METHOD AND DEVICE FOR SECURING DATA TRANSFERS

• US 20110107408A1
• Filed: 04/21/2009
• Published: 05/05/2011
• Est. Priority Date: 04/22/2008
• Status: Active Grant

• Current Assignee: Trustseed SAS
• Original Assignee: Trustseed SAS
• Inventors: Blot-Lefevre, Eric
• Granted Patent: US 9,444,645 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

The method for securing data transfers comprises: A transmission of a document from a document sender to a least one document recipient, by implementing at least one step of processing of said document, by implementing at least one step of processing of said document, for at least one said step of processing of the document, a step of measuring a probative value of said processing step, a step of aggregating the probative values of the steps of processing of said transmission to provide a measure of the overall probative value of said document transmission, and a step of association of said overall probative value with said transmission of said document.

Claims

1. A method for securing data transfers, comprising:

a step of checking the identity of at least one recipient to whom a sender of a document wants to transmit said document,

a step of transmission, over a computer network, by the sender to at least one of the recipients whose identity has been checked, of said document by implementing at least one step of processing of said document by document processing means,

for at least one said document processing step performed by the document processing means after the step of checking the identity of at least one recipient, a step of measuring a probative value of said processing step according to the document processing means implemented,

a step of aggregating the probative values of the steps of processing said transmission to provide a measurement of an overall probative value of said transmission of the document, and

a step of associating, in memory, said overall probative value with an identifier of said transmission of said document.

2. The method of claim 1, wherein, during the measurement step, the measurement is a function of the procedure for identifying the sender implemented by the document processing means.

3. The method of claim 1, wherein, during the measurement step, the measurement is a function of the type of electronic signature made, with the document processing means, by at least one user sending or receiving data.

4. The method of claim 1, wherein, during the measurement step, the measurement is a function of the type of archiving of the data transmitted by the document processing means.

5. The method of claim 1, wherein, during the measurement step, the measurement is a function of the result of an automatic computer read performed by the document processing means.

6. The method of claim 1, further comprising a step of construction of an acknowledgement of receipt comprising an information item representative of the overall probative value of the transmission, said acknowledgement of receipt being associated with said document during said association step.

7. The method of claim 1, further comprising a step of assignment of an overall probative value to a future document transmission and a step of selection of the processing steps to be carried out during

this transmission according to the overall probative value that said processing steps jointly make it possible to achieve.

8. A system for managing secure electronic correspondences comprising at least one application server handling a directory service for the users of said system and a service for supplying said users with current correspondence accounts, said system handling the scheduling of at least one operation for processing said electronic correspondences belonging to the group comprising composition before sending, transmission of the composed correspondence and archiving of the sent correspondence, wherein said system also provides a service for the end-to-end monitoring of the operations scheduled by the application server.

9. The system for managing secure electronic correspondence of claim 8, wherein the monitoring service handles at least one of the operations chosen from the group of those used to ensure traceability of the integrity of the electronic correspondences, verification of the conformity of the scheduled operations to predefined procedures and assignment of a probative value score to each of the operations carried out by the application server.

10. The electronic correspondence management system of claim 9, wherein the probative value scores of a determined list of operations carried out by the application server, comprising at least one operation not involving the directory service, are aggregated in a probative value score for each correspondence.