WO2023124245A1

WO2023124245A1 - Verification method, consumable chip, consumable and image forming apparatus

Info

Publication number: WO2023124245A1
Application number: PCT/CN2022/118896
Authority: WO
Inventors: 梁嘉俊
Original assignee: 珠海奔图电子有限公司
Priority date: 2021-12-30
Filing date: 2022-09-15
Publication date: 2023-07-06
Also published as: CN114236994A; CN114236994B

Abstract

The present application relates to the technical field of image forming, and in particular to a verification method, a consumable chip, a consumable and an image forming apparatus, by means of which the legitimacy of a consumable chip can be accurately verified. The method comprises: in response to a first request, a consumable chip sending a first feedback message to an image forming apparatus, wherein the first feedback message carries digital certificate information, the digital certificate information at least includes a first public key, and the first public key is generated on the basis of a unique hardware identifier PUF ID of the consumable chip; the consumable chip receiving an identity challenge message sent by the image forming apparatus, wherein the identity challenge message comprises a first encryption result, the first encryption result is obtained by means of encrypting a first random number by using the first public key, and the first random number is generated by the image forming apparatus; and the consumable chip decrypting the first encryption result by using a first private key, so as to obtain a second random number, wherein the second random number is used for obtaining a verification result of the consumable chip.

Description

Authentication method, consumable chip, consumable and image forming device

This application claims the priority of the Chinese patent application with the application number 202111649105.6 and the application name "verification method, consumable chip, consumable and image forming device" submitted to the China Patent Office on December 30, 2021.

technical field

The present application relates to the technical field of image formation, in particular to a verification method, a consumable chip, a consumable and an image forming device.

Background technique

Currently, consumables such as toner cartridges, ink cartridges, and toner cartridges are generally detachably installed in image forming devices such as printers as consumable products. A consumable chip is installed on the consumable. After the consumable is installed in the image forming device, the image forming device will detect the consumable chip before using the consumable to perform imaging operations such as printing or copying, so as to determine whether the consumable is a legitimate consumable, such as whether it is an original consumable. Or whether it is a legal compatible consumable, etc., the consumable will start to use the consumable for imaging after passing the test. The conventional method of detection is that the controller in the image forming device (such as the image forming control unit) sends an inquiry signal to the consumable chip, and when the response signal returned by the consumable chip matches the information stored in the memory of the image forming device, And when the time of the response signal returned by the consumable chip meets the predetermined requirement, the consumable is considered as legal consumable.

During the implementation of the above solution, the inventor found that due to the influence of the electrostatic field in the image forming device and the contact conditions (such as the size, shape, material) between the image forming device and the consumable chip, the image forming The communication between the device and consumables is often disturbed, making the reliability of the response signal returned by the consumable chip less reliable. For example, in the case of communication interference, the time of the response signal returned by the consumable chip may be delayed, resulting in image formation The device mistakenly identifies legitimate consumable chips as illegal, or recognizes illegal consumable chips as legitimate; on the other hand, the protection measures for communication between the consumable chip and the image forming device are relatively weak, and the response signal is easily intercepted by imitators , imitating the original chip to send a response signal, so that the non-original consumables are recognized as original. The use of illegal consumables such as non-original consumables may damage the image forming device or reduce the image quality, affecting user experience.

In view of this, there is an urgent need for a solution to solve the above problems.

Contents of the invention

The embodiment of the present application provides a verification method, a consumable chip, a consumable and an image forming device, which can improve the accuracy of the validity verification of the consumable chip and prevent misjudgment; and can also improve the communication between the consumable chip and the image forming device body Safety.

In the first aspect, the embodiment of the present application provides a verification method, which is applied to a consumable chip, the consumable chip is installed on the consumable, the consumable is detachably installed in the image forming device, and digital certificate information is stored in the consumable chip; the method includes: consumable The chip sends a first feedback message to the image forming device in response to the first request; wherein, the first feedback message carries digital certificate information, and the digital certificate information includes at least a first public key; the first public key is based on the unique hardware of the consumable chip The identifier PUF ID is generated; the first request is a request sent by the image forming device for obtaining a digital certificate; the consumable chip receives the identity challenge message sent by the image forming device; the identity challenge message includes the first encryption result, and the first encryption result is obtained by using The first public key is used to encrypt the first random number; the first random number is generated by the image forming device; the consumable chip uses the first private key to decrypt the first encrypted result to obtain the second random number; wherein, the first private key It is generated based on the PUF ID and forms a key pair with the first public key; the second random number is used to obtain the verification result of the consumable chip.

In the second aspect, the embodiment of the present application provides a chip for consumables. The chip for consumables is used to be installed on consumables. The consumables are used to be detachably installed in an image forming device. Digital certificate information is stored in the consumables chip; the digital certificate information includes at least The first public key; the first public key is generated based on the unique hardware identifier PUF ID of the consumable chip; the chip control unit is also used to obtain the unique hardware identifier PUF ID of the consumable chip, and generate the first private key based on the PUF ID. A private key and the first public key belong to the same key pair; the first private key is used to decrypt the first encrypted result to obtain a second random number; The random number is obtained by encryption; the second random number is used to obtain the verification result of the consumable chip.

