Method for managing an access from a remote device to data accessible from a local device and corresponding system

• US 10,038,681 B2
• Filed: 07/07/2009
• Issued: 07/31/2018
• Est. Priority Date: 07/08/2008
• Status: Active Grant

• Current Assignee: Thales DIS France SAS (Thales SA)
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Charbonnier, Emilien, Galland, Antoine, George, Patrick
• Primary Examiner(s): Lewis, Lisa C
• Application Number:
  US13/002,852
• Publication Number:
  US 20110154462A1
• Time in Patent Office: 3,311 Days
• Field of Search: 709213-216, 711147
• CPC Class Codes: H04L 2101/663 Transport layer addresses, e.g. aspects of transmission control protocol [TCP] or user datagram protocol [UDP] ports
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

The invention relates to a method for managing an access from a remote device to data and/or at least one resource accessible from a local device. The local device includes a browser. The remote device hosts a server, as a remote server. During a remote server connecting step, the browser sends to the remote server a request for loading data. According to the invention, the remote server sends, through the browser, to a local server a request for connecting a local server, as response to the request for loading data, and the local server sends data to the remote server, the local server being connected from the remote server to a data storage devices and/or at least one resource accessible from the local device. The invention relates also to a corresponding system having a token and a terminal coupled with the token.

Claims

1. A method for managing an access from a remote device to data and/or at least one resource accessible from a local device and the remote device, wherein the local device includes a browser, and the remote device includes a remote server, the method comprising:

a remote server connecting step in which the browser sends to the remote server a request for loading data,

a local server interconnecting step in which the remote server sends a page to the browser, the page including executable data and a graphic interface, such that execution of the executable data by the browser causes the browser to send to a local server a request for connecting to the local server, as a response to the request for loading data; and

wherein the browser, as a single user interface, displays the graphic interface, the graphic interface aggregating data originating from at least one remote data storage area and data originating from at least one local data storage area.

2. The method according to claim 1, further comprising a local server connecting step in which the local server sends data to the remote server, the local server being connected from the remote server to data storing means and/or at least one resource accessible from the local device.

3. The method according to claim 1, further comprising a remote connecting step in which a remote data storage area sends, upon a user selection through the browser, data to the local server, the remote data storage area being connected, through the local server, to data storing means and/or at least one resource accessible from the local device.

4. The method according to claim 1, wherein the method further comprises a remote server authentication step wherein, during the local server interconnecting step, the remote server sends, through the browser, to the local server, a request for connecting to the local server accompanied with data relating to first credentials, as a response to the request for loading data, and

the local server compares data relating to the first credentials with first expected authentication data and, according to a comparison result, the local server authorizes or forbids the remote server to further exchange data with the local server.

5. The method according to claim 1, wherein the browser presents, through the local server, at least one item of information relating to, on one hand, data stored within the remote device and/or within at least one other device connected to the remote device and, on the other hand:

data stored within the local device;

data stored within at least one other device connected to the local device; and

/or

data relating to at least one resource accessible from the local device.

6. The method according to claim 1, wherein the method comprises a user authentication step, the user authentication step comprising a step in which the local server sends data relating to second credentials to the remote server and/or an authentication server, the remote server and/or the authentication server compares data relating to the second credentials to second expected authentication data, and, according to a comparison result, the remote server and/or the authentication server forbids or authorizes the local server to continue while transmitting third credentials to the local server to be used for further communicating from the local server to the authentication server and/or the remote server.

7. The method according to claim 6, wherein the method comprises a local server authentication step, wherein the remote server and/or the authentication server receives from the local server data relating to the third credentials, the remote server and/or the authentication server compares data relating to the third credentials to third expected authentication data, and, according to a comparison result, the remote server and/or the authentication server forbids or authorizes the local server to continue while transmitting fourth credentials to the local server to be used for further communicating from the local server to the authentication server and/or the remote server.

8. The method according to claim 7, wherein a token is connected to the local device, the token being able to generate data relating to the second credentials and/or store data relating to the second credentials to be sent by the local server to the remote server and/or the authentication server.

9. The method according to claim 6, wherein a user enters data, as second credentials, by using a man machine interface included within or connected to the local device, and wherein the local server sends the second credentials to the remote server and/or the authentication server.

10. The method according to claim 8, wherein the remote server and/or the authentication server are able to generate the data relating to the second, the third and/or the fourth credentials, and/or store data relating to the second, the third and/or the fourth credentials to be sent by the remote server and/or the authentication server to the local server and/or store the second, the third and/or the fourth expected authentication data.

11. The method according to claim 1, wherein the local server sends to the remote device, and/or another remote data storage means connected to the remote device, data stored within the local device and/or within a resource connected to the local device and/or a token connected to the local device.

12. A system for managing an access to data and/or at least one resource accessible from a local device and a remote device, the system comprising:

a local device, and a remote device connected to the local device, wherein;

the remote device includes a remote server;

the local device includes a browser and a local server, the browser being configured to send to the remote server a request for loading data; and

the remote server is configured to send a page to the browser, the page including executable data and a graphic interface, such that execution of the executable data by the browser causes the browser to send to the local server a request for connecting to the local server, as a response to the request for loading data, wherein

the browser, as a single user interface, displays the graphic interface, the graphic interface aggregating data originating from at least one remote data storage area and data originating from at least one local data storage area.

13. The system according to claim 12, wherein the local server is configured to send data to the remote server, the local server being configured to be connected from the remote server to at least one memory and/or at least one resource accessible from the local device.

14. The system according to claim 12, wherein a remote data storage area sends, upon a user selection through the browser, data to the local server, the remote data storage area being connected, through the local server, to at least one memory and/or at least one resource accessible from the local device.