METHOD FOR MANAGING AN ACCESS FROM A REMOTE DEVICE TO DATA ACCESSIBLE FROM A LOCAL DEVICE AND CORRESPONDING SYSTEM

• US 20110154462A1
• Filed: 07/07/2009
• Published: 06/23/2011
• Est. Priority Date: 07/08/2008
• Status: Active Grant

• Current Assignee: Thales DIS France SA
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Charbonnier, Emilien, George, Patrick, Galland, Antoine
• Granted Patent: US 10,038,681 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: H04L 2101/663 Transport layer addresses, e.g. aspects of transmission control protocol [TCP] or user datagram protocol [UDP] ports
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

The invention relates to a method for managing an access from a remote device to data and/or at least one resource accessible from a local device. The local device includes a browser. The remote device hosts a server, as a remote server. During a remote server connecting step, the browser sends to the remote server a request for loading data. According to the invention, the remote server sends, through the browser, to a local server a request for connecting a local server, as response to the request for loading data, and the local server sends data to the remote server, the local server being connected from the remote server to a data storage devices and/or at least one resource accessible from the local device. The invention relates also to a corresponding system having a token and a terminal coupled with the token.

Claims

1. A method for managing an access from a remote device to data and/or at least one resource accessible from a local device, wherein the local device includes a browser, and the remote device hosts a server, as a remote server, the method comprising:

a remote server connecting step in which the browser sends to the remote server a request for loading data,

a local server interconnecting step in which the remote server sends, through the browser, to a local server a request for connecting a local server, as a response to the request for loading data; and

a local server connecting step in which the local server sends data to the remote server, the local server being connected from the remote server to data storing means and/or at least one resource accessible from the local device.

2. Method according to claim 1, wherein the method comprises a remote server authentication step wherein, during the local server interconnecting step, remote server sends, through the browser, to the local server, a request for connecting a local server accompanied by data relating to first credentials, as a response to the request for loading data, and

the local server compares data relating to the first credentials with first expected authentication data, and, according to a comparison result, the local server authorizes or forbids the remote server to further exchange data with the local server.

3. Method according to claim 1, wherein the browser presents, through the local server, at least one item of information relating to, on one hand, data stored within the remote device and/or within at least one other device connected to the remote device and, on the other hand:

data stored within the local device;

data stored within at least one other device connected to the local device; and

/or

data relating to at least one resource accessible from the local device.

4. Method according to claim 2, wherein the method comprises a user authentication step, the user authentication step comprising the local server sending data relating to second credentials to the remote server and/or an authentication server, the remote server and/or the authentication server comparing data relating to second credentials with second expected authentication data, and, according to a comparison result, the remote server and/or the authentication server forbidding or authorizing the local server to continue while transmitting third credentials to the local server to be used for further communicating from the local server to the authentication server and/or the remote server.

5. Method according to claim 4, wherein the method comprises a local server authentication step, wherein the remote server and/or the authentication server receives from the local server data relating to the third credentials, the remote server and/or the authentication server compares data relating to third credentials with third expected authentication data, and, according to a comparison result, the remote server and/or the authentication server forbids or authorizes the local server to continue while transmitting fourth credentials to the local server to be used for further communicating from the local server to the authentication server and/or the remote server.

6. Method according to claim 5, wherein, a token is connected to the local device, the token being able to generate data relating to the second credentials and/or store data relating to second credentials to be sent by the local server to the remote server and/or the authentication server.

7. Method according to claim 4, wherein a user enters data, as second credentials, by using a man machine interface included within or connected to the local device and wherein, the second credentials are sent by the local server to the remote server and/or the authentication server.

8. Method according to claim 6, wherein the remote server and/or authentication server are able to generate the data relating to the first, the third and/or the fourth credentials, and/or store data relating to the first, the third and/or the fourth credentials to be sent by the remote server and/or authentication server to the local server and/or store the first, the third and/or the fourth expected authentication data.

9. Method according to claim 1, wherein the local server sends to the remote device and/or another remote data storage means connected to the remote device data stored within the local device and/or within a resource connected to the local device and/or a token connected to the local device.

10. A system for managing an access from a remote device to data and/or at least one resource accessible from a local device, system comprising:

a local device and a remote device connected to the local device, wherein;

the remote device hosts a server, as a remote server;

the local device comprises a browser and a local server, the browser comprising means for sending to the remote server a request for loading data;

the remote server comprises means for sending, through the browser, to the local server, a request for connecting a local server, as a response to the request for loading data; and

the local server comprises means for sending data to the remote server, the local server being configured so as to be connected from the remote server to data storing means and/or at least one resource accessible from the local device.