Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
  • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
  • G07B15/00—Arrangements or apparatus for collecting fares, tolls or entrance fees at one or more control points
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
  • H04L63/0869—Network architectures or network communication protocols for network security for authentication of entities for achieving mutual authentication
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/06—Authentication
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/08—Access security
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
  • H04L2463/101—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measures for digital rights management

Definitions

• the invention relates to a mechanism for issuing and using rights through a telecommunications network.
• a right may be a right of access to a secure area, a parking right on a parking space, or any other right giving rise to a control.
• the portable objects in question may be indifferently mobile phones, PDAs (Personal Digital Assistant), laptops, or any other means capable of communicating with a network.
• PDAs Personal Digital Assistant
• laptops or any other means capable of communicating with a network.
• the portable object chosen to illustrate the invention will be the mobile phone.
• the network through which the portable object communicates may be arbitrary. It can be indifferently a long distance network (for example the GSM network, or the Internet network) or short distance (for example Bluetooth, Infra Red, Wifi, RFID (radio frequency identification), etc.).
• long distance network for example the GSM network, or the Internet network
• short distance for example Bluetooth, Infra Red, Wifi, RFID (radio frequency identification), etc.
• Mobile phones offer many services such as logical security services such as authentication; they thus make it possible to support payment services or control access to controlled areas.
• a number of applications allow to download rights to a mobile phone from a server. The validity of the right is then verified to access a service.
• a number of mobile phones are equipped with short-distance communication means.
• an individual in possession of a mobile phone storing a right of access can be at the entrance of a secure area and transmit a message including its access right, for example to a terminal provided for this purpose, for verification.
• the phone comes to the terminal, it receives the right attached to the phone and checks whether this right gives access to the controlled area. If so, the owner of the phone is allowed to enter this area.
• An object of the invention is to make possible the storage of rights on a mobile phone and the control of this information in the absence of both the phone and the owner of the phone, and while ensuring maximum security when using the stored rights.
• the portable object transmits a right to a portable module to be stored, said module being able to receive a right of said portable object and to communicate with a control device able to read this right and to check the validity.
• each portable object is associated with one or more portable modules.
• These modules are intelligent extensions of the memory of the portable object allowing the portable object to act as a relay between an application server delivering rights and one or more portable modules attached to the portable object.
• any transfer of rights between the mobile phone and a portable module is done securely using a cryptographic algorithm.
• the relocation of the rights of the portable object to a module is therefore carried out with security ensuring that no malicious third party intercepts these rights for fraudulent use.
• Figure 1 illustrates a first computer system in which the invention can be implemented. This figure also shows the process steps illustrating an exemplary embodiment of the invention relating to the right to park on a parking space.
• FIG. 2 illustrates in the form of an algorithm the method illustrating this first embodiment.
• FIG. 3 illustrates a second computer system in which the invention can be implemented This figure illustrates the steps of a second embodiment of the invention relating to parking, and more particularly to the management of fines when the module stores an invalid right.
• FIG. 4 illustrates in algorithm form the steps of the method illustrating this second embodiment.
• FIG. 1 represents a SYS computer system including a portable MOB object communicating through a network with a rights server SERVI able to issue rights.
• the portable object is a mobile phone MOB.
• the communication protocol used is the WAP (Wireless Application Protocol); this protocol allows access to the Internet through a mobile phone.
• WAP Wireless Application Protocol
• the rights server SERVI can be a server including services for example a service that issues parking rights on a parking space.
• the user indicates to the server, for example, the chosen parking area of the vehicle as well as the desired parking time.
• the user receives a message including a right on this location. Preferably, this right is then stored temporarily in a memory of the MOB phone.
• the mobile phone is coupled to a SIM (Subscriber Identity Module) card.
• SIM Subscriber Identity Module
• the invention can be implemented on a phone that is not equipped with a SIM card.
• the mobile phone MOB contains one (or more) cryptographic algorithm (s) to ensure the authentication of the phone / card pair and / or the couple phone / rights server.