In a third aspect, an embodiment of the present application provides a consumable, including: a housing; a developer container located in the housing for accommodating the developer; and the consumable chip according to any one of the above-mentioned second aspects.

In a fourth aspect, an embodiment of the present application provides a consumable, which includes: a photosensitive drum; a charging roller for charging the photosensitive drum; and the consumable chip according to any one of the above-mentioned second aspects.

In the fifth aspect, the embodiment of the present application provides an image forming apparatus, including: consumables, on which the consumables chip according to any one of the above-mentioned second aspects is installed; an image forming control unit, configured to: send the consumables chip To obtain the first request for a digital certificate; receive the first feedback message sent by the consumable chip, and generate a first random number, use the first public key carried in the first feedback message to encrypt the first random number, and obtain the first An encryption result; sending an identity challenge message to the consumable chip, where the identity challenge message includes the first encryption result.

In the verification method, the consumable chip, the consumable and the image forming device in the embodiment of the present application, a digital certificate is stored in the consumable chip, and the digital certificate includes a first public key, and the first public key is generated based on the unique hardware identifier of the consumable chip, and also That is, the first public key is a public key associated with the unique hardware identifier of the consumable chip; after the consumable is installed in the image forming device, the consumable chip responds to the request (first request) for obtaining a digital certificate sent by the image forming device, Return the feedback message carrying the digital certificate information. After the image forming device obtains the first public key, it will use the first public key to encrypt the generated first random number, and then send the encrypted data (first encryption result) to The consumable chip, if the consumable chip is a legal chip, the consumable chip will hold the first private key, the first private key is generated based on the unique hardware identifier, that is, the first private key is the private key associated with the unique hardware identifier of the consumable chip key, the first private key can decrypt the first encryption result, and the decrypted second random number is the same as the first random number. If the consumable chip is an illegal chip, the consumable chip will not hold the first private key , so the first encryption result cannot be decrypted or the decrypted random number is different from the first random number, so when the image forming device sends an identity challenge message to the consumable chip, the image forming device decrypts the first random number If the response information is correct, you can know whether the consumable chip is legal. This scheme does not depend on the feedback time of the response signal, so it is not affected by the communication environment between the consumable chip and the image forming device, and in this scheme, only the legal consumable chip can generate the first private key, and the first private key The key is generated based on the unique hardware identifier PUF ID, which is non-replicable and cannot be imitated. Therefore, even if the exchange information between the consumable chip and the image forming device is intercepted, it will not affect the verification of the consumable chip, so the verification result is reliable. Sex is higher.

Description of drawings

FIG. 1 is a schematic flow diagram of an embodiment of a verification method provided in an embodiment of the present application;

FIG. 2 is a system architecture diagram of a verification method provided in an embodiment of the present application;

Fig. 3 is an interactive flowchart of a verification method provided by the embodiment of the present application;

FIG. 4 is an interactive flowchart for generating a digital certificate in the embodiment of the present application;

FIG. 5 is a structural cross-sectional view of an image forming device provided by an embodiment of the present application;

Fig. 6 is a schematic structural diagram of an embodiment of consumables provided by the embodiment of the present application;

FIG. 7 is a schematic structural diagram of an image forming apparatus provided by an embodiment of the present application.

Detailed ways

The terms used in the embodiments of the present application are only used to explain specific embodiments of the present application, and are not intended to limit the present application.

The embodiment of the present application provides a verification method, which can be applied to the scene of verifying consumable chips based on various image forming devices. Detachable connection.

An image forming device refers to various devices used to perform image forming operations. An image forming job may be at least one of operations such as generation, printing, copying, and scanning. An image forming device may also be used to receive and send image data, for example Specifically, the image forming apparatus may be an inkjet printer, a laser printer, an LED (Light Emitting Diode, light emitting diode) printer, a copier, a scanner, or a multifunctional facsimile machine, and a multifunctional peripheral performing the above functions in a single device. Equipment (MFP, Multi-Functional Peripheral).

It should be noted that a complete image forming device mainly includes an image forming control unit, an image forming part, consumables, and a memory, wherein the consumables include consumable chips, the image forming control unit is used to control the entire image forming device, and the image forming part is used for Based on the image data, an image is formed on the conveyed paper under the control of the image forming control unit.

