Oberthur Technologies

Idemia France

Michele Sartori

Emmanuelle Dottax

Guillaume Dabosville

Franck Rondepierre

Jean-Philippe Vallieres

Florian Galdo

Axel Francois

Fabien Cordier

Philippe Muresianu

Luk Bettale

A method and devices for verifying the integrity of an electronic device having connected thereto at least one connectable or disconnectable component. The method can include obtaining (D) information specific to at least one connectable or disconnectable component, the information being stored in the connectable or disconnectable component; preparing (E) a temporary first master value on the basis of the information specific to the at least one connectable or disconnectable component; and authenticating (E) the temporary first master value by using a previously-prepared second master value in order to determine the integrity of the electronic device.

Method of verifying the integrity of an electronic device, and a corresponding electronic device

Disclosed is a method for authenticating a user by using an electronic apparatus including an authentication module and a secure module, which includes the following steps: the authentication module transmits a recognition result to the secure module according to a process that allows the authentication module to be authenticated by the secure module; the secure module generates an authentication token by signing, with a private key stored in the secure module, data including data representing at least one feature of the authentication module; and transmitting the generated authentication token. Also disclosed is an associated secure module, electronic apparatus and system.

Method for authenticating a user and a secure module, associated electronic apparatus and system

Intrusion detection systems dedicated to an operating system, and an intrusion detection system in a device implementing at least a first operating system and a second operating system are provided. The intrusion detection systems includes: a listening module configured to be executed in the first operating system in order to listen to the activity of this first operating system; a collecting module configured to be executed in the first operating system in order to collect data characterizing the activity of the first operating system; and an analysis and detection module configured to be executed in the second operating system in order to analyze the data collected in the first operating system and detect a suspicious activity in the first operating system depending on the analysis.

Intrusion detection system in a device comprising a first operating system and a second operating system

In an electronic device designed to function in a trusted execution environment (TEE), because of the execution of a trusted operating system by a processor of the electronic device, or in a rich execution environment (REE), a method of loading files into random access memory includes the following steps: An associated electronic device is also proposed.

Method of loading files into random access memory in an electronic device and associated electronic device

Disclosed are methods and systems of implementing a right over a content or contents. Various implementations may include means and operations for receiving, for example in an execution environment and from a secure element, a first key for implementing a right over an encrypted content; decrypting said content in said execution environment with the help of the first key; and implementing the right over the content in said execution environment. Various implementations may also include means and operations for receiving a second key in, for example, said execution environment, from the secure element; and encrypting said content in sad execution environment with the help of the second key.

Method of implementing a right over a content

A cryptographic processing method using a sensitive data item in a cryptographic processing system including in memory a test making it possible to tell a human and a computer apart and a reference value obtained by applying a cryptographic function to a pair of values P and R, where P is the sensitive data item and R is a solution to the memorized test, the method including the steps of: configuring the cryptographic processing system, including obtaining and memorizing the reference value in the cryptographic system; transmitting the memorized test to a user; obtaining the user's response to the transmitted test; a cryptographic processing step based on the sensitive data item, using the obtained response, the reference value and the cryptographic function. The reference value and memorized test are in the memory of the system and the solution is not in the memory of the system, during the transmission step.

Growing community of inventors

Colombes, France

Michele Sartori