RU2670414C1 - Authentication of delivery through response to time matching request - Google Patents

Abstract

FIELD: information technology.SUBSTANCE: device is designed to facilitate the authentication of the print cartridge, comprises a memory and a logic circuit for receiving the time-matching request from the host device and enabling the cartridge to be authenticated upon providing a response to the request during the response to the request, which falls into the expected time window, wherein the logic circuit is designed to perform the mathematical calculation in response to the time matching request, wherein the calculation issues a response to the request in the expected time window.EFFECT: facilitating the authentication of the print cartridge.15 cl, 5 dwg

Description

The level of technology

[0001] Many systems have replaceable components that are integral to the operation of the system. Replaced components are often devices that contain consumables, which decrease with each use of the system. Such systems may include, for example, cell phones that use replaceable batteries, medical systems that distribute drugs from replaceable supplied devices, printing systems that distribute fluids (eg ink), or toners from replaceable supplied cartridges, etc. . Verifying that the device being replaced is a genuine device from a legitimate manufacturer can help the system user avoid problems associated with the unintended use of a defective and / or counterfeit device.

Brief Description of the Drawings

[0002] The present embodiments will now be described by way of example with reference to the accompanying drawings, in which:

[0003] FIG. 1 shows a block diagram illustrating the components of an example characteristic of an authentication system suitable for authenticating (authenticating) a replaceable supplied device;

[0004] FIG. 2 shows an example of characteristic data stored in a replaceable supplied device;

[0005] FIG. 3 shows an example of an authentication system implemented as an inkjet printing system;

[0006] FIG. 4 shows a perspective view of an exemplary inkjet cartridge supplied;

[0007] FIG. 5 shows a flowchart of an exemplary delivery authentication process.

[0008] Throughout the drawings, identical reference numbers denote similar, but not necessarily identical, elements.

Detailed Description of the Invention

Overview

[0009] As noted above, verifying the authenticity of replaceable supplied devices for use in some systems can help system users avoid problems associated with the unintended use of defective and / or counterfeit devices. For example, in printing systems that use consumable toner or ink cartridges, inadvertently replacing cartridges with counterfeit cartridges can result in various problems ranging from poor quality prints to leaking cartridges that can damage the printing system.

[0010] Previous methods for authenticating a replacement device included the use of strong authentication, which involves using a secret key known by a smart card or a security microcontroller on a replaceable device (for example, a consumable ink / toner cartridge) and a host device (for example, a printer ). If the replacement device can provide a response to a request issued by the host, which proves that it contains the corresponding key, the host will conclude that the device is of original production, and then authenticates the device. One weak point with this authentication method is that it relies on the ability of the system to store the secret key. If an attacker can recover a key or keys from either the host or the device being replaced, he can save the stolen key (s) in a smart card or microcontroller, allowing them to then create replaceable devices that will respond to requests as if such devices were original devices from the original manufacturer. Typically, after the key (s) are compromised, the response to the request and other functionality of the non-genuine (ie, fake) replacement device can be simulated using firmware running on an inexpensive, standard microcontroller.

[0011] Here, the authentication system and delivery authentication processes are disclosed, which provide reliable authentication of the replaced devices of the system, in general, through a response to a request for time approval. A host, such as a printer, issues a cryptographic request for timing to a security microcontroller attached to a replaceable device, such as a consumable ink cartridge or toner. The request requires the consumable device (i.e., the microcontroller on the consumable device) to perform a series of mathematical operations based on the data provided by the host / printer. The printer monitors the amount of time it takes for the consumable device to complete the task and independently confirms the response provided by the device. If both the response and the elapsed time in calculating the response satisfy the expectations of the printer, the printer will conclude that the device is a genuine device. If either the answer or the time elapsed during the calculation of the answer (or both) does not meet the expectations of the printer, the printer will conclude that the device is not a genuine device.

[0012] Mathematical operations from the query are performed in the microcontroller of the consumable device using a specialized hardware logic circuit specially designed for such operations. A specialized logic circuit is capable of performing a response to a query, performing mathematical calculations much faster than it could otherwise be done by means of a standard microcontroller executing firmware. Thus, an unauthentic / fake replaceable device, in which the microcontroller contains the stolen key (s), may be able to issue the correct response to the request. However, such a fake device does not have the ability to respond to the request within the time frame expected by the host device.

