METHOD FOR PROVIDING A USER WITH AN AUTHENTICATED REMOTE ACCESS TO A REMOTE SECURE DEVICE

• US 20130247163A1
• Filed: 11/18/2011
• Published: 09/19/2013
• Est. Priority Date: 11/30/2010
• Status: Active Grant

• Current Assignee: Thales DIS France SAS (Thales SA)
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Ganem, Herve
• Granted Patent: US 9,401,916 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

The invention relates to a method for providing a user with an authenticated remote access to a remote secure device (2), said remote access being initiated from a local accessing device (1), said remote secure device (2) embedding secure data related to a specific service, characterized in that it comprises establishing a mutual authentication between said remote secure device (2) and a local secure device (3) different from the local accessing device (1) so as the user of the local accessing device (3) is able to access to the secure data of the remote secure device (2).

Claims

1. A method for providing a user with an authenticated remote access to a remote secure device (2), said remote access being initiated from a local accessing device (1), said remote secure device (2) embedding secure data related to a specific service, the method comprising establishing a mutual authentication between said remote secure device (2) and a local secure device (3) different from the local accessing device (1) so as the user of the local accessing device (3) is able to access to the secure data of the remote secure device (2).

2. The method according to claim 1, further comprising establishing a secure communication channel (120) between the local accessing device (1) and the remote secure device (2) so as to provide a one way authentication, said local accessing (1) device authenticating the remote secure device (2)

3. The method according to one of the previous claims, wherein the remote secure device (2) contacts the local secure device (3) using the SIP protocol.

4. The method according to claim 2, comprising using a peer application in the remote secure device (2) and a peer application in the local secure device (3) so as the two peer applications negotiate the setup of a data session between the remote secure device (2) and the local secure device (3).

5. The method according to claim 4, wherein the remote secure device (2) provides a user interface on the local accessing device (1) after the setup of said data session between the remote secure device (2) and the local secure device (3).

6. The method according to claim 5, further capturing a PIN code entered by the user and sending back said PIN code to the remote secure device (2) for verification.

7. The method according to claim 6, wherein the remote secure device (2) grants access to its secure data of the remote secure device (2) to the local accessing device (1) after checking the entered PIN code.

8. The method according to claim 1 or claim 2, wherein a storage area network is used as remote secure device (2).

9. The method according to claim 1 or claim 2, wherein a laptop PC is used as local accessing device (3).

10. The method according to claim 3, comprising using a peer application in the remote secure device (2) and a peer application in the local secure device (3) so as the two peer applications negotiate the setup of a data session between the remote secure device (2) and the local secure device (3).

11. The method according to claim 3, wherein a storage area network is used as remote secure device (2).

12. The method according to claim 4, wherein a storage area network is used as remote secure device (2).

13. The method according to claim 3, wherein a laptop PC is used as local accessing device (3).

14. The method according to claim 4, wherein a laptop PC is used as local accessing device (3).