Back to results
US 10,382,954 B2Granted
System and method for providing a service to the user of a mobile terminal
AssigneeOrange
InventorsJean-Luc Grimault, Franck Grupeli
Life of this patent
Estimating the term…
Abstract
A system for providing a service to the user of a mobile terminal. The system includes: an entity capable of generating an electronic ticket including identification data of the service and a public key of the mobile terminal complementary to a private key of the mobile terminal stored in a secure element of the mobile terminal; a module for delivering the ticket to an application of the mobile terminal running outside the secure element; a module capable of receiving the electronic ticket from the mobile terminal via short-distance communication channel; and a module capable of authenticating the mobile terminal from the public key of the mobile terminal and a challenge implementing the private key of the mobile terminal.
Claims12
A system for providing a service to the user of a mobile terminal, the system comprising:
- a ticket generator entity for generating an electronic ticket, said ticket being usable from an application of a mobile terminal to access a service, said ticket generator entity comprising:
- at least one first computer;
- and
- at least one first non-transitory computer-readable medium comprising instructions stored thereon, which when executed by the at least one first computer configure the ticket generator entity to perform acts comprising:
- obtaining a public key (PBKM) of the mobile terminal that is complementary to a private key (PVKM) of the mobile terminal as stored in a secure element of the mobile terminal;
- and
- generating the electronic ticket, said ticket including fields containing at least:
- identification data of said service;
- and
- said public key (PBKM) of the mobile terminal;
- delivering said ticket, either directly or via a third-party device, to an application of the mobile terminal, which application is executed outside the secure element, wherein the ticket is stored in a memory of the mobile terminal outside the secure element of the mobile terminal is used by the application;
- a mobile terminal authentication device that is distinct from the mobile terminal, comprising:
- at least one second computer;
- and
- at least one second non-transitory computer-readable medium comprising instructions stored thereon, which when executed by the at least one second computer configure the mobile terminal authentication device to perform acts comprising:
- short-range reception of said ticket from the mobile terminal;
- extracting the public key (PBKM) from the field of said ticket containing the public key;
- generating a random number;
- short-range communication by a near-field communication component or a low-energy Bluetooth component with the secure element of the mobile terminal, for asking the secure element to sign said random number with the private key (PVKM) of the mobile terminal as stored in the secure element;
- and
- authenticating said mobile terminal on the basis of said signed random number and said public key (PBKM) of the mobile terminal;
- and
- an access control device, which controls access to said service and validates the identification data of said service and provides said service only when the identification data of the service and the authenticity of the mobile terminal have been verified successfully.
20 more elements
A method of providing a service to a user of a mobile terminal, the method comprising:
- generating, with at least one first device, an electronic ticket usable from a mobile terminal to access a service, wherein generating comprises:
- obtaining a public key (PBKM) of the mobile terminal that is complementary to a private key (PVKM) of the mobile terminal as stored in a secure element of the mobile terminal;
- and
- generating an electronic ticket, said ticket including fields comprising at least:
- identification data of said service;
- and
- said public key of the mobile terminal (PBKM);
- delivering said ticket directly or via a third-party device, from the at least one first device to an application of the mobile terminal, which application is executed outside the secure element, wherein the ticket is stored in a memory of the mobile terminal outside the secure element of the mobile terminal and is used by the application;
- authenticating the electronic ticket with at least one second device that is distinct from the mobile terminal, comprising:
- receiving said ticket from the mobile terminal by a short-range communication;
- extracting the public key (PBKM) of the mobile terminal from the field of said ticket containing the public key;
- generating a random number;
- short-range communication by a near-field communication component or a low-energy Bluetooth component with the secure element of the mobile terminal, in order to ask the secure element to sign said random number with the private key (PVKM) of the mobile terminal as stored in the secure element;
- and
- authenticating said mobile terminal from said signed random number and said public key (PBKM);
- and
- controlling access to said service using an access control device, the controlling access including validating the identification data of said service and delivering said service only when the identification data of the service and the authenticity of the mobile terminal have been verified successfully.
14 more elements
Dependencies are inferred from the claim text.