Classifications

• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
  • G06F21/31—User authentication
  • G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
  • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
  • H04L63/102—Entity profiles
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
  • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
  • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
  • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
  • H04L9/0825—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
  • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
  • H04L9/0891—Revocation or update of secret information, e.g. encryption key update or rekeying
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
  • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
  • H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
  • H04L2209/60—Digital content management, e.g. content distribution
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
  • H04L2209/80—Wireless

Definitions

• the invention relates to a portable personal mass storage medium and a computer system enabling each user with such personal medium to securely access a user's own computer space, via a network such as the Internet, securely and from any host computer station not previously specifically configured or dedicated to manage this user space or allow access to this user space.
• USB key universal serial bus
• Password symmetric key (s)
• US-2004/0001088 discloses a portable device such as a USB key for transporting the personal computing environment of a user, in the form of files stored on the non-volatile memory of this USB key.
• This personal environment contains favorites, emails, contacts, "cookies", digital signatures, wallpapers, desktop icons, calendars and diaries, toolbar configurations , audio configurations, graphics, game options ...
• This environment can be defined by downloading from a website whose address is stored on the USB key.
• This system is therefore to use the memory of the USB key to transfer a computer environment from one computer to another. But, to do this, each computer must be compatible with such an environment, and must be independently and previously programmed to perform the transfer of the personal environment from the information on the portable medium.
• this document does not describe a computer system making it possible to access a user space contained in whole or in part on a device other than its personal computers and that the personal medium, and this, from any station initially not specifically configured for such access.
• no known solution allows a user to instantly access a user space that may include not only personal data and information, but also data or information shared by other users, application programs installed in executable form, this user space being managed remotely on one or more server (s), and this, from any computer station not previously configured or adapted for this purpose and may contain none of the digital information (programs or data) corresponding to this user space.
• the object of the invention is generally to provide a solution to this problem.
• the invention also aims to allow such access in a secure manner, but without the loss of the personal medium then makes it impossible to access the user space, nor that the mere possession of the personal medium allows this access by a person other than the authentic user.
• the invention also aims to provide such a personal support and such a computer system with which the user space information is automatically updated and synchronized, without risk of data loss, reliably, including in case of Sudden connection break from a station to network.
• the invention further aims to provide a computer system that is efficient in terms of speed of reaction for the user, simple and ergonomic to use, and very low cost.
• - mass memory any non-volatile rewritable computer memory for storing digital information in a sustainable manner regardless of the technology implemented (magnetic, optical, electronic ...) to achieve it, - computer system: combination of hardware ( s), software (s), information, files and / or databases, digital data, capable of performing predetermined computer functions,
• - user a natural or legal person or a group of natural and / or legal persons
• - portable means any object that can be handled by humans, carried with one hand, and easily transported continuously, for example in the format of pocket,
• - file this term is used in its logical sense designating a set of digital information referenced by a computer address; for example, it may be one or more physical file (s), or one or more data table (s) or part of a physical file or data table ,
• - user space A set of computer resources, data, software or other information adapted to provide specific user-specific computer services, including the recording of specific information specific to a user, and the provision of that user's predetermined data and software;
• the user space comprises not only data or information created or managed by a user, but also data, information and programs in executable form shared by other users or providers of computing resources.
• the invention therefore relates to a portable mass storage medium, said personal medium, comprising:
• At least one mass memory said personal memory
• digital processing means with microprocessor (s) and associated random memory (s),
• connection means conjugated to those of the personal medium, so that at least a portion of the personal memory of the personal medium can be accessed read / write by a host station when the connection means are active,
• this gateway process adapted to be loaded into the RAM of a host station to which the personal medium is connected, this gateway process comprising:
• an authentication module by the host station, of any human user making the connection of the personal medium to this host station, adapted to determine whether it is an authorized user, and to authorize access to the user space corresponding to the user identification data stored in the personal memory only if an authorized user is identified and authenticated,
• a file query filtering module adapted to be able to recognize any request involving at least one file, said CLE file, belonging to a user space of the authorized user, comprising digital information stored in a part of personal memory, so-called local cache, and / or in at least one mass memory of at least one server separate from the host station and to which the host station equipped with connection means and access to at least one digital network can be connected via such network,
• a module for processing each request on a file CLE adapted to be able to create a file CLE and / or access any file CLE and allow the processing of a corresponding request by the operating system and file management of the host station in the same way as if it were a query on a file specific to this host station.
• the invention extends to a computer system for secure access to a network by users, comprising:
• digital processing means with microprocessor (s) and associated random memory (s),
• conjugated connecting means connecting means of at least one portable mass storage medium, said personal medium, so that at least a portion of the mass memory of the personal medium can be accessed read / write by the host station when the connection means are active,
• At least one server comprising at least one mass memory, called server memory, and means of connection to at least one public digital network, in particular the Internet, and adapted to allow read / write access to at least one part of this server memory via such a public digital network,
• each personal medium comprising:
• memory personal At least one mass memory, called memory personal
• a file query filtering module adapted to be able to recognize any request pertaining to at least one file, said CLE file, belonging to a user space of the authorized user, comprising digital information stored in a part of the personal memory, called cache local, and / or in at least one server memory of at least one server separate from the host station,
• a computer system according to the invention therefore constitutes a computer system for secure access via a network - in particular a public network such as the Internet - by users to user spaces.
