US 2021/0240813 A1Published application

Mutual Authentication of a User-Controllable Device or System Containing Sensitive or Confidential Data

AssigneeLedger SAS

InventorsNicolas Bacca, Olivier Tomaz

Life of this patent

Estimating the term…

Loading patent…

Abstract

Method of mutual authentication of a controllable electronic device (DE) and of its user (USER) able to control it so that it procures him a service (DS), the device (DE) containing sensitive or confidential data (DA) and being arranged so as to—in an operational phase (OP) including a preliminary step of authentication of the user (UAP)—, execute an operation (SO) so as to procure the service (DS), including, furthermore, a prior phase of authentication of the device (SDAP), in which the authenticity of the device (DE) is verified, so that if on completion of the prior phase of authentication of the device (SDAP), the device (DE) is confirmed to be authentic, the user (USER) can execute the operational phase (OP), whilst if the device (DE) is not confirmed to be authentic, the user (USER) can prevent the execution of the operational phase (OP).

Claims22

Dependent claims

A method for the mutual authentication of a controllable functional electronic device (DE) and of its user (USER) comprising a preliminary device (DE) configuration phase (SDCP) defining the modalities for verifying its authenticity, the user (USER) then being able to control the device (DE) such that it provides him with a determined service (DS), the device (DE) containing sensitive or confidential data (DA) and being arranged so as—during an operational phase (OP) initiated by the user (USER) and including a preliminary user authentication step (UAP) by the device (DE)—to perform a specific operation (SO) appropriate to provide the service (DS), the method further comprising, before any operational phase (OP) is performed, a preliminary device authentication phase (SDAP) in which the authenticity of the device (ED) is verified, such that:

if, at the end of the preliminary device authentication phase (SDAP), the device (DE) is proven to be genuine, the user (USER) can perform the operational phase (OP),
if, at the end of the preliminary device authentication phase (SDAP), the device (ED) is not proven to be genuine, the user (USER) can prevent execution of the operational phase (OP), such that first the device (DE) and then the user (USER) are authenticated, and the operation and the service (DS) provided are secure.

Dependencies are inferred from the claim text.

Facts

Application: 17/051,519Filed 30 Apr 2019
Priority: FR 187050730 Apr 2018
Published: 5 Aug 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

G06F 21/44
Authentication, i.e. establishing the identity or authorisation of security principals: program or device authentication
G06F 21/31
Authentication, i.e. establishing the identity or authorisation of security principals: user authentication
G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
H04W 12/06
Security arrangements; Authentication; Protecting privacy or anonymity: authentication

Family

US 11,954,196 B2Related patent
US 2021/0240813 A1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key