System for advanced protection of consumable or detachable elements

• US 10,449,774 B2
• Filed: 07/18/2018
• Issued: 10/22/2019
• Est. Priority Date: 02/06/2015
• Status: Active Grant

• Current Assignee: Dover Europe Sarl (Dover Corporation)
• Original Assignee: Dover Europe Sarl (Dover Corporation)
• Inventors: Bonneton, Damien
• Primary Examiner(s): Vo, Anh T
• Application Number:
  US16/038,552
• Publication Number:
  US 20180319170A1
• Time in Patent Office: 461 Days
• CPC Class Codes: B41J 2/17546 electronically
• CPC Class Codes: G03G 15/0863 provided with identifying means or means for storing process- or use parameters, e.g. an electronic memory
• CPC Class Codes: G03G 21/1657 Wireless connection means, e.g. RFID
• CPC Class Codes: G05B 1/03 for comparing digital signals
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 21/123 by using dedicated hardware, e.g. dongles, smart cards, cryptographic processors, global positioning systems [GPS] devices
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/608 Secure printing
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2129 : Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2149 : Restricted operating environment
• CPC Class Codes: H04L 2209/805 : Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/0819 : Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/3271 : using challenge-response

Abstract

A method of authenticating a consumable or detachable element of a continuous inkjet printer comprising: the controller of the printer generating a 1^st item of random information that is dispatched to an authentication circuit of the element; encrypting the 1^st item of information by the authentication circuit using a 1^st encryption algorithm and a 1^st secret key to form a 1^st item of encrypted random information; dispatching the 1^st item of information to the controller; encrypting the 1^st item of information by the controller using a 2^nd encryption algorithm and a 2^nd secret key to form a 2^nd item of encrypted random information; comparing the 1^st item of encrypted random information with the 2^nd encrypted item of random information to authenticate the consumable element; and if the consumable element is authenticated, dispatching at least one part of a 3^rd key, termed the shared key, by the element to the printer.

Claims

1. A method of data transfer between a 1^st consumable or detachable element of a continuous inkjet printer and this continuous inkjet printer, said 1^st consumable, or detachable element, comprising a 1^st encryption algorithm and a 1^st secret key, as well as at least one item of data, encrypted with a 2^nd encryption algorithm and a 2^nd key, termed the shared key, said continuous inkjet printer also comprising said 2^nd encryption algorithm, said 2^nd shared key being stored in at least one of said 1^st consumable or detachable element and of said continuous inkjet printer, the method wherein:

a)—

at least one item of data, encrypted with said shared key, is transferred from said 1^st consumable or detachable element to the continuous inkjet printer or from said continuous inkjet printer to said 1^st consumable or detachable element;

b)—

when at least one item of data, encrypted with said shared key, is transferred from said 1^st consumable or detachable element to the continuous inkjet printer, said continuous inkjet printer deciphers, with help of said shared key, said at least one item of data.

2. The method according to claim 1, wherein no authentication process is implemented before step a).

3. The method according to claim 1, wherein said printer comprises a 3^rd encryption algorithm and a 3^rd secret key, said method implementing before step a) an authentication process of the printer by said 1^st consumable or detachable element and/or an authentication process of said 1^st consumable or detachable element by the printer.

4. The method according to claim 3, said shared key, or at least part of it, being supplied to the controller after said authentication process.

5. The method according to claim 1, wherein:

the 1^st secret key is, or has been, modified using an algorithm implementing an item of digital data available in, or associated with, respectively the 1^st consumable or detachable element or with the continuous inkjet printer;

and/or, the shared key, is, or has been, modified using an algorithm implementing an item of digital data available in, or associated with, the 1^st consumable or detachable element and/or with the continuous inkjet printer.

6. The method according to claim 3, wherein:

the 3^rd secret key, is, or has been, modified using an algorithm implementing an item of digital data available in, or associated with, respectively the 1^st consumable or detachable element or with the continuous inkjet printer;

and/or, the shared key, is, or has been, modified using an algorithm implementing an item of digital data available in, or associated with, the 1^st consumable or detachable element and/or with the continuous inkjet printer.

7. The method according to claim 1, wherein at least one part of the 2^nd secret key or the shared key or of the exchange data is stored on a card, different and/or physically separated from the printer and of the 1^st consumable element, and which exchanges data with the printer.

8. The method according to claim 1, wherein said 1^st consumable or detachable element is an ink or solvent cartridge or a filter or a pump or a solenoid valve, or a removable module, for example of the ink circuit of the printer or of a printing head of the printer, or a data medium.

9. A consumable or detachable element for a continuous inkjet printer, (CU), comprising:

a circuit implementing a 1^st encryption algorithm and a 1^st key, termed the secret key;

a memory storing at least one item of data, encrypted with a 2^nd key, termed the shared key, said at least one item of data to be transferred to said printer.

10. The consumable or detachable element according to claim 9, further comprising a memory storing said 2^nd key, termed the shared key.

11. The consumable or detachable element according to claim 10, said 2^nd key being encrypted with said 1^st key.

12. The consumable or detachable element according to claim 10, further comprising a circuit implementing a 2^nd encryption algorithm and said 2^nd key, termed the shared key.

13. The consumable or detachable element according to claim 9, said 2^nd key being variable over time and/or having a limited duration of validity.

14. The consumable or detachable element according to claim 9, comprising an RFID interface or an interface to exchange data by contact.

15. The consumable or detachable element according to claim 9, further storing in a memory at least one item of data concerning at least one 2^nd consumable or detachable element or at least one spare part that the printer can use, and/or at least one software that the printer can use, and/or at least one method of use that the printer can implement.

16. The consumable or detachable element according to claim 9, wherein said 1^st consumable or detachable element is an ink or solvent cartridge or a filter or a pump or a solenoid valve, or a removable module, for example of the ink circuit of the printer or of a printing head of the printer, or a data medium.

17. The consumable or detachable element according to claim 15, in which said 1^st consumable or detachable element is a data medium, said at least one 2^nd consumable element or detachable element or at least one spare part being an ink or solvent cartridge or a filter or a pump or a solenoid valve, or a removable module, for example the ink circuit of the printer or a printing head of the printer.

18. The consumable or detachable element according to claim 9, configured to implement an authentication process with a printer before using said consumable or detachable element with said printer.

19. A continuous inkjet printer, comprising:

an ink circuit,

a printing head,

a hydraulic connection between the ink circuit and the printing head,

an electrical connection for supplying electrical power to said printing head,

a consumable or detachable element according to claim 9.

20. A continuous inkjet printer, comprising:

an ink circuit,

a printing head,

a hydraulic connection between the ink circuit and the printing head,

an electrical connection for supplying electrical power to said printing head,

a consumable or detachable element according to claim 16.