[0013] In an exemplary implementation, the print cartridge supplied includes a microcontroller for receiving a time alignment request and allowing the cartridge to be authenticated when responding to a request during a response to a request that falls in the expected time window. In another implementation, the cartridge further includes a specialized hardware logic circuit on the microcontroller for performing a mathematical calculation in response to a time consistency request. Performing a mathematical calculation produces a response to the query in the expected time window.

[0014] In another exemplary implementation, the replaceable supplied device includes a microcontroller. The microcontroller must receive the session key with the host device and receive a time-dependent request from the host device, which indicates a random seed number, session key, and a calculation cycle. The replaced device additionally includes a specialized logic circuit in the microcontroller to perform the calculation of the request a number of times the calculation cycle, the first calculation using a random seed number and session key to create the output data, and each subsequent calculation uses the output of the previous calculation.

[0015] In another exemplary implementation, the authentication system includes a host device, a controller integrated into the host device, and an authentication algorithm executed in the controller to issue a cryptographic time alignment request and authentication of the supplied device when the supplied device provides an answer to request while responding to a request that falls in the expected time window.

[0016] In another exemplary implementation, the authentication system includes a printer that has a controller and a memory. The authentication system also includes an authentication algorithm stored in the memory and executed in the controller for issuing a cryptographic time alignment request and authentication of the print cartridge supplied when the cartridge provides a response to the request corresponding to the expected response in the expected time window.

[0017] In another exemplary implementation, a non-temporal, processor-readable medium stores code representing instructions that, when executed by the processor, cause the processor to recognize the supplied device and issue a cryptographic request for timing to the supplied device. A time alignment request requires that a mathematical calculation be performed on data that includes the session key, a random seed number, and a calculation count. Commands additionally cause the processor to receive a response to a request while responding to a request from the supplied device and to authenticate the supplied device when the response to the request matches the expected response, and the response time to the request falls into the expected time window.

Sample implementations

[0018] FIG. 1 shows a block diagram illustrating the components of an exemplary, representative authentication system 100 suitable for authenticating a replaceable supplied device. Authentication system 100 includes a host device 102 and a replaceable supplied device 104. Host device 102 includes a controller 106, which typically includes components of a standard computing system, such as a central processing unit (CPU) 108, memory 110, firmware, and others. electronic devices for controlling the general functions of the authentication system 100 and for communicating and controlling the supplied device 104. The memory 110 may include both volatile (i.e., RAM) and non-volatile (e.g., RO M, hard disk, floppy disk, CD-ROM, etc.) memory components containing non-temporary computer / processor-readable media that provide storage of computer / processor-readable coded instructions and / or data in the form of algorithms, program modules, data structures JDF, etc. The supplied device 104 includes a microcontroller 112 (i.e., a smart card), which also includes a central processing unit (CPU) 114 and a memory 116.

[0019] In general, when powering on the host device 102, the host device 102 and the supplied device 104 establish secure communications using standard cryptographic methods using standard cryptographic algorithms 118. For example, running the cryptographic algorithm 118 (i.e., on the processor 108 ), the host device 102 may request the unique identification code 120 of the supplied device 104 and determine the device’s “underlying key” 122 via a cryptographic link. Using the base key 122, the host device and the supplied device can receive the secret "session key" 124, allowing secure communication for the current exchange of information. The host device 102 determines the base key 122 in this way every time it is turned on, and every time a new device 104 is installed. The base key 122 remains the same and does not change. However, a new and different session key 124 is obtained each time information is exchanged between the host device 102 and the supplied device 104.

