Bull Sas

Thomson Licensing S.a.

Viaccess

Nagra Thomson Licensing

Trusted Logic Mobility (sas)

Thomson Licensing

Trustonic Sas

David Leporini

Charles Piron

Guillaume Hébert

Michel Maillard

Jean-Luc Dauvois

Quentin Chieze

Daniel Le Metayer

Eric Delaunay

Andre Surcouf

Nicolas Gaude

Michel Angel

Vincent Prunet

Haythem Gadacha

Frédéric Dublanchet

Jean-Bernard Beuque

Frederic Dublanchet

Guillaume HÉBERT

André Surcouf

A communication method for the secure management of keys and identities of an Object manufactured by a Manufacturer having a Manufacturer key pair (Ks, Kp) and a client having a Client key pair (Ks, Kp), that is carried out at least partially on a decentralized blockchain database by generating by the Manufacturer two diversified symmetric keys from its key pair and from diversifiers, sharing keys with the object, publishing and recording the decentralized identifier (DID) in the database, wherein when a Client purchases the object from the Manufacturer, providing the identifier of the object DID by the Manufacturer, updating the blockchain, when the object is initially switched on, auto-enrolling by generating new symmetric keys, sending two new encrypted diversifiers to the client with the public client key, publishing and recording new encrypted diversifiers with the public client key in the blockchain.

Secure, decentralized, automated platform and multi-actors for object identity management through the use of a block chain technology

Secure management of keys and identities of an object manufactured by a manufacturer having a manufacturer key pair, and a client having a client key pair, the management being carried out using a decentralized blockchain database. The method includes generation of a manufacturing key pair; and publication and recording, in the blockchain, of the decentralized object identifier used to obtain the public key of the object. When a client purchases the object from the manufacturer, the method includes providing, by the object manufacturer, the object identifier, and the public manufacturing key to the client; and updating the blockchain. When the object is switched on for the first time, the object enrolls itself by generation of a utilization key pair; auto-enrollment using the manufacturing key pair; and replacement, in the blockchain, of the public manufacturing key associated with the object identifier with the public utilization key associated with the object identifier.

Computing systems and methods for the creation and management of authorizations of blockchain objects. Systems and methods managed by a controlled number of governing entities allow the management of access authorizations for an object connected to a varying group of services. Systems and methods therefore have numerous advantages including strong inter-operability, strong resilience, confidentiality, autonomy, ensured data integrity and traceability.

System and method for the creation and management of decentralized authorizations for connected objects

The invention pertains to a method for transmitting a piece of additional data from a security processor to an external apparatus, in which the transmission of the piece of additional data is done by delaying () the start of a transmission of an information frame from the security processor to the external apparatus by a time lag that is a function of the value of this piece of additional data.

Transmission, reception and identification methods, security processor and information recording medium for said methods

A method for loading, installing and running software, called loading units, having different levels of confidence by a data processing unit (). The method includes at least associating at least one structure of information data concerning security requirements and characteristics of this loading unit with each loading unit (); associating a dynamic data structure () representative of the state of security in the data processing unit () to the data processing unit (); validating the security requirements and characteristics of each loading unit () with regard to the state in the data processing unit () contained in the dynamic data structure (via an autonomous security module (), and; if the validation is positive, authorizing, via the security module (), the loading, installation or running of the loading unit ().

Secure dynamic loading

A method for transmission and storing of scrambled content in which the scrambled content is transmitted together with encrypted control words, the control words being used for descrambling the scrambled content, transmitting to a receiver/decoder the scrambled content and encrypted control words, said control words being encrypted by an exploitation key (K), decrypting said encrypted control words in a removable security module with an exploitation key (K), said removable security module being received by the receiver/decoder, characterised in that it further includes transmitting usage rules message (URM) to the receiver/decoder (), which usage rules (URM) impose usage constraints on the playback of the content stored on a mass storage device encrypting the decrypted encrypted control words and usage rules messages by a local key (K) to produce encrypted control management messages (CMM) storing said scrambled content and encrypted control management message on the mass storage device of the receiver/decoder.

Transmitting and processing protected content

A method of secure communication of digital data between devices, including validating, by a security module, the devices using device identifiers, generating a random key in the security module, and transmitting the random key to the devices.

Method of and apparatus for providing secure communication of digital data between devices

A method for processing data involving receiving a scrambled program and encrypted data including at least one control word used to descramble the scrambled program at a receiver/decoder operatively connected to a mass storage device. If a user does not initially have the necessary access rights, the scrambled program and the encrypted data are stored by the receiver/decoder. When the user obtains the access rights, the encrypted data is read and the at least one control word is extracted. The encrypted data is then replaced by the control word.

Secure data processing apparatus

Growing community of inventors

Rungis, France

David Leporini