codes restrict unauthorized users from abusing company resources or gaining access to confidential information.
|
Strong Passwords
With the advent of password recovery tools that can crack passwords instantaneously, it is recommended that administrators create a strong password. A strong password is one that is at least eight characters, includes a combination of letters, numbers and symbols, and is easy for the user to remember but difficult for others to guess. Unauthorized persons will find it difficult to access the administrative and network properties of each device, as well as to gain access to the device’s control panel without the proper username and password. For further protection, a login limitation of up to three times can be employed. This sequence slows down the ability to crack the password by locking the screen after three failed attempts.
|
|
 |
Usage Limitations
Usage limitations allow the administrator to control and track output at the device. With usage limitations, administrators can limit the number of copies or prints available at an account or a department level. The use of color also is an optional restriction when dealing with a color-capable device. This in turn provides a further level of security to complement the controlled device access, as well as the visibility to track and control costs associated with the device’s use.
Job Log
The job log feature is a valuable tool for network administrators, distributor/dealer service technicians and office administrators, making it effortless to track data and documents. Print, copy, fax and scan jobs are tracked with detailed information including user, date, time, number of pages, type of paper, and type of job. The job log can then be exported into a standard .csv file for importing into other third-party applications. This data tracking and accountability report provides useful information as to the types of usage at the device, volume, and user.
Network Authentication
With authentication, users are required to input their network user name and password to gain access to the control panel. Network administrators can control access to the device in the same manner that they control network access from the desktop. If a user is authorized on the corporate network, then he or she can gain access to the MFP. Authentication ensures that only those users who have been authorized can gain access to data stored on the device. In addition, it lets e-mail recipients know the identity of the sender, deterring users from sending prohibited material.
• LDAP Integration Lightweight Directory Access Protocol (LDAP)
|
|
Integration provides a centralized address book of all employees and enables the administrator to establish rules and access rights based on specified user groups. For example, the administrator may prohibit employees employed by the company for less than 90 days from scanning or faxing. With LDAP authentication, the rules set by the administrator will apply to all MFPs on the company network. Another benefit of LDAP integration is that it ensures that when scanning, the user’s name appears on the document. This prevents users from sending malicious or other prohibited material over the corporate network.
|