Method and system for communication between a secure information storage device and at least one third party, and corresponding entity, device and third party

• US 20090049521A1
• Filed: 09/07/2005
• Published: 02/19/2009
• Est. Priority Date: 10/29/2004
• Status: Active Grant

• Current Assignee: 3G Licensing S.A. (Fineur International S.A.)
• Original Assignee: Orange S.A.
• Inventors: Macariot-Rat, Gilles, Leclercq, Thierry, Barnaud, Vincent, Le Rouzic, Jean-Pierre
• Granted Patent: US 8,739,267 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

The disclosure relates to a method for communication between a secure information storage device and at least one third party with which information is exchanged. An entity ensures the management of a plurality of secure information storage devices to which said device pertains. The method includes the following steps: the entity places, in a secure container which is arranged in the device and specific to a third party, an authorisation for communication between the secure container and the given third party; the entity sends an identifier of the device, an address of the device, an identifier of the secure container, and the authorisation to communicate, to the give third party; the given third party attempts to establish communication with the secure container, using the address of the device, the identifier of the device, the identifier of the secure container, and the authorisation to communicate; and, before accepting said communication, the device checks that the authorisation to communicate transmitted by the third party is acceptable in view of the authorisation to communicate previously placed in the secure container by the entity.

Claims

1-15. -15. (canceled)

16. Method of communications between a secure information storage device and at least one third party with which said information is exchanged, an entity carrying out the management of a plurality of secure information storage devices to which said device belongs, wherein the method comprises the following steps:

the entity places, in a secure container included in said device and specific to a given third party, an authorization of communication between the secure container and said given third party;

the entity sends the given third party an identifier of the device, an address of the device within a communications network, an identifier of the secure container and said authorization of communication;

the given third party attempts to set up communications with the secure container in using the address of the device, the identifier of the device, the identifier of the secure container and the authorization of communication; and

before accepting communications between the given third party and the secure container, the device checks that the authorization of communication transmitted by the third party is acceptable in the light of the authorization of communication previously placed by the entity in the secure container.

17. Method according to claim 16, wherein the method furthermore comprises the following steps, performed after the communication between the secure container and the given third party has been accepted:

the given third party sends the secure container a first authorization of access specific to the given third party for the secure container; and

the secure container stores said first authorization of access so that only the given third party, that has the first authorization of access, is subsequently authorized by the secure container, independently of the entity, to use and modify the information contained in the secure container.

18. Method according to claim 17, wherein the method furthermore comprises the following steps:

the entity sends the device a request for revocation of said first authorization of access specific to the given third party for the secure container; and

the device revokes the first authorization of access specific to the given third party for the secure container.

19. Method according to claim 18, wherein the step of revocation of the first authorization of access is preceded by the following step:

the device authenticates the entity with a second authorization of access preliminarily given by the entity and placed by the device, before agreeing to revoke the first authorization of access specific to the given third party for the secure container.

20. Method according to claim 16, wherein the step of placing the authorization of communication in the secure container is preceded by the following steps:

the entity transmits a request for placing said authorization of communication in the secure container to the device; and

the device authenticates the entity with an authorization of access preliminarily given by the entity and placed in the device before accepting the placing of the authorization of communication in the secure container.

21. A method according to claim 16, wherein the step of placing the authorization of communication in the secure container is preceded by the following step:

the given third party requests the entity to place the authorization of communication between the given third party and the secure container in the secure container, the given third party giving the entity the identifier of the device.

22. Method according to claim 16 wherein, after the communication between the secure container and the given third party has been accepted, the given third party sends-information to the secure container so that the secure container stores the information.

23. Method according to claim 16, wherein the information stored in the secure container belongs to the group consisting of data and programs.

24. Method according to claim 16, wherein the information stored in the secure container can be used to fulfill a function belonging to the group consisting of:

the authentication by the given third party of a holder of the device;

electronic wallet;

authorization to use an apparatus with which the device cooperates;

maintenance of an apparatus with which the device cooperates;

management of a function of an apparatus with which the device cooperates.

25. Method according to claim 16, wherein the given third party is a service provider.

26. Method according to claim 16, wherein the method enables communication between the device and at least two third parties, at least one container specific to each third party being included in the device.

27. System of communications between a secure information storage device and at least one third party with which said information is exchanged, an entity carrying out the management of a plurality of secure information storage devices to which said device belongs, wherein:

the entity comprises means for placing, in a secure container included in said device and specific to a given third party, an authorization of communication between the secure container and said given third party;

the entity comprises means for sending the given third party an identifier of the device, an address of the device within a communications network, an identifier of the secure container and said authorization of communication;

the given third party comprises means for attempting to set up a communication with the secure container, in using the address of the device, the identifier of the device, the identifier of the secure container and the authorization of communication; and

the device comprises means for checking that the authorization of communication transmitted by the given third party is acceptable in the light of the authorization of communication preliminarily placed by the entity in the secure container so that the device accepts communications between the given third party and the secure container only if the checking means decide that the authorization of communication transmitted by the third party is acceptable.

28. Entity carrying out the management of a plurality of secure information storage devices to which said device belongs, this entity comprising:

means for placing, in a secure container included in a given device and specific to a given third party, an authorization of communication between the secure container and said given third party; and

means for sending the given third party an identifier of the given device, an address of the device within a communications network, an identifier of the secure container and said authorization of communication;

so that the given third party can attempt to set up a communication with the secure container, in using the address of the given device, the identifier of the given device, the identifier of the secure container and the authorization of communication and so that, before accepting communications between the given third party and the secure container, the device checks that the authorization of communication transmitted by the third party is acceptable in the light of the authorization of communication previously placed by the entity in the secure container.

29. Secure information storage device for communication with at least one third party with which information is exchanged, wherein device comprises:

means of storage in a secured container, included in said device and specific to a given third party, of an authorization of communication between the secured container and said given third party, said authorization of communication being placed by an entity providing for the management of a plurality of secure information storage devices to which said device belongs; and

means for checking that an authorization of communication transmitted by the given third party is acceptable in the light of the authorization of communication preliminarily placed by the entity in the secure container so that the device accepts communications between the given third party and the secure container only if the checking means decide that the authorization of communication transmitted by the third party is acceptable.

30. A third party apparatus for communication with a secured information storage device, the third party apparatus comprising:

means of reception, from an entity carrying out the management of a plurality of secure information storage devices to which said device belongs, of an identifier of the device, an address of the device within a communications network, an identifier of the secure container and an authorization of communication between the secured container and said third party; and

means for attempting to set up a communication with the secure container, in using the address of the device, the identifier of the device, the identifier of the secure container and the authorization of communication;

so that, before accepting communication between the third party apparatus and the container, the device can check that the authorization of communication is acceptable in the light of an authorization of communication preliminarily placed by the entity in the secure container.