Providing authenticated communications to a replaceable printer component

• US 9,875,365 B2
• Filed: 05/29/2008
• Issued: 01/23/2018
• Est. Priority Date: 05/29/2008
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Refstrup, Jacob Grundtvig
• Primary Examiner(s): McLean, Neil R
• Application Number:
  US12/994,979
• Publication Number:
  US 20110075189A1
• Time in Patent Office: 3,526 Days
• Field of Search: 358 114, 358 115, 713171, 714718
• CPC Class Codes: G06F 21/608 Secure printing

Abstract

A replaceable printer component includes a first memory device and a communication link. The first memory device stores a first secret. The communication link is configured to communicatively link the first memory device to a printer controller when the replaceable printer component is installed in a printing system. The printing system includes a second memory device storing a second secret. The second memory device is communicatively linked to the printer controller. The first memory device is configured to authenticate communications between the first memory device and the printer controller based on the first secret and the second secret.

Claims

1. A printing system to receive a replaceable printer component, said printing system comprising:

a printer controller;

a first memory device comprising a logic circuit and non-volatile memory and storing a first secret; and

a communication link configured to communicatively link the replaceable printer component to the printer controller when the replaceable printer component is installed in a printing system, wherein communication between the replaceable printer component and the printer controller occurs in separate sessions, each session having a different established session-key corresponding to that session,

wherein the printer controller of the printing system is programmed to request a session-key by passing a session-key identifier to the logic circuit of the first memory device, receive a session-key based on the session-key identifier and the first secret from the logic circuit, and exchange message authentication codes with the replaceable printer component to confirm authorized communication.

2. The printing system of claim 1, wherein the first secret is derived from a second secret stored on the replaceable printer component.

3. The printing system of claim 1, wherein the printing system is programmed to receive the session-key identifier from the replaceable printer component.

4. The printing system of claim 3, wherein the printing system is programmed to pass a request for the session-key identifier to from the replaceable printer component.

5. The printing system of claim 1, wherein the printing system is programmed to use the session-key to authenticate communications between the printing system and the replaceable printer component.

6. The printing system of claim 1, wherein the printer controller is programmed to calculate a first message authentication code (MAC) for a read or write request to the replaceable printer component using a cryptographic algorithm and the session-key.

7. The printing system of claim 6, wherein the printer controller is programmed to issue the read or write request to the replaceable printer component, said read or write request including the first MAC.

8. The printing system of claim 7, wherein the replaceable printer component is programmed to calculate a second MAC using the cryptographic algorithm and the session-key, wherein the replaceable printer component will execute the read or write request only if the first and second MACs match.

9. The printing system of claim 8, wherein the replaceable printer component marks the session-key as invalid if the first and second MACs do not match.

10. A method of operating a printing system for receiving a replaceable printer component, the printing system comprising a first memory device storing a first secret, wherein communication between the replaceable printer component and a printer controller of the printing system occurs in separate sessions, each session having a different established session-key corresponding to that session, the method comprising:

with the printer controller of the printing system, requesting, from the replaceable printer component, a component session-key identifier corresponding to a component session-key that is based on a second secret that is associated with the replaceable printer component,

wherein said requesting is performed using a communication link configured to communicatively link the replaceable printer component to the printer controller when the replaceable printer component is installed in a printing system; and

with the printer controller of the printing system, receiving the requested component session-key identifier from the replaceable printer component;

with the printer controller of the printing system, requesting a session-key by passing the session-key identifier to a logic circuit of the first memory device,

with the printer controller of the printing system, receiving a session-key based on the session-key identifier and the first secret from the logic circuit of the first memory device; and

using the session-key to authenticate communications between the printing system and the replaceable printer component including exchanging message authentication codes with the replaceable printer component to confirm authorized communication.

11. The method of claim 10, wherein the first secret is derived from the second secret.

12. The method of claim 10,

wherein session-key is based on the first secret and the session-key identifier received from the replaceable printer component.