Morpho

Idemia Identity & Security France

Centre National De La Recherche Scientifique

Ecole Normale Superieure

Sagem Securite

Apple Inc.

Sagem Defense Securite

Safran Identity & Security

Sagem Communications Sas

Idemia Public Security France

Hervé Chabanne

Julien Bringer

Vincent Despiegel

Emmanuelle Dottax

Bruno Kindarji

Alain Patey

Thomas Icart

Jean-Luc Danger

Jean-Christophe Fondeur

François Rieul

Victor Servant

Martin Cottard

Pierre Chastel

Emmanuel Prouff

Constance Morel

Julien Paul Keuffer

Bernard Didier

Olivier Touret

Cédric Thuillier

Sébastien Bahloul

Rodolphe Hugel

Stéphane Gentric

Jonathan Milgram

Roch Lescuyer

Olivier Clemot

Vincent Bouatou

Anouar Mellakh

Thanh Ha Le

Olivier Cipiere

Roch Olivier Lescuyer De Chaptal-Lamure

David Pointcheval

Sébastien Zimmer

Linda Guiga

Hervé Jarosz

Vincent Carlier

Olivier Cipière

Alexandre Martins

Thomas Chenevier

Eduardo Soria-Vazquez

Laurent Lambert

Olivier CLÉMOT

Erik Van Dijk

Stéphane Caillebotte

Mélanie Favre

A method for checking the identity of a reference individual, the method comprising the following steps, implemented by a checking device: selecting terminals respectively associated with individuals forming part of a set of individuals whose identities are intended to be checked by the checking device, the individual forming part of the set of individuals; sending, to each of the selected terminals, an input datum associated with the reference individual and a request asking the terminal to implement a first cryptographic processing operation producing an output datum from the input datum and from a private key specific to the individual associated with the terminal; receiving each output datum; and implementing a second cryptographic processing operation producing a check result relating to the reference individual from each output datum.

Identity checking method using user terminals

A method for processing personal data, comprising the steps of: (a) For each reference personal data of a reference personal database, calculating in the encrypted domain a similarity rate of the reference personal data with a candidate personal data; said reference personal database being associated with a first partition into a plurality of first sets of reference personal data, and with a second partition into a plurality of second sets of reference personal data, such that each reference personal data of a reference personal database belongs to a single first set and a single second set; (b) For each first set and each second set, calculating an overall similarity rate of said set based on the similarity rates of the reference personal data of said set; (c) Comparing each overall similarity rate of a first and second set with a first and second predetermined threshold, respectively.

Method and system for processing personal data

The invention relates to a method for enrolling data in order to verify the authenticity of a security datum, the method comprising implementing by data processing means of a server the steps of: obtaining a reference security datum, generating a first encoded datum by applying to the reference security datum an obfuscated fuzzy Hamming distance encoding procedure, determining from the reference security datum, a plurality of derived data of the reference security datum, generating a first random datum, and determining a second encoded datum such that a variable point comparison predicate parameterized by the second encoded datum and the first random datum is true when said variable point has as coordinates said derived data, storing on a data storage means of the server at least said first and second encoded data. The invention also relates to a verification method and a server for this purpose.

Methods for enrolling data in order to verify the authenticity of a security datum or for verifying the authenticity of a security datum

A method for comparing a first and a second databases to determine whether an individual is represented by both an element of the first database and an element of the second database, wherein said elements are biometric data, including the implementation of the steps applying a classification model for each element of each database so as to construct a set of first and second bins of the respective first and second databases, each bin bringing together similar elements, each first bin being associated with a second bin; comparing the elements from the first database for at least one pair of an associated first bin and second bin belonging to said first bin with the elements from the second database belonging to said second bin, at least one of the first and the second databases then being encrypted homomorphically.

Methods for comparing confidential biometric databases

A method of secure classification of input data by a convolutional neural network (CNN), including (a) determination, by application of the CNN to the input data, of a first classification vector associating with each of a plurality of potential classes a representative integer score of the probability of the input data belonging to the potential class, the first vector corresponding to one possible vector, each possible vector of the first set associating with each of the plurality of potential classes an integer score; (b) construction, from the first vector, of a second classification vector of the input data, such that the second vector also belongs to the first space of possible vectors and has a distance with the first vector according to a given distance function equal to a non-zero reference distance; and return of the second vector as result of the secure classification.

Method of secure classification of input data by means of a convolutional neural network

The present invention relates to a parameter training method for a convolutional neural network, CNN, for classifying data, the method comprising the implementation by data processing means () of servers () of steps of: The present invention also relates to a method for classifying an item of input data.

A method for detecting bots in a user network (R), the method comprising the following steps: receiving () by a user terminal () an identifier (ID) associated with a network user account; transmitting (), by the user terminal (), the identifier (ID) to an access control system () configured to determine whether or not a mobile terminal owner has the right to access an area or service, the area or service being independent of the user network (R); transmitting (), by the access control system () to the server (), a representative data element supporting that the identifier (ID) has been received by the access control system (); and using () by the server () the representative data element to determine whether the user of the account associated with the identifier (ID) is a bot or not.