Specifically, the image forming control unit may be a SoC (System on Chip, system on a chip). SoC is a miniature system composed of multiple system components configured to control the imaging processing operations of the image forming device, such as processing image data Perform linear correction, noise reduction, bad point removal, detail enhancement and other processing to improve the quality of image output. The image formation control unit is also used to perform engine control related processing operations such as data transmission and reception, command transmission and printing, and image printing, for example, through the interface unit (including but not limited to USB port, wired network port, wireless network port or other interfaces, etc.) to send and receive data, print engine control commands, status, etc. Specifically, the image forming control unit is responsible for verifying the consumable chip, reading and writing characteristic information on the consumable chip, and controlling the image forming unit. The image forming control unit obtains specified image forming parameters, such as high voltage parameters, etc., and coordinates each image forming mechanism according to the image forming parameters, so that the correct image content is displayed on the medium. Consumables can be toner cartridges, ink cartridges, toner cartridges, laser toner cartridges, organic photoconductors (Organic Photo Conductor, OPC, referred to as photosensitive drums), etc. The consumable chip refers to the chip installed on the consumable, which is used to store the characteristic parameters in image formation, the remaining quantity of the consumable and other parameters. The consumable chip in the embodiment of the present application also stores information such as digital certificates. The non-volatile storage unit is used to store the digital certificate of the CA server and other information that needs to be saved when the power is turned off.

A complete image forming device includes consumables, and in the embodiment of this application, unless otherwise specified, in the following description of the verification method, the image forming device refers to the body structure of the image forming device that does not contain consumables, and the body of the image forming device Specifically, the structure may include an image forming control unit, for example, sending a message to an image forming device, specifically, sending a message to an image forming control unit. In other embodiments, it may also be other components with communication functions in the image forming device, for example, a message may also be sent to the wireless communication module of the image forming device, and the image forming control unit on the side of the image forming device communicates with the Consumable chip communication. It can be understood that, in the provision of the embodiment of the present application, the complete image forming device is divided into consumables and the main body structure of the image forming device for description, and in the process of interaction between the consumable chip and the image forming device, the image forming device refers The body structure of consumables. Wherein, the body or body structure of the image forming apparatus refers to at least one of other hardware components in the image forming apparatus except consumables.

The embodiment of the present application provides a verification method. The execution subject is a consumable chip. In one embodiment, the consumable chip is a chip manufactured based on PUF-Physically Unclonable Function (PUF). Each consumable chip has a unique The ID, the unique hardware identifier, can be abbreviated as PUF ID. The PUFID is an electrical and electrical fingerprint. The electronic fingerprint is related to the naturally occurring physical characteristics of semiconductor devices during the wafer manufacturing process and is used to distinguish other same Semiconductor equipment (such as consumable chips). Specifically, referring to Figure 1, the method may include the following processes:

S101. Send a first feedback message to an image forming apparatus in response to a first request.

A digital certificate is stored in the consumable chip, and the digital certificate information includes at least a first public key, and the first public key is generated based on the unique hardware identifier PUF ID of the consumable chip. For example, an asymmetric encryption algorithm is implemented on the unique hardware identifier, and the generated public key is the first public key. The first public key is associated with the PUF ID.

It should be noted that the digital certificate is stored in the consumable chip, which may be stored in the chip control unit, or stored in a storage unit external to the chip control unit.

After receiving the first request sent by the image forming device, the consumable chip will send a first feedback message to the image forming device, and the first feedback message carries digital certificate information. The first request is a request issued by the image forming apparatus for obtaining a digital certificate.

S102. Receive an identity challenge message sent by the image forming device.

The identity challenge message carries a first encryption result, and the first encryption result is obtained by encrypting the first random number with the first public key; the first random number is generated by the image forming device.

Specifically, as an implementable manner, the image forming device verifies the digital certificate sent by the consumable chip, and generates a random number after passing the verification, and the random number is the first random number.

It should be noted that, in one embodiment, the digital certificate not only includes the first public key generated based on the PUF ID of the consumable chip, but also includes the signature value of the digital certificate, which can be understood as a key used to identify the identity of the digital certificate Uniquely identifying information. Exemplarily, the signature value of the digital certificate can be calculated and generated based on the first public key and digital certificate attribute information according to a preset algorithm, where the attribute information can include digital certificate ID, digital certificate version, issuer, user, issuer At least one item of information such as date, validity period, and signature algorithm.

After receiving the digital certificate, the image forming device verifies the signature value of the digital certificate, and generates a random number as the first random number if the verification is passed. How to generate a signature value and how to verify the signature value will be explained in detail later.

Then, the image forming device encrypts the first random number with the first public key, and then sends the encrypted data (first encryption result) to the consumable chip.

S103. The consumable chip uses the first private key to decrypt the first encryption result to obtain a second random number.

The first private key is also generated based on the PUF ID, and the first private key and the first public key are respectively the private key and the public key in a key pair generated based on an asymmetric encryption algorithm.

As an implementable manner, the first private key may also be generated by the consumable chip in real time after receiving the identity challenge message. Specifically, the consumable chip obtains its own PUF ID, performs an asymmetric encryption operation based on the PUF ID, and generates the same private key as the first private key. A public key is paired with a first private key. In another embodiment, the first private key can be pre-stored in the consumable chip, that is, before the consumable chip leaves the factory, the corresponding first private key and the first public key are generated in advance according to the PUF ID of the consumable chip. The key is stored as a part of the digital certificate, and then the first private key is encrypted and stored.

Since the first private key and the first public key are the public key and the private key in a key pair generated based on an asymmetric encryption algorithm, the data encrypted with the first public key (the first encryption result) can be encrypted using the first A private key is used for decryption, and only the first private key can be decrypted. If the consumable chip can decrypt the first encryption result and the decrypted random number is correct, so when the image forming device sends a query message to the consumable chip, the response information obtained by the image forming device by decrypting the first random number is correct , the consumable chip is considered legal, otherwise it is illegal.

