Gemalto Sa

Gemplus

Thales Dis France Sa

Olivier Potonniee

HongQian Karen Lu

Gil Bernabeu

Marie-Claude Pellegrini

Hongqian Karen Lu

The invention is a method for managing a secure channel between a server and a secure element embedded in a first device, wherein a user agent embedded in a second device establishes a HTTPS session with the server and retrieves a web application from the server, the method comprising the steps: the server sends to the web application an application certificate which is linked to a specific data reflecting the identity of the server, the secure element gets the application certificate and the specific data, the secure element checks the validity of the application certificate and that the application certificate is consistently linked to the specific data, in case of successful checks, the secure element and the server generate an ephemeral session key and use it for opening a secure channel.

Method for managing a secure channel between a server and a secure element

A method, corresponding client, server and system for communicating between a server and a client. The server and the client access at least one session extension key and/or a key associated with the session extension key, as an associated key. The server authorizes to extend an open communication session with the client until an expiration time only if the client sends to the server authentication data allowing the server to authenticate at least the client on a basis of the session extension key. The expiration time is a time at which the communication session is open completed by a predetermined extension time period.

Method for communicating between a server and a client and corresponding client, server and system wherein the server controls an open communication session with the client

The invention is a method for allowing a user to establish a secure session between a device and a server by using a username/password associated with the user. The user provides the username for the device. In response to a message comprising the username, the server opens a session and generates an identifier of the session and sends the identifier to the device. The identifier is transmitted to a machine distinct from the device. The user provides the password for the machine. The machine sends an authenticating message to the server, the authenticating message comprises the identifier and an authenticating data generated from the password. The server sends a result message reflecting the result of the authenticating data checking to the device.

Method of allowing establishment of a secure session between a device and a server

The invention concerns a method for reducing factory customizing time in a smart card (CP), wherein a pre-customizing manager (GM) into a customizing machine loads post-customizing data (AP, OP-OP, DOP-DOP) in the smart card. Then a post-customizing application (AP) included in the smart card is enabled after delivery of the card to a user following a connection of the smart card to a terminal to process the loaded post-customizing data so as to make the smart card operational.

Smart card customization

The invention concerns a method for deploying an application consisting of several distributed remote elements, from a first data processing means containing descriptors of said elements, onto a second data processing means connected to the means for implanting said element, and for executing the deployed application. Said method comprises at least steps which consist in: selecting () at least one element of the application as priority element; deploying () onto the second processing means the priority elements or elements; and executing () the application with the second processing means when the priority element or elements have been deployed.

Growing community of inventors

Marseilles, France

Olivier Potonniee