• Each user space is unique to a single user and contains files that can be fully managed and used by the user, including the gateway process.
• a computer system comprises a plurality of personal media corresponding to the plurality of users of the system.
• Any portable mass storage medium may be used as a personal medium in accordance with the invention. It may be in particular mass storage media magnetic, optical, electronic, electro-optical, ... the invention is not limited to a specific technology for the realization of personal media. It should be noted, however, that the personal medium contains at least one mass memory, which is therefore in particular of the rewritable type, accessible for reading and writing. As such, a specificity of the invention is to provide an extremely high level of security particularly regarding the information of each user space, while implementing rewritable personal media.
• each user has a personal support of its own, and different users can be provided with personal media all made according to the same technology, or, conversely, according to different technologies.
• the same portable personal support incorporates several mass memories, different technologies, the information and data contained on this personal medium being duplicated on these different mass memories, so that the personal medium is compatible with different technologies of connection to host stations.
• the personal media can be more or less complex and in particular incorporate digital data processing means such as a microprocessor or other.
• digital data processing means such as a microprocessor or other.
• the personal media are free of digital processing means other than those necessary, if necessary, the establishment and operation of connection means between the personal media and host stations.
• Personal media may in particular be exempt from microprocessor, associated random access memory and any versatile information processing and / or calculation unit.
• they are also free of human / machine interface (screen, keyboard, pointer ...) and host stations have a human / machine interface.
• personal media can thus be reduced to only the elements forming their mass memory and standard connection functions with a host station.
• connection means between the personal media and the host stations can be made in any known form, including in particular a wired connection, an infrared remote radio frequency connection, a connection by inserting the personal medium in a suitable reader (for example if the personal medium is a cassette, a tape, a floppy disk or a disc).
• a suitable reader for example if the personal medium is a cassette, a tape, a floppy disk or a disc.
• the means for connecting a personal medium to a host station are of the type made active by bringing together and / or connecting personal media and the host station.
• a personal medium according to the invention can advantageously be made in the form of a simple USB key thus making it possible to reduce the investment cost for each user to a minimum.
• the invention also applies to more sophisticated personal media (such as portable personal digital assistants (PDAs) or portable computers or portable mass-storage phones ...) that can thus incorporate processing means.
• microprocessor information and / or a human / machine interface in this case, however, these information processing means are not useful in the context of the present invention.
• the human / machine interface of such a medium can partly or completely replace that of a host station.
• USB connection can be envisaged, alternatively or in combination, for example a wired link, or a wireless radio frequency link (WI-FI or other) or infrared.
• WI-FI wireless radio frequency link
• Every user with personal support can access his user space from any host station to which he can connect his personal support.
• the invention thus allows a simple, fast and nomadic access by each user to his user space.
• a system according to the invention comprises, stored in personal memory of each personal medium, ROOT_ID data identifying at least one root file recorded on a server, this root file comprising at least a portion of the architecture of the CLE files of the user space.
• this part of the architecture, or this architecture is not necessarily itself stored on the personal media (except possibly duplicated on the local cache of the personal medium) nor on the host stations.
• other CLE files in the user space may contain, in the same way, part of the user space architecture.
• the data describing the architecture of the user space are not necessarily gathered in one and the same root file, but can be distributed in several files, namely one (or more) specifically dedicated root file (s) ( s) the recording of these data and / or one (or more) CLE file (s) that may contain other information or data.
• this root file is a CLE file (that is to say a file of the corresponding user space) and managed as such.
• the host stations are chosen from:
• portable digital processing devices including PDA PDAs or mobile phones -.
• the host stations may be arbitrary and more or less sophisticated, as long as they make it possible to provide information processing and file management means, and preferably at least in part, the human / machine interface.
• these host stations can be as well as the user's personal home computers at home and at work, a user's laptop, a PDA-like personal assistant, and public access Internet access terminals (such as those provided by the user). available in public places such as train stations, airports, media libraries, shopping malls, cybercafé ...) or a computer or personal assistant of a friend or colleague ...
• each user has instant access to all the files, data and application programs of its user space, from any location, without having to previously specifically configure a computer manually (especially without requiring the prior installation of software or a operating system on the host station), with the help of only its personal support, in a perfectly secure way. This results in extremely great management comfort for users at a negligible cost.
• Such storage architecture and secure network access to user spaces has many other advantages related to the complete disruption of the habits and methods of modern computing that the invention involves.
• the various updates and evolutions of data and / or application programs can be performed directly on the servers by the providers of these data and / or application programs themselves, and no longer require any approach (such as a download and / or installation) from each user.
• the implementation and use of the invention are not dependent on a particular operating system or technology.
• the invention can be made compatible (as described below) with all operating systems proposed by publishers or manufacturers.
• User space files are viewed and managed from any host station as files specific to that host station. Therefore, the software applications offered by the editors or manufacturers under these operating systems work without modification with the files of the user space.
• This universal and systematic aspect of the invention represents extremely great ergonomics and appeal for users and publishers.
• the processing module is adapted to be executed in a memory area dedicated to the application programs and accessible in user mode of the RAM of a host station.