Legal in this embodiment of the application refers to meeting predetermined requirements, for example, an original chip or a chip that is authorized to be produced. A legal chip is a chip that meets predetermined requirements.

Specifically, in one possible implementation:

The second random number is used as the symmetric key to encrypt the response content used to respond to the identity challenge message to obtain a second feedback message and send it to the image forming device.

After receiving the second feedback message, the image forming device will use the first random number to decrypt the encrypted response content. If it can be decrypted correctly, it means that the password is symmetrical, that is, the decrypted password is the encrypted password, and the second The random number is the same as the first random number, so the response information of the identity challenge message obtained by decrypting the first random number is correct, then the verification is passed, and the consumable chip is a legal chip, and the verification is passed. If the first random number held by the image forming apparatus cannot decrypt the response content, for example, the decrypted content is garbled, then the consumable chip is considered to be an illegal chip.

In the case where the verification result of the consumable chip is verified as passed, the subsequent communication between the consumable chip and the image forming device can use the second random number (equal to the first random number) as the symmetric key for various communication messages Perform encryption processing.

Since the first random number is a number randomly generated by the image forming device during use, different devices may randomly generate different numbers, so it is meaningless to copy the random number, which can also prevent imitators from knowing the encryption in advance A password is used to intercept a communication message or to send an encrypted message to an image forming device in imitation of a legitimate consumable chip.

Referring to FIG. 2 , the verification method provided by the embodiment of the present application can be implemented based on the system architecture shown in FIG. 2 . In order to further understand the verification mechanism provided by the embodiment of the present application, a complete verification example is listed below in combination with Figure 2 and Figure 3. In this example, the verification method provided by the embodiment of the present application can be implemented based on the following process:

S301. After the consumables are installed in the image forming apparatus, the image forming control unit on the side of the image forming apparatus sends a request for acquiring a digital certificate (a first request). The request message may be a message encrypted by the first encryption algorithm.

In one possible implementation, the first encryption algorithm may be a symmetric encryption algorithm, such as any one of the following symmetric encryption algorithms: Data Encryption Standard (Data Encryption Standard, DES), Advanced Encryption Standard (Advanced Encryption Standard , AES), Blowfish, RC2, RC4, RC5, IDEA (International Data Encryption Algorithm), SKIPJACK and other algorithms.

S302. After receiving the first request, the consumable chip first decrypts the first request through a first encryption algorithm to obtain request content, and then reads the digital certificate stored in the consumable chip according to the request content. It should be noted that, in this example, the digital certificate stored in the consumable chip is compressed information after encryption and compression processing, and the algorithm for encrypting and compressing the original plaintext information of the digital certificate is defined as the first compression algorithm, the first compression The algorithm should use an encryption algorithm that supports restoration after compression, that is, an encryption algorithm that can restore the original plaintext data after compression.

S303. The consumable chip sends a message including the compressed information of the digital certificate to the image forming device, specifically to the image forming control unit on the side of the image forming device. Exemplarily, the message sent in step 303 may also be encrypted using the first encryption algorithm.

S304. The image forming control unit on the side of the image forming device decrypts the compressed information of the digital certificate obtained through the first encryption algorithm. Since the compressed information of the digital certificate is encrypted and stored, after reading it, it needs to be decrypted by the decryption algorithm corresponding to the first compression algorithm, that is, the plaintext file of the digital certificate is restored according to the first encryption compression algorithm. In addition to the first public key, the restored digital certificate also includes a signature value.

The memory on the side of the image forming apparatus may be a non-volatile storage unit in which verification information for verifying the signature value in the digital certificate is stored. As an implementable manner, the verification information may be a CA server certificate.

Specifically, the image forming control unit reads the CA server certificate in the non-volatile storage unit, verifies the signature value in the digital certificate sent by the consumable chip, and generates a random number A locally after the verification is passed, and save.

S305. The image forming control unit uses the first public key in the digital certificate sent by the consumable chip to encrypt the random number A to obtain encrypted data (the first encryption result), and sends an identity carrying the first encryption result to the consumable chip. Challenge message.

S306. After the consumable chip receives the identity challenge message, as an implementable method, it will read its own PUF ID and other information, and calculate the private key custom-generated from the PUF ID and other information through an asymmetric encryption algorithm (section A private key), the private key and the public key (the first public key) in the digital certificate of the consumable chip belong to the same public-private key pair, that is, the data encrypted by the first public key can only be decrypted by the first private key. Therefore, the consumable chip holding the first private key can decrypt the first encrypted result in the identity challenge message through the private key, and obtain the random number B.

If the consumable chip is a legitimate chip, then the private key can be calculated based on the PUF ID and other information to decrypt the first encrypted result, and when the decrypted random number B=random number A, the image forming device can use the random number B decrypts the information fed back by the consumable chip, so the verification result can be obtained by checking whether the consumable chip can respond and whether the response information obtained by decrypting the feedback information of the consumable chip through the random number A is correct.

