公开(公告)号：US20150289135A1

公开(公告)日：2015-10-08

申请号：US14439167

申请日：2013-10-25

Applicant: GEMALTO SA

Inventor： Xavier Berard ,  Richard Pico ,  Frederic Faure ,  Benoit Gonzalvo

IPC: H04W12/06 ,  H04L29/06

CPC classification number: H04W12/06 ,  H04L63/0853 ,  H04L63/0869 ,  H04W4/60

Abstract: Mutual authentication between: (i) a user terminal cooperating with a security element and an application for registering with a service, and (ii) a remote server that provides the service, by means of a third-party portal, includes: i) transmitting, to the remote server by means of the portal, signed information R enabling the security element to be authenticated in the remote server; ii) authenticating the security element in the remote server; iii) transmitting a value R′ signed by the remote server to the application by means of the portal; iv) transmitting a request for verification of the signed value R′ from the application to the security element; v) verifying, in the security element, the signature of the remote server and whether the requested service has been granted by the remote server; vi) establishing a secure connection with the remote server using the security element, and requesting that the service be executed.

Abstract translation: （i）与安全元件协作的用户终端和与服务注册的应用相互认证，以及（ii）通过第三方门户提供服务的远程服务器包括：i）发送 通过门户到远程服务器，使得能够在远程服务器中验证安全元素的签名信息R; ii）验证远程服务器中的安全元素; iii）通过门户传输由远程服务器签名的值R'到应用程序; iv）从所述应用向所述安全元件发送对所述签名值R'的验证请求; v）在安全元素中验证远程服务器的签名以及所请求的服务是否已被远程服务器许可; vi）使用安全元件与远程服务器建立安全连接，并请求执行该服务。

公开(公告)号：US09361470B2

公开(公告)日：2016-06-07

申请号：US14349047

申请日：2012-09-18

Applicant: GEMALTO SA

Inventor： Xavier Berard ,  Nicolas Roussel ,  Richard Pico ,  Frédéric Faure ,  Benoît Gonzalvo

IPC: G06F15/16 ,  G06F21/62 ,  G06F21/77 ,  G06F9/455 ,  G06F21/54 ,  H04W12/08

CPC classification number: G06F21/62 ,  G06F9/455 ,  G06F21/6218 ,  G06F21/77 ,  G06F2221/2141 ,  H04W12/08

Abstract: The invention is a secure element comprising a virtual machine able to work in admin mode and in runtime mode. The secure element comprises two enhanced containers. Each of said enhanced containers can be either in an activated state or in a disabled state. Only one of the enhanced containers can be in activated state at any given time. The virtual machine is adapted to access each of the enhanced containers when working in admin mode. The virtual machine cannot access an enhanced container which is in disabled state when working in runtime mode.

Abstract translation: 本发明是一种安全元件，包括能够以管理模式和运行时模式工作的虚拟机。 安全元件包括两个增强的容器。 所述增强容器中的每一个可以处于激活状态或处于禁用状态。 在任何给定的时间，只有一个增强的容器可以处于激活状态。 虚拟机适用于在管理模式下工作时访问每个增强型容器。 虚拟机无法访问在运行时模式下处于禁用状态的增强型容器。

公开(公告)号：US09319882B2

公开(公告)日：2016-04-19

申请号：US14439167

申请日：2013-10-25

Applicant: GEMALTO SA

Inventor： Xavier Berard ,  Richard Pico ,  Frederic Faure ,  Benoit Gonzalvo

IPC: G06F7/04 ,  H04W12/06 ,  H04L29/06 ,  H04W4/00

CPC classification number: H04W12/06 ,  H04L63/0853 ,  H04L63/0869 ,  H04W4/60

Abstract: Mutual authentication between: (i) a user terminal cooperating with a security element and an application for registering with a service, and (ii) a remote server that provides the service, by means of a third-party portal, includes: i) transmitting, to the remote server by means of the portal, signed information R enabling the security element to be authenticated in the remote server; ii) authenticating the security element in the remote server; iii) transmitting a value R′ signed by the remote server to the application by means of the portal; iv) transmitting a request for verification of the signed value R′ from the application to the security element; v) verifying, in the security element, the signature of the remote server and whether the requested service has been granted by the remote server; vi) establishing a secure connection with the remote server using the security element, and requesting that the service be executed.

Abstract translation: （i）与安全元件协作的用户终端和与服务注册的应用相互认证，以及（ii）通过第三方门户提供服务的远程服务器包括：i）发送 通过门户到远程服务器，使得能够在远程服务器中验证安全元素的签名信息R; ii）验证远程服务器中的安全元素; iii）通过门户传输由远程服务器签名的值R'到应用程序; iv）从所述应用向所述安全元件发送对所述签名值R'的验证请求; v）在安全元素中验证远程服务器的签名以及所请求的服务是否已被远程服务器许可; vi）使用安全元件与远程服务器建立安全连接，并请求执行该服务。

公开(公告)号：US20140250501A1

公开(公告)日：2014-09-04

申请号：US14349047

申请日：2012-09-18

Applicant: GEMALTO SA

Inventor： Xavier Berard ,  Nicolas Roussel ,  Richard Pico ,  Frédéric Faure ,  Benoît Gonzalvo

IPC: G06F21/62 ,  G06F9/455

CPC classification number: G06F21/62 ,  G06F9/455 ,  G06F21/6218 ,  G06F21/77 ,  G06F2221/2141 ,  H04W12/08

Abstract: The invention is a secure element comprising a virtual machine able to work in admin mode and in runtime mode. The secure element comprises two enhanced containers. Each of said enhanced containers can be either in an activated state or in a disabled state. Only one of the enhanced containers can be in activated state at any given time. The virtual machine is adapted to access each of the enhanced containers when working in admin mode. The virtual machine cannot access an enhanced container which is in disabled state when working in runtime mode.

Abstract translation: 本发明是一种安全元件，包括能够以管理模式和运行时模式工作的虚拟机。 安全元件包括两个增强的容器。 所述增强容器中的每一个可以处于激活状态或处于禁用状态。 在任何给定的时间，只有一个增强的容器可以处于激活状态。 虚拟机适用于在管理模式下工作时访问每个增强型容器。 虚拟机无法访问在运行时模式下处于禁用状态的增强型容器。