Authenticating a replaceable printer component

• US 9,619,663 B2
• Filed: 10/11/2016
• Issued: 04/11/2017
• Est. Priority Date: 05/29/2008
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Refstrup, Jacob Grundtvig
• Primary Examiner(s): Cordero, Marivelisse Santiago
• Assistant Examiner(s): McLean, Neil R
• Application Number:
  US15/290,563
• Publication Number:
  US 20170032135A1
• Time in Patent Office: 182 Days
• Field of Search: None
• CPC Class Codes: B41J 2/17546 electronically
• CPC Class Codes: G03G 15/0863 provided with identifying means or means for storing process- or use parameters, e.g. an electronic memory
• CPC Class Codes: G03G 2215/0697 being an electronically readable memory
• CPC Class Codes: G03G 2221/1823 Cartridges having electronically readable memory
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/608 Secure printing
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04N 1/00538 Modular devices, i.e. allowing combinations of separate components, removal or replacement of components
• CPC Class Codes: H04N 1/32101 Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title

Abstract

A replaceable printer component includes a first memory device and a communication link. The first memory device is configured to store a first secret. The communication link is configured to communicatively link the first memory device to a printer controller when the replaceable printer component is installed in a printing system. The printing system comprises a second memory device storing a second secret. The second memory device is communicatively linked to the printer controller. The printer controller is configured to determine an authenticity of the replaceable printer component based on the first secret and the second secret.

Claims

1. A memory device for use in a printing system, the memory device comprising:

a non-volatile memory device storing a first secret;

a logic device; and

a communication link to communicatively link the memory device to a printer controller of the printing system;

wherein the logic device is programmed to

generate a first session-key identifier, and an associated first session-key based on the first secret;

provide the first session-key identifier to the printing system in response to a request from the print system to establish a communication session;

receive a read request from the printing system, the read request including a first message authentication code calculated using a second session-key from the printing system; and

respond to the read request by providing a response including another message authentication code calculated using the first session-key;

wherein the logic device is programmed to

in response to the read request, calculate a second message authentication code and a third message authentication code, both based on the first session-key; and

wherein the third message authentication code is to match a fourth message authentication code of the print system, the fourth message authentication code calculated using a second session key, based on the first session key identifier and a second secret, and a cryptographic algorithm.

2. The memory device of claim 1, wherein the first message authentication code is calculated by the print system using a second session key, based on the first session key identifier and a second secret, and a cryptographic algorithm.

3. The memory device of claim 1, wherein the logic device is programmed to

perform the read request in response to the second message authentication code matching the first message authentication code.

4. The memory device of claim 1, wherein the message authentication codes are calculated using a session-key and a cryptographic algorithm.

5. The memory device of claim 1, wherein the logic device comprises one of:

a processor and a System on a Chip (SoC).

6. The memory device of claim 1, wherein the non-volatile memory device comprises one of:

an Electrically Erasable Programmable Read-Only Memory (EEPROM) unit and a Flash memory unit.

7. The memory device of claim 1, wherein he communication link includes electrical contacts to mate with corresponding electrical nodes.

8. The memory device of claim 1, wherein the logic device is configured to generate a different session-key and session-key identifier in response to each request to establish a communication session.

9. The memory device of claim 1, wherein the non-volatile memory device provides operational parameters for the printing system.

10. The memory device of claim 1, wherein he non-volatile memory device provides parameters for an associated replaceable printer component.

11. A replaceable printer component comprising the memory device of claim 1, wherein the memory device is attached to the replaceable printer component for use in the printing system.

12. The replaceable printer component of claim 11, wherein the replaceable printer component comprises one of:

an inkjet cartridge, an inkjet printhead. assembly, a toner cartridge, a developer drum and an ink supply.

13. A memory device for use in a printing system, the memory device comprising:

a non-volatile memory device storing a first secret and operational parameters for the printing system;

a logic device; and

a communication link including electrical contacts to communicatively link the memory device to a printer controller of the printing system;

wherein the logic device is programmed to, in response to a request to establish a communication session,

generate a first session-key identifier and an associated first session-key that is based on the first secret;

provide the first session-key identifier to the printing system;

receive a read request, the read request including a first message authentication code calculated using a second session-key associated with the first session-key identifier and a second secret of the printing system;

perform the read request; and

respond to the read request by providing a response including another message authentication code calculated using the first session-key,

wherein the other message authentication code is to match a message authentication code of the print system, the message authentication code of the print system calculated using a second session key, based on the first session key identifier and a second secret, and a cryptographic algorithm.

14. The memory device of claim 13, wherein the message authentication codes are calculated using the first session-key and a cryptographic algorithm.

15. The memory device of claim 13, wherein the second session-key is based on said first session-key identifier and the second secret.

16. The memory device of claim 13, wherein the logic device is configured to generate a different session-key and session-key identifier in response to each request to establish a communication session.