Prevention of unauthorized credential production in a credential production system

• US 20060037065A1
• Filed: 09/21/2005
• Published: 02/16/2006
• Est. Priority Date: 03/01/2002
• Status: Abandoned Application

• Current Assignee: Fargo Electronics Inc. (Assa Abloy AB)
• Original Assignee: Fargo Electronics Inc. (Assa Abloy AB)
• Inventors: Lukaskawcez, Stacy W., Klinefelter, Gary M., Ekers, John E., Oeltjenbruns, Mark D., Zappe, Thomas A.
• Application Number:
  US11/232,427
• Publication Number:
  US 20060037065A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00

Abstract

In a method for preventing unauthorized credential substrate processing in a credential production system that includes first and second credential production components, a first security code is generated using a random code and a first security key with the first credential production component. The first security code is communicated from the first credential production component to the second credential production component. The validity of the first security key is then checked using the first security code, the random code and a second security key with the second credential component. Finally, processing of the credential substrate by the credential production system is prevented when the first security key is not valid.

Claims

1. A method for preventing unauthorized credential substrate processing in a credential production system including first and second credential production components, the method comprising steps of:

generating a first security code using a random code and a first security key with the first credential production component;

communicating the first security code from the first credential production component to the second credential production component;

checking the validity of the first security key using the first security code, the random code and a second security key with the second credential production component; and

preventing processing of a credential substrate by the credential production system when the first security key is not valid.

2. The method of claim 1, wherein the first credential production component includes a credential production application and the second credential production component includes a credential production device.

3. The method of claim 2, wherein the credential production device includes at least one credential substrate processing device selected from the group consisting of a credential substrate printing device, a credential substrate laminating device, and a credential substrate encoding device.

4. The method of claim 2 including:

retrieving the first security key from a source selected from the group consisting of a memory accessible to the computer, a key card input from a user of the credential production system, an input from user of the credential production system, and program code of the credential production application; and

retrieving the second security key from a source that is accessible to the credential production device selected from the group consisting of a memory of the credential production device, a memory that is remote from the credential production device, a key card input to the credential production device, and an input from user of the credential production system.

5. The method of claim 1, wherein the first credential production component includes a credential production device and the second credential production component includes a credential production application.

6. The method of claim 5, wherein the credential production device includes at least one credential substrate processing device selected from the group consisting of a credential substrate printing device, a credential substrate laminating device, and a credential substrate encoding device.

7. The method of claim 5 including:

retrieving the first security key from a source that is accessible to the credential production device selected from the group consisting of a memory of the credential production device, a memory that is remote from the credential production device, a key card input to the credential production device, and an input from user of the credential production system; and

retrieving the second security key from a source selected from the group consisting of a memory accessible to the computer, a key card input from a user of the credential production system, an input from user of the credential production system, and program code of the credential production application.

8. The method of claim 1 including performing a processing operation on the credential substrate with the credential production device when the first security key is valid, wherein the processing operation is selected from the group consisting of printing an image to the substrate, laminating a film to the substrate, and encoding data to the substrate.

9. The method of claim 1, wherein at least one of the first and second security keys is related to an identifier that is unique to the credential production system selected from the group consisting of an identifier of the credential production application, an identifier of the credential production device, an identifier of a component of the credential production device, an identifier of a consumable supply of the credential production device, an identifier of an owner of the credential production system, and an identifier of a dealer of the credential production system.

10. The method of claim 1 including communicating a request for an authorization check from one of the second credential production component to the first credential production component, and the first credential production component to the second credential production component, prior to the generating step.

11. The method of claim 1 including communicating the random code from the first credential production component to the second credential production component.

12. The method of claim 1 including communicating the random code from the second credential production component to the first credential production component.

13. The method of claim 1, wherein the checking step includes:

decrypting the first security code using the second security key; and

comparing the decrypted first security code to the random code;

wherein the first security key is deemed valid when a predetermined relationship exists between the decrypted first security code and the random code.

14. The method of claim 1, wherein the checking step includes:

decrypting the first security code using the random code; and

comparing the decrypted first security code to the second security key;

wherein the first security key is deemed valid when a predetermined relationship exists between the decrypted first security code and the second security key.

15. The method of claim 1, wherein the checking step includes:

generating a second security code using the random code and the second security key; and

comparing the second security code to the first security code;

wherein the first security key is deemed valid when a predetermined relationship exists between the first and second security codes.

16. A method for preventing unauthorized credential substrate processing in a credential production system including first and second credential production components, the method comprising steps of:

communicating a random code from the second credential production component to the first credential production component;

generating a first security code using the random code and a first security key;

communicating the first security code from the first credential production component to the second credential production component;

checking the validity of the first security key using the first security code, the random code and a second security key; and

preventing processing of a credential substrate by the credential production system when the first security key is not valid.

17. The method of claim 16, wherein the first credential production component includes a credential production application and the second credential production component includes a credential production device.

18. The method of claim 17, wherein the credential production device includes at least one credential substrate processing device selected from the group consisting of a credential substrate printing device, a credential substrate laminating device, and a credential substrate encoding device.

19. The method of claim 17 including:

retrieving the first security key from a source selected from the group consisting of a memory accessible to the computer, a key card input from a user of the credential production system, an input from user of the credential production system, and program code of the credential production application; and

retrieving a second security key from a source that is accessible to the credential production device selected from the group consisting of a memory of the credential production device, a memory that is remote from the credential production device, a key card input to the credential production device, and an input from user of the credential production system.