• the authentication module is adapted to authenticate an authorized user by input by the latter on a man / machine interface - in particular on the human / machine interface of the host station to which the support personnel is connected to a code, said user personal code, enabling validation of the identity of the user by the authentication module, and for storing the user personal code in the host station's RAM
• the process gateway is adapted to transmit the user personal code to each server to which the host station is connected for the purpose of transmitting digital information.
• This personal user code may be a user password entered on a keyboard, for example the keyboard of a host station, or a digital code representative of a biometric characteristic (fingerprint) entered by a sensor attached to a host station or personal support, or whatever.
• each server is adapted to check the validity of the user personal code before authorizing the establishment of a link between the server and a host station to which a corresponding personal medium is connected.
• a computer system comprises at least one server, said central server, comprising for each user at least one record, said user account, comprising said user identification data associated with the user personal code stored in said registration in form not understandable by the man.
• said user identification data stored in personal memory of a personal medium include a code individually identifying a user and data identifying a central server.
• the processing module includes at least one encryption sub-module with a symmetrical key generated by the processing module from a code provided by the processing module.
• each personal medium comprises, recorded in personal memory, an asymmetric encryption public key corresponding to a private key of a central server, this private key being stored in a mass memory of the central server.
• the processing module is adapted for:
• the processing module is adapted to save by default any CLE file of the user space that is digitally processed by the host station in the local cache of the personal memory of the personal support.
• the operations performed by the user during a work session are saved on the local cache of the personal medium, and kept even in case of sudden break of the connection to the public network or that between the personal medium and the host station.
• the CLE files are identified by a low level identifier compatible with all the operating systems and the file management systems, and all the servers, all the host stations (and their file management system (s)) and all personal media.
• the module of processing is adapted to create each file CLE with an identifier record of this file CLE 5 said INFO ID, comprising:
• INFOJ ⁇ further comprises:
• the encryption mode can be chosen from: an encryption, said automatic encryption, with a symmetric key; an encryption, said manual encryption, by a code entered specifically by the user for the file CLE; and a lack of encryption.
• This encryption mode can be determined automatically during the generation of the files, for example by a configuration file which associates the modes of encryption with names or parts of file names, this configuration being able to be modified by the user.
• the synchronization mode determines how the CLE file is updated on a server.
• This mode of synchronization can be chosen from: a mode, called synchronized mode, in which one reads a file CLE from the local cache if it is present and up to date, and since the server in the opposite case, and one always writes the CLE file in the local cache, the processing module including an automatic update sub-module of the FILESERV ID server when the connections are present; and a mode, said remote mode, in which all reading and writing of a CLE file are performed from and on the corresponding FILESERV_ID server only.
• the remote mode is used for example for user identification data, or for command files, or for CLE files that the user does not wish to keep on his local cache.
• each personal medium comprises, recorded in personal memory, a file said file
• ID_GENERATION comprising data adapted to allow the processing module to generate digital codes individually identifying the CLE files created by the user.
• the invention further relates to a personal medium and a computer system characterized in combination by all or some of the features mentioned above or below.
• FIG. 1 is a general diagram of a computer system according to the invention
• FIG. 2 is a block diagram of an exemplary embodiment of a personal medium according to the invention in the form of a USB key
• FIG. 3 is a diagram illustrating the operation of a personal medium according to the invention and of a host station in a computer system according to the invention
• FIG. 4 is a flowchart illustrating steps of referencing a medium; according to the invention in the file management system of a host station,
• FIG. 5 is a flowchart illustrating steps for managing requests on CLE files of a user space corresponding to a personal medium according to the invention in a computer system according to the invention
• FIG. 6 is a flowchart illustrating steps implemented for a request to read a CLE file from a user space corresponding to a personal medium according to the invention in a computer system according to the invention
• FIG. 7 is a flowchart similar to FIG. 6 illustrating steps implemented for a write request on a CLE file of the user space
• Figure 8 is a flowchart similar to Figure 6 illustrating steps implemented for the creation of a new CLE file in the user space.
• the computer system according to the invention constitutes a personal information network storage computer architecture allowing secure access to such personal information by any authorized and authenticated user carrying a portable mass storage medium. , says personal support 1, which is his own.
• Such a personal medium 1 comprises at least one mass memory, called personal memory 2, which can be made in any known form, especially in the form of an electronic hard disk and / or magnetic and / or optical or other .
• This personal memory 2 has the property of keeping the information stored in this personal memory 2, permanently, especially when the personal medium 1 is worn by a user between two uses.
• Each personal medium 1 also comprises means 3, 4 for connection to any computer station, said host station 5, itself equipped with microprocessor-based digital processing means) and associated random memory (s) and at least one operating system and file management.
• Each host station is also provided with connecting means 6, 7 conjugated with those of the personal supports 1, so that at least part of the personal memory 2 of each personal medium 1 can be accessed in read and write by a host station 5 when the means 3, 4, 6, 7 of connection are active.
• each personal medium 1 may be connected to any host station 5 allowing the user to execute operations on a computer user space from that particular host station 5.
• own, including information and / or files representing data and / or software, stored on remote machines such as servers 9 separate host stations 5 and personal media 1.
