Patent Grant
8281983
Disclosed herein is a method for storing and verifying serial numbers using a smart label in an image production device, as well as corresponding apparatus and computer-readable medium.
It has become increasingly important to safeguard the system serial number placed within electronic devices at time of manufacture. In particular, there are some requirements somewhat unique to multi-function image production devices. The serial number is transmitted through a communications network to assist in device recognition, supplies replenishment, warranty claims, machine unique passcodes, etc., for example. Furthermore, color laser devices are required to provide tracking information on all printed output that indicates the serial number of the image production device.
Generally, the serial number is input at time of manufacture to some non-volatile memory location. However, a problem occurs whenever the electronics that store this number fail or are replaced. Currently, many image production devices employ a system of multiple data points (usually 3), so that if one component is replaced, it will be automatically updated to match the two other points (assuming they match). In cases where there is a three way mismatch, or in manufacturing, a secure tool is provided to recover the data points. In more extreme cases, field engineering must produce a set of electronics which are already serialized, to be placed into the image production device. Both of these solutions are expensive and generally result in machine down time. Also, with increasing emphasis on circuit board consolidation, it will become more difficult to maintain multiple reference points.
A method and apparatus for storing and verifying serial numbers using a smart label in an image production device is disclosed. The method for storing may include receiving a signal to query a smart label for serial number information, querying the smart label for serial number information, receiving the serial number information from the smart label, and storing the serial number information in a memory. The method for verifying may include receiving a signal to query a smart label for serial number information, querying the smart label for serial number information, receiving the serial number information from the smart label, determining if the serial number matches a serial number stored in the image production device, wherein if it is determined that the serial number matches the stored serial number performing requested image production device operations, otherwise sending an error signal.
Aspects of the embodiments disclosed herein relate to a method for storing and verifying serial numbers using a smart label in an image production device, as well as corresponding apparatus and computer-readable medium.
The disclosed embodiments may include a method for storing serial numbers using a smart label in an image production device. The method may include receiving a signal to query a smart label for serial number information, the serial number information identifying at least one of the image production device and any components of the image production device, and the smart label being a label located at one of on the image production device and inside of the image production device that communicates with the image production device, querying the smart label for serial number information, receiving the serial number information from the smart label, and storing the serial number information in a memory.
The disclosed embodiments may further include an image production device that may include a memory that stores serial number information, the serial number information identifying at least one of the image production device and any components of the image production device, and the smart label being a label located at one of on the image production device and inside of the image production device that communicates with the image production device, a smart label detection device that receives a signal to query a smart label for serial number information, queries the smart label for serial number information, and receives the serial number information from the smart label, and a smart label management unit that stores the serial number information in a memory.
The disclosed embodiments may include a method for verifying serial numbers using a smart label in an image production device. The method may include receiving a signal to query a smart label for serial number information, the serial number information identifying at least one of the image production device and any components of the image production device, and the smart label being a label located at one of on the image production device and inside of the image production device that communicates with the image production device, querying the smart label for serial number information, receiving the serial number information from the smart label, determining if the serial number matches a serial number stored in the image production device, wherein if it is determined that the serial number matches the stored serial number performing requested image production device operations, otherwise sending an error signal.
The disclosed embodiments may further include an image production device that may include a memory that stores serial number information, the serial number information identifying at least one of the image production device and any components of the image production device, and the smart label being a label located at one of on the image production device and inside of the image production device that communicates with the image production device, a smart label detection device that receives a signal to query a smart label for serial number information, queries the smart label for serial number information, and receives the serial number information from the smart label, and a smart label management unit that determines if the serial number matches a serial number stored in the memory, wherein if the smart label management unit determines that the serial number matches the stored serial number, the smart label management unit performs requested image production device operations, otherwise the smart label management unit sends an error signal.
The disclosed embodiments propose to use smart labels for assuring the integrity of electronic serial numbers. In conventional serial number protection techniques used on conventional image production devices, the serial number is stored in three discrete locations of non-volatile memory. If any particular component which stores one of these data points is replaced, then at power-up the device will see a two-of-three match and will write that number to the new component. For that reason, service techs are instructed to only replace one at a time. However, on occasion, unexpected failures occur and none of the three reference points correspond. On some devices, the strategy is to have engineering create a set of three boards with the appropriate serial number in a lab, and ship the set to the field for a service tech to install. This solution is extremely expensive to the OEM, generally costing them at least $1500 per occurrence. On other products, a password routine is provided where field engineering uses a tool to generate a device-unique passcode (16 characters), which is provided to a service tech who inputs it to the device. While this routine is generally suitable, there are logistics challenges associated with performing this in real time, due to time zone differences, tech and engineering personnel availability, tool security, etc.
