METHOD FOR A CLIENT DEVICE TO ACCESS TO REMOTE SECURE DATA ON A REMOTE SECURE DEVICE

• US 20130254846A1
• Filed: 11/18/2011
• Published: 09/26/2013
• Est. Priority Date: 11/30/2010
• Status: Active Grant

• Current Assignee: Gemalto SA (Thales SA)
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Ganem, Herve
• Granted Patent: US 9,455,971 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 65/1016 IP multimedia subsystem [IMS]
• CPC Class Codes: H04L 65/1073 Registration or de-registration
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04M 1/72412 using two-way short-range wireless interfaces

Abstract

The invention relates to a method for a client device (2) to access to remote secure data on a remote secure device (1), said secure data being associated to a remote service, characterized in that it comprises creating a secure peer to peer channel (3) between a client application (21) of a client device and said remote secure device so as the client device and the remote secure device exchange data (4) securely and bidirectionally.

Claims

1. ) A method for a client device to access to remote secure data on a remote secure device, said secure data being associated to a remote service, comprising creating a secure peer to peer channel between a client application of a client device and said remote secure device so as the client device and the remote secure device exchange data securely and bidirectionally.

2. ) The method according to claim 1, further comprising transferring a user interface from the remote secure device.

3. ) The method according to claim 2, further comprising accessing to the remote secure data after an authentication of a user.

4. ) The method according to one of the previous claim, further comprising using a server for establishing a mutual authentication between the client device and the secure remote device, said server allowing only one user to register at the same time.

5. ) The method according to claim 4, using a SIP server to allow only one user to register at the same time at a SIP address.

6. ) The method according to one of claims 1, 2, or 3, further comprising using a PC or a handset as client device.

7. ) The method according to one of claims 1, 2, or 3, further comprising building secure IMS applications.

8. ) The method according to claim 4, further comprising using a PC or a handset as client device.

10. ) The method according to claim 4, further comprising building secure IMS applications.