• the different host stations 5 to which a given user can connect from his personal medium 1 to perform operations on his user space are not servers, and it is not necessary, nor in general useful, to save all or part of the user space information on a mass memory of a host station 5.
• the personal medium 1 may be, as represented in FIG. 1, a USB key ("universal serial bus") 1a, or a portable device Ib communicating by radio frequency with a host station (it may be a mobile telephone, or a personal digital assistant PDA type wireless connection, or an electronic memory card with wireless connection means, for example of the type called WI-FI ).
• a USB key (“universal serial bus") 1a
• a portable device Ib communicating by radio frequency with a host station (it may be a mobile telephone, or a personal digital assistant PDA type wireless connection, or an electronic memory card with wireless connection means, for example of the type called WI-FI ).
• any other portable device can be used and considered as a personal support 1 according to the invention since this portable device can easily be worn by a user (pocket size), it is provided with a mass memory and connecting means to the host stations.
• a personal medium 1 may also be equipped with other functionalities, and in particular information processing means or means of communication via satellite or mobile telephony ... Nevertheless, it is an advantage of the invention that to allow to distribute low cost personal media 1 such as USB sticks or simple electronic cards to allow users to access their user space.
• Such personal media 1 reduced to their simplest expression are not only inexpensive, but lightweight and compatible with many computer standards that can be encountered in host stations 5 scattered throughout the territory. In general, the personal medium 1 does not have a man / machine interface (screen, keyboard, etc.).
• a host station 5 is generally equipped with such a man / machine interface.
• the invention is of course applicable in the case where at least a portion of the various personal media 1 are equipped with such a man / machine interface. In the latter case, the user can alternatively use either the man / machine interface of his personal support 1, or that of a host station 5 he encounters and to which he connects.
• any host station 5 having connection means compatible with those of a personal medium 1, information processing means and a connection to a public digital network such as the Internet can be used by a user. to access his user space.
• Such host stations 5 meet very frequently in various public or private places. It can be the user's different personal computers (in the office, at home ...); computers that the user can meet in the places he visits (customers, suppliers, friends, ...); or even public access stations (Internet access terminals at airports, railway stations, restaurants or cafés ).
• all the information corresponding to a user space is stored on remote servers 9 and accessed remotely via a public digital network such as the Internet from any host station connected to that network.
• not all of the user's personal information is stored on the personal medium 1 or on a host station 5 to which this personal medium 1 is connected.
• all of the user space information is stored only on remote servers 9 and not on the personal medium 1 or the host station 5, except for the most recent information not yet synchronized with those stored on the servers 9, and which can be temporarily saved only on the personal medium 1, in a part of the memory personal 2 reserved for this purpose, called local cache 8, accessible for reading and writing.
• Each personal medium 1 also comprises data, called user identification data, identifying at least one human user, said authorized user, authorized to use the corresponding personal medium 1, and these identification data are recorded in personal memory 2.
• each personal medium 1 comprises, stored in personal memory, data forming a process, said gateway process P, adapted to be loaded into the RAM of any host station 5 to which the personal medium 1 is connected, and to configure this any host station to allow the user to access his user space.
• This gateway process P essentially and functionally comprises three modules (these three modules can be implemented as independent programs or subprograms or on the contrary integrated in the same program), namely: an authentication module A by each host station 5 of any human user connecting a personal medium 1 to this host station 5, this authentication module A being adapted to determine whether it is an authorized user and to allow access to the user space corresponding to the user identification data stored in the personal memory of the personal medium 1 only if a corresponding authorized user is identified and authenticated; this authentication module A has the function, in its simplest embodiment, of managing a user personal code (such as a user password) entered by the user on a human / machine interface (for example the one of the host station 5), then to check if the user personal code is the correct one each time the user enters this code,
• a user personal code such as a user password
• a filter module D for file queries adapted to be able to recognize any request pertaining to at least one file, called a CLE file, belonging to a user space of the authorized user,
• a personal medium 1 according to the invention can thus be free of digital processing means other than those necessary, the case the establishment and operation of means 3, 4, 6, 7, for connection with the host stations 5.
• a personal medium 1 according to the invention may be free of microprocessor and associated random access memory, or more generally, central processing unit and information processing.
• a personal medium 1 according to the invention can be free of human / machine interface.
• the user identification data are only part of the set of data enabling authentication of a user authorized by the authentication module A executed by a host station 5.
• these user identification data stored in personal memory 2 of the personal medium 1 are adapted to be insufficient to allow a user to access his user space.
• a user carrying a personal medium 1 must, in order to access his user space, not only connect his personal medium 1 to any host station 5, but also provide additional authentication information. , ie the personal user code that must be entered on the man / machine interface at his disposal, in particular that of the corresponding host station 5.
• the user personal code is used by the authentication module A to validate the identity of the authorized user. It can be a user password entered by the user on a keyboard (for example the keyboard of a host station 5). But it can be any other code that can be provided by the user, for example a digital code representative of a biometric characteristic, delivered by a sensor that can be integral with the host station 5 or the personal support 1.
• the personal medium 1 may be equipped with a fingerprint sensor or other. It should be noted however that in any case the validation of the identity using this personal user code is performed by the authentication module A and executed by the host station 5, and not by an electronic circuit personal support 1.