If the consumable chip does not respond (it may not be decrypted), or the content of the identity challenge response is incorrect, it is determined to be a counterfeit consumable. The consumable may be produced by copying the flash content of the original consumable, which may cause damage to the image of the original printer. damage to the device.

It should be noted that, in another implementation manner, the first private key may also be pre-stored in the storage unit of the consumable chip, but it should be stored encrypted to prevent the first private key from leaking.

S307, the consumable chip uses the random number B to symmetrically encrypt the response content used to respond to the identity challenge message, obtains the response message and sends it to the image forming control unit of the image forming device.

S308. The image forming control unit of the image forming device uses the random number A as a decryption password to symmetrically decrypt the response message sent by the consumable chip. The random number B on one side is equal, and the consumable chip is a legal chip, such as an original genuine consumable, and the verification is passed. If it cannot be decrypted or the decrypted response content is garbled, that is, the response content is incorrect, it is determined to be a counterfeit consumable.

S309, entering the secure communication stage. After the verification is passed, the random number A (that is, the random number B) can be used as a symmetric key between the image forming device and the consumable chip to encrypt subsequent communication content.

The generation process of the digital certificate of the consumable chip is described below. The digital certificate can be written into the consumable chip before leaving the factory. The system architecture involved in the digital certificate generation process includes three parts, namely consumable chip, consumable chip production tooling equipment and certificate authority (Certificate Authority, CA) server.

The consumable chip is equivalent to a processor. The processor has a hardware unique identifier PUF ID. The PUF ID has been permanently written in the chip manufacturing factory and cannot be changed.

During the formation of the digital certificate, the CA server receives the certificate issuance request (second request) sent by the consumable chip production tooling equipment. The second request includes but is not limited to the first public key generated based on the PUF ID and the attribute information of the digital certificate. The attribute information of the digital certificate can include at least one of the issuance time, digital certificate version, signature algorithm, hash algorithm and other information. For example, the attribute information can include the digital certificate ID, digital certificate version, issuer, user, issue date, Validity period, signature algorithm and other information. The CA server calculates a hash value through a hash algorithm for the second request information, and uses the private key (second private key) of the CA server to asymmetrically encrypt the hash value to generate a signature value, and sends the signature The value is stored in a digital certificate, which is then stored in the consumable chip.

It should be noted that, as mentioned above, as a possible implementation, the digital certificate stored in the consumable chip can be compressed information encrypted by a specific compression encryption algorithm (the first compression algorithm), that is, Store digital certificates in encrypted compressed form.

Based on the first compression algorithm, the key content in the digital certificate is extracted and compressed, the purpose is to reduce the size of the digital certificate file, and at the same time better protect the plain text content of the digital certificate.

It should be noted that, in a possible implementation manner, the following process is used to generate the signature value of the digital certificate:

Obtain the PUF ID of the consumable chip, generate the first public key, then obtain the attribute information of the digital certificate, combine the attribute information with the first public key, and then perform a hash algorithm on the combined data to obtain a hash value; for example, hash The column algorithm may be a hash operation to obtain a corresponding hash value; then, the second private key is used to sign the hash value to obtain the signature value of the digital certificate. The issued digital certificate includes the first public key and the signature value.

It should be noted that, as a possible implementation manner, a second public key will be written in the memory (such as a non-volatile storage unit) in the image forming apparatus before leaving the factory, and the second public key is the same as the first public key. The two private keys belong to the same key pair, that is, the signature value signed by the second private key, and only the second public key can pass the signature verification. That is to say, during the manufacturing process of the original consumable chip, the signature value of its digital certificate, only the manufacturer of the image forming device such as the original printer can master the public key for verifying the signature, that is to say, only the original The consumable chip can pass the signature verification.

In one embodiment, encryption algorithms such as the first encryption algorithm (excluding asymmetric encryption algorithms) can also be the following algorithm process: before or after the text content of the message, a large random number is embedded, such as: 2345774356, the encryption algorithm Then extract the 2nd, 3rd, 5th, and 6th bits of the large random number as the symmetric key, and encrypt and decrypt the data. When decrypting, read the large random number and extract the 2nd, 3rd, 5th, and 6th bits As a decryption key, decryption is realized. The specific number of digits to be extracted can be agreed upon in advance. In addition, encryption algorithms such as the first encryption algorithm can also be in the form of a password book. This application aims to protect the technical ideas of information interaction and information storage, and the specific encryption algorithms are not listed one by one.

The embodiment of the present application also provides a consumable chip, the consumable chip stores digital certificate information; the digital certificate information includes at least a first public key; the first public key is based on the unique hardware identifier PUF of the consumable chip ID generation.

