Security device and method

• US 6,986,057 B1
• Filed: 08/22/2000
• Issued: 01/10/2006
• Est. Priority Date: 08/07/2000
• Status: Expired due to Term

• Current Assignee: Maxim Integrated Products, Inc. (Analog Devices, Inc.)
• Original Assignee: Dallas Semiconductor Corporation (Analog Devices, Inc.)
• Inventors: Kurkowski, Hal, Cusey, James P.
• Primary Examiner(s): Barrón, Jr., Gilberto
• Assistant Examiner(s): Lanier, Benjamin E.
• Application Number:
  US09/644,031
• Time in Patent Office: 1,967 Days
• Field of Search: 713/200, 713/189, 713/161, 380/23
• US Class Current: 713/161
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A security device is disclosed. In one embodiment, the security device includes a memory device comprising having a first memory portion configured to store a device ID; and a second memory portion configured to store a device secret. The security device further includes a processor connected to the memory device wherein the processor is configured to read the stored device ID from the first memory portion and the stored device secret from the second memory portion and perform a nonreversible computation using the stored device ID, the stored device secret, and a challenge as seeds. Additionally, the security device includes a communication circuit connected to the processor, the communication circuit configured to receive the challenge from a host device and to communicate a result of the nonreversible computation performed by the processor.

Claims

1. A method of device authentication, the method comprising:

receiving, at a printer cartridge comprising a roaming device, a challenge from a host printer device;

generating, at the printer cartridge comprising the roaming device, a first nonreversible computation result, wherein the first nonreversible computation result is computed by seeding a first nonreversible algorithm with at least the challenge, and a roaming device secret;

outputting to the host printer device a response to the challenge, wherein the outputted response includes the first nonreversible computation result,

outputting to the host an identification and at least another data item;

generating, at the host printer device a second nonreversible computation result, wherein the second nonreversible computation result is computed by seeding a second nonreversible algorithm with at least a challenge and a host printer device secret;

comparing, by said host printer device, said fast nonreversible computation and said second nonreversible computation in order to authenticate the printer cartridge comprising the roaming device;

allowing said host printer device to print documents if said printer cartridge comprising said roaming device is authenticated.

2. The method of claim 1, further comprising:

enabling said printer cartridge to operate responsive to a positive authentication of the roaming device.

3. The method of claim 1, further comprising:

disabling said host printer device responsive to a failure to authenticate the roaming device.

4. The method of claim 1, wherein the first nonreversible computation result is computed by further seeding the first nonreversible algorithm with a unique device identifier.

5. A host system device and subsystem device combination comprising:

a host security circuit, said host security circuit comprising;

at least one locally stored secret, seed data;

a host processor for performing a non-reversible device authentication algorithm; and

means for reading data from a subsystem device;

a roaming security device as part of said subsystem device, said roaming security device comprising;

a subsystem processor for performing non-reversible computations;

a memory component, connected to said subsystem processor, said memory circuit comprising at least one secret;

a communication circuit, connected to said subsystem processor, for communicating with said host security circuit;

said subsystem device being removably attached to said host system device, said host system being a printer and being inoperable for printing without being attached to said subsystem device.

6. The host system device and subsystem device combination of claim 5, wherein said host security circuit sends a challenge to said roaming security device and said roaming security device provides a first response to said challenge, using said at least one secret, to said host security circuit.

7. The host system device and subsystem device combination of claim 6, wherein said host security circuit reads said first response from said roaming security device and said host security circuit compares said first response with a first result of said non-reversible device authentication algorithm to determine if said first response and said first result match.

8. The host system device and subsystem device combination of claim 5, wherein said roaming security device authenticates said host security circuit while the host security circuit authenticates said roaming security device.

9. The host system device and subsystem device combination of claim 5, wherein said subsystem device is a printer cartridge.

10. The host system device and subsystem device combination of claim 5, wherein said host security circuit periodically checks the authenticity of said roaming security device.

11. The host system device and subsystem device combination of claim 5, wherein communication data is encrypted prior to communication between said host system device and said subsystem device.

12. The host system device and subsystem device combination of claim 5, wherein an attempt to physically access the circuitry of the roaming security device results in the destruction of data stored in said roaming security device.

13. The host system device and subsystem device combination of claim 5, wherein said subsystem device further comprises a battery for at least partially powering said roaming security device.

14. The host system device and subsystem device combination of claim 5, wherein said at least one locally stored secret is never communicated to said subsystem device.

15. The host system device and subsystem device combination of claim 5, wherein said at least one secret is never communicated to said host device.

16. The host system device and subsystem device combination of claim 5, wherein said nonreversible device authentication algorithm is a SHA-1 algorithm.

17. The host system device and subsystem device combination of claim 5, wherein said host security circuit communicates with said subsystem device to authenticate said subsystem device and to determine at least one of whether said subsystem device is the proper type, brand, or age.

18. The host system device and subsystem device combination of claim 17, wherein said host system is disabled if said subsystem device cannot be authenticated.

19. The host system device and subsystem device combination of claim 5, wherein said subsystem device is a consumable device.

20. A subsystem device comprising:

a replaceable subsystem that operationally completes a host system, said host system being a printer device;

a security device being a part of said replaceable subsystem, said security device comprising;

a first memory portion configured to store a device ID;

a second memory portion configured to store at least one device secret;

a processor connected to said first and second memory portions, the processor configured to read the stored device ID from the first memory portion, the at least one stored device secret from the second memory portion and to perform a nonreversible computation using the device ID, the at least one device secret and a challenge as seeds; and

a communication circuit connected to the processor, said communication circuit configured to receive the challenge from a host device and to communicate a result of the nonreversible computation, performed by the processor, back to the host for authentication of said replaceable subsystem.

21. The subsystem device of claim 20, wherein said host device is disabled until a replaceable subsystem is installed and authenticated.

22. The subsystem device of claim 20 wherein said subsystem is a consumable device.

23. The subsystem of claim 20, wherein said subsystem is a printer cartridge.

24. The subsystem of claim 20, wherein said nonreversible computation is a SHA-1 computation.

25. The subsystem of claim 20, wherein said subsystem authenticates said host.

26. The subsystem of claim 20, wherein an attempt to physically access said security device will result in the destruction of said device ID and said at least one device secret.