• connection means 3, 4, 6, 7 between a personal medium 1 and a host station 5 are made active by bringing the personal medium 1 and the host station 5 closer together and / or by connecting the personal medium 1 to a corresponding socket of the host station 5.
• the authentication module A and the processing module C of a gateway process P are adapted to be executed in a memory area dedicated to the application programs of a host station 5, and therefore accessible In this way, these modules A and C can be written in a way that is not dependent on the operating system of the host station 5, which can be arbitrary. their loading according to the operating system detected on the host station 5. This detection can be performed by means of a well-known command integrated in the gateway process P, for example the "System.getProperty" command of the JAVA® language.
• a personal medium 1 may comprise a plurality of filter modules D 5 each being compatible with one of the commonly used operating systems (WINDOWS®, UNIX®, LINUX® ).
• the different user spaces can be stored in mass memories of a plurality of servers 9 separate from the host stations 5 and connected to the public digital network 10 to which these host stations 5 are themselves connected, in particular to the Internet network.
• These various servers 9 are at least partially made up of servers specific to the invention, but may, for the most part, consist of standard servers for providing data and / or information and / or programs by content providers. the corresponding network 10.
• At least one of the servers is used for the management of the computer architecture and therefore of the computer system according to the invention, in particular for the management of the different user accounts, in particular different identification data. users of the computer system according to the invention.
• the user identification data stored in personal memory 2 of each personal medium 1 advantageously comprise, on the one hand, a code individually identifying a user, and, on the other hand, data identifying a central server 9a on the mass memory of which the user code identifying the user, and other information concerning his user space, can be stored.
• the personal code (password) entered by the user can be registered, preferably in illegible form by the man, associated with the identification code of the user, on the corresponding central server 9a.
• the authentication module A is thus adapted to authenticate an authorized user by entering the user's personal code, in particular a user password, on a man / machine interface (in particular the keyboard 25 of the host station 5 to which the personal medium 1 is connected), and to store this user personal code in the RAM of the host station 5, so that the personal user code can then be communicated to each server 9 to which the host station 5 wants to access.
• the gateway process P 3 namely the processing module C, is also adapted to transmit the personal user code to each server 9 to which the host station 5 is connected for the purpose of transmitting digital information between this server 9 and the server. host station 5 in one direction or the other.
• FIG. 2 represents an exemplary embodiment of a personal medium 1 in the form of a USB key comprising a housing 20 enclosing the personal memory 2 in the form of an electronic memory, and an interface 21 with a USB link, the housing 20 carrying a plug 22 for such a USB link.
• This plug 22 can be plugged into a corresponding female port 6 of a host station 5.
• the personal memory 2 comprises an area dedicated to forming the local cache 8, an area 23 containing the gateway process P in a form ready to be executed by any host station 5, and a zone 24 containing configuration files. of the host station 5.
• the zone 24 may include a file AUTORUN.BAT automatic launch of the gateway process P by the host station 5, an IP_PORT_SC.XML file containing the network address and the connection port of the central server 9a, a PCK.DATA file containing a central public key PCK used for encryption as indicated below, a LAK.DATA file containing a symmetric key LAK used for the automatic encryption of files, as indicated below, a file IDJJENERATION_DATA for generating file identification codes as shown below, and a ROOT ID.XML file containing a root file identifier ROOT_ ID for the user as shown below.
• Such a personal medium 1 is not personalized, that is to say does not contain the user identification data.
• Such a support 1 can be distributed and marketed at low cost in large series. When a user acquires such personal support 1 and wishes to use it to access its user space, it is sufficient to connect it to a host station 5.
• gateway process P and the configuration files can be registered beforehand (on production) on the personal memory 2 of the personal medium 1.
• the personal media can be registered beforehand (on production) on the personal memory 2 of the personal medium 1.
• gateway process P can be downloaded to the personal memory 2, upon request of the user, from a remote server or from a removable memory medium such as an optical disk.
• a removable memory medium such as an optical disk.
• only a portion of this information is recorded prior to manufacture on the personal medium 1, the other being downloaded.
• the gateway process P is started by the host station 5, either automatically (if the operating system of the host station 5 allows the automatic launch of such a process), or on command of the user if necessary .
• the operating system of the host station 5 then loads and executes the user mode P gateway process, and this gateway process P loads and executes the processing module C which performs the following actions.
• the processing module C reads the network address of the corresponding central server 9a. It should be noted that, alternatively, this network address may not be stored on the personal medium 1, but may be directly recorded in the code of the gateway process P itself, or on a specific server whose address itself is known from the gateway process P.
• the processing module C is adapted to create each file
• INFO_ID including:
• FILESERV_ID a code identifying a server, called FILESERV_ID, where this file CLE was initially registered and where it remains always registered
• This INFO_ID record also preferably includes:
• the code identifying the user creator of this CLE file in the INFO_ID record of a CLE file corresponds to the USER_ID code of this user.
• the FILESERV_ID code identifying the file creation server can only consist of the network address of this server.
• the numerical code individually identifying the CLE file is a number, for example on 64 bits.
• this code can be generated by the processing module C from the file ID_GENERATION.DATA stored in the personal memory 2 of the personal medium 1.
