Gemalto Sa

Thales Dis France Sas

Thales Dis France Sa

Mourad Faher

Aline Gouget

Olivier Joffray

Gérald Maunier

Bruno Rouchouze

Michael Webster

Stéphane Mouille

Kamil Parizek

Carole Bayle

Francois Perticara

Guennole Tripotin

Guennolé Tripotin

A method for authenticating a device, comprising:

Method, user device, server, device and system for authenticating a device

A system, mobile device, and method for managing security policies for data items stored in an electronic identification (eID) wallet on the mobile device. Security policies are associated with each of a plurality of supported namespaces on a mobile device and a verifier terminal operates to select a namespace to access a data item stored on the mobile device based on the security policies associated with the plurality of supported namespaces on the mobile device.

Security mechanism for namespaces used in electronic identification on mobile devices

A device comprises a hash tree including a root node and a leaf node. An issuing authority having agreed to generate a signature of the root node after having successfully checked validity of an attribute stored in the leaf node. The device identifies a subset of nodes by using a template specifying the structure of the hash tree, said subset comprising, for all paths of the hash tree that do not comprise said leaf node, the node which is the closest to the reference root node and which does not belong to the path comprising said leaf node. A verifier computes a test hash and then computes a test root node by applying a preset rule. The verifier checks that the signature is valid using a data whose authenticity is certified by the issuing authority.

Method for controlling validity of an attribute

The present invention relates to a method of privacy-preserving during an access to a restricted e-service requiring user private data from a smart card. The invention relates more particularly to the field of methods implemented so that the user has the guarantee that only the private data needed to access to the e-service are extracted from the smart card. It is to guarantee that the user has a perfect knowledge of his private data provided by his smart card to a requester. With the invention a message notifying to the user the very nature of the identity assertion is displayed on the screen of the smart card. By doing so, the card ensure 100% security with regard to user consent: the data read out of his card cannot differ comparing to the data requested by the service provider through the terminal.

Method of privacy preserving during an access to a restricted service

The present invention provides a method for establishing a secure communication channel between a client (C) and a remote server (S), said client (C) and remote server (S) exchanging data through an intermediate entity (G), said client (C) having a long-term key pair (sk,pk), said remote server generating an ephemeral key (sk,pk), the method comprising a mutual authentication step wherein the client (C) sends a public key (pk) of said long-term key pair (sk, pk) and the proof that said public key (pk) is valid to the server (S), and wherein the remote server (S) sends the public key (pk) of said ephemeral key pair (sk,pk) to the client (C). The client (C) generates an ephemeral key pair (skC,pkC) and sends the public key (pK) of said ephemeral key pair (sk,pk) to the server (S) so as to generate a secret common to the client (C) and to the remote server (S) for opening the secure communication channel.

Method for establishing a secure communication channel

This invention relates to a method used by an authorized user for the verification of a document having electronic verification means, The method comprises the various steps consisting in:&#x2014;reading, with electronic reading equipment with which the authorized user is equipped, of information stored in the electronic verification means of the verified document;&#x2014;transferring verification information, established on the basis of the information saved in the electronic verification means, from the electronic reading equipment to a viewing device of the authorized user, which viewing device is positioned, in normal conditions of use, in front of the eyes of the authorized user, the said viewing device being transparent to allow the said authorized user to see through it.

Method for verifying documents and device implementing such a method

The invention relates to a secured identity document having an externally readable chip storing a cryptographic configuration of the chip, defining the cryptographic security levels supported by the chip, for establishing a secure communication with a controlling terminal, storing a private key of a cryptography key pair and adapted to cipher data based on the stored private key; a support to which the chip is fastened, the support having a machine optically readable area, the data encoded in this area including the cryptographic configuration of the chip for establishing a secure communication with a controlling terminal in non ciphered form and the cryptographic configuration of the chip ciphered based on said private key.

System providing an improved skimming resistance for an electronic identity document

The invention relates to a portable token (SC) comprising a capability query mechanism (CQM). The capability query mechanism (CQM) is set to inform entities (PC, MW) willing to communicate with the portable token (SC) of at least a subset of the command(s) (C) available in the portable token (SC). The portable token (SC) is arranged to set a flag when the capability query mechanism (CQM) is invoked. When a command (C) is called, the portable token (SC) enforces first access conditions (AC) for the command (C) if the flag is set, or second access conditions (AC) if the flag is cleared.

Growing community of inventors

Meudon, France

Mourad Faher