The chip control unit is also used to obtain the unique hardware identifier PUF ID of the consumable chip, and generate the first private key based on the PUF ID. The first private key and the first public key belong to the same key pair; the first private key is used for The first encryption result is decrypted to obtain a second random number; wherein, the first encryption result is obtained by encrypting the first random number with a first public key; the first random number is generated by the image forming device; the second random number, Validation results used to determine consumable chips. For example, the second random number can be used as the symmetric key to encrypt the data, and the first random number can be used as the decryption key to decrypt the data. If the decryption is possible and the decrypted content is correct, the verification is considered to be passed, otherwise the verification is not passed.

Optionally, the chip control unit further includes an encryption unit and a decryption unit, wherein the encryption unit is configured to encrypt data to be sent to the image forming device, and the decryption unit is configured to receive the encrypted data sent by the image forming device and encrypt the encrypted data. The data is decrypted.

Specifically, the encryption unit or the decryption unit may be an algorithm module supporting an algorithm such as an asymmetric encryption algorithm and/or a first encryption algorithm.

Optionally, the above digital certificate information also includes a signature value, the signature value is generated based on the first public key and the attribute information of the digital certificate, and the signature value is used for comparison with a preset signature value to The validity of the signature value is determined.

Optionally, the attribute information of the digital certificate includes at least one of the following information: digital certificate ID, digital certificate version, issuer, user, issue date, validity period, and signature algorithm.

Optionally, the chip control unit is configured to receive an identity challenge message and determine response information corresponding to the above identity challenge message, where the above identity challenge message includes the above first encryption result, and uses the above second random number as a symmetric key, for the above Encrypting the response content to obtain a second feedback message, and sending it to the above-mentioned image forming device; the above-mentioned second feedback message is used to obtain the above-mentioned Verification result of the consumable chip.

Optionally, the above-mentioned second feedback message is specifically used to obtain the verification result of the above-mentioned consumable chip as verification passed when the above-mentioned second feedback message can be decrypted by using the first random number and the obtained response content is correct.

Optionally, the chip control unit is configured to use the second random number as a symmetric key to encrypt various communication messages sent to the image forming device when the verification result of the consumable chip is passed.

From the perspective of hardware implementation, in one embodiment, the consumable chip can be mounted on the circuit substrate of the consumable. The circuit substrate includes a memory and contacts connected to the memory. Foot connection.

The embodiment of the present application also provides a consumable chip, the consumable chip is used to be installed on the consumable, the consumable is used to be detachably installed in the image forming device, the consumable chip stores digital certificate information, and is used to execute the The verification method in the example.

The embodiment of the present application also provides a consumable. In order to facilitate understanding of the hardware structure of the consumable provided in the embodiment of the present application, the overall hardware structure of the image forming apparatus is described first.

Referring to FIG. 4 , FIG. 4 shows a schematic structural diagram of an image forming apparatus involved in an embodiment of the present application.

Please refer to FIG. 4, as an example of an image forming device, the image forming part of the image forming device may include:

The developer container 11 is used for containing the developer, which may be materials such as toner, carbon powder, etc.;

The developing component 12, for example, includes components such as a developing roller;

The developer conveying element 13, for example, includes components such as a powder feeding roller;

The photosensitive component 14, for example, includes a photosensitive drum OPC and a charging roller, etc., and the charging roller is used to charge the photosensitive drum;

The transfer member 15, the fixing unit 5, and the like.

The paper to be printed moves in the direction of paper feeding, and after successively passing through the powder feeding operation of the developer feeding member 13 and the developing operation of the developing unit 12, it reaches the nip area between the photosensitive unit 14 and the transfer unit 15 for transfer. Afterwards, it is fixed through the fixing assembly 5 to complete the image forming operation.

Generally, at least one consumable is installed in the image forming device, and the consumable is detachably connected to the body of the image forming device.

Taking the image forming device shown in FIG. 4 as an example, the image forming device is detachably installed with four consumables, which are consumables 1, 2, 3 and 4 shown in FIG. The image forming apparatus supplies developers of four colors: black K, cyan C, magenta M, and yellow Y. In another embodiment, the number of consumables installed in the image forming apparatus may be increased or decreased, for example, 5 or 6 or even more or less, etc., which is not limited in the present application. The method provided in the embodiment of the present application may be applied to a scenario where the number of consumables installed in the image forming apparatus is greater than or equal to two.

For a chip-mounted consumable, in one embodiment, the consumable may only include the developer container 11 .

Correspondingly, as shown in FIG. 5 , the embodiment of the present application also provides a consumable, including: a housing 51 , a developer accommodating part 11 and a consumable chip 52 , the developer accommodating part 11 is located in the housing 51 for Contains developer.

In another embodiment, on the basis of the structure shown in FIG. 5 , the consumables further include a developer conveying part for conveying the developer. The developer conveying part may be a developing member, may be a developer conveying member, or may include a developing member and a developer conveying member, which is not limited here.

In yet another embodiment, the consumables may further include a photosensitive drum and a charging roller for charging the photosensitive drum.

Alternatively, as shown in FIG. 6 , in yet another embodiment, the consumable provided in the embodiment of the present application only includes a photosensitive drum 61 , a charging roller 62 and any consumable chip 52 described in the above embodiments. The charging roller 62 is used to charge the photosensitive drum 61 .