• the cryptographic algorithm is indifferently symmetrical or asymmetrical. Its choice is made according to the desired degree of security.
• the mobile phone MOB communicates with at least one portable module MSC.
• a portable module MSC is an electronic medium capable of communicating with the mobile phone MOB and with a VRF rights checking device.
• the mobile phone MOB transmits the right to a portable module for storage.
• Said module comprises means for receiving the right and means for communicating with the VRF control device which is capable of thus verifying whether the right stored in the portable module MSC is valid or not. If the entitlement is invalid, the VRF verifier detects it and takes action. This action can be indifferently the issuance of a fine in the case of parking, or the prohibition of entry into a controlled area. If the entitlement is valid, the VRF verifier permits access to the service.
• the MSC module can be equipped with contacts for its coupling with the phone.
• the coupling between the module MSC and the telephone MOB is contactless.
• the contactless module MSC comprises the following elements:
• This memory is non-volatile, for example an EEPROM type memory, so that the contents of an MSC module can be erased and be reused.
• Writing means adapted to write received data in the memory;
• Means for transmitting and receiving signals such as a radio frequency antenna,
• a microcontroller including a program for data processing, including the processing of data received and transmitted.
• the module MSC can be indifferently of the passive or active type. Unlike a passive contactless card, an active contactless card contains its own source of energy.
• An authentication algorithm is a process to formally and intangibly establish the identification of parties during an exchange or electronic transaction. This process implies that the parties confirm and validate their identification by technical means, such as password, or challenge response according to a known procedure of strong authentication (challenge / response).
• the SERVI rights server has cryptographic means for authenticating the mobile phone MOB and establishing a secure communication with it.
• the SERVI rights server also has cryptographic means for authenticating and establishing secure communication with the VRF verifier.
• the VRF verification device has a communication interface for communicating with the SERVI rights server.
• the type of connection chosen between the SERVI rights server and the VRF verification device is arbitrary, it can be wired, long distance (RTC 1 IP) or medium distance (a few meters).
• the contactless module MSC also has a short-distance communication means, for example about ten centimeters with one or more VRF verification devices (same interface with the mobile).
• the VRF verification device has a short-distance communication means for communicating with the contactless modules MSC
• the mobile phone has a man-machine interface with its owner, and a short-distance interface with one or more contactless modules MSC.
• the contactless module MSC preferably has a means of short-distance communication with the mobile phone MOB.
• the VRF verification device can have a human machine interface that can be used for example by a rights verification agent. It can also be coupled with a physical access control system such as a highway toll barrier.
• the mobile phone MOB also includes means for writing the rights in the memory of the contactless module MSC. This communication is effected by sending a signal to the module MSC, which receives the signal by means of its antenna. In our example, the module authorizes the writing only if it could authenticate the mobile as being the authorized mobile to write
• the verification device VRF comprises means capable of generating an electromagnetic field, and can thus activate the contactless module MSC and automatically read data contained in the module MSC.
• the contactless module MSC comprises means capable of transmitting information to the verification device VRF in the form of radiofrequency signals.
• the verification device converts the received signals into digital information usable by its microcontroller.
• a mutual authentication algorithm is preferably used when a connection has to be established with the contactless module MSC.
• this mutual authentication therefore concerns the communication between the module
• MSC and the MOB mobile phone as well as the communication between the MSC module and the VRF verification device.
• mutual authentication implies that each party must authenticate the other.
• the MSC module stores data in a structured way.
• the module MSC advantageously comprises several memory areas linked to rights storage of different types.
• a memory zone may relate to a right relating to a parking space.
• Another memory zone may concern an entrance to a show, etc.
• the memory zones are compartmentalized and logically sealed together, thus making it possible to support several services or levels of service.
• the module MSC furthermore comprises means for managing the access rights to the different memory areas corresponding to the different VRF verification devices with which the module MSC is able to interact. For example, if the verification device is a device able to verify a right on a parking space, it is able to identify the corresponding memory area in the contactless module MSC and to extract the associated rights.
• control logic of this barrier is suitable
• the reading of a memory area dedicated to a verification device VRF is possible only after mutual authentication and only for the memory area dedicated to this device.