[0020] In one implementation, memory 110 includes an authentication algorithm 126 executed on processor 108 of controller 106 to determine the authenticity of the replaced supplied device 104. Supplied device 104 is determined to be genuine when it responds correctly to the cryptographic time negotiation request 128 issued by authentication algorithm 126, and when its response 130 to the request is executed in the expected time window. Thus, the supplied device 104, the value 130 of the response to the request of which is correct, but the time 131 of the response to the request of which does not fall within the expected time window, is defined as non-genuine. Similarly, the supplied device 104, the time 131 of response to a request which falls within the expected time window, but the value 130 of the response to the request of which is incorrect, is defined as non-genuine. The authenticity of the supplied device 104, therefore, depends on whether it provides the correct answer 130 to the cryptographic request 128 of the timing in the time interval 131 of the response to the request (i.e. the time it takes to provide the answer 130) that falls into expected time window.

[0021] The cryptographic time negotiation request 128, issued by the authentication algorithm 126 on the host device 102, contains a request to perform a special mathematical calculation combining some of the request parameters. Mathematical calculations must be performed a specific number of times. The time negotiation cryptographic request 128 includes or is accompanied by such request parameters that include the received session key, a random seed number generated on the host device 102 by the controller 106, and a calculation count or cycle that indicates the number of times that the calculation should be fulfilled. Mathematical calculation uses the session key and begins with an operation on a random seed number. The result or output of each calculation is re-fed back to the next calculation until it reaches the calculation account. The last result or output of a mathematical calculation provides a response 130 to the query that is to be reached or calculated at a specific time 131 responses to the query. The request response time 131 is measured by the authentication algorithm 126, for example, starting a time negotiation sequence when the request is issued and stopping the time negotiation sequence after the supplied device 104 finishes and returns a response 130 to the request to the host device 102. Time 131 the response to the request is a temporary value, which in some implementations may not be long on the host device 102 in the volatile memory component 110 and / or in the processor 108 before or during Completions with a time window defined by the host. The authentication algorithm 126 on the host 102 determines whether or not the response 130 to the request and the response time 131 to the request are correct (i.e., expected), and then authenticates the supplied device 104 accordingly.

[0022] Referring still to FIG. 1, microcontroller 112 on delivered device 104 contains a specialized hardware query logic 132 for performing a mathematical calculation from a cryptographic request 128 for timing. Specialized query logic 132 is specifically designed and manufactured on microcontroller 112 for optimal execution of a specific mathematical calculation.

In one exemplary implementation, the mathematical calculation contains a basic function that defines a sequence of operations optimized for very fast operation in a specialized logic circuit 132. The mathematical calculation or function is repeated many times with the output of each iteration, which is part of the input data for the next iteration. Thus, while one or more operands change with each iteration of a mathematical calculation, the mathematical calculation itself does not change. In addition, the values of the request parameters accompanying the time approval request 128 may change with each time approval request 128. Each time negotiation request 128 issued by the authentication algorithm 126 to the supplied device 104 may have different values for the session key, a random seed number generated on the host device 102 by the controller 106, and an account or computation cycle. Accordingly, for each request 128 approval time, the response 130 to the request and the time 131 of the response to the request are determined by the values of the request parameter. More specifically, the session key, the random starting number and the calculation score all negatively affect the response value 130 of the query, while the calculation score also negatively affects the response time 131 by changing the number of iterations of the mathematical calculation by means of the specialized logic circuit 132 .

[0023] As noted above, the authentication algorithm 126 determines whether the response 130 to the request and the time 131 of the response to the request are correct or expected. This is done by comparing the response 130 to the request and the time 131 of the response with the correct or expected values. In various implementations, the algorithm 126 determines the correct or expected values in various ways. In one implementation, for example, the algorithm 126 retrieves and accesses the characteristic data 134 stored on the supplied device 104. The characteristic data 134 can be secured with a digital signature and validated using standard cryptographic operations. The characteristic data 134 provides the expected time windows at which the time 131 of the response to the request should fall depending on the calculation account supplied with the request 128 of the timing. Thus, in one example, as shown in FIG. 2, the characteristic data 134 may include a data table that associates different values of the calculation account with different time windows. By way of example only, such a connection can indicate that for a calculation account of 10,000 (i.e., when a mathematical calculation must be performed 10,000 times), a response time 131 to the query is expected to fall in a time window of 50-55 milliseconds. In another example, characteristic data 134 may be provided through a mathematical relationship, such as a straight line formula with a slope, y = mx + b. Thus, for a given computation count value, x, the expected time, y, can be determined. The time window may then be determined by the authentication algorithm 126 on the host 102, for example, using the expected time y, +/- 5%.

