Gemalto Sa

Thales Dis France Sas

Axalto S.a.

Thales Dis France Sa

Laurent Castillo

Franck Dehlinger

HongQian Karen Lu

Asad Mahboob Ali

Francois-Xavier Marseille

Michel Thill

Alain Boudou

Sylvain Chafer

François-Xavier Marseille

Christoph Siegelin

Stephane Durand

Philippe Smadja

Ed Dolph

Jean Lambert

Lu Karen HongQian

Van Tai Ngo

Frank Arnold

Yesong Wang

Vincent Lao

Khaing Phyo Aung

Hongquian Karen Lu

Hongqian Karen Lu

A system for authenticating an electronic device by means of an authentication server in order to authenticate a user of said electronic device. The system is adapted to perform an authentication based on a fictive payment transaction and includes the authentication server which is adapted to execute a fictive payment transaction with a predetermined transaction amount with said electronic device and during said execution to receive a first cryptogram from said electronic device; send said first cryptogram to a banking server; and receive from said banking server an acknowledgment if said first cryptogram is valid; when said fictive payment transaction has been executed, compute an authentication identification based on said electronic device's data; said electronic device which is a payment electronic device and which is adapted to execute said fictive payment transaction with said authentication server and during said execution to send said first cryptogram to said authentication server.

System for authenticating an electronic device by means of an authentication server

Method and System for enhanced privacy in privacy-preserving identity solutions. The technology provides for a redirect of a request to generate a proof of an attribute from a service provider to a separator. The separator removes source identification from the attribute-proof request and redirects the attribute-proof request, free of original source identification, to a credential issuer which issues the credential. A security device of the user generates a presentation token from the privacy-preserving credential and presents the presentation token to the service provider as proof of the attribute. Other systems and methods are disclosed.

System and method of dynamic issuance of privacy preserving credentials

A method to securely and asynchronously provisioning keys from one source secure device to a target secure device through a key provisioning server, in which the keys to be provisioned via the method remain unknown. The method includes the steps of, for the source secure device, encrypting a key to be transferred using a transport key so that only the target secure device can decrypt, and sending the encrypted key to the provisioning server and, for the target secure device, when available, getting the encrypted transferred key, and decrypting the transferred key using the transport key.

Method for asynchronously provisioning keys from one secure device to another

A secure portable electronic device for providing secure services when used in conjunction with a host computer having a central processing unit use two hardware device protocols readily supported by computer operating systems. Other systems and methods are disclosed.

Method and system for communication between a USB device and a USB host

The invention relates to a personal token () for being associated with a mobile telecommunication device () and for storing credentials for access to an operator's network, characterized that the personal token () is arranged for loading the credentials into a memory () of the mobile telecommunication device (), so that the mobile telecommunication device () is taken away from the personal token () and operative for connecting to the operator's network with the credentials in its memory ().

Method for loading credentials into a mobile communication device such as a mobile phone

A boot sequence method comprises a determination stepand, a first starting steporfor starting a first interface, a first negotiation steporwherein a power negotiation is performed, a second negotiation steporfor determining the interfaces to activate simultaneously, and a second starting steporwherein the interfaces that can be activated simultaneously are started one after each other.

Method for booting portable objects with multiple communication interfaces

The invention relates to a personal token storing a javacard application code lying over an area of the memory of the personal token, the personal token being able to run such javacard application so as to deliver HTML page data to an external device for the external device to display an HTML page on the basis of the such delivered HTML page data, said personal token further storing data to be used as a constructing part of the HTML page, characterized in that the data to be used as a contributing part of the HTML page are in at least one file which is separate from the memory area over which the Javacard application code is lying, and the personal token is programmed for opening the at least one file storing the contributing part of the HTML page when such data are requested for delivering said HTML page data to said external device.

Personal token having enhanced abilities for delivering HTML data

In general, the invention relates to a method for executing at least a portion of a server operation. The method includes providing an extension to a client connected to the server, where the extension includes a portable object connected to the client. The method further includes performing at least the portion of server operation by the extension, where performing at least the portion of the server operation includes executing a copy of at least a portion of server software stored on the portable object.

Method and system using a portable object for providing an extension to a server

The invention is a method of managing flash memory-allocation in an electronic token. Said token has a memory comprising a list area and a managed area. Said managed area comprises allocated spaces and at least one free memory chunk. Said list area comprises at least one valid entry referencing a free memory chunk. Said valid entry comprises a state field. Said method comprises the step of selecting a free memory chunk further to an allocation request where said free memory chunk is referenced by an old entry, and the step of identifying a new allocated space in the selected free memory chunk. The state field of said valid entry is preset with a virgin state. Said method comprises the step of invalidating the old entry referencing the selected free memory chunk.

Method of managing flash memory allocation in an electronic token

A method to control access to a sector of a flash type memory of an electronic module. The method includes receiving a write request to write data to an area of a partition, wherein the partition is located within the sector and, prior to writing to the data, determining whether an owner of the data to be written has write access to the partition of the sector and permission to erase the entire sector in which the partition is located.

Growing community of inventors

Meudon, France

Laurent Castillo