Back to results
US 2011/0035596 A1Published application
Method of Secure Broadcasting of Digital Data to an Authorized Third Party
AssigneeEtsem Limited
InventorsJonathan Attia, Bernard Pinot
Life of this patent
Estimating the term…
Abstract
The invention relates to a method of secure broadcasting of encrypted digital data of a proprietary entity, these data being stored in a storage module (6) of a server (5), comprising: the encryption of the digital data by means of an encryption key for the broadcasting of the digital data to the authenticated third party, and the broadcasting of these digital data to the authenticated third party.
Claims18
Method of secured broadcasting of encrypted digital data of a proprietary entity (A), this data being stored in a storage module (66) of a server (5) comprising the steps of:
- in an authentication module hosted by a server (5), making a strong authentication of a third party (B) requesting the broadcasting of encrypted digital data of the proprietary entity (A);
- once the third party (B) has been authenticated, decrypting a private digital certificate (CePrB) of the third party with a first symmetrical encryption key (KeS1B) dedicated to the authenticated third party, the private digital certificate of the third party (CePrB) being stored in a storage module (62) of a server and comprising a pair of asymmetrical encryption keys (KprB, KpcB);
- by means of the private key (KprB) of said pair of keys, decrypting a digital certificate pre-negotiated (CeNeaB) with the proprietary entity (A) and comprising a symmetrical encryption key (KseB) for the broadcasting of the data to the authenticated third party, the negotiated digital certificate (CeNeaB) being stored in a storage module (63) of a server;
- once the negotiated digital certificate (CeNeaB) is decrypted, reading an access policy certificate (CeSeA) prepared by the proprietary entity (A) and defining the rights of access to the encrypted digital data of the proprietary entity, the access policy certificate being stored in a storage module (64) of a server;
- if the access policy certificate authorizes the third Party (B) to access the encrypted digital data of the proprietary entity, decrypting the encrypted digital data with a storage symmetrical encryption key (KeS2A) contained in a private digital certificate (CePrA) of the proprietary entity (A), this private digital certificate (CePrA) being stored in a storage module (62) of a server;
- encrypting the digital data by means of the encryption key (KseB) for the broadcasting of the digital data to the authenticated third party and broadcasting this digital data to the authenticated third party (B).
3 more elements
System for the secured broadcasting of encrypted digital data comprising:
- an encrypted digital data storage module (66) hosted in a server;
- a module for the strong authentication of users, hosted in a server;
- a private digital certificate storage module (62) for certificates dedicated to respective users, each private digital certificate comprising a first symmetrical encryption key, a pair of asymmetrical encryption keys and a storage symmetrical encryption key dedicated to its user, this storage module being hosted in a server;
- a storage module (63) for the storage of digital certificates negotiated between two users, each negotiated digital certificate comprising a symmetrical encryption key for the broadcasting of the digital data of one of the two users to the other of the two users, this storage module being hosted in a server;
- a storage module (64) for the storage of access policy certificates defining the rights of access to the digital data of a user by another user, this storage module being hosted in a server;
- an encryption/decryption module capable of:
- decrypting the private digital certificate of a first user with its first symmetrical encryption key after its authentication;
- decrypting a digital certificate negotiated with a second user by means of the private key of the pair of keys of the first user;
- after the decrypting of the negotiated digital certificate, reading a certificate of policy of access to the digital data defined by the second user;
- if the first user has a right of access to the digital data of the second user, decrypting digital data by means of the storage decryption key of the second user, encrypting the digital data by means of the broadcasting encryption key of the first user, and broadcasting this digital data to the first user.
7 more elements
Dependencies are inferred from the claim text.