Method And Server For Accessing An Electronic Safe Via a Plurality of Entities

• US 20090235080A1
• Filed: 12/10/2008
• Published: 09/17/2009
• Est. Priority Date: 12/10/2007
• Status: Active Grant

• Current Assignee: Be-Invest International SA
• Original Assignee: Almerys
• Inventors: Tirbois, Jean-Marie, Chochois, Michael
• Granted Patent: US 8,621,231 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

A method of managing electronic safes, comprising a step of authenticating a user requesting access to a safe, by means of authentication data of said user, said authentication data to be provided by the user being dependant of an entity by means of which the user is requesting said access.

Claims

1. A method of managing electronic safes, comprising a step of authenticating a user requesting access to a safe, by means of authentication data of said user, said authentication data to be provided by the user being dependant of an entity by means of which the user is requesting said access.

2. The method according to claim 1, comprising a step of identifying the entity by means of which the user is requesting access to the safe and a step of determining authentication data to provide depending on the identified entity.

3. The method according to claim 1, comprising, when the user requests for the first time an access to the electronic safe by means of an entity from amongst a first and a second entity, a step of transmitting authentication data to a terminal of the user with a view to the storage of said authentication data in a hardware security module assigned to the user and associated specifically with said entity, the authentication data transmitted with a view to storage in the hardware security module associated with a first entity being different from the authentication data transmitted with a view to storage in the hardware security module associated with a second entity.

4. The method according to claim 1, comprising a step of signing and/or encryption, by means of a signature and/or encryption key, of data to be stored on request of said user in said electronic safe, the key used when the user requests storage in said electronic safe by means of a first entity being identical to that used when the user requests storage in said electronic safe by means of a second entity.

5. An electronic safe management server, comprising authentication means designed to authenticate a user requesting access to a safe by means of authentication data of said user, said authentication data to be provided by the user being dependant of an entity by means of which the user is requesting said access.

6. The server according to claim 5, comprising means of identifying the entity by means of which the user is requesting access to the safe and means of determining authentication data to provide depending on the identified entity.

7. A server according to claim 5, comprising configuring means in order, when the user requests for the first time an access to the electronic safe from the server by means of an entity from amongst first and second entities, to transmit authentication data to a terminal of the user with a view to the storage of said authentication data in a hardware security module assigned to the user and associated specifically with said entity, the authentication data transmitted with a view to storage in the hardware security module associated with a first entity being different from the authentication data transmitted with a view to storage in the hardware security module associated with a second entity.

8. A computer program comprising instructions for implementing, during execution of said program on a computer, a step of authenticating a user requesting access to a safe, by means of authentication data that are a function of an entity by means of which the user is requesting said access.