• This file ID_GENERATION.DATA comprises an initial number which is incremented at each creation of file CLE by the processing module C.
• the code determining the encryption mode for a file CLE can identify an encryption mode among at least three modes of encryption, namely: a total absence of encryption (the file is not encrypted and is accessible to the public); manual encryption by which the contents of the file is encrypted by the host station 5 with a code specific to this CLE file which must be entered by the user, for example a password entered using the keyboard (in this encryption mode, the file is lost if the user loses this specific code); automatic encryption by a symmetric LAK key generated by the processing module C from a pseudo-random code and encrypted with the user's personal code when it is stored in the file LAK.DATA on the personal memory 2.
• the CLE file is saved on the local cache 8 of the personal support 1 in encrypted form and is decrypted during playback. It is communicated via the network in decrypted form and is encrypted again during a new write.
• the user can modify his personal user code without losing the files stored on the local cache 8.
• said symmetric key LAK having been decrypted with the old code user's personal code, is encrypted with the new user's personal code, and then stored encrypted on the personal memory 2.
• This symmetric key LAK is created and stored in the personal memory 2 as soon as the user enters for the first time his personal code for the creating his personal user account.
• the code determining the mode of synchronization of a file CLE allows to indicate the way with which this file CLE is synchronized, that is to say updated.
• the processing module C furthermore includes an update management sub-module which allows, according to predetermined periods of time or according to a method known per se, to regularly update the files recorded on the servers 9.
• the CLE files are saved only on the servers 9 and are never saved in the local cache 8 of the personal memory 2 of the personal medium 1.
• the CLE file must be read from the server 9 on which it is registered.
• the update management sub-module not being useful in this case.
• This synchronization mode where the files are not synchronized is used for password files or specific command files or CLE files declared as such by the user.
• synchronized mode is used for most other CLE files in the user area, and in particular it allows you to save the changes made by a user to CLE files, even in the event of a sudden break in the network connection or connection between the personal support 1 with the host station 5.
• the processing module tries to read a ROOTJD root file identifier, in the ROOTJD.XML file saved on the personal memory 2.
• the root file identifier ROOT_ID is constructed like any INFO-ID identifier , with the USER_ID user identification code, and the SERVER ID code identifying the server 9 on which this root file is registered.
• the file ROOTJ ⁇ XML containing the identifier ROOT_ID does not appear on the personal memory 2.
• the processing module C asks the user whether a new account should be created, and, if so, , establishes a connection with the central server 9a and requests this central server 9a to prepare a new user with a user identification code designated USER ID.
• the processing module C then asks the user to enter a personal code (password) user of his choice.
• the user's personal code For example, entered on the keyboard 25 of the host station 5 is stored by the processing module C in the random access memory 26 of the host station 5, in a data storage area 27 of this random access memory 26.
• the processing module C After receiving the USERJD user identification code from the central server 9a, the processing module C requests a confirmation from the human user, then chooses an available server 9, creates a root file identifier ROOTJD (with the user code USERJD and the SERVERJD code of the selected server) and returns the confirmation composed of the entered personal code (password), and the ROOTJD identifier thus created.
• the processing module C Before sending this data to the central server 9a, the processing module C performs encryption of the user's personal code at least, and preferably all of this data transmitted to the central server 9a. To do this, the processing module C is adapted to generate a symmetric key CS from a pseudo-random code provided by a pseudo-random code generator.
• This symmetric key CS is then used to encrypt the data during transmission between the servers 9 and a host station 5, in general, and this, thanks to an encryption sub-module incorporated in the processing module C.
• the public key Encryption PCK stored in the PCK.DATA configuration file in the personal memory 2 is an asymmetric encryption public key corresponding to a private key which is itself stored on the central server 9a.
• the processing module C is then adapted to encrypt the symmetric key CS with this public key PCK, transmit this symmetric key thus encrypted to the central server 9a, itself adapted to decrypt the symmetric key with the corresponding asymmetric private key; and encrypting the ROOTJD root file identifier and the user personal code with this symmetric key CS, and this, before transmitting them to the central server 9a.
• the central server 9a receiving the user identification data creates a user account, then sends a command to the processing module C for the latter to register the root file identifier ROOTJD in the file ROOTJ ⁇ XML on the personal memory 2 of the personal medium 1.
• the personal medium 1 is configured to be used by a predetermined human user (or a group of human users having the same USERJD user identification code).
• the authentication module A again requests the user personal code to the human user, which the latter can enter via the keyboard 25 and / or the corresponding screen, and / or in any other way (for example by voice input).
• the personal code entered by the user is then checked by the authentication module A. If the personal code is not compliant, access is denied to the user. If, on the contrary, the personal code is consistent with that registered in the central server 9a, access is allowed.
• a symmetric key CS is generated by the processing module C, encrypted with the public key PCK, then the user ID user ID of the authenticated user and his personal user code are encrypted with this symmetric key CS, then the whole (the symmetric key CS encrypted with the public key PCK, the user code USER_ID and the personal code encrypted with the symmetric key CS) is sent to the server 9 contacted.