• FIG. 2 is an algorithm illustrating the various steps of the method implemented in the system described with reference to FIG. 1.
• FIG. 1 also includes references to these steps; that will help identify the sender and receiver of each message.
• the method operates as follows: In a first step ET1, the mobile contacts the service issuing parking rights by connecting to the SERVI rights server by means of a human-machine interface and its long-distance communication mode.
• the server SERVI possibly exchanges with the mobile phone MOB data relating to the right to park, and transmits to the mobile phone a right to park on a parking space.
• the parking fee is certified by a certification authority.
• a third step ET3 the mobile phone contacts the contactless module MSC and performs a first mutual authentication with the MSC module.
• a fourth step ET4 if the mutual authentication is successful, the mobile phone MOB transmits to the contactless module MSC the parking right received from the rights server in the second step; If the memory of the MSC module is compartmentalized in memory zones, the received parking fee is stored in the memory area dedicated to parking. Conversely, if the mutual authentication is not successful, no communication can be established between the mobile phone MOB and the module MSC.
• a verification device VRF contacts the contactless module MSC and performs mutual authentication.
• the VRF verification device can access the memory area dedicated to parking rights.
• a sixth step ET6 if the mutual authentication is successful in the step ET5, the verification device VRF receives from the contactless module MSC the parking right and verifies its characteristics, if the right is valid, the agent does not issue fines. On the other hand, if the right is not valid, the agent can verbalize in a traditional way by issuing a fine in paper format; it can also verbalize using a second embodiment of the invention which will be illustrated by a second embodiment illustrated below.
• FIG. 3 illustrates the second embodiment.
• FIG. 4 is an algorithm representing the sequence of steps illustrating this example.
• the implementation of this example requires a second additional server SERV2 which manages the fines; We will designate it by SERV2 fine server.
• SERVI and SERV2 servers can be a single server. For example, when the issuer of the right performs the verification of the right, it may happen that the issuance and verification of the right are managed by the same server.
• the mobile phone MOB communicates with this server fines SERV2.
• the mobile phone is equipped with means of payment and therefore has a payment protocol for the dialogue with the server SERV2 fines.
• the protocol is ideally a secure protocol.
• the VRF verification device has a long-distance communication means with the SERV2 fine server. It has ideally cryptographic means of mutual authentication with the server of fines.
• the verification device VRF optionally has a human-machine interface allowing a user to enter and receive information.
• the SERV2 fine server can receive secure communications from different VRF check devices. It can store and manage data related to traffic violations, and has a secure payment protocol compatible with mobile phones.
• the contactless module MSC preferably comprises a memory area dedicated to fines.
• Figure 4 which illustrates the process steps relating to the second embodiment. The following steps may constitute a continuation of the steps illustrated above ET1-ET6:
• a seventh step ET7 the user of the verification device VRF, usually an agent, finds the offense.
• the finding can be simply visual, for example when the vehicle is poorly parked.
• This observation can also consist, after mutual authentication allowing the reading of the contactless module MSC, in the verification of the invalidity of the rights which are stored there (cf ET6). It will also be possible to read, for example, the authorized parking area for this vehicle, in this memory zone, the vehicle registration, the owner's address, and special features such as the reduced mobility of the driver allowing a better appreciation of the vehicle. offense.
• step ET8 the verification device VRF communicates with the contactless module MSC and proceeds to a mutual authentication (if it has not been performed at the same time). step ET7).
• the VRF verification device writes in the memory area reserved for this purpose the characteristics of the offense, preferably accompanied by an electronic signature.
• the verification device VRF transmits to the server fines SERV2, for example via a secure long-distance communication, the characteristics of this fine, preferably accompanied by its electronic signature.
• a tenth step ET10 when the contactless module MSC can enter into secure communication with the mobile phone MOB, the mobile phone MOB reads, after mutual authentication with the MSC module in the reserved memory area of the label, the certified characteristics of the fine and stores them preferably in a temporary memory.
• an eleventh step ET11 After storing the characteristics of the fine, the mobile phone MOB contacts the fine server SERV2 and transmits the fine, accompanied by its electronic signature.
• the fine server SERV2 authenticates the mobile phone MOB and implements a remote payment protocol with it.
• the fine server SERV2 transmits to the mobile phone MOB an electronic certificate of payment of the fine.
