Inside Secure

Gemalto Sa

Verimatrix, Inc.

Gary Chew

Bruno Charrat

Frédéric Faure

Lionel Merrien

Georges Gagnerot

Charles Walton

Benoît Feix

Max De Groot

Lionel Martin

Eric Plet

Jean-François Grezes

Bernard Vian

Sébastian Nerot

A method for performing a transaction between a portable device and a transaction terminal includes establishing a communication channel between the portable device and the transaction terminal; establishing a first data link between the transaction terminal and the transaction server; and using an application program in the transaction server to perform the transaction with the transaction terminal through the data link, on behalf of the portable device.

Method and system for NFC transaction

In a general aspect, a method can include: installing in a non-secure device a customized module for managing communications with a secure element, transmitting to the secure element first authentication data for authenticating the customized module, the customized module generating and transmitting to the secure element second authentication data for authenticating the customized module, if the secure element determines that the first and second authentication data are consistent with each other, establishing a secure communication link between the customized module and the secure element, by using the first or second authentication data, the non-secure device transmitting a command to the secure element, for an application installed in the secure element, and the secure element executing the command only if the command is sent via the secure communication link.

Method for providing a secure service

A method for executing an application in an NFC device, including steps during which: a contactless link is established between a first and a second NFC devices, the first NFC device transmits through the contactless link an identifier memorized by the first NFC device, the second NFC device transmits through the contactless link an application identifier, the second NFC device transmits to an application server the identifier of the first NFC device and the application identifier, the application server transmits to an authentication server the identifier of the first NFC device and the application identifier, the authentication server verifies the identification data, and if the first NFC device and the application are identified, the authentication server authorizes the two NFC devices to execute the application by transmitting to the application server an identifier of a user of the first NFC device, corresponding to the identifier of the first NFC device.

Method and system for authorizing execution of an application in an NFC device

The invention relates to a method of executing a secure application in an NFC device, the method comprising steps during which: a contactless link is established between first and second NFC devices, the first NFC device transmits by the contactless link an identifier of a secure processor of the first NFC device, the second NFC device transmits by the contactless link an application identifier, the secure processor transmits by the contactless link first authentication data allowing the authentication of the secure processor of the first NFC device, the second NFC device transmits to an application server the first authentication data, the application server transmits to an authentication server the first authentication data and second authentication data) to authenticate the application and authorizes the two NFC devices to execute the application only if the secure processor and the application are authenticated.

Method of performing a secure application in an NFC device

When a user records confidential data in a communicating object, the user inputs the confidential data which are encoded and transmitted, with a reference of the user, towards a server in order to record the encoded confidential data in association with the reference. When a user searches for a reference of another user of a communicating object in the communicating object, the user inputs a search datum which is encoded and transmitted to the server for comparing therein the encoded search datum transmitted to all of the encoded confidential data recorded in the server. The server transmits a reference associated with an encoded confidential datum corresponding to the encoded search data to the communicating object. In this way, the user of the communicating object is put into contact with the other user without knowing the data of the other user.

Server for managing anonymous confidential data

The invention relates to a method of securing applications on a chip card which is disposed in a digital appliance. A count is made of the number of times a personal identification number of a chip card application is input erroneously. When this number reaches a threshold, the application or the chip card is blocked. The erroneous input count and unblocking the chip card or the application is restarted when the personal identification number of the chip card is input. In this way, PIN-secured applications offer a high level of security without requiring the storing of additional unblocking data.

Method of unblocking a locked application using a personal identification number

A chip card needs to be allocated in a secured manner to a network operator via a personalization center in order to determine a final authentication key which is attributed to a subscriber of the operator without its being transmitted via a network. The following is loaded into a card by a module: an algorithm and an allocation key; an algorithm for determination of the authentication key and at least one intermediate authentication key. A module transmits an allocation message which includes a final identity number, a random number and an allocation signature from the center to the card. The card authenticates the message by means of the allocation algorithm as a function of the allocation key and the allocation signature, and determines the final authentication key as a function of the intermediate key and the random number.

Growing community of inventors

Aix-en-Provence, France

Gary Chew