Method for detecting bots in a user network

The invention relates to a method of signature with pseudonym &#x3c3; of a message m by a user device storing a secret signature key sk dependent at least on a first part of key f, on a second part of key x and on a third part of key A equal to (gh)and comprising the following steps: &#x2014;generation of a pseudonym nym equal to hdpk, with dpk a public domain parameter, &#x2014;determination of random numbers a, r_a, r_f, r_x, r_b, r_d, &#x2014;calculation of signature coefficients Requal to hdpk, Requal to nymhdpk, Requal to ZVW, with Z, V and W respectively equal to e(A, g), e(h, g) and e(h,w), &#x2014;obtaining of a first signature parameter T equal to Ah, &#x2014;calculation of a second signature parameter c by applying a cryptographic hash function H, to the public domain parameter dpk, to the pseudonym nym, to the first signature parameter T, to the signature coefficients R, R, Rand to the message m, &#x2014;calculation of signature parameters s_f, s_x, s_a, s_b, s_d, respectively equal to r_f+c.f, r_x+c.x, r_a+c.a, r_b+c.a.x and r_d+c.a.f, &#x2014;generation of said signature with pseudonym &#x3c3; of said message m on the basis of said signature parameters.

Signature with pseudonym for chip card

The invention relates in particular to a method for securing the execution of a cryptographic algorithm (ALG) against passive sniffing, the method implementing masking (MSK) of data processed by the cryptographic algorithm. The masking (MSK) of said data includes a linear encoding step such as x'=x&#xb7;L+c, in which x is the data to be masked, x&#x2032; is the corresponding masked data, c is a code word included in a linear code C, and L is a matrix made up of linearly independent vectors not included in the linear code C. The invention also relates to a device (SC) implementing such a method.

Protection against passive sniffing

The invention concerns a method for generating an electronic signature key and an associated public key certificate, implemented by a client unit and a server unit, the method comprising a step during which the client unit and/or the server unit generate(s) a signature key comprising a private key and a public key, and a public key certificate comprising said public key, the method being characterized in that the client unit acquires an item of biometric data of an individual, and in that the signature key and/or the public key certificate are generated from at least a portion of said biometric data, and in that the portion of biometric metric data from which the signature key and/or the public key certificate have been generated is ephemeral and is not memorized after the signature key and the public key certificate have been generated. The invention also concerns a method for transferring a message and a system designed to implement the method for generating a signature key.

Electronic signature method with ephemeral signature

A method of secure distributed storage on N servers and a secure access method to confidential data stored in a secure and distributed manner on N servers are provided. Additionally, distributed storage, devices, systems, computer programs and storage medium are provided for the implementation of such methods.

Methods, systems, and devices for securing distributed storage

The invention relates to a method for enabling the authentication or identification of a person () using a first electronic device () comprising an image-capturing unit and a data-transmission unit, the method including a step of registering said person in a verification system (). The registration step includes the steps of: capturing, using the image-capturing unit of said electronic device, a first image (h) of at least one object (O) of any kind that is secretly selected by the person; and transmitting said first image to the verification system by means of said data transmission device of said first electronic device.

Method for enabling authentication or identification, and related verification system

The present invention relates to a method of identifying a user, the method being implemented by means of a database containing personal data of users and containing for each user at least one unmodified biometric characteristic (E1,), at least one biometric characteristic (E2,) that has been modified and that is accessible from the unmodified biometric characteristic, and at least one item of identification data (D) that is accessible from a code identifying the modification that has implemented on the second biometric characteristic. The method comprises the steps of comparing first and second biometric characteristics (e1,) read from the user with the characteristics in the database in order to determine (5) what modification has been implemented and to deduce therefrom the code identifying the modification; and extracting (6) the identification data by means of the code as deduced in this way. The invention also provides a database for implementing the method.

Method of identifying a user by means of modified biometric characteristics, and a database for implementing the method

A method for signing up a person for biometric verification purposes is provided, the method including: acquiring an image of a biological attribute of the person, the biological attribute including a set of characteristic elements, defining, within the acquired image, at least one area that includes at least part of the biological attribute, and storing, in a biometric database, at least one piece of information indicating that the number of characteristic elements included in said defined area is less than a respective predetermined integer. A related biometric verification method is also provided.

Signup and biometric verification methods, and related systems and devices

Method of identification or of authorization using a system comprising at least one sensor for acquiring biometric data and one secure module storing a set of digital data obtained starting from a set of respective biometric data by means of a digitization algorithm. According to this method, a biometric data value is obtained, acquired by the sensor; a digital value is obtained by application of the digitization algorithm to the acquired biometric data value; within the secure module, at least some of the digital data from said set of digital data are ranked according to their proximity to the digital value obtained; and a biometric data value is obtained from said set of biometric data by taking into account a position of the corresponding digital data within the ranking.

Method of identification or authorization, and associated system and secure module

Growing community of inventors

Paris, France

Hervé Chabanne