System and Method for Secured Host-slave Communication

• US 20160098359A1
• Filed: 12/09/2015
• Published: 04/07/2016
• Est. Priority Date: 09/08/2011
• Status: Active Grant

• Current Assignee: Lexmark International Incorporated (Ninestar Corporation)
• Original Assignee: Lexmark International Incorporated (Ninestar Corporation)
• Inventors: Adkins, Christopher Alan, Rademacher, Timothy John
• Granted Patent: US 9,535,852 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 12/1466 Key-lock mechanism
• CPC Class Codes: G06F 2212/1052 Security improvement
• CPC Class Codes: G06F 2212/402 Encrypted data
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds

Abstract

Slave device circuitry, including processing circuitry which is configured to determine a new session identification value; determine a seed value using a secure hash algorithm on a previously determined seed value; determine a slave number from using the secure hash algorithm on the new session identification value, the determined seed value, and a serial number of the slave device associated with the slave device circuitry; receive a host number from the host imaging apparatus and calculate a session key using a hash-based algorithm computation on the host number, the slave number, the new session identification value, and a stored encryption key. The session key has a first portion for performing encryption and decryption operations on data to be transmitted and data received by the slave device, respectively, and a second portion for generating a new address value of the slave device for communicating with the host.

Claims

1. A supply item for an imaging apparatus, comprising:

a processor and memory coupled thereto having stored therein program code instructions which, when executed by the processor, cause the processor to;

following a predetermined event, determine a session identifier value;

determine a new seed value based on a secure hash algorithm calculation on a seed value stored in the memory;

calculate a slave random number from a predetermined number of bits resulting from a secure hash algorithm calculation on the session identifier value, the new seed value, and a serial number of the supply item;

receive a host number from the imaging apparatus;

calculate a session key by generating a cryptographic value using a secret key maintained in the memory and a concatenation of the host number, the slave random number, and the session identifier value, the session key being a single session key comprising a set of bits including a first subset of the set of bits and a second subset of the set of bits, the first and second subsets of the set of bits being separate from each other; and

use the first subset of the set of bits to perform encryption and decryption operations on data to be transmitted and data received by the supply item, respectively, and the second subset of the set of bits to generate a new address value for the supply item for communicating with the imaging apparatus.

2. The supply item of claim 1, wherein the predetermined event is an initial connection to and activation of the supply item in the imaging apparatus.

3. The supply item of claim 1, wherein the session identifier value is an increment or a decrement of a stored session identifier value in the memory.

4. The supply item of claim 1, wherein the processor includes or performs as a linear congruency generator (LCG) for generating the new address value for the supply item, the LCG being initialized with the second subset of the set of bits of the session key.

5. The supply item of claim 4, wherein a predetermined portion of an output of the LCG forms a first portion of the new address value for the supply item, and a second portion of the new address value for the supply item is a fixed value.

6. The supply item of claim 5, wherein the predetermined portion of the output of the LCG forms the first portion of every new address value generated.

7. The supply item of claim 1, wherein the supply item communicates with the imaging apparatus using a stream cipher, and the first subset of the set of bits of the session key are used to initialize the stream cipher at a beginning portion of an encryption session between the supply item and the imaging device.

8. The supply item of claim 1, wherein the secure hash algorithm calculation on the session identifier value, the new seed value, and the serial number of the supply item comprises a SHA-1 algorithm calculation thereof.

9. The supply item of claim 1, wherein the cryptographic value comprises a hash-based message authentication code value.

10. The supply item of claim 1, wherein the secret key is unique to the supply item.

11. The supply item of claim 1, further comprising instructions to, in response to receiving the host number, send the slave random number and the session identifier value to the imaging apparatus for the imaging apparatus to calculate the session key.

12. Slave device circuitry for a slave device of a host imaging apparatus, comprising:

processing circuitry and memory coupled thereto, the processing circuitry configured to;

determine a new session identification value based upon a stored session identification value in the memory;

determine a seed value using a secure hash algorithm on a previously determined seed value;

determine a first number from using the secure hash algorithm on the new session identification value, the determined seed value, and a serial number of the slave device associated with the slave device circuitry;

identify a slave number from a predetermined portion of a set of bits forming the first number;

receive a host number from the host imaging apparatus; and

calculate a session key using a hash-based algorithm computation on the host number, the slave number, the new session identification value, and an encryption key maintained in the memory, the session key being a single session key having a first portion for performing encryption and decryption operations on data to be transmitted and data received by the slave device, respectively, and a second portion for generating a new address value of the slave device for communicating with the host.

13. The slave device circuitry of claim 12, wherein the session key comprises a set of bits, the first portion of the session key comprises a first subset of the set of bits of the session key and the second portion of the session key comprises a second subset of the set of bits of the session key, the first and second subsets being separate from each other.

14. Slave device circuitry of claim 12, wherein the processing circuitry includes or performs as a pseudorandom number generator (PRNG) for generating the new address value for the slave device, the PRNG being initialized with the second portion of the session key.

15. Slave device circuitry of claim 14, wherein a predetermined portion of an output of the PRNG forms a first portion of the new address value for the slave device, a second portion of the new address value for the supply item is a fixed value.

16. Slave device circuitry of claim 15, wherein the predetermined portion of the output of the PRNG forms the first portion of every new address value generated.

17. Slave device circuitry of claim 12, wherein the secure hash algorithm is a SHA-1 function.

18. Slave device circuitry of claim 12, wherein the hash-based algorithm computation comprises a hash-based message authentication code (HMAC) computation on the encryption key and a concatenation of the host number, the slave number, and the new session identification value.

19. Slave device circuitry of claim 12, wherein the slave device circuitry communicates with the host imaging apparatus using a stream cipher, and the first portion of the session key is used to initialize the stream cipher at a beginning portion of an encryption session between the slave device circuitry and the host imaging apparatus.

20. A method for securely communicating with a host imaging apparatus by a removable supply item thereof, the removable supply item including circuitry and memory, the method comprising:

determining, by the circuitry, a new session identification value based upon a session identification value stored in the memory;

updating, by the circuitry, a seed value stored in the memory to obtain an updated seed value;

determining, by the circuitry, a first number from a result of calculating the new session identification value, the updated seed value, and a serial number of the removable supply item using a secure hash algorithm, the first number comprising a set of bits;

identifying a slave number from a predetermined number of bits from the set of bits of the first number;

receiving a host number from the host imaging apparatus; and

calculating a session key using a hash-based algorithm on the host number, the slave number, the new session identification value, and a unique secret encryption key maintained in the memory, the session key being a single session key comprising a first predetermined set of bits and a second predetermined set of bits separate from the first predetermined set of bits, the first predetermined set of bits for performing encryption and decryption operations on data to be transmitted and data received by the removable supply item and the second predetermined set of bits for generating a new address value for the removable supply item to communicate with the host imaging apparatus,

wherein the circuitry includes or performs as a pseudorandom number generator (PRNG) having an output, the second predetermined set of bits of the session key used for initializing the PRNG, predetermined bits of the output of the PRNG being used to form a portion of the new address value for the removable supply item.

21. The method of claim 20, wherein the circuitry communicates with the host imaging apparatus using a stream cipher, and the first predetermined set of bits of the session key is used to initialize the stream cipher at a beginning portion of an encryption session between the circuitry and the host imaging apparatus.