Method and server of electronic safes with information sharing

• US 9,516,012 B2
• Filed: 12/10/2008
• Issued: 12/06/2016
• Est. Priority Date: 12/10/2007
• Status: Active Grant

• Current Assignee: Almerys
• Original Assignee: Almerys
• Inventors: Chochois, Michal, Jadeau, Guillaume
• Primary Examiner(s): BEE, ANDREW W.
• Application Number:
  US12/332,152
• Publication Number:
  US 20090206988A1
• Time in Patent Office: 2,918 Days
• Field of Search: 714/6.21, 714/47.2, 713/189, 713/176, 705/41, 705/44, 705/41.051, 711/163, 711/162, 711/165, 340/5.8, 902/2.9, 902/24, 902/29, 710/65, 707/201, 726/7
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations

Abstract

A method of managing electronic safes implemented by a server on behalf of at least one user possessing at least a first electronic safe, said method comprising a step of implementing access means designed to provide said user with access, via a second safe belonging to said user, to a set of data forming part of a content accessible via the first electronic safe, said implementation step being intended to be carried out in the event of authentication of said user as the user owning the first electronic safe.

Claims

1. A method of managing electronic safes implemented by a server on behalf of at least one user possessing at least a first electronic safe, said method comprising:

a step of implementing access means designed to provide said user with access, via a second safe belonging to said user, to a set of data forming part of a content accessible via the first electronic safe, said access requiring an authentication of said user as a user to whom said second safe belongs,

wherein said step of implementing access means being intended to be carried out in the event of authentication of said user as the user owning the first electronic safe,

wherein the first safe and second safe comprise storage space, and

wherein the first safe and second safe only contain encrypted data and said user is able to decrypt said data by a decryption process.

2. The method of claim 1, wherein said step of implementing access means is carried out following receipt by the server of a request for creation for said user of the second electronic safe.

3. The method of claim 1, further comprising:

a step of authenticating said user by means of user authentication data used for authenticating said user in the event of a request for access to the first safe.

4. The method of claim 3, wherein the authentication step comprises implementation of strong authentication.

5. The method of claim 3, wherein, during the authentication step, the server receives authentication data that are a function of at least one key stored in a hardware cryptographic resource allocated to the user, and/or biometric data of the user.

6. The method of claim 1, further comprising:

a step of allocating to each electronic safe at least one respective security function from amongst an encryption function and/or a decryption function and/or a signature function, at least one security function allocated to the second safe being chosen equal to a security function allocated to the first safe.

7. The method of claim 1, wherein access to an electronic safe is a function of authentication items of the user, allocated to the user by the server and according to which the authentication items for access to the second electronic safe are chosen different from those for access to the first electronic safe.

8. A non-transitory computer program product comprising a computer readable medium, having stored thereon a computer program comprising instructions for implementing, during execution of said program on a computer, by a server on behalf of at least one user possessing at least a first electronic safe, access means designed to provide said user with access, via a second safe belonging to said user, to a set of data forming part of a content accessible via the first electronic safe, said access requiring an authentication of said user as a user to whom said second safe belongs, wherein said step of implementing access means is intended to be carried out in the event of authentication of said user as the user owning the first electronic safe, wherein the first safe and second safe comprise storage space, and wherein the first safe and second safe only contain encrypted data and said user is able to decrypt said data by a decryption process.

9. A server for managing electronic safes on behalf of at least one user possessing at least a first electronic safe, the server comprising:

access means designed to provide said user with access, via a second safe belonging to said user, to a set of data forming part of a content accessible via the first electronic safe, said access requiring an authentication of said user as a user to whom said second safe belongs,

wherein said access means being intended to be activated in the event of authentication of said user as the user owning the first electronic safe,

wherein the first safe and second safe comprise storage space, and

wherein the first safe and second safe only contain encrypted data and said user is able to decrypt said data by a decryption process.

10. The server of claim 9, further comprising:

means for carrying out strong authentication on receipt of identification data.

11. The server of claim 9, further comprising:

means for allocating to each electronic safe at least one security function associated with at least one respective key from amongst an encryption function and/or a decryption function and/or a signature function,

said means being adapted to also allocate to the new electronic safe the security function and the associated key assigned to the first electronic safe.

12. The server of claim 9, wherein access to an electronic safe is a function of authentication items of the user allocated to the user by the server, said server being adapted to allocate to the user authentication items for access to the new electronic safe different from those allocated to the user for access to the first electronic safe.