Morpho

Idemia Identity & Security France

Safran Identity & Security

Alain Patey

Julien Bringer

Herve Chabanne

Hervé Chabanne

Roch Lescuyer

Melanie Favre

Mélanie Favre

The invention presents a process for obtaining candidate reference data to compare to a data to be identified, implemented in a system comprising a client unit and a storage server comprising two databases, in which: &#x2014;the first database comprises indexed memory blocks each comprising a corresponding encrypted indexed reference data, and &#x2014;the second database comprises memory blocks indexed by all possible hash values obtained by a plurality of k indexed hash functions, and wherein each block contains a list of the indexes of the reference data which hashing by one of said hash function results in the hash value corresponding to said block, said process comprising the steps during which: &#x2014;the client unit hashes the data to be identified with each of the plurality of hash functions, and reads the k memory blocks of the second database corresponding to the hash values thus obtained, the client unit identifies indexes contained in at least t out of k read memory blocks, and &#x2014;the client unit reads the memory blocks of the first database indexed by the identified indexes in order to obtain the corresponding indexed reference data, said data being candidate data to compare to the data to be identified, the steps of reading memory blocks of the databases being carried out by executing a protocol preventing the storage server from learning which memory blocks of the databases are read. Another object of the invention is a system for the secure comparison of data.

Process for obtaining candidate data from a remote storage server for comparison to a data to be identified

The invention relates to a method for signing a message (m), implemented by processing means of a user device of a member (M) belonging to a group of members (G), said user device having a secret signature key (ski),

Group signature using a pseudonym

The invention relates to a method of signature with pseudonym &#x3c3; of a message m by a user device storing a secret signature key sk dependent at least on a first part of key f, on a second part of key x and on a third part of key A equal to (gh)and comprising the following steps: &#x2014;generation of a pseudonym nym equal to hdpk, with dpk a public domain parameter, &#x2014;determination of random numbers a, r_a, r_f, r_x, r_b, r_d, &#x2014;calculation of signature coefficients Requal to hdpk, Requal to nymhdpk, Requal to ZVW, with Z, V and W respectively equal to e(A, g), e(h, g) and e(h,w), &#x2014;obtaining of a first signature parameter T equal to Ah, &#x2014;calculation of a second signature parameter c by applying a cryptographic hash function H, to the public domain parameter dpk, to the pseudonym nym, to the first signature parameter T, to the signature coefficients R, R, Rand to the message m, &#x2014;calculation of signature parameters s_f, s_x, s_a, s_b, s_d, respectively equal to r_f+c.f, r_x+c.x, r_a+c.a, r_b+c.a.x and r_d+c.a.f, &#x2014;generation of said signature with pseudonym &#x3c3; of said message m on the basis of said signature parameters.

Signature with pseudonym for chip card

The invention relates to a processing method, including the calculation of one function between a datum to be compared and a reference datum. The function can be written in the form of a sum of: a term that depends on the datum to be compared, a term that depends on the reference datum, and a polynomial, such that all the monomials of the polynomial include at least one coordinate of each datum. The method includes an initialization step including: generating masking data; scrambling reference data by means of a server unit on the basis of said masking data; and calculating, by means of a client unit, the term of the function that depends on the datum to be compared. The method also includes steps for executing the calculation of the function between the datum to be compared and the reference datum, indexed by an index c, during which: the client unit sends the coordinates of the datum to be compared to a secure component, which returns said datum, in a masked form, to said component; the client unit retrieves, from the server unit, the reference datum, indexed by the index c and scrambled by the masking data; and on the basis of the data obtained from the secure component and the server unit, the client unit calculates the sum of the term of the function that depends solely on the reference datum and the polynomial term and adds, to said sum, the term that depends on the datum to be compared, such as to obtain the result of the function.

Secure data processing method and use in biometry

The invention is about an identification process of an individual or object, in a system comprising a control server and a management server of a database comprising N indexed data of N stored individuals, in which, to identify the individual or object, its datum is compared to each of the N data of the base. The process comprises steps during which: 

Biometric identification using filters and by secure multipart calculation

A method of secure distributed storage on N servers and a secure access method to confidential data stored in a secure and distributed manner on N servers are provided. Additionally, distributed storage, devices, systems, computer programs and storage medium are provided for the implementation of such methods.

Methods, systems, and devices for securing distributed storage

The invention relates to a method and system for managing and checking different identity data relating to a person. According to the invention, a derived-identity management server generates for the person at least part of the identity data with which said person can be authenticated in relation to a service provider for the derived-identity domain, on the basis of information derived from identity data from parent domains. The identity data generation processing ensures that no link can be established from two authentications in two separate domains in the absence of link information. If necessary, said link information is transmitted by a parent domain to a derived-identity server so that the latter establishes the link between the identity data of the derived-identity domain and the identity data of the parent domain, e.g. for the cascade revocation of a person from various domains.

Method for managing and checking data from different identity domains organized into a structured set

The invention relates to a secure method of processing data in which method is implemented the evaluation of a function that may be written as a linear combination of sub-functions with two binary inputs, in which a client and a server each possess a binary code, comprising n indexed bits, the method comprising the evaluation of the function with the binary codes of the client and of the server as inputs, without one of the client or the server obtaining information about the code of the other, the method being characterized in that it comprises the following steps: &#x2014;the server randomly generates n indexed values and calculates the linear combination of these values with the same linear combination as that applied to the sub-functions to obtain the function, &#x2014;the client implements, for each bit of his binary code, a technique of unconscious transfer to obtain from the server an intermediate data item comprising the randomly generated value of same index as the bit of the code of the client, increased by the value of the corresponding sub-function evaluated at the bit of same index of the code of the server and at said bit of his binary code, and &#x2014;the client performs a linear combination of the intermediate data for all the bits of his binary code, with the same linear combination as that applied to the sub-functions to obtain the function, in such a way as to obtain a final result comprising the linear combination of the randomly generated values, increased by the evaluation of the function at the two binary codes.

Growing community of inventors

Issy les Moulineaux, France

Alain Patey