About this Whitepaper

This document is intended for IT administrators who would like to study the security features, system architecture and network impact of Canon U.S.A.’s imageWARE Remote service.

This document is NOT confidential.

About imageWARE Remote

imageWARE Remote is a service developed by Canon Inc. that is being made available to Canon U.S.A.’s dealers and service providers, enabling them to provide better service to their customers.

imageWARE Remote consists of two components: imageWARE Remote Meter Reading (collects meter reads automatically from enabled imageRUNNER devices) and imageWARE Remote Service Monitor (provides information about device status, error notifications and statistics about parts lifetime and consumables). Both services use the same underlying technology

- either eRDS (embedded Remote Diagnostic System), or RDS Plug-in (imageWARE Enterprise Management Console Remote Diagnostic System Plug-in) to capture device information and transmit such information to a server managed by Canon Inc. via the Internet, where it is accessible by the service provider via a web interface (the Canon Inc. Universal Gateway or “UGW”).

The RDS Plug-in solution requires imageWARE Enterprise Management Console to be installed as a base operating platform and this requires a server to host the software.

The eRDS solution on the other hand does not require any additional hardware or software since the solution is already embedded within the imageRUNNER device.

Once activated, eRDS/RDS Plug-in will submit both meter readings and service information to the UGW. However, depending on the business model selected by the Service Provider, the UGW will allow for access of meter reading only (imageWARE Remote Meter Reading) or both meter reading and service information will be made available (imageWARE Remote Service Monitor).

Introduction
It used to be that a printer was connected directly to a computer via a serial or parallel interface, while fax machines and copiers did not connect to a computer at all. You knew where these devices were in your buildings and securing their physical output was your
primary concern. In today's all-in-one world, you can now obtain single devices that are not only printers, but also copiers, scanners, and fax machines. These networked multifunction devices (MFDs) are increasingly common in enterprise environments and are manufactured by vendors such as Canon, HP, Kyocera, Xerox, and many others.

While time and money is spent on securing computer systems, MFDs (also called multifunction printers or all-in-one devices) are often overlooked. Unfortunately, they are computers in-and-of themselves, running an embedded operating system, advertising a variety of network services, and sporting gigabytes of hard drive space. Possible risks include information leakage from logs (e.g. fax numbers, long distance telephone codes, and filenames), SNMP attacks, poorly configured network services, and buffer overflows. Beyond
the network attacks, there is the potential for data recovery from an MFD's internal hard drive. While it might be a standard practice to secure wipe or destroy the hard drives from decommissioned laptops, workstations, and servers, what about MFDs that go in for maintenance or back to a leasing company after an upgrade?

This paper covers how to audit and secure your multifunction devices. It starts by giving an overview of the risks. Then it delves into how to discover MFDs on your network. Finally, it presents a checklist for securing these devices.

Note that the administration and configuration of MFDs varies widely depending on manufacturer, model, and firmware revision. This paper is intended as a starting point for securing MFDs; for specifics on how to implement its recommendations, consult your device's manual or manufacturer's website.

Introduction

The Canon imagePROGRAF series is equipped with a disk erase feature that erases print jobs sent to the printer from the printer's hard disk. This feature completely erases data sent to the printer, such as classified data and private information, so that it is not leaked to third parties.

Generally, data written to hard disks on computers or printers is not completely erased when the memory is deleted or initialized in the usual way. You can use data recovery software to recover deleted data and retrieve information. This is precisely why preventing data recovery and completely deleting data is so important.

Disk Erase Features

The disk erase feature included with the Canon imagePROGRAF series responds to the need for an increased level of security.

The disk erase feature included with the Canon imagePROGRAF has the following 3 modes.

Secure Erase Mode

This is the highest level of erasure. It meets to U.S. Department of Defense requirements (DoD 5220-22.M) for the erasure of disk media.

Data stored on the printer's hard disk is overwritten multiple times and then checked after the final overwrite. This makes hard disk analysis used during disk recovery impossible, preventing data recovery. For more information, see "5 How Secure Erasure Mode Works".

Secure Quick Erase Mode

In this mode, data stored on the printer's hard disk is overwritten once with random data. This prevents data from being recovered using software. This mode erases data quicker than Secure Erase Mode.

High-speed Erase Mode

In this mode, the file management information for the data stored on the printer's hard disk is initialized. Because only the file management information is initialized, the data still remains on the hard disk.

LAKE SUCCESS, N.Y., August 24, 2010 – Canon U.S.A., Inc., a leader in digital imaging, today announced the high-performance XGA-resolution LV-7590 Multimedia Projector. Delivering 7000 lumens of brightness and a contrast ratio of 1800:1, this new projector offers five optional lenses that enable it to be customized to a variety of front or rear projection applications. This flexibility makes the LV-7590 Multimedia Projector ideal for installation in large venues such as houses of worship, school auditoriums, showrooms, large conference rooms, art galleries, museums and small theaters. The LV-7590 Multimedia Projector also employs a Color Control Device, an advanced technology that helps to deliver exceptional image clarity and precise color.

"The installation market is a large and growing segment for multimedia projectors," noted Yuichi Ishizuka, executive vice president and general manager, Consumer Imaging Group, Canon U.S.A. "Canon's new LV-7590 Multimedia Projector provides this market with the performance and features that are most in demand such as high brightness for clear, high-quality image display even in well-lit environments."

Optional Lenses for Installation Flexibility

Five optional lenses enable installers to customize Canon's new LV-7590 Multimedia Projector for a variety of applications. The five optional lenses include an Ultra Wide-Angle Lens (LV-IL01); Wide-Angle Zoom Lens (LV-IL02); Long-Focus Zoom Lens (LV-IL03); Ultra Long-Focus Zoom Lens (LV-IL04); and a 1.3x Zoom Lens (LV-IL05).