Gemalto Sa

Thales Dis France Sa

Schlumberger Industries

Schlumberger Systemes

Thales Dis France Sas

Axalto S.a.

Schlumberger Malco, Inc.

Alain Rhelimi

Marc Lamberton

Robert A Leydier

Xavier Berard

Jean-Yves Fine

Ghazi Ben Amor

Michel Anslot

Rene Rose

Vincent Rigal

Christian Guion

Ilan Mahalal

Serge Barbe

Michel Leger

Omar Habbal

Philippe Guignard

Omar Axalto Sa Intellectual Property Habbal

The invention relates to a secure element device comprising at least one processor, at least one communication interface, at least one memory RAM and NVM and at least one bus access controller, wherein the bus access controller defines at least a first area PBL, a second area SBL and a secure area MZ. The first area comprises a first loader program capable of loading a program package in the second area. The secure area comprises an authentication key capable of authenticating the program package loaded in the second area. After authentication of the program package loaded in the second area, the access right of the first loader program is changed in such a way that a program in the first area can no more access the second area.

Secure element

The invention is a method for communication between a server and a user equipment through a set of command/response pairs. The user equipment uses an IMSI field of an Attach Request frame as defined by ETSI TS 124.008 to convey a command to the server. The server uses an Authentication parameter RAND field or an Authentication parameter AUTN field of an Authentication Request frame as defined by ETSI TS 124.008 to convey a response corresponding to the received command. The server sends the Authentication Request frame in response to the Attach Request frame.

Method for managing communication between a server and a user equipment

A secure element equips a device usable by N image owners, and comprises a first non-volatile memory divided into N parts storing image owner data, a second non-volatile memory storing a primary boot loader, a third non-volatile memory divided into N parts storing image owner session private data, a first random access memory divided into N parts associated to the N first non-volatile memory parts, a second random access memory for temporarily storing image owner data during an access session, and a controller activated by the primary boot loader when the device starts an access session, and then controlling accesses to the non-volatile memories and random access memories according to rules, and erasing the second random access memory each time the device starts an access session.

Secure element with shared memories, for a multi-image owner device

A device for managing multiple accesses to a secure module of a system on chip of an apparatus, and comprises a stream ciphering means arranged for computing on the fly and in a single pass an integrity check for data to be transferred between secure and non secure modules of the system on chip with a seed and an encryption key, and for encrypting/decrypting on the fly and in this single pass these data with the encryption key, and a control means for providing the encryption key and seed to the stream ciphering means and for requesting data transfer and retrieving status to the secure and non secure modules for allowing the transfer of encrypted/decrypted data between the secure and non secure modules.

Device for managing multiple accesses to a secure module of a system on chip of an apparatus

The present invention relates to a method, for a provider entity belonging to a provider group, to authenticate its belonging to an attribute provider group to a verification entity in a non-traceable manner without necessitating to share secret or large constants compromising privacy. Both entities comprise at least one attribute group arborescence, this attribute group arborescence being shared by the provider entity and the verification entity when the provider entity has the attribute. According to the invention, when a verification is triggered, the verification entity calculates a certificate from the attribute group arborescence, said certificate being calculated from the authentication tokens of the groups along the arborescence from the attribute verification group's token to the consumer group's token.

Method for authenticating attributes in a non-traceable manner and without connection to a server

The present invention relates to a method to authenticate two devices to establish a secure channel, one belonging to a first group of devices, the second belonging to a second group of devices, in a non-traceable manner without the need to share a secret, each group being authenticated by an authority that stores a group secret key into the devices under its authority. The method uses a set of authentication tokens, one for each of the other groups with which the device is intended to communicate, said authentication token comprising at least a random number and a cipher of at least this random number by the secret key of each of these other groups, said authentication tokens being further renewed at each communication with a device from another group.

Method to authenticate two devices to establish a secure channel

The invention proposes a method for cloning a first secure element from a backup secure element of a user, said backup secure element comprising at least credentials of said user. The method comprises a preliminary phase of checking the authenticity of the first secure element using a second secure element, said second secure element being able to be paired with a third secure element.

