Oberthur Technologies

Idemia France

Jean-Philippe Vallieres

Emmanuelle Dottax

Elder Dos Santos

Michele Sartori

Franck Rondepierre

Florian Galdo

Sebastien Nerot

Gregoire Godel

Mickael Destouches

Grégoire Godel

Sébastien Nerot

Mickaël Destouches

A method for the authentication of a first electronic entity (C) by a second electronic entity (H), wherein the first electronic entity (C) implements the following steps: reception of a challenge (HCH) from the second electronic entity (H); generation of a number (CCH) according to a current value of a counter (SQC) and a first secret key (K-ENC); generation of a cryptogram (CAC) according to the challenge (HCH) and a second secret key (S-MAC); and transmission of a response including the cryptogram (CAC) to the second electronic entity (H), without transmission of the number (CCH).

Method for the authentication of a first electronic entity by a second electronic entity, and electronic entity implementing such a method

An intermediary third-party receives, from a master device, a batch of pre-generated secure commands; plays it so as to send sequentially, to a slave device, the commands. The batch includes an initial command indicating the establishment of a channel secured with a session key dependent on a sequence counter, and second commands protected by a MAC code that is a function of the session key. An update of the sequence counter in non-volatile memory of the slave on each new establishment of a secure channel renders the pre-generated batch obsolete by virtue of a new session key. In order to allow the batch to be replayed, the invention provides for each update value of the counter to be temporarily stored in volatile memory, and for the current value to be overwritten in non-volatile memory on predefined events, including a test counter reaching a maximum number of replays.

Replaying a batch of secure commands in a secure channel

Disclosed are methods performed by, and devices including, a microcircuit card that makes it possible to set up a communication session between the microcircuit card and a contactless communication module via an SWP interface. An implementation of the method comprises: an initialization phase for the SWP interface; and a negotiation phase between the microcircuit card and the contactless communication module, the contactless communication module being suitable for maintaining the power supply of said microcircuit card during these phases. Among other reasons, the method is remarkable in that the microcircuit card prolongs said negotiation phase until the end of a procedure internal to the microcircuit card.

Method of setting up a communication session via an SWP interface

Growing community of inventors

Colombes, France

Jean-Philippe Vallieres