France Telecom

Orange

Eric Malville

Sébastien Canard

Jacques Traore

Stéphane Guilloteau

Yves Thorigne

Didier Guerin

Amandine Jambert

Bruno Cosnefroy

Sidonie Caron

A method for unique authentication of a user including federating an identity of said user for said service provider and an identity of the user for an identity provider, the federating including the steps of generating a user alias for that service provider and sending said identity provider a masked alias deduced from said alias, the identity provider associating said masked alias for that service provider with the identity of the user for the identity provider and sending the user elements for calculation by the user of a signature of a message containing the non-masked alias calculating said signature and sending the service provider said message with said signature, and the service provider verifying said signature, authenticating the user, and associating said alias with the user's identity.

Method for the unique authentication of a user by service providers

The invention relates to cryptographic method for the anonymous authentication and the identification of a user entity (U) respectively by a checking entity (D) and an identifying entity (O). According to this method, the checking entity (D) receives () from the user entity (U) at least one first signature (&#x3c3;) and a first message (m), and checks () the first signature (&#x3c3;) using the first message (m) in order to authenticate the user (U), and the identifying entity (O) receives () from the checking entity (D) a second signature (&#x3c3;') connected to the first signature (&#x3c3;) and identifies () the user using the second signature and a secret key particular thereto. The invention also relates to a cryptographic system for implementing said method.

Crytographic method for anonymous authentication and separate identification of a user

The present invention relates to a method of access to a service consisting in i) identifying and registering a client (C), ii) authenticating the client to an anonymous certification authority, iii) authenticating the client by producing an anonymous signature and opening and maintaining an anonymous authentication session with a server (Se), and iv) selectively allowing contact between the server (Se) and the anonymous certification authority (ACA) to revoke the anonymity of the client (C) using the signature provided in step iii). The invention also relates to a system for opening and maintaining an authentication session guaranteeing non-repudiation.

Method and system with authentication, revocable anonymity and non-repudiation

A method of mutually authenticating, firstly, a portable object () assigned a unique identifier (MSISDN) and including first wireless communications means and, secondly, a public access terminal () including second wireless communications means and telecommunications means for communicating via a telecommunications network (). The portable object () is assigned a wireless communication key (Kme). An authentication server () is installed on the network () and adapted to determine the key Kme from the identifier (MSISDN). The identifier (MSISDN) of the portable object () is sent to the terminal () and then from the terminal () to the authentication server (). The authentication server () determines the key Kme and allocates the wireless communication key Kme to a calculation unit (). The calculation unit () calculates a session key (Ksession) from the key Kme of the portable object () and allocates the key Ksession to the public access terminal (). The terminal () sends the portable object () a first message signed using the key Ksession, the portable object () acquires the key Ksession from the first message and the key Kme, and authenticates the terminal () by verifying the signature of the first signed message. The portable object () sends the terminal () a second message signed with the key Ksession, and the terminal () authenticates the portable object () by verifying the signature of the second signed message.

Method for authentication between a portable telecommunication object and a public access terminal

An anonymous and secure on-line payment system and method based on the partially blind signature cryptographic method with revocable anonymity. To this end, an Anonymity Server (SA) enables the Customer (C) to acquire on-line anonymous payment means on the basis of a protocol that does not enable the Anonymity Server to link the payment means to the Customer (C). The Payment Server (SdP) comprises means for opening an anonymous account using the anonymous payment means (). A Customer (C) can make an on-line purchase from a Merchant Site (SM) without having to give a bank card number and remaining anonymous to the merchant and more generally to any entity present in the transaction or absent therefrom. However, this anonymity may be revoked by a trusted entity in the event of fraud on the Customer. Finally, a Customer can make payments when on the move.

Growing community of inventors

Bayeux, France

Eric Malville