Canon Paper Shredder User Manual page 20

Section 3 — Information Security
Essentials Workflow Composer
Canon imageRUNNER ADVANCE Essentials includes the Workflow Composer component to
enable users and administrators to create custom workflows that automate redundant tasks and
provide integration with back-end systems via connectors. Administrators are able to create
workflows for users to reduce errors when sending documents and limit access to only designated
individuals for operations that interact with back-end systems.
Trusted Platform Module (TPM)
Every imageRUNNER ADVANCE system includes a Trusted Platform Module (TPM), a tamper-
resistant open standards security chip that is responsible for encrypting and decrypting information
such as passwords, certificates, IDs and cryptographic keys. TPM protects information on the
internal hard disk drive by storing the encryption key in a separate location. Once enabled, the
device will not launch if the TPM chip is removed to protect against physical attacks.
TPM functionality is disabled by default. The feature can be enabled on Canon
imageRUNNER ADVANCE devices within the Additional Functions menu. Once enabled, it
is important to back up the TPM key in the event of failure through USB memory.
Data in Transit
Encrypted Secured Print
Encrypted Secured Print utilizes strong AES 256 bit encryption to protect your print job data while
in transmission over the network. To protect print jobs from being output at the device unattended,
the Encrypted Secured Print feature holds the job in a queue until the user-defined password is
entered on the control panel.
Encrypted PDF
The Encrypted PDF feature of imageRUNNER ADVANCE systems support 40-bit/128-bit RC4
encryption and 128-bit AES (Advanced Encryption Standard) for greater security when sending
documents. When sending a 128-bit AES encrypted PDF, Acrobat 7.0 or later is required to open
the file.
For more information, please refer to the Document Security section, under Information Security.
3.3 – Fax Security
Super G3 Fax Board and Multi Line Fax Board
Canon imageRUNNER ADVANCE systems that support Super G3 fax capabilities with the optional Super
G3 Fax Board installed can be connected to the Public Switched Telephone Network for sending and
receiving of fax data. In order to maintain the security of customer's networks in relation to this potential
interface, Canon has designed its Super G3 Fax Boards to function in accordance with the following
security considerations:
Super G3 Fax Board Communication Mechanism
The modem on the Super G3 Fax Boards does not have Data Modem capability, but only Fax
Modem capability. As a result, TCP/IP communication through the phone line is impossible. In
addition, there is no functional module such as a Remote Access Service that enables
communication between a phone line and a network connection within the device.
White Paper: Canon imageRUNNER ADVANCE Security
20