More critically, in interest of cutting costs, there is an increased emphasis on circuit board consolidation, so with this there are fewer ways of isolating the three discrete memory locations. This consolidation requires a greater degree of non-volatility that is most firmly connected with the device itself rather than any of the replaceable components.
However, the smart labels of the disclosed embodiments may serve as serial number plates with the additional feature that the image production device can read the label and capture the serial number into the system. The labels may not be removed from the frame without tearing and being rendered useless. Further, the system may have a lock in encryption to ensure they are not being replaced by unauthorized personnel, or that another label is not being read in the general proximity. Only authorized manufacturing or remanufacturing sites may have the tools to generate or regenerate these labels. If the label mismatches or cannot be read, the image production device may not function. In this manner, preventative measures for fraud and illegal printing activities cannot be circumvented.
The smart labels may also allow for secure serialization of electronic equipment in which it is possible that components storing the serial number may fail or need to be replaced. The smart label may be of radio frequency (RF) or another variety of communication between smart label and the image production device.
As such, electronic devices, such as multifunction image production devices, may have an RF antenna (or ribbon port) attached to the controller circuitry. At every power-on, and/or at some interval, the image production device may query the label for the serial number and may set the device's internally stored serial number accordingly. Security may be built into the handshake routine to ensure the device is not reading some other label that has been plugged in or placed in proximity of the antenna, for example. Any failure to read the label and validate its authenticity may result in the image production device raising a fault and being rendered inoperative until an authorized service action is performed. For that reason, there may be emphasis on the label having a high degree of reliability.
At the time of manufacture, the label may be created by commonly available devices that both print the label in ink and embed the same number electronically. This number may remain assigned to this label for the life of the image production device. If the label is physically removed from the frame, it may become inoperative and the image production device may be disabled.
It may become necessary to change the serial number at some point in the life of an image production device, particularly in a remanufacturing environment. In that case, the image production device may be assigned new labels. Obviously, the label-making equipment may have adequate authorization protection assigned by original equipment manufacturer (OEM).
Such protection may, for example, be achieved through use of an authentication functionality built into the smart label, the label-making equipment and the image production device itself, if deemed necessary. An example of such an authentication function may be an encryption algorithm based on random number generator, variable data and fixed data inputs, as are commonly used for bank cards.
One aspect of the disclosed embodiments is that the smart label and the image production device may have some a “mating” that occurs. In particular, the state of the image production device and its smart label may fall into one of 5 basic categories:
1) Image production device unserialized, smart label virgin—manufacturing/remanufacture. Image production device serializes itself to the smart label. Smart label may set a flag or other indicator, for example, that it has been mated with the image production device.
2) Image production device serialized, smart label virgin—overwrite the image production device serial number with that from the label.
3) Image production device serialized, smart label mated and they match—OK.
4) Image production device serialized, smart label mated but they don't match. Throw error, image production device inoperable. Call Xerox.
5) Image production device unserialized, smart label mated but they (obviously) don't match. This is where the system NVM module has failed and/or been changed out and is the biggest challenge.
States 4 or 5 could happen in the field through legitimate service action. Potential solutions may include the following:
During state 4, when image production device first mates to the smart label, the image production device's Media Access Control (MAC) address may also be written to the smart label. The MAC addresses may always be compared to validate the match. However, in some cases service must replace the board itself (which contains the MAC). In that instance, service may be instructed to never replace the non-volatile memory (NVM) module at the same time. (The technicians in the field may already know they should never replace two boards at a time, else a serial mismatch will result). The image production device may allow a MAC mismatch if there is no smart mismatch (and write the new MAC to the serial label). In the rare occurrences in which both the NVM module and the image production device board have failed, the image production device may require another form of backup recovery or the board and NVM may be traded out.
The use of MAC addresses may be preferred because MAC addresses cannot be easily altered on an image production device short of replacing the board. Therefore with respect to using MAC addresses and states 4 and 5, the following may apply:
4a. Image production device serialized, serial mismatch, MACs match—write the serial from the smart label to the image production device.
4b. Image production device serialized, serial mismatch, MACs don't match—image production device inoperable
5a. Image production device unserialized, serial mismatch, MACs match—write the serial from the smart label to the image production device.
5b. Image production device unserialized, serial mismatch, MACs don't match—image production device inoperable.
It would take a great deal of effort to cheat this system. In conventional image production devices, it is easier to cheat a system by replacing two of the three boards from one image production device to another.
While the primary purpose of the disclosed embodiments may be for the internal consumption of the serial number, the process also may offer additional benefits to the supply and warehousing chain—for which the advantages to RF identification (RFID) are well documented. However, while smart labels are typically used to identify information externally to the product (read via scanners), in the disclosed embodiments the data may be consumed by the image production device itself. Any broadcasts of this data to the outside world may be processed and controlled by the image production device before reaching the communications network.
Some of the primary reasons why multi-function image production devices need to guarantee serial number integrity include that the device serial number may be stored internally in non-volatile memory. Unlike some smaller electronics devices (such as cell phones which are simply scrapped out), the more expensive devices occasionally need to have hardware replaced, including that which contains the stored serial number, for example. Having this serial number be alterable through such procedures may open up opportunities for intentional fraudulent misuse. However, even in the benign case of unintentional alteration, there may be numerous fallouts. The following is a partial list of possible functions reliant upon the system serial number:
The image production device 100 may include one or more media tray doors 110 and a local user interface 120. The one or more media tray doors 110 may provide access to one or more media trays that contain media. The one or more media tray doors 110 may be opened by a user so that media may be checked, replaced, or to investigate a media misfeed or jam, for example.
The user interface 120 may contain one or more display screen (which may be a touchscreen or simply a display), and a number of buttons, knobs, switches, etc. to be used by a user to control image production device 100 operations. The one or more display screen may also display warnings, alerts, instructions, and information to a user. While the user interface 120 may accept user inputs, another source of image data and instructions may include inputs from any number of computers to which the printer is connected via a network. The image production device 100 may also include a smart label 130 that may be attached anywhere on the image production device 100. The smart label will be described in detail below in relation to
Processor 220 may include at least one conventional processor or microprocessor that interprets and executes instructions. Memory 230 may be a random access memory (RAM) or another type of dynamic storage device that stores information and instructions for execution by processor 220. Memory 230 may also include a read-only memory (ROM) which may include a conventional ROM device or another type of static storage device that stores static information and instructions for processor 220.
Communication interface 280 may include any mechanism that facilitates communication via a network. For example, communication interface 280 may include a modem. Alternatively, communication interface 280 may include other mechanisms for assisting in communications with other devices and/or systems.
ROM 240 may include a conventional ROM device or another type of static storage device that stores static information and instructions for processor 220. A storage device may augment the ROM and may include any type of storage media, such as, for example, magnetic or optical recording media and its corresponding drive.
The image production section 265 may include hardware to produce image on media and may include an image printing and/or copying section, a scanner, a fuser, etc., for example. The stand-alone feeder section 260 may store and dispense media sheets on which images are to be printed. The output section 270 may include hardware for stacking, folding, stapling, binding, etc., prints which are output from the image production section. If the image production device 100 is also operable as a copier, the image production device 100 may further includes a document feeder and scanner which may operate to convert signals from light reflected from original hard-copy image into digital signals, which are in turn processed to create copies with the image production section 265.
With reference to feeder section 260, the section may include one or more media trays, each of which stores a media stack or print sheets (“media”) of a predetermined type (size, weight, color, coating, transparency, etc.) and may include a feeder to dispense one of the media sheets therein as instructed. The media trays may be accessed by a user by opening the one or more media tray doors 110. The one or more media tray door sensors may sense if one or more media tray door 110 is either open or closed. The one or more media tray door sensors may be any sensors known to one of skill in the art, such as contact, infra-red, magnetic, or light-emitting diode (LED) sensors, for example. The one or more media tray size sensors may be any sensors that may detect media size in a media known to one of skill in the art, including switches, etc.
User interface 120 may include one or more conventional mechanisms that permit a user to input information to and interact with the image production unit 100, such as a keyboard, a display, a mouse, a pen, a voice recognition device, touchpad, buttons, etc., for example. Output section 270 may include one or more conventional mechanisms that output image production documents to the user, including output trays, output paths, finishing section, etc., for example.
The image production device 100 may perform such functions in response to processor 220 by executing sequences of instructions contained in a computer-readable medium, such as, for example, memory 230. Such instructions may be read into memory 230 from another computer-readable medium, such as a storage device or from a separate device via communication interface 280.
The image production device 100 illustrated in
Generally, program modules include routine programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types. Moreover, those skilled in the art will appreciate that other embodiments of the disclosure may be practiced in communication network environments with many types of communication equipment and computer system configurations, including personal computers, hand-held devices, multi-processor systems, microprocessor-based or programmable consumer electronics, and the like.
The operation of the smart label management unit 250 and the smart label detection device 290 will be discussed below in relation to the flowcharts in
While the antenna windings 320 may be shown, any antenna system known to one of skill in the art may be used in the smart label 130. The identification text 330 may be text that lists the serial number and other relevant information so it may be read by the user or technician, for example. The controller/memory unit 340 may include any processing device that will receive a query from the image production device 100 and/or be programmed to transmit (on demand or periodically) the serial number information to the image production device 100. The controller/memory unit 340 may also include a memory device capable of storing the serial number information (or the image production device's 100 MAC address information). Note that within the scope of the disclosed embodiments, that the image production device 100 may store a serial number that is written to the smart label's 130 memory or the serial number from the smart label 130 is written to the image production device 100.
At step 4500, a smart label management unit 250 may store the serial number information in a memory 230. The process may then go to step 5800 and end.
Note that the steps of receiving a signal querying the smart label, querying the smart label for serial number information, receiving the serial number, and storing the serial number information, may be preformed at the original equipment manufacturer's facility, at an intermediate site between the original equipment manufacturer, or at a user's location, for example. In addition, the image production device's Media Access Control (MAC) address may be stored in the smart label's memory so it may also be verified.
At step 5300, the smart label detection device 290 may query the smart label 130 for serial number information. At step 5400, the smart label detection device 290 may receive the serial number information from the smart label 130.
At step 5500, the smart label management unit 250 may determine if the serial number matches a serial number stored in the memory 230. If the smart label management unit 250 determines that the serial number matches the stored serial number, at step 5700, the smart label management unit 250 may perform image production device 100 operations. The process may then go to step 5800 and end.
Otherwise, if at step 5500 the smart label management unit 250 determines that the serial number matches the stored serial number, the process goes to step 5600 where the smart label management unit 250 may send an error signal. In this manner, the smart label management unit 250 may send the error signal to the user at the image production device 100, to a remote facility, such as the OEM, a repair facility, administrator, or other location known to those of skill in the art, for example. The image production device 100 may be inoperable until the serial number conflict is resolved. The process may then go to step 5800 and end.
Note that the image production device's MAC address may be stored in the smart label 130 and may also be verified along with (or instead of) the serial number. For example, the image production device's 100 Media Access Control (MAC) address may be stored in the smart label's memory. The smart label detection device 290 may receive a signal to query a smart label 130 for the image production device's 100 MAC address, may query the smart label 130 for the image production device's 100 MAC address, and may receive the image production device's 100 MAC address from the smart label 130. The smart label management unit 250 may determine if the image production device's 100 MAC address matches the image production device's 100 MAC address stored in the image production device. If the smart label management unit 250 determines that the image production device's MAC address matches the stored the image production device's 100 MAC address, the image production device 100 may perform requested operations. Otherwise the smart label management unit 250 may send an error signal to the OEM, remote repair facility, image production device administrator, or other responsible party.
Embodiments as disclosed herein may also include computer-readable media for carrying or having computer-executable instructions or data structures stored thereon. Such computer-readable media can be any available media that can be accessed by a general purpose or special purpose computer. By way of example, and not limitation, such computer-readable media can comprise RAM, ROM, EEPROM, CD-ROM or other optical disk storage, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to carry or store desired program code means in the form of computer-executable instructions or data structures. When information is transferred or provided over a network or another communications connection (either hardwired, wireless, or combination thereof) to a computer, the computer properly views the connection as a computer-readable medium. Thus, any such connection is properly termed a computer-readable medium. Combinations of the above should also be included within the scope of the computer-readable media.
Computer-executable instructions include, for example, instructions and data which cause a general purpose computer, special purpose computer, or special purpose processing device to perform a certain function or group of functions. Computer-executable instructions also include program modules that are executed by computers in stand-alone or network environments. Generally, program modules include routines, programs, objects, components, and data structures, and the like that perform particular tasks or implement particular abstract data types. Computer-executable instructions, associated data structures, and program modules represent examples of the program code means for executing steps of the methods disclosed herein. The particular sequence of such executable instructions or associated data structures represents examples of corresponding acts for implementing the functions described therein.
