Gemalto Sa

Thales Dis France Sa

Philippe Smadja

HongQian Karen Lu

Laurent Castillo

Olivier Joffray

Julien Delsuc

Hervé Ganem

Herve Ganem

Francois Ennesser

Jean-Daniel Aussel

François Ennesser

Hongquian Karen Lu

This invention concerns the implementation of end-to-end security for the communication between objects in the domain of the Internet of Things (or Internet of Objects). The purpose of the patent is dealing with the setup of secure authorized information channel between data source (M2M device) and data consumers (consumer entity). According to the present invention, the access to a M2M device by a consumer entity (consumer application) is controlled by a M2M authorization server. The M2M authorization server is the entity in charge of managing access rights for the M2M device and makes the decision regarding the access to the resource by the consumer entity (consumer application). The M2M server is an entity that enforces the decision and enables the access to the M2M device. When a consumer application needs to communicate with a M2M device, the present invention proposes a method for authorizing a consumer application to access a M2M device and for encrypting the communication between the consumer application and the M2M device. The M2M authorization server computes security credentials which are sent to the consumer application.

System and method for securing machine-to-machine communications

Method and System for enhanced privacy in privacy-preserving identity solutions. The technology provides for a redirect of a request to generate a proof of an attribute from a service provider to a separator. The separator removes source identification from the attribute-proof request and redirects the attribute-proof request, free of original source identification, to a credential issuer which issues the credential. A security device of the user generates a presentation token from the privacy-preserving credential and presents the presentation token to the service provider as proof of the attribute. Other systems and methods are disclosed.

System and method of dynamic issuance of privacy preserving credentials

The invention is a method of managing communication between an electronic token and a remote web server. The token and the server are connected to a same host machine. The token comprises first and second token servers and a memory comprising HTML data. The host machine has an Internet web browser. Said method comprises the steps of:

Method of managing communication between an electronic token and a remote web server

The invention relates to a personal token () for authentication in a network comprising a piece of software for initiating an SSL connection by generating a message authenticating said token to a remote server () characterized in that the piece of software controls the processing of the message so as to use of a data () which is prestored in the token () and which is specifically associated with the remote server () so that the message can be interpreted only by the specific remote server ().

Personal token and a method for controlled authentication

Growing community of inventors

Meudon, France

Philippe Smadja