Method to produce securing data, corresponding device and computer program
AssigneeInstitut Telecom / Telecom Paristech
InventorPascal Urien
Life of this patent
Estimating the term…
Abstract
A method and apparatus are provided for generating security data for implementing a secure session between a first and at least a second entity according to a secure session establishment protocol. Such a method includes: initializing a third secure entity connected to the first entity; generating at least a portion of the security data within the third entity; transmitting the generated security data from the secure third entity to the first entity; and transmitting at least a portion of the security data generated in the third secure entity to at least a previously initialized fourth secure entity connected to the third secure entity.
Claims14
A method for producing securing data for implementing a secured session between a first entity and at least one second entity, according to a protocol for setting up secured sessions, wherein the method comprises:
- a step of initializing a third secured entity linked to said first entity;
- a step of generating at least one part of said securing data within said third entity;
- a first step of transmitting said securing data generated by said third secured entity towards said first entity;
- a second step of transmitting at least one part of said securing data generated within said third secured entity intended for at least one fourth secured entity preliminarily initialized and linked to said third secured entity.
A method for setting up a secured communications session between a first entity and at least one second entity, according to a protocol for setting up a secured session, wherein the method comprises:
- a step of obtaining a session identifier and an ephemeral secret computed during a previous communications session secured by a third secured entity linked to said first entity;
- a step of transmitting said session identifier and said ephemeral secret to a fourth secured entity preliminarily initialized and linked to said third secured entity;
- a step of setting up a secured communications session by using said fourth secured entity.
A device for producing securing data, enabling the implementation of a secured session between a first entity and at least one second entity, according to a protocol for setting up secured sessions, wherein the device comprises:
- means for initializing attached to said first entity;
- means for generating at least one part of said securing data within said third entity;
- means for transmitting said securing data to said first entity;
- means for transmitting at least one part of said securing data generated within said third secured entity intended for at least one fourth secured entity preliminarily initialized and linked to said third secured entity.
A portable device, comprising:
- means for storing a manager of security modules;
- at least two SIM-format card readers;
- and
- a device for producing securing data, enabling implementation of a secured session between a first entity and at least one second entity, according to a protocol for setting up secured sessions, wherein the device comprises:
- means for initializing attached to said first entity;
- means for generating at least one part of said securing data within said third entity;
- means for transmitting said securing data to said first entity;
- and
- means for transmitting at least one part of said securing data generated within said third secured entity intended for at least one fourth secured entity preliminarily initialized and linked to said third secured entity.
A software product stored on a non-transitory computer-readable carrier and executable by a microprocessor, wherein the program comprises program code instructions for executing a method for producing securing data for implementing a secured session between a first entity and at least one second entity, according to a protocol for setting up secured sessions, when the instructions are executed on a computer, wherein the method comprises:
- a step of initializing a third secured entity linked to said first entity;
- a step of generating at least one part of said securing data within said third entity;
- a first step of transmitting said securing data generated by said third secured entity towards said first entity;
- a second step of transmitting at least one part of said securing data generated within said third secured entity intended for at least one fourth secured entity preliminarily initialized and linked to said third secured entity.
Dependencies are inferred from the claim text.