[0024] In another exemplary implementation, the authentication algorithm 126 determines the correct or expected values for the response 130 to the request, issuing a cryptographic request 128 for the timing of the specialized reference logic 136 on the host device controller 106. The reference logic circuit 136 on the controller 106 mirrors the specialized hardware logic circuit 132 on the supplied device 104 and, therefore, is specially designed and manufactured on the controller 106 to optimally perform the mathematical calculation from the query 128 of the timing. Thus, when the authentication algorithm 126 issues the time consistency request 128 to the supplied device 104, it also issues the time consistency request 128 of the reference logic circuit 136. The reference logic circuit 136 performs mathematical calculations from the query in the same manner as discussed above with respect to the specialized hardware logic circuits 132 on the delivered device 104. In response to the request 128 for timing, the reference logic 136 completes the request and provides a reference response to the reference time The reference response time window can be defined, for example, as being within a certain percentage (for example, +/- 5%, +/- 10%) of the reference time. The authentication algorithm 126 may then use the reference response and the reference response time window as values for comparison with the response 130 to the request and the response time 131 to the request. If the response 130 to the request matches the reference response, and the response time 131 to the request falls into the reference response time window, the algorithm 126 determines that the supplied device 104 is a genuine device.

[0025] FIG. 3 shows an example of an authentication system 100 implemented as an inkjet printing system 300. In general, the printing system 300 contains the same or similar components as the general authentication system 100, and operates in the same or similar manner with respect to authenticating the replaceable ink-jet cartridges supplied. In an exemplary implementation, the inkjet printing system 300 includes a printing mechanism 302, having a controller 106, an assembly 304, one or more replaceable supplied devices 104, implemented as ink cartridges 306, and at least one power supply 308 that supplies power. various electrical components of the inkjet system 300. The printing system 300 further includes a media conveyance unit 310.

[0026] FIG. 4 shows a perspective view of an exemplary inkjet ink cartridge 306 that represents a replaceable delivery device 104. In addition to one or more printheads 312, the inkjet cartridge 306 includes a microcontroller 112, a group of electrical contacts 400 and an ink supply chamber 402 (or other fluid). Wednesday). In some implementations, the cartridge 306 may have a feed chamber 402 that stores one ink color, and in other implementations it may have a row of cameras 402, each of which stores a different ink color. The electrical contacts 400 transmit electrical signals from the controller 106 to the nozzles 314 on the print head 312 to cause the release of droplets of fluid. The electrical contacts 400 also transmit electrical signals between the controller 106 and the microcontroller 112 to facilitate authentication of the cartridge 306 in the inkjet system 300. In one exemplary implementation, the microcontroller 112 is located on a silicon substrate shared with the print head 312. In another exemplary implementation, the microcontroller 112 is located elsewhere on cartridge 306 as a stand-alone smart card. The microcontroller 112 is similar to the microcontroller 112 shown in FIG. 1 and discussed above, and includes the same common components (not all are shown in FIG. 4). Thus, microcontroller 112 on cartridge 306 contains memory 116 and specialized query logic 132, which functions in the same general way as discussed above with respect to authentication system 100 of FIG. 1 and 2.

[0027] Referring to FIG. 3 and 4, the print head 312 discharges ink or other fluid droplets through a plurality of apertures or nozzles 314 towards the print medium 316 so as to print on the print medium 316. The print media 316 can be any type of suitable sheet or roll material, such like paper, stack of cards, slides, mylar, polyester, plywood, foam cardboard, canvas, canvas, etc. The print head 312 may be configured to eject ink through the nozzles 314 in a variety of ways. For example, a thermal inkjet printhead releases droplets from a nozzle when an electric current is passed through a heating element to generate heat and a small portion of the ink is evaporated in the combustion chamber. Vapor bubbles push a drop of ink through nozzle 314. In another example, a piezoelectric inkjet print head uses a drive made from a piezoelectric material to form pressure pulses that push ink drops out of the nozzle. Nozzles 314 are typically placed in one or more rows or dies over the print head 312, so that a properly ordered ejection of ink from the nozzles 314 causes printing of letters, symbols, and / or other graphic characters or images on the print media 316, while the ink cartridge 306 and the print media 316 moves relative to each other.

