Remotely authenticating a device
AssigneeHewlett-Packard Development Company, L.P.
InventorsJohn Cunningham, Jefferson P Ward, Stephen D. Panshin, Laurent Pizot
Life of this patent
Estimating the term…
Abstract
Remotely authenticating a device includes generating authentication data and secret key data in a controlled environment, sending the authentication data to a remote authentication engine, and sending the secret key data to a personalization engine to apply the secret key data to a device after sending the authentication data to the remote authentication engine such that the remote authentication engine has an ability to authenticate the device.
Claims21
A method for remotely authenticating a device, comprising:
- generating, by a security module, authentication data and secret key data in a controlled environment;
- sending the authentication data to a remote authentication engine;
- and
- after sending the authentication data to the remote authentication engine, sending the secret key data to a personalization engine, separate from the remote authentication engine, to apply the secret key data to a device by the personalization engine, the secret key data used by the device to generate a response to an authentication challenge from the remote authentication engine, the response to authenticate the device by the remote authentication engine.
An authentication system for remotely authenticating a device, comprising:
- a processor;
- and
- a non-transitory storage medium storing instructions executable on the processor to:
- receive authentication data generated by a security module that is remote from the authentication system, the security module to further generate secret key data that is sent to a personalization engine, separate from the authentication system, after the authentication data is sent to the authentication system such that the authentication system has the authentication data before the device has the secret key data, the personalization engine to apply the secret key data to the device;
- send, to the device, an authentication challenge based on the authentication data;
- and
- receive, from the device, a response to the authentication challenge, the response generated by the device based on the secret key data applied by the personalization engine to the device.
A non-transitory computer readable storage medium, comprising computer readable instructions that, when executed, cause a system to:
- generate a symmetric key;
- send the symmetric key to a personalization engine to be incorporated into a printer;
- and
- send challenge data and an expected response to a remote authentication engine to authenticate the printer remotely in response to a service request, wherein the sending of the symmetric key to the personalization engine occurs after the sending of the challenge data to the remote authentication engine, and wherein the personalization engine is separate from the remote authentication engine, and the symmetric key is for use by the printer to generate a response to an authentication challenge from the remote authentication engine.
Dependencies are inferred from the claim text.