Authenticating a replaceable printer component

• US 9,141,816 B2
• Filed: 05/29/2008
• Issued: 09/22/2015
• Est. Priority Date: 05/29/2008
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Refstrup, Jacob Grundtvig
• Primary Examiner(s): Thomas, Ashish K
• Assistant Examiner(s): McLean, Neil R
• Application Number:
  US12/995,034
• Publication Number:
  US 20110109938A1
• Time in Patent Office: 2,672 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: B41J 2/17546 electronically
• CPC Class Codes: G03G 15/0863 provided with identifying means or means for storing process- or use parameters, e.g. an electronic memory
• CPC Class Codes: G03G 2215/0697 being an electronically readable memory
• CPC Class Codes: G03G 2221/1823 Cartridges having electronically readable memory
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/608 Secure printing
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04N 1/00538 Modular devices, i.e. allowing combinations of separate components, removal or replacement of components
• CPC Class Codes: H04N 1/32101 Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title

Abstract

A replaceable printer component includes a first memory device and a communication link. The first memory device is configured to store a first secret. The communication link is configured to communicatively link the first memory device to a printer controller when the replaceable printer component is installed in a printing system. The printing system comprises a second memory device storing a second secret. The second memory device is communicatively linked to the printer controller. The printer controller is configured to determine an authenticity of the replaceable printer component based on the first secret and the second secret.

Claims

1. A replaceable printer component comprising:

a first memory device configured to store a first secret and a value indicating that the replaceable printer component is genuine; and

a communication link configured to communicatively link the first memory device to a printer controller when the replaceable printer component is installed in a printing system;

wherein the replaceable printer component is programmed to grant a read request of said value from a printing system in which said replaceable printer component is installed only after receiving a read request that is based on a session key established for a communication session with the printing system, and

wherein the session key is established based on the first secret and a second secret of the printing system;

wherein the first memory device is configured to generate a session-key identifier and a first session-key based on the first secret and provide the session-key identifier to the printing system in response to a request; and

wherein the first memory device is configured to receive a read request to a data field storing the value indicating the authenticity of the replaceable printer component, the read request including a first message authentication code calculated using a second session-key from the printing device, and

wherein the first memory device is configured to calculate a second message authentication code based on the read request and the first session-key, and perform the read request in response to the second message authentication code matching the first message authentication code.

2. The replaceable printer component of claim 1, wherein the first secret is derived from the second secret.

3. The replaceable primer component of claim 1, wherein the first memory device is configured to deny the read request and to mark the first session-key as invalid in response to the second message authentication code not matching the first message authentication code.

4. The replaceable printer component of claim 3, wherein the first memory device is configured to perform the read request by providing a response including a third message authentication code calculated using the first session-key.

5. The replaceable printer component of claim 1, wherein the first memory device is configured to generate a different session-key identifier and session-key in response to each request.

6. The replaceable printer component of claim 1, wherein the first memory device is tamper resistant.

7. The replaceable printer component of claim 1, wherein the replaceable printer component comprises one of an inkjet cartridge, an inkjet printhead assembly, a toner cartridge, and an ink supply.

8. The replaceable printer component of claim 1, wherein the replaceable printer component prevents replay attacks by expecting a random challenge in a request for a session key identifier from the printing system.

9. A replaceable printer component comprising:

a first memory device configured to store a first secret; and

a communication link configured to communicatively link the first memory device to a printer controller when the replaceable printer component is installed in a printing system,

wherein the first memory device is configured to generate a session-key identifier and a first session-key based on the first secret in response to a request received over the communication link and transmit the session-key identifier to the printer controller over the communication link,

wherein the first memory device is configured to receive a read request to a data field storing a value indicating the authenticity of the replaceable printer component, the read request including a first message authentication code, and

wherein the first memory device is configured to calculate a second message authentication code based on the read request and the first session-key, and perform the read request in response to the second message authentication code matching the first message authentication code.

10. A method of using a replaceable printer component, the method comprising:

storing a value in the replaceable printer component which indicates authenticity of the replaceable printer component;

establishing a communication session between the replaceable printer component and a printing system in which that component is installed, the communication session being associated with a session key produced by corresponding first and second secrets, the first secret from the replaceable printer component and the second secret from the printing system;

with the replaceable printer component, receiving a read request from the printing system for a data field storing the value indicating the authenticity of the replaceable printer component, the read request including a first message authentication code calculated using the second secret from the printing device, and

in response to the read request from the printing system to the replaceable printer component based on the session key, calculating a second message authentication code based on the read request and the session key, and providing the value to the printing system to authenticate the replaceable printer component in response to the second message authentication code matching the first message authentication code.

11. The method of claim 10, wherein establishing the communication session comprises:

receiving a request from the printing system to the replaceable printer component to provide a session key identifier; and

in response to the request for a session key identifier, generating a first session key and a session key identifier based on the first secret.

12. The method of claim 11, further comprising providing said session key identifier and the first session key to the printing system.

13. The method of claim 12, further comprising:

with the printing system, providing the first session key identifier from a print controller of the printing system to a memory of the printing system, the memory of the printing system comprising processing logic apart from the print controller; and

with the processing logic of the memory of the printing system, generating a second session key based on the session key identifier and the second secret.

14. The method of claim 13, further comprising:

comparing the first session key from the replaceable printer component with the second session key; and

if the first and second session keys match, the communication session is established using the matched session key as said session key that session.

15. The method of claim 10, wherein the request from the printing system for the value which indicates authenticity of the replaceable printer component comprises a first message authentication code that is generated based on said session key.

16. The method of claim 15, wherein, upon receipt of the request for the value, the replaceable printer component calculates a second message authentication code based on said session key, the method further comprising:

comparing said first and second message authentication codes; and

providing the value from the replaceable printer component to the printing system to authenticate the replaceable printer component only if said first and second message authentication codes match.

17. The method of claim 16, further comprising providing the value to the printing system along with a third message authentication code based on the session key.

18. The method of claim 17, wherein, upon receipt of the value and third message authentication code, the printing system generates a fourth message authentication code based on the session key and accepts the value as reliable if the third and fourth message authentication codes match.