Method and arrangement for authenticating a control unit and transmitting authentication information messages to the control unit

• US 8,429,402 B2
• Filed: 10/27/2003
• Issued: 04/23/2013
• Est. Priority Date: 10/28/2002
• Status: Expired due to Fees

• Current Assignee: Oce Printing Systems GmbH (Canon Inc.)
• Original Assignee: Oce Printing Systems GmbH (Canon Inc.)
• Inventors: Kathan, Berthold
• Primary Examiner(s): Flynn, Nathan
• Assistant Examiner(s): AVERY, JEREMIAH L
• Application Number:
  US10/533,148
• Publication Number:
  US 20050278528A1
• Time in Patent Office: 3,466 Days
• Field of Search: None
• US Class Current: 713/168
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

In a method and arrangement for authenticating a data processing system, first information is generated by a first data processing system and delivered to a second data processing system for a control unit. First data are transmitted from the second data processing system to the first data processing system over a data line, the first data being generated by the second data processing system with aid of the first information and additional information contained in the second data processing system. Second data are generated by the first data processing system depending on the first data and transmitted from the first data processing system to the second data processing system. Authentication information for authenticating the second data processing system is generated by the second data processing system with aid of the second data.

Claims

1. A method for authenticating a maintenance and diagnostics service computer for connection to a printing or copying system to be serviced by performing maintenance and diagnostics, comprising the steps of:

generating a transaction information by an authentication server and delivering via a first communication line the transaction information to a user of said maintenance and diagnostics service computer, said transaction information being entered by the user of the service computer into the service computer in order to execute authentication of the service computer;

generating first data by the service computer with aid of the transaction information, said first data including a hardware identifier of hardware contained in the service computer;

transmitting said first data via a second communication line which is distinct from the first communication line from the service computer to the authentication server over said second communication line comprising a data line;

generating key data by the authentication server depending on the first data and transmitting the key data from the authentication server to the service computer over the data line, said key data defining access rights of the service computer;

with the service computer generating authentication information for authenticating the service computer with aid of the key data;

transmitting the authentication information from the service computer directly to a system control unit of said printing or copying system independently of the authentication server and after receiving the key data from the authentication server verifying authenticity of the service computer by the system control unit; and

with the system control unit checking said access rights defined by the key data of the service computer, and if access is authorized, servicing by performing said maintenance and diagnostics on the printing or copying system with the maintenance and diagnostics service computer.

2. A method according to claim 1 wherein a check is performed to determine whether the service computer contains the hardware identifier.

3. A method according to claim 1 wherein the key data contain an expiration date in addition to said access rights.

4. A method according to claim 3 wherein the access rights are assigned with aid of an authorization level.

5. A method according to claim 1 wherein the key data are transmitted in encrypted form.

6. A method according to claim 1 wherein the data line comprises a network connection.

7. A method according to claim 1 wherein the data line comprises a point-to-point connection.

8. A method according to claim 1 wherein the transaction information comprises a transaction number.

9. A method according to claim 1 wherein the transaction information is sent per e-mail or mail to the user.

10. A method according to claim 9 wherein the transaction information that is sent to the service computer is entered by way of an input unit of the service computer.

11. A method according to claim 1 wherein said hardware identifier of the service computer that cannot be modified by a user is used as said hardware identifier.

12. A method according to claim 1 wherein said authenticity verifying by the authentication server is performed with aid of a challenge/response procedure.

13. A method according to claim 1 wherein the key data contain a signed certificate.

14. A method according to claim 1 wherein the key data contains a key, and the authentication information sent to the printing or copying system contains an authentication code generated with the aid of the key.

15. A system for authenticating a maintenance and diagnostics service computer for connection to a printing or a copying system to be serviced by performing maintenance and diagnostics, comprising:

an authentication server which generates a transaction information and delivers via a first communication line the transaction information to a user of said maintenance and diagnostics service computer, said transaction information being entered by the user of the service computer into the service computer in order to execute authentication of the service computer;

said service computer generating first data with aid of the transaction information, said first data including a hardware identifier of hardware contained in the service computer;

said service computer transmitting via a second communication line which is distinct from the first communication line said first data from the service computer over to the authentication server over second communication line comprising a data line;

said authentication server generating key data depending on the first data and transferring the key data from the authentication server to the service computer over the data line, said key data defining said access rights of the service computer;

said service computer generating authentication information for authenticating the service computer with aid of the key data;

said service computer transmitting the authentication information from the service computer directly to a system control unit of said printing or copying system independently of the authentication server and after receiving the key data from the authentication server;

said system control unit verifying authenticity of the service computer; and

said system control unit checking said access rights defined by the key data of the service computer and if access is authorized, servicing by performing said maintenance and diagnostics on the printing or copying system with the maintenance and diagnostics service computer.