Thales Dis France Sas

Gemalto Sa

Thales Dis France Sa

Frédéric Dao

Frédéric Faure

Jérôme Duprez

Thomas Dandelot

Frédéric Paillart

Fabrice Delhoste

Sébastien Schmitt

David Halle

David Huguenin

Gérald Maunier

Denis Dubois

Ludovic Tressol

Thierry Silvestre

Cédric Boutie

Jean-François Arnaud

Stephan Stankowski

François Prigent

Frédéric Clement-Gonzales

Gerald Glinka-Hecquet

Christine Nersessian

Marcio Ferreira

Philippe Allouche

The present invention relates to a method for authentication of a user using a user equipment, comprising an authentication engine for authenticating at least one user, said authentication engine being configured to operate with a local authentication model, wherein the method comprises the step for the user equipment of enhancing its local authentication model by at least one authentication factor, wherein said at least one authentication factor is stored in the local authentication model with a validity indication, indicating the time the authentication factor is valid for taking into account by the authentication engine, and authenticating a user by means of a match of the local authentication model with a set of user behavior indications retrieved by the user equipment through the authentication engine.

Method for authenticating a user at a user equipment

Provided is a method for patching an operating systemon a secure elementembedded in a terminal. The method comprises transmitting from a platformto a SM-SRan order to create on the secure elementan ISD-P, establishing between the platformand the ISD-P or the secure elementa secure channel, transmitting from the SM-SRto the secure elementa patch of the operating system, executing in the ISD-Pthe patch of the operating system, and sending from the secure elementto the platforma message informing the platformof the result of the execution of the patch.

Method for patching an operating system on a secure element transparently through an SM-SR platform

A system configured to perform decision tasks carried out by a machine learning engine operates with a machine learning model, and includes a training component for improving the machine learning model, a device for carrying out decisions based on a set of input data, and an interaction interface for switching the machine learning model between training component and a device that includes a model attestation checker. The device performs acquiring input data, and ascertaining at least one machine learning model over the interaction interface. The model attestation checker performs checking if said machine learning model is trusted by a model attestation, and considering, for decision making, only those machine learning models that are trusted. The machine learning engine performs carrying out the decision task for input data by using a trusted machine learning model, and providing a result attestation for the decision output.

Method for securing a machine learning based decision system

The invention relates to a method for managing the reputation level of a first communication device (), said reputation level () being stored into a first secure enclave () embedded in said first communication device (). The method comprises the steps of: receiving from the first communication device () by a second communication device () an information message; verifying that the information message is consistent with data obtained from a sensor embedded in the second communication device (); generating a feedback message by the second communication device () to be transmitted to the first communication device () indicating if the information message is consistent for the secure enclave () of the first communication device () to update its reputation level.

Method for managing the reputation level of a communication device

The invention relates to a method for sending data to at least one device. According to the invention, a data sending control server sends to at least one data storage server at least one predetermined rule or a first request for sending data to at least one data processing server. The data storage server sends, based upon the at least one predetermined rule or the first request for sending data, data to the data processing server. The data sending control server sends to the data processing server a second request for sending to the device the data received or to be received by the data processing server. The data processing server sends, based upon the second request for sending the data, the received data to the at least one device.

Method, data sending control server, storage server, processing server and system for sending data to at least one device

The present invention relates to a method to manage subscriptions in a provisioning server (PS) able to communicate with a Hardware Security Module (HSM) having an HSM key (K). Said method being such that the HSM comprising a load and a reload function, the secure device key ((Ke)K) and the storage key ((Ks)K) as encrypted and stored are provided (S) to one of said functions, said functions outputting, the storage key ((Ks)Ke)K) encrypted using the provided secure device (SE) key (Ke) and the HSM key K, and an APDU_putkey command ((APDU_PUTKEY((Ks)Ke))Ke), encrypted using the provided secure device (SE) key (Ke), to put the retrieved storage key ((Ks)Ke) also encrypted using the provided secure device key (Ke), the storage key as previously stored ((Ks)K) is overwritten (S) with the storage key (((Ks)Ke)K) encrypted using the secure device key (Ke) and the HSM key (K) returned by the function.

Method to manage subscriptions in a provisioning server

The invention is a method sending a plurality of data from a server to a fleet of devices. The method comprises the following steps: splitting said plurality of data in a set of disjoint batches, uniquely allocating to each of said disjoint batches a time slot, identifying a selected data belonging to the disjoint batch which is allocated to the current time slot and sending the selected data from the server to one device of said fleet, and if an incident occurs at the server, discarding from the server the disjoint batch allocated to the time slot during which the incident occurred.

Method for sending a plurality of data from a server to a plurality of devices

The invention is a method of analyzing the wear of a non volatile memory embedded in a secure electronic token. A set of events are intended to generate writing and/or erasing operations in said memory. The token comprises a buffer. The method comprises the following steps: each time an event belonging to said set occurs, generating a data which reflects the event and storing said data in the buffer, sending the buffer to a remote machine, analyzing the buffer to determine the wear of the memory.

Method of analyzing the wear of a non volatile memory embedded in a secure electronic token

Growing community of inventors

Gemenos, France

Frédéric Dao