Method for cloning a secure element

The invention relates to a communication system comprising a terminal (), a first device () adapted to exchange data with said terminal (), a second device () adapted to exchange data with said terminal (), characterized in that it comprises means for pairing said first () and second () devices so as said second device () exchanges data with said terminal () through said first device ().

Communications system having a secure credentials storage device

A two-way communication device has a master transmitter connected to at least one slave transmitter by an active connection wire. The master transmitter and the slave transmitter have a common reference. The master transmitter can transmit a master signal to the slave transmitter and the slave transmitter can transmit a slave signal to the master transmitter. The master signal is a digital modulation in voltage. The slave signal is a digital modulation in current.

Bidirectional communication

The invention is aimed at solving the problem of selection of an application and/or configuration in a device of an NFC system having no independent power source or when the power source of the device is temporarily out of operation or does not have an independent power source. To that end, a wireless mobile communication device of an NFC system according to the invention comprises&#x2014;a sensor of the accelerometer (Ace) type to produce a signal detecting the movement of the said device while the sensor is powered by a field emitted by a coupler close to which the said device is brought,&#x2014;a processor (Pro) for comparing the said movement detection signal with a predetermined sequence corresponding with an application and/or configuration, and accordingly selecting the said application and/or configuration if the comparison is positive.

Method for application selection in a wireless mobile communication device in an NFC system and a corresponding wireless mobile communication device

A two-way communication device has a master transmitter (SysM, TRM, SysM, TRM) connected to at least one slave transmitter (SysS, TRS, SysS, TRS) by an active connection wire. The master transmitter and the slave transmitter have a common reference (GND). The master transmitter can transmit a master signal (S) to the slave transmitter and the slave transmitter can transmit a slave signal (S) to the master transmitter.

This invention proposes a method to obtain the cost of transmitting a set of data from a transmitting means () to a receiving means () via a network (), which consists of creating and sending with the set of data itself a data item, called a ticket (), used to determine the volume and/or the value of said set of data transmitted. Using said ticket, the receiving means can take into account the cost of executing said set of data thereby simplifying the billing. This invention also concerns the systems used to implement said method especially in cellular packet radiocommunication networks.

Billing method and device in a cellular packet radiocommunication network

The invention relates to a method for the preselection of at least one application hosted in a secure or non-embedded element in a mobile communication device comprising an NFC system, the said device being capable of accessing and reading data stored in a target NFC system, of the contactless tag or card type, the said NFC system being capable of operating in at least two communication modes including a reader mode, and a card emulation mode, or a Peer-to-Peer mode. When the NFC system is in the reader mode, an application is preselected during a stage wherein data stored in the said target NFC system are read.

Method of preselecting at least one application in a mobile communication device comprising an NFC system

The invention is a method of managing a NFC transaction between two hosts and a reader device. The two hosts are embedded in NFC devices and are intended to be identified by the reader device during an anti-collision phase through a first identifier and a second identifier respectively. The first identifier comprises a variable part. The method includes the steps of generating the first identifier, the variable part of the first identifier and the second identifier comprising a common pattern, looking for a common pattern into the first and second identifiers on the reader device side, and if a common pattern is found and if the variable part of the first identifier comprises said common pattern, concluding that the first and second hosts are embedded in a unique NFC device.

Method of detecting a NFC device emulating several contactless cards which may use a plurality of protocols

This invention relates to a method for the transmission using the half-duplex mode of a data signal from a first transmission/reception device to a second transmission/reception device, called the remote device, comprising a logical coding step in which at least two distinct transmission times are associated with two respective statuses of the data signal to transmit. The method is characterized in that it comprises the generation by the first device of a signal () comprising, for the transmission of a status of the signal, more or less exclusively a plateau at a first voltage level for the time defined as the transmission time associated with the status to transmit and a falling edge, to the exclusion of any rising edge, the transmission of a data signal status from the second device to the first device comprising the generation of a signal () by the second device comprising more or less exclusively a plateau at a second voltage level and a rising edge, to the exclusion of any falling edge.

Growing community of inventors

Meudon, France

Alain Rhelimi