France Telecom

La Poste

Gula Consulting Limited Liability Company

Didier Guerin

Marc Girault

Yves Thorigne

Eric Malville

Sylvie Laniepce

Constant Hardy

Marie-Jos&egrave;phe Revillet

A method of mutually authenticating, firstly, a portable object () assigned a unique identifier (MSISDN) and including first wireless communications means and, secondly, a public access terminal () including second wireless communications means and telecommunications means for communicating via a telecommunications network (). The portable object () is assigned a wireless communication key (Kme). An authentication server () is installed on the network () and adapted to determine the key Kme from the identifier (MSISDN). The identifier (MSISDN) of the portable object () is sent to the terminal () and then from the terminal () to the authentication server (). The authentication server () determines the key Kme and allocates the wireless communication key Kme to a calculation unit (). The calculation unit () calculates a session key (Ksession) from the key Kme of the portable object () and allocates the key Ksession to the public access terminal (). The terminal () sends the portable object () a first message signed using the key Ksession, the portable object () acquires the key Ksession from the first message and the key Kme, and authenticates the terminal () by verifying the signature of the first signed message. The portable object () sends the terminal () a second message signed with the key Ksession, and the terminal () authenticates the portable object () by verifying the signature of the second signed message.

Method for authentication between a portable telecommunication object and a public access terminal

To set up a call coming from a user's mobile radio telephone terminal to a receiver terminal for example a home automation terminal, the result of a biometric authentication of the user in the mobile terminal and of a predetermined result are applied to algorithms for authenticating of the mobile terminal implemented in the mobile terminal and fixed storage arrangement in the radio telephone network. If the signature produced by the algorithm in the mobile terminal and transmitted by it and the signature result produced by the algorithm in the fixed storage arrangement are identical, an identifier of the mobile terminal is transmitted from the fixed storage arrangement to the called receiver terminal. The outgoing call is accepted by the receiver terminal only when the latter has recognized the transmitted identifier, or in a variant an identifier of removable supplementary card included in the mobile terminal.

Call set-up from a mobile radio telephone terminal with biometric authentication

A secure biometric authentication method, comprising communication of biometric data to a verification module. The invention is characterized in that it consists in encrypting the biometric data with a cryptographic algorithm and in introducing for each cryptographic operation carried out a different diversification value.

Method for secure biometric authentication/identification, biometric data input module and verification module

A secured system of access checking using a portable storage carrier (C) on which there is recorded an electronic key (CL), a digital data processing instrument (LE) for the production of keys, and an electronic lock (L) function capable of authorizing access should the storage carrier have the requisite electronic key. To transfer an entitlement to produce keys (CL) from one production digital data processing instrument (LE) to another, it is loaded with a new public key (K&prime;) and the signature (CER&prime;) of this key.

Growing community of inventors

Caen, France

Didier Guerin