[0028] the Assembly node 304 positions the inkjet cartridge 306 relative to the node 310 transporting media, and node 310 transporting media positions the print media 316 relative to the inkjet cartridge 306. Thus, the area 318 print is determined next to the nozzles 314 in the area between the inkjet cartridge 306 and print media 316. In one implementation, the printing engine 302 is a scanning printing type 302. Essentially, the mounting unit 304 includes a carriage for moving the inkjet cartridge 306 relative to the carrier transporting unit 310 to scan the print media 316. In another implementation, the printing mechanism 302 is a non-scan type printing mechanism 302. Essentially, the Assembly node 304 fixes the inkjet cartridge 306 in the prescribed position relative to the node 310 transporting media, while the node 310 transporting media positions the print media 316 relative to the inkjet cartridge 306.

[0029] As noted above with respect to the authentication system 100 of FIG. 1, controller 106 typically includes components of a standard computing system, such as a central processing unit (CPU) 108, memory 110, firmware, and other electronic devices. In the inkjet system 300 of FIG. 3, the controller 106 similarly uses such components to control the overall functions of the printing system 300 and to communicate and control the inkjet cartridge 306, the mounting assembly 304, and the media transporting assembly 310. Accordingly, controller 106 receives data 320 from a host system, such as a computer, and temporarily stores data 320 in memory 110. Typically, data 320 is sent to inkjet printing system 300 via electronic, infrared, optical, or other information transfer paths. Data 320 represents, for example, a document and / or file to be printed. Essentially, data 320 forms a print job for the inkjet system 300, which includes one or more print job commands and / or command parameters. Using data 320, the controller 106 controls the inkjet cartridge 306 to eject ink droplets from the nozzles 314. Thus, the controller 106 determines the pattern of ejected ink droplets that form letters, symbols, and / or other graphic characters or images on the printing medium 316. The droplets pattern the ink is determined by print job commands and / or command parameters from data 320.

[0030] In addition to controlling the overall printing functions of the inkjet system 300, the controller 106 performs an authentication algorithm 126 to determine whether the inkjet cartridge 306 is an authentic device. This authentication process in the printing system 300 is similar to the process described above with respect to the general authentication system 100 of FIG. 1. FIG. 5 is a flowchart of an exemplary authentication process 500 in a printing system 300 or other authentication system 100 that determines whether a replaceable supplied device 104, such as the ink jet supplied cartridge 306, is a genuine device. Process 500 corresponds to the exemplary implementations discussed above with respect to FIG. 1-4, and the details of the steps shown in process 500 can be found in a related discussion of such implementations. The steps of process 500 may be implemented as an algorithm containing program-oriented instructions stored on non-temporary computer / processor readable media, such as memory 110 of FIG. 1 and 3. In various examples, the implementation of the steps of process 500 is performed by reading and executing such software-oriented instructions by a processor, such as processor 108 of FIG. 1 and 3. Process 500 may include more than one implementation, and various implementations of process 500 may not apply each step presented in the flowchart of FIG. 5. Therefore, while the steps of process 500 are presented in a specific order in the flowchart, the order of their presentation is not intended to be a limitation on the order in which the steps can actually be implemented, or whether all of the steps can be implemented. For example, one implementation of process 500 may be implemented by performing a series of initial steps, without performing one or more subsequent steps, while another implementation of process 500 may be carried out by performing all steps.

