公开(公告)号：US20190311154A1

公开(公告)日：2019-10-10

申请号：US16315105

申请日：2017-06-14

Applicant: GEMALTO SA

Inventor： Nicholas Xing Long EU ,  Annus Bin Khalid SYED ,  Juan Manolo ALCASABAS

IPC: G06F21/72 ,  H04L9/00 ,  G06F21/60

Abstract: The present invention relates to a method to securely load set of sensitive data hardware registers with sensitive data on a chip supporting hardware cryptography operations, said method comprising the following steps monitored by software instructions, at each run of a software: select a set of available hardware registers listed in a predefined list listing, in the chip architecture, the unused hardware registers and other relevant hardware registers not handling sensitive data and not disrupting chip functionality when loaded, establish an indexible register list of the address of the sensitive data hardware registers and of the hardware registers in the set of available hardware registers, in a loop, write each hardware register in this register list with random data, a random number of times, in random order except the last writing in each of the sensitive data hardware registers where a part of the sensitive data is written.

公开(公告)号：US20190311110A1

公开(公告)日：2019-10-10

申请号：US16464709

申请日：2017-11-23

Applicant: GEMALTO SA

Inventor： Danny TABAK ,  Johan JOSEFSSON

IPC: G06F21/44 ,  H04L29/06 ,  G06F21/35 ,  G06F21/30

Abstract: The invention relates to a method for authenticating to a second device. A first device shares with the second device at least one session key. The first device sends to at least one third device at least one first session key. The at least one third device connects directly to the second device by using the at least one first session key. According to the invention, the method further comprises the following steps. The first device sends to the at least one third device a command for disconnecting from or switching to a non-connected mode with the second device. And the at least one third device disconnects from or switches to a non-connected mode with the second device based upon the received command. The invention also pertains to corresponding first device and system for authenticating to a second device.

公开(公告)号：US10419932B2

公开(公告)日：2019-09-17

申请号：US15780943

申请日：2016-11-04

Applicant: GEMALTO SA

Inventor： Daniel Mavrakis ,  François Zannin ,  Hervé Troadec ,  Jean-François Kuc ,  Pierre Girard

IPC: H04W12/06 ,  H04W4/70 ,  G06F21/31 ,  H04L9/32 ,  H04L29/06 ,  H04W12/08 ,  H04W12/04 ,  H04W4/80

Abstract: The invention relates to a method for authenticating to a mobile network. According to the invention, the method comprises the following steps. A device activates only a first temporary subscription identifier. The device sends to a first server the first temporary subscription identifier and first data. The first server sends to the device a first result message including an authentication failure based upon the first data. The device activates only a second temporary subscription identifier. The device sends to the first server the second temporary subscription identifier and second data. And the first server sends to the device a second result message including an authentication success based upon the associated first and second temporary subscription identifiers and the second data. The invention also relates to corresponding device and system and a server for authenticating devices to a mobile network.

公开(公告)号：US10402583B2

公开(公告)日：2019-09-03

申请号：US14903036

申请日：2014-07-04

Applicant: GEMALTO SA

Inventor： Mourad Faher

IPC: G06F21/62 ,  H04L29/06 ,  G09C5/00 ,  G07F7/10 ,  H04L9/32 ,  G06Q20/40 ,  G07F7/08 ,  H04L9/08

Abstract: The present invention relates to a method of privacy-preserving during an access to a restricted e-service requiring user private data from a smart card. The invention relates more particularly to the field of methods implemented so that the user has the guarantee that only the private data needed to access to the e-service are extracted from the smart card. It is to guarantee that the user has a perfect knowledge of his private data provided by his smart card to a requester. With the invention a message notifying to the user the very nature of the identity assertion is displayed on the screen of the smart card. By doing so, the card ensure 100% security with regard to user consent: the data read out of his card cannot differ comparing to the data requested by the service provider through the terminal.

公开(公告)号：US20190238324A1

公开(公告)日：2019-08-01

申请号：US16320291

申请日：2017-03-30

Applicant: GEMALTO SA

Inventor： Mireille PAULIAC ,  Michel ENDRUSCHAT ,  Ly Thanh PHAN ,  Jean-Yves FINE

IPC: H04L9/08 ,  H04L9/30

CPC classification number: H04L9/088 ,  H04L9/0825 ,  H04L9/0827 ,  H04L9/083 ,  H04L9/0869 ,  H04L9/30 ,  H04L2209/805

Abstract: This invention related to a method for provisioning a first communication device with a set of at least one credential required for accessing to a wireless network by using a second communication device provisioned with a cryptographic key K also known by the wireless network, the first communication device being associated with a certificate comprising a public key PK, said certificate being stored with an associated private key PrK in said first communication device, the method comprising the following steps: receiving by the second communication device a registration request from the first communication device in order to be provisioned with the set of at least one credential; transmitting to the wireless network by the second communication device the registration request to generate a set of at least one credential associated to the first communication device comprising at least a cryptographic key K″, the wireless network being adapted to generate a first random number R1 and a second random number R2; receiving by the second communication device a response from the wireless network comprising R1 and R2; generating K′ by the second communication device using R1 and K; transmitting by the second communication device to the first communication device K′ and R2 to generate K″ using R2 and K′.

