Mechanism for verifying the authenticity of a product

Patent metadata

Field	Value
Publication number	US-9934508-B2
Application number	US-201414305070-A
Country	US
Kind code	B2
Filing date	Jun 16, 2014
Priority date	Jun 18, 2013
Publication date	Apr 3, 2018
Grant date	Apr 3, 2018

Abstract

The authenticity of a product associated with a host device is verified through a process. The product contains, in segments of a non-volatile memory, several different functions stored in ciphered fashion. The process involves, in a first phase, the sending by the host device of a control signal for executing a function, with the product functioning to decipher the function and store the unciphered function in the non-volatile memory. The process further involves, in a second phase, the sending by the host device of a control signal for causing execution of the deciphered function, with the product functioning to execute the function and send a result of this execution back to the host device. The host device evaluates the received result to verify product authenticity.

First claim

What is claimed is:

1. A method for verifying the authenticity of a product associated with a host device, wherein the product contains, in segments of a non-volatile memory, a plurality of different functions, wherein each function is stored in ciphered fashion, wherein the method comprises:
in a first phase:
the host device sends a first control signal for requesting activation of a selected function of said plurality of different functions;
the product, in response to the first control signal, cryptographically deciphers the selected function and stores an unciphered version of the selected function in the non-volatile memory of the product; and

in a second phase:
the host device sends a second control signal to the product, the second control signal distinct from the first control signal, for executing the unciphered version of the selected function;
the product, in response to the second control signal, executes the unciphered version of the selected function and sends a result of this execution to the host device.

2. The method of claim 1 , wherein a key for cryptographically deciphering the selected function is contained in the first control signal sent by the host device.

3. The method of claim 1 , wherein the host device verifies the result to authenticate the product.

4. The method of claim 1 , wherein the first phase is only implemented once per product.

5. The method of claim 1 , wherein the second phase is implemented on each use of the product by the device.

6. The method of claim 1 , wherein the host device contains one identifier only which identifies the selected function of said plurality of different functions.

7. The method of claim 1 , wherein the plurality of different functions are stored in the segments on manufacturing of the product.

8. The method of claim 1 , wherein different versions of host devices request activation of different functions of a same type of products.

9. The method of claim 1 , wherein each function stored in ciphered fashion includes at least one ciphered opcode, and wherein the unciphered version of the selected function includes at least one unciphered opcode, and wherein execution of the unciphered version of the selected function comprises executing the at least one unciphered opcode.

10. A system, comprising:
a host device; and
a product associated with this host device that stores a plurality of different functions, each function stored in a ciphered fashion;
wherein the host device operates to send to the product a first control signal in a first phase for actuating a selected function of the plurality of functions and send to the product a second control signal in a second phase for executing the selected function, the second control signal being distinct from the first control signal;
wherein the product operates:
in the first phase, in response to the first control signal sent from the host device, to cryptographically decipher the selected function and store an unciphered version of the selected function in a non-volatile memory; and
in the second phase, in response to the second control signal sent from the host device, to execute the unciphered version of the selected function and send a result of this execution to the host device.

11. The system of claim 10 , wherein the host device is a printer and the product is an ink cartridge.

12. The system of claim 10 , wherein each function stored in ciphered fashion includes at least one ciphered opcode, and wherein the unciphered version of the selected function includes at least one unciphered opcode, and wherein execution of the unciphered version of the selected function comprises executing the at least one unciphered opcode.

13. A method, comprising:
storing in segments of a non-volatile memory of a product a plurality of ciphered functions;
receiving by said product of a first message originated from a device which uses said product, said first message including a cipher key and a segment identifier;
extracting by the product of a selected ciphered function of the plurality of ciphered functions from the segment identified by the segment identifier;
crytographically deciphering by the product of the selected ciphered function using the cipher key to produce an unciphered version of the selected ciphered function;
receiving by said product of a second message originated from the device, the second message having instructions for execution of the unciphered version of the selected ciphered function;
executing, in response to the second message, the unciphered version of the selected ciphered function; and
sending a result of the execution in a message back to said device.

14. The method of claim 13 , further comprising verifying by said device of the result and permitting the device to use said product.

15. The method of claim 13 , further comprising storing by said product of the deciphered function.

16. The method of claim 15 , wherein storing is executed only one time by said product.

17. The method of claim 16 , wherein executing and sending are executed by said product each time the product is provided for use by said device.

18. The method of claim 13 , wherein each ciphered function includes at least one ciphered opcode, and wherein the unciphered version of the selected ciphered function includes at least one unciphered opcode, and wherein executing comprises executing the at least one unciphered opcode.

19. A method for verifying the authenticity of a product connected to and to be used with a host device, wherein the product contains, stored in a non-volatile memory, a plurality of different cryptographically ciphered instruction segments, each cryptographically ciphered instruction segment including at least one ciphered opcode, the method comprising:
receiving by the product of a first control signal sent by the host device, said first control signal requesting activation of a selected cryptographically ciphered instruction segment of said plurality of different cryptographically ciphered instruction segments;
cryptographically deciphering by the product of the selected cryptographically ciphered instruction segment to obtain at least one unciphered opcode;
receiving by the product of a second control signal sent by the host device, said second control signal requesting execution of the cryptographically deciphered selected cryptographically ciphered instruction segment;
executing by a processor of the product the at least one unciphered opcode of the selected cryptographically ciphered instruction segment that was cryptographically deciphered, said executing generating a result; and
sending by the product of said result to the host device.

20. A system, comprising:
a host device; and
a product associated with this host device that stores a plurality of different cryptographically ciphered instruction segments, each cryptographically ciphered instruction segment including at least one ciphered opcode;
wherein the host device operates to send to the product a first control signal in a first phase for actuating a selected ciphered instruction segment and send to the product a second control signal in a second phase for executing the selected ciphered instruction segment, the second control signal being distinct from the first control signal;
wherein the product operates:
in the first phase, in response to the first control signal sent from the host device, to cryptographically decipher the selected ciphered instruction segment and store at least one unciphered opcode in

Assignees

• St Microelectronics Rousset

Inventors

• Farison Denis
• Romain Fabrice
• Laurencin Christophe

Classifications

• G06F3/1238

  Secure printing, e.g. user identification, user rights for device usage, unallowed content, blanking portions or fields of a page, releasing held jobs · CPC title

• G06F3/1203

  Improving or facilitating administration, e.g. print management · CPC title

• G06F3/1285

  Remote printer device, e.g. being remote from client or server · CPC title

• G06Q30/018 Primary

  Certifying business or products · CPC title

• G06F21/44

  Program or device authentication · CPC title