In another embodiment, the consumables may be developing cartridges. Alternatively, the consumable can be a drum cartridge.

Exemplarily, the consumables may have a split structure, for example, the consumables (1, 2, 3 or 4) respectively include a developing cartridge and a drum cartridge which are detachable from each other, wherein the developing cartridge includes a housing, a developer container 11, The developing member 12 and/or the developer conveying member 13; the drum cartridge includes a photosensitive member 14, that is, a photosensitive drum and a charging roller. In this embodiment, the developer conveying member 13 is used to convey the developer to the developing member 12, and the developing member 13 is used to convey the developer to the photosensitive drum. Wherein, besides the powder feeding roller, the developer conveying element can also be other conveying components, such as powder pushing screw and other components. Same as the previous embodiment, the developer accommodating portion 11 is located in the casing for accommodating the developer.

Exemplarily, the consumables are in an integrated structure, and the consumables (1, 2, 3, or 4) include a developer container 11, a developing member 12, a developer conveying member 13, a photosensitive member 14, etc., and the components are integrated into an integrated structure .

The verification scheme provided by the embodiment of the present application involves the communication between the main body of the image forming device and the consumable chip of the consumable. Both the main body side of the image forming device and the consumable chip side include electrical contacts. When the part is in good contact with the electrical contact part on the side of the consumable chip, data can be stably transmitted between the image forming apparatus and the consumable chip. The electrical contact may be a conductive plane, a conductive probe, a conductive coil, or the like.

In the above verification method, the consumable chip sends a message to the image forming device, which may be through the electrical contact part on the chip side to the electrical contact part on the image forming device body side, and the image forming device sends a request or message to the consumable chip through The electrical contacts on the body side of the image forming apparatus transmit messages to the electrical contacts on the chip side.

The embodiment of the present application also provides an image forming device, as shown in FIG. 7 , including:

A consumable 72, the consumable 72 is equipped with a consumable chip as described in any one of the above-mentioned embodiments;

The image forming control unit 71 is configured to implement the following operations: sending a first request for obtaining a digital certificate to the consumable chip; receiving a first feedback message sent by the consumable chip, and generating a first random number, using the The first public key carried in the first feedback message encrypts the first random number to obtain a first encryption result; sends an identity challenge message to the consumable chip, and the identity challenge message includes the first encryption result.

In an embodiment where the digital certificate information further includes a signature value, the image forming control unit on the side of the image forming apparatus is further configured to verify the validity of the signature value, and generate a first random number after the verification is passed. For example, the processor reads the verification information used to verify the signature from the non-volatile storage unit, and verifies the signature value in the digital certificate. Exemplarily, the image forming apparatus further includes a memory, and the memory may include a non-volatile storage unit 73, which stores a CA server digital certificate, and the CA server digital certificate stores information for verifying the signature value of the digital certificate of the consumable chip. verify message.

The number of the above-mentioned units, chips or processors can be one or more, and optionally, a memory is also provided, and the processor and the memory can be connected through a bus or in other ways. As a non-transitory computer-readable storage medium, the memory can be used to store non-transitory software programs, non-transitory computer-executable programs and modules, such as program instructions/modules corresponding to the devices in the embodiments of the present application. The processor executes various functional applications and data processing by running non-transitory software programs, instructions and modules stored in the memory, that is, implements the anti-cracking method in any of the above method embodiments. The memory may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application program required by at least one function; and necessary data and the like. In addition, the memory may include high-speed random access memory, and may also include non-transitory memory, such as at least one magnetic disk storage device, flash memory device, or other non-transitory solid-state storage devices.

An embodiment of the present application further provides a storage medium, and an executable program is stored in the storage medium, and when the executable program is run on the electronic device, the electronic device is made to execute the verification method in any of the foregoing embodiments.

In the above embodiments, all or part of them may be implemented by software, hardware, firmware or any combination thereof. When implemented using software, it may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on the computer, the processes or functions according to the present application will be generated in whole or in part. The computer can be a general purpose computer, a special purpose computer, a computer network, or other programmable devices. The computer instructions may be stored in or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website, computer, server or data center Transmission to another website site, computer, server, or data center by wired (eg, coaxial cable, optical fiber, DSL) or wireless (eg, infrared, wireless, microwave, etc.) means. The computer-readable storage medium may be any available medium that can be accessed by a computer, or a data storage device such as a server or a data center integrated with one or more available media. The available medium may be a magnetic medium (for example, a floppy disk, a hard disk, a magnetic tape), an optical medium (for example, DVD), or a semiconductor medium (for example, a Solid State Disk).

In the embodiments of the present application, "at least one" means one or more, and "multiple" means two or more. "And/or" describes the association relationship of associated objects, indicating that there may be three kinds of relationships, for example, A and/or B may indicate that A exists alone, A and B exist simultaneously, or B exists alone. Among them, A and B can be singular or plural. The character "/" generally indicates that the contextual objects are an "or" relationship. "At least one of the following" and similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, and c may represent: a, b, c, a-b, a-c, b-c, or a-b-c, wherein a, b, and c may be single or multiple.

