Samsung MFP SECURITY White Paper

Contents

Samsung MFP SECURITY White Paper Manual pdf 33 page image

SAMSUNG MFP SECURITY WHITE PAPERPage - 33 Copyright 2014 Samsung Electronics Co., Ltd., All rights reserved.9.3 IP Security (IPSec): IPv4, IPv6IPSec is an important element between the other network nodes in IP communication. It supports authenticating andencrypting IP packets between network devices using IPv4 or IPv6. IPSec is used widely without upper layer securityprotocols like TLS/SSL or SSH because of the existing layer 3 based on the OSI layer. When IPSec is used between a userPC and an MFP, print job security and scan job security can be enhanced. When IPSec is used between the Administratorand an MFP, management data security can be enhanced. IPSec is used to protect IP-based network traffic.IPSec is designed to provide interoperable, high quality, cryptographically-based security for IPv4 and IPv6. The set ofsecurity services offered includes access control, connectionless integrity, data origin authentication, protection againstreplays (a form of partial sequence integrity), confidentiality (encryption), and limited traffic flow confidentiality. Theseservices are provided at the IP layer, offering protection for IP and/or upper layer protocols.IPSec uses two protocols to provide traffic security – Authentication Header (AH) and Encapsulating Security Payload(ESP). Both protocols are described in more detail in their respective Internet Society TM RFCs:• 4302 - IP Authentication Header• 4835 - Cryptographic Algorithm Implementation Requirements for Encapsulating Security Payload (ESP) andAuthentication Header (AH)IPSec only supports the pre-shared key method for IPSec authentication. Users can setup pre-shared key values through aWeb UI. IKE protocol is used to establish and manage Security Association (SA) between a printer and a user node in theAH and ESP services. In IPSec and IKE protocol, the supporting algorithms include the following:• Diffie-Hellman algorithm: modp 1024, modp 1536, modp 2048, modp 3072, modp 4096, modp 6144 and modp 8192• Hash algorithm: SHA1• Encryption algorithm: 3DES, AES128,AES192, AES256• Integrity algorithm: SHA1Example if IPSec menu in the Web UI: