Alcatel Lucent

Institut National De Recherche En Informatique Et En Automatique

Abdullatif Shikfa

Yacine El Mghazli

Serge Papillon

Vladimir Y Kolesnikov

Antony Martin

Haithem El Abed

Ranjit Kumaresan

Tarik Moataz

Daniel Augot

Françoise Levy-dit-Vehel

A method of storing and retrieving a set of original data (E, . . . , En) in and from a plurality of remote servers (SP, . . . , SPI+1), comprises a coding step which consists in creating a set of coded data (S, . . . , SN) from the set of original data (E, . . . , En), a storing step which consists in storing the set of coded data (S, . . . , SN) into the plurality of remote servers (SP, . . . , SPI+1). Each server (SP, . . . , SPI+1) of the said plurality of servers stores only a respective part of the set of coded data (S, . . . , SN) and the method comprises a step which consists in generating a table (T, T) which indicates which respective part of the set of coded data (S, . . . , SN) is stored in which server of the said plurality of remote servers (SP, . . . , SPI+1).

Storage efficient and unconditionally secure private information retrieval

A method to perform secure boolean search over encrypted documents is disclosed. Each document is characterized by a set of keywords, all the keywords characterizing all the documents forming an index, the index being translated in an orthonormal basis in which each keyword of the index corresponds to one and only one vector of the orthonormal basis, each document being associated with a resultant vector in the span of the orthonormal basis, the resultant vectors corresponding to all the documents being stored in an encrypted search server. The method includes steps of receiving a search query from a querier; transforming the search query in one query matrix; and determining a general result based on the result of the multiplication between the query matrix and the resultant vectors.

Method and system to perform secure Boolean search over encrypted documents

For personalizing a smart card (SC) coupled with a communication device (CD) of a user being a subscriber of a first telecommunication network (TN) and wishing to become a subscriber of a second telecommunication network (TN), a first international identity (IMSI_) and a first authentication key (AK_) being stored in the smart card (SC), the smart card receives a message (MesP) from an application server (AS) connected to the first telecommunication network and the second telecommunication network, the message (MesN) comprising a personalization command (ComP) and an admin code (ACas), after that the application server has received a request (Req) of subscription change comprising an identifier (dMNO) of the second telecommunication network (TN) and has established a secured session with a personalization server (PS) of the second telecommunication network (TN) identified by the identifier (dMNO), and interprets the personalization command (ComP) to establish a secure session with the personalization server (PS) via the application server (AS), if the admin code (ACas) is valid. The smart card negotiates with the personalization server to agree on an second authentication key, by exchanging messages containing values derived from random secrets, receives a message (Mes) containing an second international identity (IMSI_) from the personalization server (PS), and replaces the first international identity (IMSI_) and the first authentication key (AK_) by the second international identity and the second authentication key.

Smart card personnalization with local generation of keys

A method and apparatus for personalizing a smart card (SC) in a communication device of a subscriber of a first telecommunication network (TN), who wishes to become a subscriber of a second TN, is disclosed. A first identity and authentication key (AK) are stored in the SC. A first application server (AS) in the first TN receives a request of subscription change comprising an identifier of the second TN, establishes a secured session with a second AS of the second TN, and sends a message comprising the first identity and AK to the second AS so the SC can access the second TN. The second AS sends a second message including a personalization command, admin code, second identity and second AK to the communication device, which executes the personalization command to replace the first identity and AK with the second identity and the second AK if the admin code is valid.

Remote smart card personalization without third party

This method comprises the steps of: &#x2014;choosing () a security parameter n,&#x2014;segmenting () the file in n chunks S, . . . , Sn, &#x2014;randomly choosing () ncoefficients afor i=1, . . . , n and j=1, . . . , n,&#x2014;verifying () that the vectors a, . . . , a, for i=1, . . . , n, are linearly independent, otherwise generating the coefficients again, &#x2014;computing () n linear combinations Ci=aS+ . . . +aS+ . . . +a&#xb7;S, for i=1, n,&#x2014;choosing () n storage service providers O, . . . , Oamong said plurality of storage service provider, &#x2014;generating () n file identifiers ID', . . . , ID&#x2032;designating said file (F),&#x2014;storing () the combination Ci at the storage service provider Oin association with the file identifier ID&#x2032;, for i=1, . . . , n,&#x2014;storing the file identifier ID&#x2032;and the provider identifier O, for i=1, . . . , n, in a file descriptor corresponding to the file (F), this file descriptor being stored in a local memory (LM),&#x2014;storing the set of coefficients a, . . . , aso that it can be re-associated with the combination C, for i=1, n;&#x2014;randomly choosing n super-coefficients a&#x2032;, . . . , a&#x2032;, . . . , a&#x2032;for j=1, . . . , n,&#x2014;computing a linear over-combination OC&#x2032;=a&#x2032;-C+ . . . +a&#x2032;&#xb7;C+ . . . +a&#x2032;&#xb7;C,&#x2014;and storing the over-combination OC&#x2032; and the coefficients a&#x2032;, . . . , a&#x2032;, . . . , a&#x2032;for j=1, . . . , n.

Method for protecting confidentiality of a file distributed and stored at a plurality of storage service providers

A method and system for initial personalization of a smart card coupled with a communication device of a user who is not yet a subscriber of any telecommunication network are disclosed. A temporary international identity and a temporary authentication key are stored in the smart card and in a home location register connected to a roaming entity of a telecommunication network. A series of signals are exchanged between the smart card, the roaming entity, an application server and a personalization server to establish a secure session between the smart card and the personalization server. During the secure session, the smart card receives a message containing an initial international identity from the personalization server, and replaces the temporary international identity and the temporary authentication key by the initial international identity and the initial authentication key.

Smart card initial personnalization with local generation of keys

A method and apparatus for personalizing a smart card coupled with a communication device of a user who is a subscriber of a first telecommunication network and wishes to become a subscriber of a second telecommunication network is disclosed. A first authentication key is stored in both the smart card and in an first application server included in the first telecommunication network. A secure session is established with a second application server included in the second telecommunication network via the first telecommunication network by negotiating with the first application server and the second application server in order that the smart card and the second application server agree on an second authentication key. Shared values and shared functions according to a secure multiparty computation protocol are used to compute a second authentication key which replaces the first authentication key in the smart card.

Confidential provisioning of secret keys over the air

Server-assisted secure function evaluation (SFE) is performed with input consistency verification for two parties that want to evaluate a function. The server computes a garbled circuit corresponding to the function. A predefined bit of the 0-secret of wire i in the garbled circuit is set to a random bit band a predefined bit of the 1-secret of wire i in the garbled circuit is set tob. The server communicates with each party using an Oblivious Transfer (OT) to provide encrypted versions of the respective inputs of each party. Each party receives the encrypted wire secret of the other party and the garbled circuit for computation of a respective output and stores the predefined bit of a wire of interest of the other party. A given party can verify input consistency by the other party over at least two executions by comparing the values stored by the given party for the at least two executions with corresponding values obtained from the server.

Input consistency verification for server assisted secure function evaluation

A system and method for enabling searchable encryption of encrypted documents stored by a client on one or more storage providers includes a broker server in communication with the client and the one or more storage providers. The broker server is adapted to transfer the encrypted documents between the client and the one or more storage providers and to maintain information indicating where the encrypted documents are transferred. The broker server further stores information for at least one encrypted index for the encrypted documents and a test function for a searchable encryption mechanism used to encrypt the at least one encrypted index.

Growing community of inventors

Nozay, France

Abdullatif Shikfa