公开(公告)号：US20190158996A1

公开(公告)日：2019-05-23

申请号：US16301762

申请日：2017-05-15

Applicant: GEMALTO SA

Inventor： Nagy Korkmaz ,  Jean-François Gros

IPC: H04W4/50 ,  H04W12/06 ,  H04W4/14 ,  H04L29/06

Abstract: A method for provisioning an applet in a security element with credentials of a terminal application provided by an application server comprises: Sending a request to provision the applet with credentials from the terminal application to the applet; Sending an SMS message containing an identifier of the applet from the applet to an OTA platform; Adding the MSISDN of the security element by an SMSC located in front of the OTA platform in the header of the SMS; Requesting the credentials from the OTA platform to the application server; Sending from the application server to the OTA platform the credentials to be associated with the MSISDN; Sending from the OTA platform to the applet the credentials associated with the MSISDN; and Sending from the applet to the terminal application a message that it has been provisioned with credentials of the terminal application.

公开(公告)号：US20190149985A1

公开(公告)日：2019-05-16

申请号：US16097411

申请日：2017-04-24

Applicant: Gemalto M2M GmbH ,  GEMALTO SA

Inventor： Volker BREUER ,  Lars WEHMEIER ,  Mireille PAULIAC

IPC: H04W12/00 ,  H04W12/06 ,  H04B1/3816 ,  H04W8/18 ,  H04W52/02

Abstract: The present invention relates to a mobile communication device for communicating with a cellular network by means of a serving base node, the mobile communication device further being connected to a subscriber identity module, the mobile communication device being configured to operate in a power optimization mode wherein the power optimization mode comprises extended paging periods, and the mobile communication device is further configured to set up a communication context with the base node using authentication means of the subscriber identity module, wherein the mobile communication device is further configured, in case of detection of a removal of the subscriber identity module and when the power optimization mode is activated: to send an removal alert message to the serving base node by means of said communication context, afterwards to terminate the communication context.

公开(公告)号：US10282652B2

公开(公告)日：2019-05-07

申请号：US15531159

申请日：2016-02-09

Applicant: GEMALTO SA

Inventor： Stéphane Ottobon ,  Lucile Dossetto ,  Luc Charles ,  Thierry Laviron

IPC: G06K19/077

Abstract: The invention relates to a method for producing a module having an electronic chip including metallizations which are accessible from a first side of the metallizations and an integrated circuit chip which is arranged on the second side of the metallizations, opposite the first side. The method comprises the step of forming electrical interconnection elements which are separate from the metallizations, directly connecting the chip, and are arranged on the second side of the metallizations. The invention also relates to a module corresponding to the method and to a device comprising said module.

公开(公告)号：US10235582B2

公开(公告)日：2019-03-19

申请号：US15502759

申请日：2015-07-31

Applicant: GEMALTO SA

Inventor： Cedric Neumann ,  Teresa Wu

IPC: G06K9/00 ,  G06K9/03

Abstract: The present disclosure describes systems and methods for assessing biometric data and determining the type of additional processing required to conclude analysis. In one example, the disclosure describes a computer-implemented method comprising providing biometric data, defining one or more performance parameters, assessing the biometric data for quality of one or more features, wherein the quality includes at least a quantity and correlation between the one or more features, assessing the rarity of the one or more features, and processing the performance parameter, quality, and rarity to guide a determination of a type of additional processing.

公开(公告)号：US10206095B2

公开(公告)日：2019-02-12

申请号：US15316365

申请日：2015-06-08

Applicant: GEMALTO SA

Inventor： Michel Anslot ,  Philippe Bouckaert ,  Jean-Rene Bouvier

IPC: H04B1/38 ,  H04W8/18 ,  H04W4/50

Abstract: A method in a cellular communication network comprising the steps of: marking a SIM card as inactive when said SIM card has not been used for at least a quarantine duration, provisioning a recycler node by backing up managing parameters related to said inactive SIM card, in a database.