[0031] Turning now to FIG. 1, 3, and 5, the authentication process 500 begins at step 502, where the first step shown is to recognize the device being replaced. The replacement of a supplied device is typically recognized when the host device is powered on or a new device is inserted into the host device, for example, when the printing system is turned on or when the printing ink or toner cartridge is replaced in the printing system. The replaceable supplied device can also be recognized when the supplied device is turned on at the beginning of each print job. The authentication process 500 continues at block 504, where a cryptographic request for timing is issued. A time reconciliation request is issued from the host device, such as a printing device, and sent to the supplied device, such as the printing cartridge supplied. The time reconciliation request contains a request to perform a special mathematical calculation involving some of the request parameters, which include the session key received between the host device and the supplied device, a random seed number generated by the host device, and an account or calculation cycle that indicates The number of times the calculation should be performed. When issuing a time negotiation request, the host device may begin a time negotiation sequence to monitor the time it takes to receive a response to the request, as shown in step 506.

[0032] In some implementations, a time negotiation request may also be sent to the reference logic on the host device, as shown in step 508. When the time approval request is sent to the reference logic in the host device, a reference response is received from the logic in a certain the elapsed time reference interval, as shown in step 510. At step 512, a reference time window can be defined when a range around the reference time equal to a certain percentage is included. For example, a reference time window may be defined as a reference time plus or minus 5% of the reference time. In some implementations, as an alternative to sending a time alignment request to the reference logic on the host device, the host device retrieves and accesses the characteristic data stored on the supplied device, as shown in step 514. In another implementation, the characteristic data may be hard coded into host memory. The characteristic data includes the expected time windows for receiving a response to a request from the supplied device, which are associated with different values of the calculation account.

[0033] As shown in step 516, the authentication process 500 includes receiving a response to a request from the supplied device. The response to the request is received at a specific response time to the request, which can be determined, for example, when measuring time at the host device. Process 500 continues at block 518 by comparing the response to the request with the expected response. The expected response may be a reference response received from the reference logic on the host device. At step 520, the response time to the request is also compared with the expected response time window to determine if the response time to the request falls into the expected time window. The expected time window may be a reference time window or an expected time window extracted from the characteristic data stored on the supplied device or elsewhere.

[0034] The authentication process 500 continues at block 522 with the host device authentication of the supplied device, when the response to the request from the supplied device matches the expected value, and the response time to the request falls into the expected time window. At process 524 of process 500, the host device determines that the device supplied is not authentic, when either the response to the request does not match the expected value, or the response time to the request falls outside the expected time window, or in both cases.

[0035] Additional embodiments will now be described.

[0036] The first embodiment provides a printing supplied cartridge containing a microcontroller for receiving a time consistency request and allowing the cartridge to be authenticated when providing a response to a request during a response to a request that falls in the expected time window.

[0037] The second embodiment provides a cartridge in the first embodiment, further comprising a specialized hardware logic on the microcontroller for performing a mathematical calculation in response to a time alignment request, wherein the calculation issues a response to the request in the expected time window.

[0038] The third embodiment provides a cartridge in the first embodiment, further comprising characteristic data stored in the microcontroller, which includes the expected time windows for performing the response to the request.

[0039] The fourth embodiment provides a cartridge in the third embodiment, with each expected time window associated with a calculation score that indicates the number of times the mathematical calculation was performed from the time alignment request.

[0040] The fifth embodiment provides the cartridge of the second embodiment, wherein the time reconciliation request includes request parameters comprising a session key, a random seed number, and a calculation count that indicates the number of times the mathematical calculation was performed.

[0041] The sixth embodiment provides a cartridge in the fifth embodiment, wherein the mathematical calculation operates on a session key, a random initial number, and a calculation count to determine the response to the query.

[0042] The seventh embodiment provides a cartridge in the fifth embodiment, wherein the response time to the request depends on the computation count.

[0043] The eighth embodiment provides a cartridge of the fifth embodiment, further comprising a unique identification code and a base key from which the session key is derived.

[0044] A ninth embodiment provides a cartridge in a first embodiment, further comprising printing material selected from the group consisting of ink and toner.

[0045] The tenth embodiment provides a replaceable supplied device comprising a microcontroller for obtaining a session key with a host device and receiving a time-dependent request from the host device that indicates a random seed number, a session key, and a calculation cycle; and a specialized logic circuit in the microcontroller for performing the calculation of the request a number of times equal to the calculation cycle, wherein the first calculation uses a random seed number and session key to generate output data, and each subsequent calculation uses the output of the previous calculation.

