专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20200151312A1 METHOD FOR CONTROLLING ACCESS TO A SECURITY MODULE 审中-公开
公开(公告)号：US20200151312A1
公开(公告)日：2020-05-14
申请号：US16626167
申请日：2018-06-22
申请人： Orange
发明人： Alicia Filipiak , Saïd Gharout
IPC分类号： G06F21/33 , G06F21/60
摘要： A method for controlling access to a security module [of a mobile terminal by an application of the mobile terminal is described. The method includes sending by a current application of the mobile terminal a request to access the security module, said access request comprising the current identifier of an applet comprised in the security module. The operating system of the mobile terminal reads a look-up table comprising a set of access control rules, an access control rule comprising the identifier of an applet of the security module associated with a control value for an application of the mobile terminal, said access control rule indicating that said application of the mobile terminal is authorized to communicate with the applet of the security module. A current control value is obtained for the current application from at least one certificate of a developer of the current application and an identifier of the current application, associated with the current application, and the look-up table is searched for an access control rule comprising the current identifier of the applet associated with the current control value, the current application being authorized to communicate with the current applet when the search is positive.

2. 发明授权

US11922384B2 Method for obtaining a security token by a mobile terminal 有权
公开(公告)号：US11922384B2
公开(公告)日：2024-03-05
申请号：US16094443
申请日：2017-04-14
申请人： Orange
发明人： Alicia Filipiak , Saïd Gharout , Jacques Traore , Véronique Cortier
IPC分类号： G06Q20/32 , G06Q20/12 , G06Q20/20 , G06Q20/38 , G06Q20/40 , H04L9/32
CPC分类号： G06Q20/12 , G06Q20/204 , G06Q20/3223 , G06Q20/3229 , G06Q20/3823 , G06Q20/3825 , G06Q20/3829 , G06Q20/383 , G06Q20/385 , G06Q20/4012 , G06Q20/4014 , H04L9/3213 , H04L9/3234 , H04L9/3242
摘要： The method of the invention comprises:

an identification step (E30-E50) of identifying the user of the mobile terminal;
a generation step, triggered if identification is successful, of a secure element of the terminal generating (E70) at least one identification value for the terminal by using a first secret key shared between the secure element and a token service provider device;
a sending step (E100) of sending a request to the token service provider device to obtain at least one security token, the request including said at least one identification value for the terminal; and
a reception step (F90) of receiving from the token service provider device said at least one security token in encrypted form, each security token being associated with a random number generated by the token service provider device and being encrypted by means of an encryption key generated for that token from the random number and from a second secret key shared between the token service provider device and the secure element of the terminal.

3. 发明授权

US11443022B2 Method for controlling access to a security module 有权
公开(公告)号：US11443022B2
公开(公告)日：2022-09-13
申请号：US16626167
申请日：2018-06-22
申请人： Orange
发明人： Alicia Filipiak , Saïd Gharout
IPC分类号： G06F21/33 , G06F21/60
摘要： A method for controlling access to a security module [of a mobile terminal by an application of the mobile terminal is described. The method includes sending by a current application of the mobile terminal a request to access the security module, said access request comprising the current identifier of an applet comprised in the security module. The operating system of the mobile terminal reads a look-up table comprising a set of access control rules, an access control rule comprising the identifier of an applet of the security module associated with a control value for an application of the mobile terminal, said access control rule indicating that said application of the mobile terminal is authorized to communicate with the applet of the security module. A current control value is obtained for the current application from at least one certificate of a developer of the current application and an identifier of the current application, associated with the current application, and the look-up table is searched for an access control rule comprising the current identifier of the applet associated with the current control value, the current application being authorized to communicate with the current applet when the search is positive.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式