• the latter decrypts the symmetric key CS with the private key corresponding to the public key PCK, then decrypts the user code USER_ID and the personal code with the symmetric key CS, then verifies the validity of the user by checking the personal code corresponding to the USER_ID user code. This verification is done directly by a central server 9a; if the server 9 is not a central server, it contacts a central server so that it authenticates the user.
• All the data being sent subsequently by this established connection can be advantageously encrypted with the symmetric key CS so that it can not be scanned by a malicious user of the network 10.
• this technique takes into account the fact that a symmetric encryption is much faster than an asymmetric encryption: that is why only the symmetric key CS is asymmetrically encrypted.
• the data sent by the server 9 and received by the host station 5 can be encrypted with the symmetric key CS.
• the gateway process P realizes a configuration of the host station 5 so that the latter can access the CLE files of the user space, and this, in accordance with the steps shown in FIG. 4.
• the filtering module D compatible with the detected operating system is loaded into the RAM of the host station 5.
• WINDOWS® type operating system for example WINDOWS XP®.
• This filtering module D comprises a dynamic library incorporating the functions of the operating system necessary for filtering and processing file queries.
• the filtering module D starts the function of establishing the list of machines present on the local network of the host station 5, then adds a local machine corresponding to the name of the personal medium 1, namely for example CLE_XX, to this list of machines on the local network of the host station 5.
• the filtering module D loads in the RAM of the host station 5 a request processing task on the machine CLE_XX, which is a task that then executes permanently, and described hereinafter more in detail.
• the filtering module D searches in the list of virtual units of the host station 5, a free virtual unit of format U :. For example, the filtering module can start such a search from the last one, that is to say from Z:. The filtering module D then associates this virtual unit with a file path of the type ⁇ CLE_XX ⁇ AAA ⁇ , the directory AAA being defined by the filtering module D by default.
• the host station 5 is configured to satisfy requests on files of the virtual unit U: corresponding to the user space of the authorized user of the personal medium 1.
• FIG. shows in greater detail the step 43 of processing requests by the filtering module D.
• step 51 the filtering module D is placed in the blocking reading state by a known function (for example "Netbios" under WINDOWS®). In this state, the filter module is waiting for a reading of a request arriving on the machine ⁇ CLE_XX.
• a known function for example "Netbios” under WINDOWS®.
• the subsequent step 52 corresponds to the arrival of a request for the machine ⁇ CLE_XX, as detected by the filtering module D.
• the latter then initiates a step 53 of interpretation SMB / CIFS of the request to translate it. according to a protocol adapted to the processing module C.
• the filtering module D calls a function corresponding to the request for its processing by the processing module C.
• the subsequent step 55 corresponds to the execution of this function by the processing module C and will be described in more detail below.
• the filtering module D is then placed in a waiting state of the response of the function performed by the processing module C, and this, in step 56.
• this response is received by the filtering module D, it builds the byte packet corresponding to this response in step 57, according to the protocol (CIFS in the example of WINDOWS®) corresponding to the operating system of the host station 5.
• the module filtering D returns the answer corresponding to the request and coming from the machine ⁇ CLE_XX. This answerback is also a known system function incorporated into "Netbios”.
• the filtering module D returns to the blocking read state of the initial step 51.
• the filtering module D can be implemented in the form of a module of similar structure to that of a device driver, and adapted to be inserted into the core of the operating system in RAM and to directly receive requests on the virtual unit U :.
• the architecture of the different directories and files CLE of each user can be organized in a standard way in the form of a tree structure, and this architecture is stored in the root file identified by ROOT_ID on a server 9 (and not on the personal medium 1 or on a host station 5).
• each file CLE is identified in this architecture by its path, and, moreover, by the corresponding INFOJDD identifier as described above.
• FIGS. 6, 7 and 8 illustrate the different steps performed by the processing module C to perform various functions that can be performed on CLE files, namely respectively a file read, a file write, and the creation of a file. new file.
• FIG. 6 represents, for example, a reading of a file CLE belonging to a user designated USERl and whose path is USER1 ⁇ DIR1 ⁇ FFF1.
• the processing module C determines which is the user space architecture of USERl. To do this, the processing module C searches for the contents of the root file of USERl. To know the ROOT-ID1 identifier of the root file of the USERl user, if the authorized user connected is not USERl 5 the processing module C asks in step 61 this identifier ROOT_ID1 by the network to the central server 9a.
• ROOTJDl can be read directly in this step 61 in the file ROOT_ID.XML of the personal support 1 of USERl.
• the processing module C reads, in the identifier ROOTJD1, the identifier SERVERJD1 of the server 9 where this root file is recorded, then, during step 63, the processing module C reads the architecture contained in the root file identified by ROOTJDl, in the server SERVERJDl which contains it or in the local cache 8, which makes it possible to know the identifier INFOJDl of the file DIRlMFFFl by association during step 64. The module of processing C can then read the contents of this INFOJDl file during step 65.
• requests for information (request for identifier, reading of a file content, request to write the contents of a file) on a server 9 are made by any known transfer technique.
• information on the network 10 for example a specific bilateral network link ("Socket")) to which the encryption protocol of the information sent and received as described above applies, the information being encrypted with a symmetric key CS, itself encrypted with the PCK asymmetric public key.