[0046] The eleventh embodiment provides the supplied device of the tenth embodiment, further comprising characteristic data stored in the microcontroller's memory, which include various time windows for performing time-dependent queries depending on the specified calculation cycles.

[0047] The twelfth embodiment provides a device as supplied in the tenth embodiment, further comprising printing material to be applied to print media with a host device.

[0048] The thirteenth embodiment provides the device as supplied in the twelfth embodiment, wherein the printing material is selected from the group consisting of toner and ink.

[0049] The fourteenth embodiment provides the delivered device of the eleventh embodiment, wherein the calculation of the query comprises a series of mathematical operations in a specific sequence.

[0050] The fifteenth embodiment provides a device for facilitating the authentication of a print cartridge containing a memory and logic for receiving a time consistency request from a host device and allowing the cartridge to be authenticated when providing a response to a request during a response to a request that falls into expected time window.

[0051] The sixteenth embodiment provides a device of the fifteenth embodiment, further comprising logic to perform a calculation in response to a time consistency request, wherein the calculation issues a response to the request in the expected time window.

[0052] The seventeenth embodiment provides a device of the fifteenth embodiment, further comprising characteristic data stored in memory that includes expected time windows for performing a response to the request.

[0053] The eighteenth embodiment provides a device of the fifteenth embodiment, further comprising characteristic data stored in the memory, wherein the characteristic data includes the calculation account and provides the expected time windows depending on the calculation account.

[0054] The nineteenth embodiment provides a device according to the fifteenth embodiment, wherein the response time to the request depends on the calculation account received from the host device.

[0055] The twentieth embodiment provides a device in the fifteenth embodiment, with each expected time window associated with a calculation account received from the host device.

[0056] The twenty-first embodiment provides an apparatus of the nineteenth embodiment, wherein the count indicates the number of times the calculation was performed from the time consistency request.

[0057] The twenty-second embodiment provides a device of the fifteenth embodiment, wherein the time reconciliation request includes request parameters comprising a session key, a random seed number, and a calculation score that indicates the number of times the calculation was performed.

[0058] The twenty-third embodiment provides a device in the twenty-second embodiment, wherein the calculation operates on a session key, a random starting number, and a calculation count to determine the response to the request.

[0059] The twenty-fourth embodiment provides a device of the fifteenth embodiment, further comprising a unique identification code and a basic key.

[0060] The twenty-fifth embodiment provides a device according to the fifteenth embodiment, comprising a microcontroller that contains a logic circuit and a memory.

[0061] The twenty-sixth embodiment provides a device according to the fifteenth embodiment, further comprising a printing material selected from the group consisting of ink and toner.

[0062] The twenty-seventh embodiment provides a replaceable device comprising a device according to one of embodiments fifteenth to twenty-sixth.

[0063] The twenty-eighth embodiment provides a replaceable device of the twenty-seventh embodiment, wherein the logic is for receiving a time-dependent request from a host device that indicates a random seed number, a session key, and a calculation score; performing a query calculation based on a random seed number, session key, and calculation account.

[0064] The twenty-ninth embodiment provides a replaceable device according to the twenty-seventh embodiment, the logic circuit being intended to respond during a response to a request that depends on the calculation score.

[0065] The thirtieth embodiment provides a replaceable device of the twenty-seventh embodiment, further comprising characteristic data stored in memory that includes different time windows for performing time-dependent queries depending on the specified calculation accounts.

[0066] The thirty-first embodiment provides a replaceable device according to the twenty-seventh embodiment, while the memory stores the identification code and the base key.

[0067] The thirty-second embodiment provides a replaceable device of the twenty-seventh embodiment, further comprising a processor for obtaining a session key for each communication with the host device.

[0068] The thirty-third embodiment provides a replaceable device of the twenty-seventh embodiment, the logic circuitry is designed to perform a query calculation a number of times equal to the calculation cycle, the first calculation using a random seed number and session key to create output data the subsequent calculation uses the output of the previous calculation.

