PROCEDE ET DISPOSITIF DE SECURISATION DE TRANSFERTS DE DONNEES

• US 20110060906A1
• Filed: 04/18/2008
• Published: 03/10/2011
• Est. Priority Date: 04/18/2006
• Status: Active Grant

• Current Assignee: Trustseed SAS
• Original Assignee: Trustseed SAS
• Inventors: Blot-Lefevre, Eric, Lafon, Martin
• Granted Patent: US 8,677,124 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

The method of securing data transfer comprises: a step of attempting to transmit a document from a document sender to at least one document recipient, by implementing at least one transmission attribute and for at least one step of attempted transmission, a step of evaluating the value of at least one transmission attribute and a step of making the evaluation of the value of the transmission attribute available to the sender. Preferably, in the course of the evaluating step, the evaluation is dependent on the anomalies of correspondence that are observed for each attempted transmission. Preferably, in the course of the evaluating step, the evaluation is, moreover, dependent on the elements provided by the recipient in the course of a step of registering with an electronic document transmission service.

Claims

1. A method for securing data transfer, characterized in that it comprises:

a step of attempted transmission of a document from a document sender destined for at least one document recipient, by implementing at least one transmission attribute and

for at least one step of attempted transmission, a step of evaluating the value of at least one transmission attribute and

a step of placing at the disposal of the sender, the evaluation of the value of the transmission attribute.

2. The method as claimed in claim 1, characterized in that, in the course of the evaluation step, the evaluation is dependent on the correspondence anomalies observed for each transmission attempt.

3. The method as claimed in either one of claim 1 or 2, characterized in that, in the course of the evaluation step, the evaluation is, furthermore, dependent on the elements provided by the recipient in the course of a step of registering with a service for the electronic transmission of documents.

4. The method as claimed in any one of claims 1 to 3, characterized in that it comprises, furthermore, a step of evaluating the identification of the sender of said document and, upon access to the document by the recipient, a step of providing the recipient with the evaluation of the identification of the sender.

5. The method as claimed in any one of claims 1 to 4, characterized in that it comprises:

a step of placing a copy of the document in memory in a first memory accessible by the sender of the document but not accessible by a recipient of the document,

for each recipient of the document, a step of placing a copy of the document in memory in a second memory accessible by said recipient of the document but not accessible by the sender of the document and

a step of transmitting to each recipient of the document an information item representative of the existence of a copy of the document at the disposal thereof in a said second memory.

6. The method as claimed in claim 5, characterized in that, in the course of said step of authenticating the recipient, an acknowledgment of receipt is constructed and said method comprises a step of placing in memory, in each of the first and second memories, said acknowledgment of receipt in conjunction with a copy of said document.

7. The method as claimed in any one of claims 1 to 6, characterized in that, in the course of a step of creating the document, attributes representative of conditions of authentication of the recipient are allocated to said document.

8. The method as claimed in any one of claims 1 to 7, characterized in that it comprises:

a step of storing the document and the identification of each recipient,

a step of electronic transmission, to at least one electronic address of each recipient of the document, of an information item representative of the existence of the document at the disposal thereof,

for at least one recipient of the document, a step of determining whether the elapsed duration since the step of electronic transmission and before the receipt of the document, by said recipient of the document, is greater than a predetermined duration and

if, for said recipient of the document, the elapsed duration since the step of electronic transmission and before the receipt of the document, by said recipient of the document, is greater than a predetermined duration, a step of printing said document and of transmitting the printed document to a postal address of said recipient.

9. The method as claimed in any one of claims 1 to 8, characterized in that it comprises:

a step of so-called “

weak”

identification of a user in the course of which said user provides one or more electronic addresses,

a step of message transmission from said user or to said user, by implementing said first identification,

a step of so-called “

strong”

identification of a user, in the course of which said user provides proof of his identity and a pair of asymmetric keys is allocated to him and

a step of transmitting messages, from said user or to said user, by implementing said pair of asymmetric keys.

10. The method as claimed in any one of claims 1 to 9, characterized in that it comprises:

a step of assigning values of trusted attributes to a process for transferring data from a document sender to a document recipient,

a step of editing a document, by a document sender, in the course of which the document sender defines at least one recipient and values of trusted attributes required for the transmission of said document and

for each recipient for which the values of trusted attributes assigned to the process for transferring data from the sender to this recipient are all greater than the required values, a step of transmitting said document to said recipient.

11. A device for securing data transfer, characterized in that it comprises:

a means for performing an attempted transmission of a document from a document sender destined for at least one document recipient, by implementing at least one transmission attribute and

for at least one step of attempted transmission, an evaluation means suitable for evaluating a value of at least one transmission attribute and

a means for placing at the disposal of the sender, the evaluation of the value of the transmission attribute.