Printer Component Authentication via Secret Key Exchange

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current printing systems rely on on-board memory in replaceable printer components for communication and data storage, which are vulnerable to unauthorized access and modifications, necessitating secure authentication protocols to ensure proper operation and data integrity.

Innovation Solution

Implementing a secure authentication mechanism using secret keys stored in non-volatile memory within both the printing system and replaceable printer components, where session-keys are generated and verified to authenticate communications, preventing unauthorized reading and writing through the use of cryptographic algorithms and tamper-proof memory devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If on-board memory is used in replaceable printer components for communication and data storage, then information tracking and component operation are enabled, but the system becomes vulnerable to unauthorized access and modifications

Engineering Contradiction:
Improvedata integrityVSAvoidunauthorized access
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies preliminary anti-action by implementing authentication protocols before any data access operations. The printer controller and replaceable component engage in mutual authentication using secret keys stored in their respective memory devices, establishing secure credentials before allowing any read or write operations. This preemptive security measure prevents unauthorized access before it can occur.

Inventive Principle:
Principle #9Preliminary anti-action

Solution Approach 2:

The patent uses cryptographic authentication protocols as an intermediary mechanism between the printer controller and replaceable component. The authentication protocol acts as a mediator that verifies the identities of both parties using secret keys and generates authenticated session keys, ensuring that only authorized components can access the memory devices without exposing the secret keys themselves.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If secret keys are stored in memory devices for authentication, then communication security is improved, but the device complexity increases

Engineering Contradiction:
Improvecommunication securityVSAvoidauthentication mechanism
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the secret keys from the communication process itself, storing them securely in separate memory devices within both the printer controller and replaceable component. The secret keys are kept isolated and inaccessible during normal operations, being used only during the authentication phase. This separation reduces the complexity exposure by confining cryptographic operations to a dedicated authentication routine rather than embedding complexity throughout the entire system.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent uses copying by generating session keys that are derived from the secret keys but can be freely distributed during authenticated communications. The session keys are cryptographic copies that enable secure communication without exposing the original secret keys, allowing the system to achieve security with simpler ongoing communication protocols.

Inventive Principle:
Principle #26Copying

Data Source

PatentEP2286346B3Providing authenticated communications to a replaceable printer component
Publication Date: 2023.02.22 HEWLETT PACKARD DEVELOPMENT COMPANY LP
  • EP2286346B3 patent drawingFigure 1
  • EP2286346B3 patent drawingFigure 2
  • EP2286346B3 patent drawingFigure 3

AI summary

A replaceable printer component includes a first memory device and a communication link. The first memory device stores a first secret. The communication link is configured to communicatively link the first memory device to a printer controller when the replaceable printer component is installed in a printing system. The printing system includes a second memory device storing a second secret. The second memory device is communicatively linked to the printer controller. The first memory device is configured to authenticate communications between the first memory device and the printer controller based on the first secret and the second secret.