• the mobile MOB After receiving this certificate, the mobile MOB enters secure short distance communication with the contactless module MSC to possibly erase the data stored in the module relating to the offense. This feature is interesting when the size in bytes allocated to the memory area is not very important.
• MSC can be permanently in the vehicle, or even included in the elements of the car (windshield for example). Once the parking rights are acquired using the mobile phone, they are transferred to the MSC contactless module attached to the vehicle, and the verification is done in a simple way by approaching the VRF verification device of the windshield .
• the module preferably comprises means for temporarily storing the right received in its storage means.
• the right become invalid, for example when the period of use of the right is over, the right is erased from the memory.
• an MSC module could support several different memory zones; it is therefore possible to store, with different access rights, other data including vehicle identification data such as data relating to the registration certificate, or data relating to the technical control.
• vehicle identification data such as data relating to the registration certificate, or data relating to the technical control.
• an MSC module can store all the official papers associated with driving a vehicle.
• the invention relates to a method for issuing and using a right via a portable object MOB.
• the method comprises the following steps:
• a step of verifying said right by a verification device said verification device being able to read the rights stored on the module MSC to check the validity of the right.
• the invention also relates to the portable module MSC.
• This module includes
• transmission means capable of transmitting the stored right to said VRF verification device to check the validity of the right.
• the invention also relates to the portable object MOB.
• This portable object is characterized in that it comprises means for transmitting a right to a portable module MSC, said module being able to store the right, the right being able to be verified by a verification device VRF to check Ia. validity of the right.
• the invention also relates to a verification device VRF comprising means for communicating with a portable module MSC, reading means adapted to read a right stored on the module (MSC), verification means for verifying the validity of the right.
• the invention also relates to the computer program capable of being implemented on a portable object MOB.
• This program includes instructions for code which, when the program is executed on said portable object, performs a step of transmitting the right to a portable module MSC, said module being able to store the right, the right being then able to be verified by a verification device VRF for check the validity of the right.
• the invention also relates to the computer program adapted to be implemented on a portable module MSC as defined above.
• This program includes code instructions which, when the program is executed on said portable MSC module, perform the following steps:
• a receiving step adapted to receive the right attached to the portable object MOB
• a transmission step capable of transmitting the stored right to said verification device (VRF) to check the validity of the right.
• the module comprises means for verifying the rights of the portable object (MOB) to write a right in said module (MSC). It also includes means for verifying the right of said verification device (VRF) to read a right in said module (MSC).
• MOB portable object
• VRF verification device
• the module comprises storage means compartmentalised in several memory zones, and in that the verification of rights applies to the zones taken in isolation. This allows the storage of rights for different applications on the same module MSC.
• the memory areas are compartmentalized and logically sealed together. This makes it possible to securely support several services or service levels stored in respective areas on the same module MSC.
• the module MSC comprises means for mapping to a memory zone a set of respective portable objects authorized to access the contents of this memory zone.
• the module MSC can verify that the portable object wishing to access the area storing a right has an identifier stored in its storage means and that this portable object is the one authorized to communicate with this memory area of the MSC module.
• the module also includes means for temporarily storing the right received in its storage means.
• the right can be used only a limited number of times or for a predetermined duration.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Business, Economics & Management (AREA)
• Finance (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Computer Hardware Design (AREA)
• Computing Systems (AREA)
• General Engineering & Computer Science (AREA)
• Mobile Radio Communication Systems (AREA)
• Telephonic Communication Services (AREA)

Applications Claiming Priority (2)

Publications (1)

Family

ID=34954776

Family Applications (1)

Country Status (6)

Families Citing this family (3)

Family Cites Families (2)

• 2005
  • 2005-10-21 WO PCT/FR2005/002634 patent/WO2006056668A2/fr not_active Ceased
  • 2005-10-21 US US11/791,436 patent/US20090286511A1/en not_active Abandoned
  • 2005-10-21 KR KR1020077014109A patent/KR20070086508A/ko not_active Withdrawn
  • 2005-10-21 EP EP05812495A patent/EP1815633A2/de not_active Withdrawn
  • 2005-10-21 CN CNA2005800401947A patent/CN101065926A/zh active Pending
  • 2005-10-21 JP JP2007542027A patent/JP2008521310A/ja not_active Abandoned

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events