US 2003/0169884 A1Published application

Method for making secure a session with data processing means under the control of several entities

AssigneeGemplus

InventorsPierre Girard, Jean-Luc Giraud

Life of this patent

Estimating the term…

Loading patent…

Abstract

The invention concerns a method for making secure the execution of a session with processing means, such as a smart card (CA), under the control of at least two entities, such as servers (EX, EY), which consists in: transmitting (X2, Y2) session numbers (NSX, NSY) and session keys (KSX, KSY) to the entities; applying (X6, X, Y6, Y8) the session number and key to an algorithm (ASX, ASY) in the processing means and the respective entity to produce a result (REX, REY) and signature (SGY, SGY); transmitting (X7, Y7) the numbers and the signatures to the processing means; and executing (F10) the session corresponding to the numbers from the processing means when the signatures are identical (X9, Y9) to the results. In another embodiment, one of the entities receives a delegation of a third entity to authorise execution of the session.

Claims13

Dependent claims

A method for making secure the execution of a session with a data processing means (CA) under the command of at least two electronic entities (EX, EY), characterised in that it comprises the following steps of:

transmitting (X2, Y2) session numbers (NSX, NSY) and session keys (KSX, KSY) from the processing means (CA) respectively to the entities (EX, EY),
applying (X6, X8;
Y6, Y8) the respective session number (NSX, NSY) and the respective session key (KSX, KSY) to a respective security algorithm (ASX, ASY) in the processing means (CA) and the respective entity (EX, EY) in order to produce a respective result (REX, REY) and a respective signature (SGX, SGY),
transmitting (X7, Y7) the respective session number (NSX, NSY) and the respective signature (SGX, SGY) from the respective entity to the processing means, and
executing (F10) the session corresponding to the session numbers retransmitted (NSX, NSY) from the processing means (CA) when the signatures are respectively identical (X9, Y9) to the results.

2 more elements

Dependencies are inferred from the claim text.

Facts

Application: 10/343,112Filed 28 Jan 2003
Priority: FR 00 1002528 Jul 2000
Published: 11 Sep 2003
Term ends: Not estimatedThe source records don’t support an estimate.

Classification15 codes

H04L 63/0442
Wherein the data content is protected, e.g. by encrypting or encapsulating the payload: wherein the sending and receiving network entities apply…
G06Q 20/341
Using cards, e.g. integrated circuit [IC] cards or magnetic cards: active cards, i.e. cards including their own processing means, e.g. including…
G06Q 20/363
Using electronic wallets or electronic money safes: with the personal data of a user
G06Q 20/40975
Using mutual authentication between devices and transaction partners: using encryption therefor