Method for securing a request for executing a first application, by a second application

A method for transmitting an authenticatable application to a first device in a first environment, comprising the following steps, implemented by a trusted entity:

• reception of a random item originating from a second device in a second environment, said second environment being secure and distinct from the first environment, said random item being generated for a first request for execution of a first application of the second device, originating from a second application of the first device,
• generation of a session key dependent on the random item,
• generation of an application authenticatable by means of the session key,
• dispatching of said authenticatable application to the first device, said third application being designed to authenticate itself with the first application upon a second request for execution of the first application.

A secure device, hosting a first application, the device comprising:

• reception means, designed to receive a first request for execution of the first application, originating from a second application, the second application being hosted by a second device, distinct from the secure device, and to receive a second request for execution of the first application originating from a third application generated by a trusted entity and transmitted to the second device, said third application comprising a session key,
• generating means, designed to generate a random item for the first execution request and the session key dependent on the random item generated,
• dispatching means, designed to dispatch said random item to the trusted entity, said random item being intended to allow the trusted entity to generate the session key,
• authentication means, designed to authenticate the third application by means of the session key, the authentication of the third application conditioning the execution of the first application.

A terminal comprising a secure device, hosting a first application, the device comprising:

• reception means, designed to receive a first request for execution of the first application, originating from a second application, the second application being hosted by a second device, distinct from the secure device, and to receive a second request for execution of the first application originating from a third application generated by a trusted entity and transmitted to the second device, said third application comprising a session key,
• generating means, designed to generate a random item for the first execution request and the session key dependent on the random item generated,
• dispatching means, designed to dispatch said random item to the trusted entity, said random item being intended to allow the trusted entity to generate the session key,
• authentication means, designed to authenticate the third application by means of the session key, the authentication of the third application conditioning the execution of the first application.

A trusted entity of a network, said entity being designed to generate and transmit an authenticatable application to a first device of a first environment, and comprising:

• reception means, designed to receive a random item originating from a second device in a second environment, said second environment being secure and distinct from the first environment, said random item being generated for a first request for execution of a first application of the second device, originating from a second application of the first device,
• first generating means, designed to generate a session key dependent on the random item,
• second generating means, designed to generate an application authenticatable by means of the session key,
• dispatching means, designed to dispatch said authenticatable application to the first device, said third application being designed to authenticate itself with the first application upon a second request for execution of the first application.

A system for securing the execution of an application, comprising:

• a trusted entity, said entity being designed to generate and transmit an authenticatable application to a first device of a first environment, and comprising:
• reception means, designed to receive a random item originating from a second device in a second environment, said second environment being secure and distinct from the first environment, said random item being generated for a first request for execution of a first application of the second device, originating from a second application of the first device,
• first generating means, designed to generate a session key dependent on the random item,
• second generating means, designed to generate an application authenticatable by means of the session key,
• dispatching means, designed to dispatch said authenticatable application to the first device, said third application being designed to authenticate itself with the first application upon a second request for execution of the first application, and
• at least one secure device, hosting a first application, the secure device comprising:
• reception means, designed to receive a first request for execution of the first application, originating from a second application, the second application being hosted by a second device, distinct from the secure device, and to receive a second request for execution of the first application originating from a third application generated by a trusted entity and transmitted to the second device, said third application comprising a session key,
• generating means, designed to generate a random item for the first execution request and the session key dependent on the random item generated,
• dispatching means, designed to dispatch said random item to the trusted entity, said random item being intended to allow the trusted entity to generate the session key,
• authentication means, designed to authenticate the third application by means of the session key, the authentication of the third application conditioning the execution of the first application.