ANTICOUNTERFEITING MEANS FOR OPTICAL COMMUNICATION COMPONENTS

• US 20090240945A1
• Filed: 11/03/2008
• Published: 09/24/2009
• Est. Priority Date: 11/02/2007
• Status: Abandoned Application

• Current Assignee: II-VI Delaware, Inc. (Coherent Corp.)
• Original Assignee: Finisar Corporation (II-VI Incorporated)
• Inventors: Aronson, Lewis B.
• Application Number:
  US12/264,194
• Publication Number:
  US 20090240945A1
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

Methods and systems for detecting counterfeit optical communications products are described. An exemplary system includes a host device and a fiber optic component, such as an optical transceiver. The optical transceiver may include a TOSA, a ROSA, a controller circuit, and a memory module. The controller circuit may be operably connected to the TOSA, the ROSA, and the memory module. The host device may send a set of challenge data to the optical transceiver. The optical transceiver may respond with a data set encrypted by the controller circuit using a secret key stored in the memory module. The encrypted response data set may be evaluated to determine whether the optical transceiver is authenticate.

Claims

1. A transceiver comprising:

a transmitter optical subassembly;

a receiver optical subassembly;

a controller operably connected to the transmitter optical subassembly and the receiver optical subassembly; and

a memory module operably connected to the controller circuit and having a key stored therein,

wherein the controller circuit is adapted to authenticate the transceiver by receiving challenge data from a host device and sending encrypted response data to the host device using the key.

2. The transceiver of claim 1, wherein the key is associated with a particular host device manufacturer.

3. The transceiver of claim 1, wherein the memory module has a plurality of keys stored therein, each key being associated with a unique host device manufacturer.

4. The transceiver of claim 3, wherein the controller circuit is further adapted to authenticate the transceiver by receiving a key selection identifier from the host device, the key selection identifier identifying a particular one of the plurality of keys.

5. The transceiver of claim 1, wherein the challenge data set comprises pseudorandom data.

6. The transceiver of claim 1, wherein the challenge data set is different each time the transceiver is authenticated.

7. A system comprising:

a host device; and

a fiber optic component, the fiber optic component comprising;

a controller circuit; and

a memory module operably connected to the controller circuit and having a key stored therein,

wherein the controller circuit is adapted to authenticate the fiber optic component by receiving challenge data from the host device and sending encrypted response data to the host device using the key.

8. The system of claim 7, wherein the host device comprises:

a copy of the key; and

a controller circuit adapted to verify the encrypted response data using the copy of the key.

9. The system of claim 7, wherein the challenge data is generated by the host device and is different each time the fiber optic component is authenticated.

10. The system of claim 7, wherein the fiber optic component comprises an active cable or a fiber optic transceiver.

11. The system of claim 7, wherein the fiber optic component further comprises a Radio Frequency Identification tag configured to receive the challenge data and to send the encrypted response data.

12. The system of claim 7, wherein the host device and fiber optic component implement one of the following systems for communicating the challenge data and encrypted response data between the host device and fiber optic component:

a memory-mapped system;

a register-based system;

or

a command-based system.

13. A method of authenticating a fiber optic component, comprising:

a host device generating a challenge data set;

the host device writing the challenge data set to authentication memory of the fiber optic component;

the host device reading a response data set from the authentication memory of the fiber optic component, the response data set comprising an encryption of the challenge data set;

verifying that the response data set is encrypted using a predetermined key and encryption algorithm; and

when the response data set is encrypted using the predetermined key and encryption algorithm, enabling a communication link with the fiber optic component.

14. The method of claim 13, further comprising, when the response data set is not encrypted using the predetermined key or encryption algorithm, disabling the communication link with the fiber optic component.

15. The method of claim 13, wherein verifying that the response data set is encrypted using a predetermined key and encryption algorithm comprises:

the host device encrypting the challenge data set using the predetermined key and encryption algorithm to generate a local encrypted data set; and

the host device comparing the local encrypted data set to the response data set.

16. The method of claim 13, wherein verifying that the response data set is encrypted using a predetermined key and encryption algorithm comprises:

the host device decrypting the response data set using the predetermined key and an algorithm that is an inverse of the encryption algorithm to generate a decrypted data set; and

the host device comparing the local decrypted data set to the challenge data set.

17. The method of claim 13, further comprising, after the host device writes the challenge data set to authentication memory of the fiber optic component:

the fiber optic component encrypting the challenge data set using the predetermined key and encryption algorithm to generate the response data set; and

the fiber optic component writing the response data set to the authentication memory;

wherein the fiber optic component stores the predetermined key in a memory module of the fiber optic component.

18. The method of claim 17, further comprising, the host device writing a key selection identifier to the memory module, the key selection identifier indicating the use of the predetermined key from among a plurality of keys stored in the memory module.