Gemalto Sa

Herve Ganem

Julien Delsuc

Philippe Smadja

Francois Ennesser

This invention concerns the implementation of end-to-end security for the communication between objects in the domain of the Internet of Things (or Internet of Objects). The purpose of the patent is dealing with the setup of secure authorized information channel between data source (M2M device) and data consumers (consumer entity). According to the present invention, the access to a M2M device by a consumer entity (consumer application) is controlled by a M2M authorization server. The M2M authorization server is the entity in charge of managing access rights for the M2M device and makes the decision regarding the access to the resource by the consumer entity (consumer application). The M2M server is an entity that enforces the decision and enables the access to the M2M device. When a consumer application needs to communicate with a M2M device, the present invention proposes a method for authorizing a consumer application to access a M2M device and for encrypting the communication between the consumer application and the M2M device. The M2M authorization server computes security credentials which are sent to the consumer application.

System and method for securing machine-to-machine communications

The invention relates to a method for a client device () to access to remote secure data on a remote secure device (), said secure data being associated to a remote service, characterized in that it comprises creating a secure peer to peer channel () between a client application () of a client device and said remote secure device so as the client device and the remote secure device exchange data () securely and bidirectionally.

Method for using a remote secure device to authenticate a client device to access a remote service

The invention relates to a method for providing a user with an authenticated remote access to a remote secure device (), said remote access being initiated from a local accessing device (), said remote secure device () embedding secure data related to a specific service, characterized in that it comprises establishing a mutual authentication between said remote secure device () and a local secure device () different from the local accessing device () so as the user of the local accessing device () is able to access to the secure data of the remote secure device ().

Method for providing a user with an authenticated remote access to a remote secure device

The invention relates to a personal token including a microprocessor and a memory, said personal token storing and running a software entity which constitutes an end-point for communication over the internet. The software entity constitutes an end-point according to a signaling protocol over the internet and the signaling protocol is of the type intended when the session for real-time conferencing is initiated between end-points.

Growing community of inventors

Meudon, France

Herve Ganem