20. A method of claim 16, wherein the first credential production component includes a credential production device and the second credential production component includes a credential production application.

21. The method of claim 20, wherein the credential production device includes at least one credential substrate processing device selected from the group consisting of a credential substrate printing device, a credential substrate laminating device, and a credential substrate encoding device.

22. The method of claim 20 including:

retrieving the first security key from a source that is accessible to the credential production device selected from the group consisting of a memory of the credential production device, a memory that is remote from the credential production device, a key card input to the credential production device, and an input from user of the credential production system; and

retrieving the second security key from a source selected from the group consisting of a memory accessible to the computer, a key card input from a user of the credential production system, an input from user of the credential production system, and program code of the credential production application.

23. The method of claim 16 including performing a processing operation on the credential substrate with the credential production device when the first security key is valid, where the processing operation is selected from the group consisting of printing an image to the substrate, laminating a film to the substrate, and encoding data to the substrate.

24. The method of claim 16, wherein at least one of the first and second security keys is related to an identifier that is unique to the credential production systems selected from the group consisting of an identifier of the credential production application, an identifier of the credential production device, an identifier of a component of the credential production device, an identifier of a consumable supply of the credential production device, an identifier of an owner of the credential production system, and an identifier of a dealer of the credential production system.

25. The method of claim 16 including communicating a request for an authorization check from one of the second credential production component to the first credential production component, and the first credential production component to the second credential production component, prior to the step of communicating a random code.

26. The method of claim 16, wherein the checking step includes:

decrypting the first security code using the second security key; and

comparing the decrypted first security code to the random code;

wherein the first security key is deemed valid when a predetermined relationship exists between the decrypted first security code and the random code.

27. The method of claim 16, wherein the checking step includes:

decrypting the first security code using the random code; and

comparing the decrypted first security code to the second security key;

wherein the first security key is deemed valid when a predetermined relationship exists between the decrypted first security code and the second security key.

28. The method of claim 16, wherein the checking step includes:

generating a second security code using the random code and the second security key; and

comparing the second security code to the first security code;

wherein the first security key is deemed valid when a predetermined relationship exists between the first and second security codes.

29. A method for preventing unauthorized credential substrate processing in a credential production system including first and second credential production components, the method comprising steps of:

generating a first security code using a random code and a first security key;

communicating the first security code from the first credential production component to the second credential production component;

communicating the random code from the first credential production component to the second credential production component;

checking the validity of the first security key using the first security code, the random code and a second security key; and

preventing of a credential substrate by the credential production system when the first security key is not valid.

30. The method of claim 29, wherein the first credential production component includes the credential production application and the second credential production component includes the credential production device.

31. The method of claim 30, wherein the credential production device includes at least one credential substrate processing device selected from the group consisting of a credential substrate printing device, a credential substrate laminating device, and a credential substrate encoding device.

32. The method of claim 30 including:

retrieving the first security key from a source selected from the group consisting of a memory accessible to the computer, a key card input from a user of the credential production system, an input from user of the credential production system, and program code of the credential production application; and

retrieving a second security key from a source that is accessible to the credential production device selected from the group consisting of a memory of the credential production device, a memory that is remote from the credential production device, a key card input to the credential production device, and an input from user of the credential production system.

33. A method of claim 29, wherein the first credential production component includes the credential production device and the second credential production component includes the credential production application.

34. The method of claim 33, wherein the credential production device includes at least one credential substrate processing device selected from the group consisting of a credential substrate printing device, a credential substrate laminating device, and a credential substrate encoding device.

35. The method of claim 33 including:

retrieving the first security key from a source that is accessible to the credential production device selected from the group consisting of a memory of the credential production device, a memory that is remote from the credential production device, a key card input to the credential production device, and an input from user of the credential production system; and

retrieving the second security key from a source selected from the group consisting of a memory accessible to the computer, a key card input from a user of the credential production system, an input from user of the credential production system, and program code of the credential production application.

36. The method of claim 29 including performing a processing operation on the credential substrate with the credential production device when the first security key is valid, where the processing operation is selected from the group consisting of printing an image to the substrate, laminating a film to the substrate, and encoding data to the substrate.

37. The method of claim 29 wherein at least one of the first and second security keys is related to an identifier that is unique to the credential production systems selected from the group consisting of an identifier of the credential production application, an identifier of the credential production device, an identifier of a component of the credential production device, an identifier of a consumable supply of the credential production device, an identifier of an owner of the credential production system, and an identifier of a dealer of the credential production system.

38. The method of claim 29 including communicating a request for an authorization check from one of the second credential production component to the first credential production component, and the first credential production component to the second credential production component, prior to the step of generating a first security code.

39. The method of claim 29, wherein the checking step includes:

decrypting the first security code using the second security key; and

comparing the decrypted first security code to the random code;

wherein the first security key is deemed valid when a predetermined relationship exists between the decrypted first security code and the random code.

40. The method of claim 29, wherein the checking step includes:

decrypting the first security code using the random code; and

comparing the decrypted first security code to the second security key;

wherein the first security key is deemed valid when a predetermined relationship exists between the decrypted first security code and the second security key.

41. The method of claim 29, wherein the checking step includes:

generating a second security code using the random code and the second security key; and

comparing the second security code to the first security code;

wherein the first security key is deemed valid when a predetermined relationship exists between the first and second security codes.