It will be appreciated that various of the above-disclosed and other features and functions, or alternatives thereof, may be desirably combined into many other different systems or applications. Also that various presently unforeseen or unanticipated alternatives, modifications, variations or improvements therein may be subsequently made by those skilled in the art which are also intended to be encompassed by the following claims.
| Number | Name | Date | Kind |
|---|---|---|---|
| 6177860 | Cromer et al. | Jan 2001 | B1 |
| 6362893 | Francis et al. | Mar 2002 | B1 |
| 6406120 | Pauschinger | Jun 2002 | B2 |
| 6593952 | Funayama et al. | Jul 2003 | B1 |
| 6597465 | Jarchow et al. | Jul 2003 | B1 |
| 6650430 | Francis et al. | Nov 2003 | B2 |
| 6738903 | Haines | May 2004 | B1 |
| 6778096 | Ward et al. | Aug 2004 | B1 |
| 6940613 | Beard et al. | Sep 2005 | B1 |
| 7137000 | Hohberger et al. | Nov 2006 | B2 |
| 7194438 | Sovio et al. | Mar 2007 | B2 |
| 7212637 | Salisbury | May 2007 | B2 |
| 7356279 | Miller | Apr 2008 | B2 |
| 7664257 | Hohberger et al. | Feb 2010 | B2 |
| 7782477 | Kimura et al. | Aug 2010 | B2 |
| 7941061 | Kadowaki | May 2011 | B2 |
| 8174719 | Gurr et al. | May 2012 | B2 |
| 20010020961 | Pauschinger | Sep 2001 | A1 |
| 20010052993 | Lumley | Dec 2001 | A1 |
| 20010053301 | Nishii | Dec 2001 | A1 |
| 20020046312 | Nakamura | Apr 2002 | A1 |
| 20020051167 | Francis et al. | May 2002 | A1 |
| 20020135630 | Kosugi | Sep 2002 | A1 |
| 20030059050 | Hohberger et al. | Mar 2003 | A1 |
| 20040136768 | Klinefelter et al. | Jul 2004 | A1 |
| 20040160322 | Stilp | Aug 2004 | A1 |
| 20040181681 | Salisbury | Sep 2004 | A1 |
| 20040212651 | Johnson et al. | Oct 2004 | A1 |
| 20050021310 | Zeng et al. | Jan 2005 | A1 |
| 20050116034 | Satake et al. | Jun 2005 | A1 |
| 20050125093 | Kikuchi et al. | Jun 2005 | A1 |
| 20050206672 | Adkins et al. | Sep 2005 | A1 |
| 20050247775 | Gloekler et al. | Nov 2005 | A1 |
| 20060191022 | Hohberger et al. | Aug 2006 | A1 |
| 20060203839 | Yoshida | Sep 2006 | A1 |
| 20070097161 | Ejiri et al. | May 2007 | A1 |
| 20070150543 | Fong et al. | Jun 2007 | A1 |
| 20070198649 | Kamata et al. | Aug 2007 | A1 |
| 20070216941 | Jingu | Sep 2007 | A1 |
| 20080055640 | Takahashi et al. | Mar 2008 | A1 |
| 20080158319 | Silverbrook | Jul 2008 | A1 |
| 20080291250 | Silverbrook | Nov 2008 | A1 |
| 20080317479 | Kadowaki | Dec 2008 | A1 |
| 20090006747 | Otsuka | Jan 2009 | A1 |
| 20090025072 | Kondo | Jan 2009 | A1 |
| 20090039147 | Yamamoto et al. | Feb 2009 | A1 |
| 20090174893 | Fujii et al. | Jul 2009 | A1 |
| 20090262382 | Nobutani | Oct 2009 | A1 |
| 20100001838 | Miodownik et al. | Jan 2010 | A1 |
| 20100007496 | Orlassino | Jan 2010 | A1 |
| 20100052863 | Renfro et al. | Mar 2010 | A1 |
| 20100284531 | Hohberger et al. | Nov 2010 | A1 |
| 20110075189 | Refstrup | Mar 2011 | A1 |
| 20110109938 | Refstrup | May 2011 | A1 |
| 20110140896 | Menzel | Jun 2011 | A1 |
| 20110191454 | Joukov | Aug 2011 | A1 |
| 20110231526 | Hsieh | Sep 2011 | A1 |
| Number | Date | Country |
|---|---|---|
| 2008059137 | Mar 2008 | JP |
| Number | Date | Country | |
|---|---|---|---|
| 20110315758 A1 | Dec 2011 | US |