[0069] The thirty-fourth embodiment provides a replaceable device of the twenty-seventh embodiment, comprising a microcontroller that includes a logic circuit, a memory, and a processor.

[0070] The thirty-fifth embodiment provides a replaceable device according to the twenty-seventh embodiment, further comprising printing material to be applied to print media with a host device.

[0071] The thirty-sixth embodiment provides a replaceable device according to the twenty-seventh embodiment, wherein the printing material is selected from the group consisting of toner and ink.

[0072] The thirty-seventh embodiment provides a replaceable device of the twenty-seventh embodiment, wherein the query calculation comprises a series of operations, which corresponds to a calculation count, in a particular sequence.

Claims (39)

1. Replaceable supplied device containing central processing unit (CPU) (114) and memory (116) storing the base key (122), a specialized hardware logic circuit (132) designed to respond to a cryptographic request (128) for timing, and the specialized hardware logic circuit (132) is configured to calculate the response (130) based on the parameters including the calculation account, the session key associated with the base key, and a random seed number, and provide the answer (130) within the specified time (131) of the response to the request, however, the calculation account negatively affects the time (131) of the response to the request for the answer (130). 2. The device according to claim 1, wherein the memory further comprises characteristic data (134) for providing the expected time windows at which the time (131) of the response to the request should fall depending on the calculation account. 3. The device according to claim 2, wherein the characteristic data (134) is protected using a digital signature. 4. The device according to claim 2 or 3, wherein the characteristic data is such that for a given calculation account x, the expected time window y can be determined using a straight line formula with an angular coefficient (y = mx + b). 5. Device according to one of paragraphs. 1-4, while the calculation contains a basic function that determines the sequence of operations optimized for very fast operation in a specialized hardware logic circuit (132). 6. Device according to one of paragraphs. 1-5, wherein the specialized hardware logic circuit (132) is designed to perform the calculation of the request a number of times equal to the account or the calculation cycle, and the first calculation uses a random seed number and session key to create output data, and each subsequent calculation uses the output data of the previous calculation. 7. The device according to claim 6, wherein the last calculation output provides an answer (130) within the time (131) of the response to the request. 8. Device according to one of paragraphs. 1-7, while one or more operands change with each iteration of the calculation, the calculation itself does not change. 9. Printing supplied cartridge containing: device according to one of the preceding paragraphs and electrical contacts (400) for transmitting signals to the controller (116) of the host device to facilitate authentication of the print cartridge supplied (306). 10. An authentication system containing: host device (102); and replaceable supplied device (104) in one of the paragraphs. 1-7, while the host device (102) is configured to issue a cryptographic request (128) for timing, receive a response (130) to a request from a replaceable supplied device (104), determine the time (131) of the response to the request, and to authenticate the replaced supplied device (104) using the response (130) to the request and the time (131) of the response to the request. 11. The authentication system according to claim 10, wherein, to determine the time (131) of the response to the request, the host device (102) is configured to measure the response time (131), starting the time consistency sequence when the cryptographic time consistency request (128) is issued, and stopping the time consistency sequence after the replaced supplied device (104) finishes and returns the response (130) to request to host device (102). 12. A printing system containing the authentication system of clause 10 or 11. 13. A method for authenticating a replaceable supplied device, comprising: in response to a cryptographic request (128) timing calculating a replaceable supplied response device (130) based on parameters including a calculation account, a session key associated with the base key, and a random seed number, and the provision of a replaceable supplied device response (130) within a specified time (131) response to the request, however, the calculation account negatively affects the time (131) of the response to the request for the answer (130). 14. The method according to p. 13, containing: the issuance by the host device (102) of a cryptographic request (128) timing, receiving by the host device (102) a response (130) to a request from the replaced supplied device (104), determining the time (131) of the response to the request, and authentication of the replaced supplied device (104) using the response (130) to the request and the time (131) of the response to the request. 15. The method according to p. 14, while determining the time (131) of the response to the request contains: measuring the response time (131), starting the time consistency sequence when the cryptographic time consistency request (128) is issued, and stopping the time consistency sequence after the replaced supplied device (104) finishes and returns the response (130) to request to host device (102).

Images