The above are only preferred embodiments of the present application, and are not intended to limit the present application. For those skilled in the art, there may be various modifications and changes in the present application. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of this application shall be included within the protection scope of this application.

Claims

A verification method, applied to a consumable chip, the consumable chip is installed on the consumable, and the consumable is detachably installed in an image forming device, characterized in that digital certificate information is stored in the consumable chip; the method include:

The consumables chip sends a first feedback message to the image forming device in response to the first request; wherein, the first feedback message carries the digital certificate information, and the digital certificate information includes at least a first public key; The first public key is generated based on the unique hardware identifier PUF ID of the consumable chip; the first request is a request issued by the image forming device for obtaining a digital certificate;

The consumable chip receives the identity challenge message sent by the image forming device; the identity challenge message includes a first encryption result obtained by encrypting a first random number with the first public key; the a first random number is generated by the image forming device;

The consumable chip uses the first private key to decrypt the first encryption result to obtain a second random number; wherein the first private key is generated based on the PUF ID and forms a key with the first public key Yes; the second random number is used to obtain the verification result of the consumable chip.
The method according to claim 1, characterized in that,

The digital certificate information also includes a signature value; the signature value is generated based on the first public key and attribute information of the digital certificate;

The first random number is generated after the validity of the signature value is verified.
The method according to claim 2, wherein the attribute information of the digital certificate includes at least one of the following information:

Digital certificate ID, digital certificate version, issuer, user, issue date, validity period, and signature algorithm.
The method according to claim 1, wherein after the first encrypted result is decrypted using the first private key to obtain the second random number, the method further comprises:

Using the second random number as a symmetric key to encrypt the response content used to respond to the identity challenge message to obtain a second feedback message and send it to the image forming device; the second feedback message is used to The verification result of the consumable chip is obtained according to whether the response content obtained by decrypting the second feedback message by using the first random number is correct.
The method according to claim 4, characterized in that,

The second feedback message is used to obtain a verification result of the consumable chip as verification passed if the second feedback message can be decrypted by using the first random number and the obtained response content is correct.
A chip for consumables, the chip for consumables is used to be installed on consumables, and the consumables are used to be detachably installed in an image forming device, characterized in that digital certificate information is stored in the chip for consumables; the digital certificate The information includes at least a first public key; the first public key is generated based on the unique hardware identifier PUF ID of the consumable chip, and the consumable chip includes:

A chip control unit, configured to obtain the unique hardware identifier PUF ID of the consumable chip, and generate a first private key based on the PUFID, where the first private key and the first public key belong to the same key pair; and Decrypt the first encryption result based on the first private key to obtain a second random number; wherein the first encryption result is obtained by encrypting the first random number with the first public key; the second random number is obtained by encrypting the first random number with the first public key; Two random numbers, used to obtain the verification result of the consumable chip.
The consumable chip according to claim 6, wherein the digital certificate information further includes a signature value, the signature value is generated based on the first public key and attribute information of the digital certificate, and the signature value It is used to compare with the preset signature value to determine the legitimacy of the signature value.
The consumable chip according to claim 7, wherein the attribute information of the digital certificate includes at least one of the following information:

Digital certificate ID, digital certificate version, issuer, user, issue date, validity period, and signature algorithm.
The consumable chip according to claim 6, wherein the chip control unit is configured to receive an identity challenge message and determine response information corresponding to the identity challenge message, the identity challenge message including the first encryption result , and use the second random number as a symmetric key to encrypt the response content to obtain a second feedback message and send it to the image forming device; the second feedback message is used to obtain a second feedback message based on the first random number Check whether the response content obtained by decrypting the second feedback message is correct to obtain the verification result of the consumable chip.
The consumable chip according to claim 8, wherein the second feedback message is specifically used to, when the first random number is used to decrypt the second feedback message and the obtained response content is correct, The verification result of obtaining the consumable chip is verification passed.
The consumable chip according to claim 8, wherein the chip control unit is configured to use the second random number as a symmetric key when the verification result of the consumable chip is verified as a symmetric key, Various communication messages of the image forming apparatus are encrypted.
A consumable, characterized in that, comprising:

case;

a developer accommodating portion, located in the housing, for accommodating developer; and

The consumable chip according to any one of claims 6-11.
The consumable according to claim 12, wherein the consumable further comprises:

The developer conveying part is used to convey the developer.
The consumable according to claim 12, wherein the consumable further comprises:

Photosensitive drum;

a charging roller for charging the photosensitive drum.
A consumable, characterized in that the consumable comprises:

Photosensitive drum;

a charging roller for charging the photosensitive drum; and

The consumable chip according to any one of claims 6-11.
An image forming device, comprising:

A consumable, on which the consumable chip according to any one of claims 6-11 is installed;

image forming control unit for:

sending a first request for obtaining a digital certificate to the consumable chip;

receiving a first feedback message sent by the consumable chip, and generating a first random number, and encrypting the first random number by using the first public key carried in the first feedback message to obtain a first encryption result;

sending an identity challenge message to the consumable chip, where the identity challenge message includes the first encryption result.