Evidian

Bull Sas

Evidan

Safran Transmission Systems

Gérard Dedieu

David Cossard

Christophe Guionneau

Christian Henri Paul Mauhe

Jacques Lebastard

Boksic Rodrigo

François Beretti

Rémi Augustin

A method for initiating a secure session using a smartphone as a physical token to provide strong authentication. The phone is used through a public and independent real-time notification service. The notifications are exchanged in an encrypted manner so that their content is only accessible to the mobile phone and the authentication server.

Method for opening a secure session on a computer terminal

A method (M) for controlling access to a production system (SIP) of a computer system not connected to an information system (SIC), includes: A) an initial phase of enrolling a user via a terminal () in the production system (SIP), which includes: a) providing a private encrypted key (Cph) associated with each account of the user in the production system (SIP); b) the terminal transmitting the encrypted private key (Cph) to the information system and the system (SIC) registering the encrypted private key; B) for each request to access the production system, a phase of authentication by the production system, which includes: the terminal of the user recovering a challenge (QRCb) generated by the production system, that only the encrypted key stored in the information system makes it possible to solve, the key only being capable of being obtained after the terminal has been authenticated by the information system.

Method for controlling access to a production system of a computer system not connected to an information system of said computer system

A method for opening a session of a first machine using a session checking service for the first machine and a second machine, including a security service, includes receiving a request to open a session on the first machine, the request including a user identification information item; verifying that the identification information item is associated with an identification data item of the second machine in a repository; checking that the user has the right to open the session on the first machine; if the verification and check are positive, sending a session status modification request of the second machine to the security service of the second machine; if the session status of the second machine is modified, sending a request to authorize opening of the session to the first machine; and storing the identification information item associated with an identifying data item of the first machine in the repository.

Method for opening a session of a machine belonging to a machine set

A method for changing the status, locked or unlocked, of a target machine including a security service and a session management module includes receiving, by the security service, a query corresponding to a request to change the status of the target machine, the query including at least one piece of identification information from a user of a source machine; from the security service, verifying if access rights to the target machine related to the user of the source machine allow a change in the status of the target machine by the user; if so, sending, from the security service, a status change message to the session management module of the target machine and proceeding to the status change made by the session management module.

Method for remotely locking/unlocking a machine

A method for propagating session management events between a plurality of machines forming a machine cluster includes generating, with a session management user interface, a session management event on a first machine of the machine cluster; detecting, with an installment of the interface, the generated event; sending, from the installment to a first security service related to the first machine, a set of specific information that is related to the detected event; determining, with the first security service, a set of target machines; sending the specific information from the first security service to target security services that are related to the target machines; and processing the specific information at each target security service of the target machines so as to execute, on each target machine that has received the specific information, the session management event generated on the first machine.

Growing community of inventors

Montigny le Bretonneux, France

Gérard Dedieu