Thales

France Telecom

Bull S.a.

Trusted Logic

Trusted Logic Mobility (Sas)

Laurent Frerebeau

Eric M Vetillard

Alexandre Frey

Jean-Bernard Blanchet

Daniel Le Metayer

Benoît Maximilien

Eric Weber

Cuihtlauac Alvarado

Matthieu Maupetit

Adrien Bioteau

Jean-Marc Lacroix

Geoffroy Montel

Luc Creti

Samuel Lacas

A method for the dynamic creation of an execution environment for an application to be secured, in order to secure the application, is implemented by a computing apparatus including an information processing unit and a memory. The memory is associated with the information processing unit and includes an operating system, the application to be secured and a security library including at least one security function, The operating system includes a set of unsecured function libraries, the application to be secured being adapted, during its execution, to call a function of the unsecured function library. The method including loading the security library, substituting, from among the function call(s) associated with the application to be secured, at least one call to an unsecured function with a call to a corresponding function of the security library, and launching the application to be secured after the substitution step.

Method for the dynamic creation of an execution environment for an application to secure the application, associated computer program product and computing apparatus

A security apparatus positioned between at least one domain having a level of trust or of sensitivity A and at least one domain having a level of trust or sensitivity B, bearing in mind that the level A is different from the level B, comprises a virtualization software layer V implemented on the physical layer H and positioned between said physical layer H and at least one set consisting of at least three different compartmentalized blocks having different sensitivity levels, BLA, BLB, MDS. The compartmentalized blocks rest on the physical layer H and the virtualization layer and the blocks include at least one of: a network block A, BLA, comprising all the network functions used to process data of security level A, a network block B, BLB, comprising all the network functions used to process data of security level B, and a security module software block, MDS, or airlock positioned between at least one block of BLA type and at least one block of BLB type, said security module being designed to monitor the exchanges of data between said blocks BLA and BLB, said security module comprising all the security, filtering or cryptographic function transformations.

Security apparatus

A secure system () for processing data includes a first device (), and at least one second device () is characterized in that&#x2014;each second device () comprises monitoring elements () suitable for transmitting operating information to the first device (), and&#x2014;the first device () includes elements () for storing a behavioral model of each second device () and elements () for comparing the operating information received from each second device () with the behavioral model so as to determine whether the operation of the second device () is compliant with the behavioral model stored, and validation elements () suitable for preventing the running of a sensitive operation on this second device or for instructing a change of state of the second device if the second device does not manifest compliant operation. A method and a computer program are also described.

Secure system and method for processing data between a first device and at least one second device provided with monitoring means

The invention relates to a user interface-equipped computing device comprising means for implementing a series of applications, said means including two execution spaces. According to the invention, the applications of the second execution space (, P, P) have a level of security specifically higher than that of the applications of the first execution space (, P, P), said two execution spaces being hosted by a physical processing means which is designed such that it cannot be separated into two parts without destroying the physical processing means.

Telecommunication terminal comprising two execution spaces

A method for internationalizing a markup document includes detecting a localization tag in the document, retrieving localization information from the document which is associated with the localization tag, searching a translation file for a localized value associated with the localization information, and replacing the localization tag in the document with the localized value found in the translation file. The localization information includes any one or more of a localization attribute, a default localization value, and a value corresponding to an automatic transcription function. A system for internationalizing the markup document includes a first storage unit which stores the markup document, a second storage unit which stores the translation file, and a localization tool which localizes the markup document stored in the first storage unit based on information in the translation file stored in the second storage unit. The localization tool may be implemented in software using, for example, a dynamic code generation language.

System and method for internationalizing the content of markup documents in a computer system

Growing community of inventors

Versailles, France

Laurent Frerebeau