• Socket bilateral network link
• the processing module C When writing (FIG. 7) to a CLE file of the user USER1 whose path is USERl ⁇ DIR1 ⁇ FFF2, the processing module C also determines, as before, the architecture of the files of the user space of USER1, by performing the series of preliminary steps described above. The processing module C then searches in step 71 for the identification code INFO JD2 of the file corresponding to DIR1 ⁇ FFF2.
• step 72 is to write this file.
• this writing is performed in the local cache 8 of the personal medium 1, then, the update management sub-module is launched in step 73 by the processing module C to update this file, if necessary.
• Fig. 8 shows a method for creating a new CLE file of the USER1 user whose path is USER1 ⁇ DIR1 ⁇ FFF3.
• the processing module C creates a new identifier corresponding to this new file DIR1VFFF3, that is to say an identifier designated INFO_ID3.
• this new record INFO_ID3 is added to the content of the user space USERl with a specified name (in this case DIR1 ⁇ FFF3).
• the processing module C then writes during step 83, the new version of the file architecture of this user in the local cache 8 of the personal medium 1, then launches, in step 84. the submodule update management which allows, at an appropriate time, to update this file on the corresponding central server 9a.
• the update management sub-module can be provided a specific file stored in the local cache 8 of the personal memory 2, in which are recorded the records identifying the various CLE files that have been subject changes by the user and then to be checked for updates by the update management sub-module.
• the processing module C can see in the central server 9a a file identifying the different servers and in which the rate of occupation of each server 9 is stored in real time.
• the different servers 9 can themselves be identified in a computer system according to the invention as specific users, that is to say in a strictly identical manner to the personal supports 1 of the point logical view.
• their network address can be stored in a specific file of their mass memory and updated by synchronization in the same way as the files of the local cache 8 of a personal medium 1.
• any CLE file of the user space that is digitally processed by the host station 5 is saved in the local cache 8 of the personal memory 2.
• the user can nevertheless avoid such writing. in the local cache 8, for example by specifying that the file is of the unsynchronized type. The risk exists that this file is lost if the connection to the network or the connection between the personal medium 1 and the host station 5 is suddenly interrupted.
• the update management sub-module determines whether an update is necessary by consulting the metadata associated with each file, including the date of the last modification made to the file. Such an update management sub-module is known in itself and does not have to be detailed.
• the invention thus represents a considerable advance and a radical change in work habits with computer systems.
• users can, through the invention, manage all of their personal data or personal or personalized information, not on a portable medium that contains this information or from a workstation of their own and that contains this information, but remotely via a network such as the public Internet network and only through a personal support 1 which can reliably identify them, and save files being modified in synchronization, and on the other hand, from any standard host stations to which they can connect and which are automatically configured by the personal medium 1.
• a network such as the public Internet network
• each user sees his user space transparently as a directory of the host station 5 to which he is connected and accesses the corresponding CLE files in the traditional way, as if these files were stored on the mass memory of the host station 5.
• read / write access or creation of new files are performed in a perfectly reliable and secure manner.
• a personal support 1 If a personal support 1 is lost or stolen, it suffices for the user to acquire a new personal medium 1, if necessary to provide it with the gateway process P and download configuration files. In this case, the P gateway process will not find the ROOT_ID.XML file, and ask the user for a choice between creating an account or restoring an account.
• the user In the case of a restoration, the user enters his USER_ID code and his personal user code, which are sent to the central server 9a. The latter checks their validity, and returns the root file identifier ROOT_ID of this user, who can then access his user space again.
• the invention makes it possible not only to access data, but also to make available to different users specific programs and applications, automatically updated by the suppliers of these specific programs and applications, without the user having itself to download updates or install these updates on any computer.
• a software consisting of executable files can be registered on the user space of the editor of this software. This user space is made accessible either free of charge or under condition of a subscription to a specific service by any client user wishing to access it.
• These files making up the software are subsequently imported directly into the RAM of the host station 5 to which the personal support 1 of the client user is connected and executed on the host station 5, without the client user having to perform any installation procedure.
• the invention also makes it possible in the same way to propose software rentals or updates of software or specific data depending on the users, and to manage the payments of the different users to access these software or updates or specific data. .
• the invention allows each user to have all his user space, and from any location, permanently, and perfectly reliable and synchronized. It also results in users no longer being encouraged to illegally hack software or data, since they do not have to install them themselves. same.
• the invention makes it possible to reliably and flexibly manage access to different information, data and programs that are common or individually customized by the different users or groups of users. Indeed, it is possible for an authenticated user to allow access to his user space to other authenticated users by configuring the servers 9 to allow access to this user space for these other users.
• the invention can be the subject of numerous applications for the storage and provision of information and various personal data such as software, word processing documents, tables, calendars, Internet favorites or others.
• the different files are identified by the INFO_ID records which remain identical throughout the life of the file and do not depend on the operating systems and recording technologies.
• the file names are thus always valid at all times regardless of the technological platforms implemented and used on the servers and / or the host stations 5.
• the different servers 9 for storing files require only a very small digital processing capacity, in reality limited to the recording of the various files and their reading. They are therefore essentially mass memories and, unlike the standard computer architectures known to date, in a computer system according to the invention, the computer processing is completely deported at the level of the host stations 5 and not at the level of the servers themselves. -Same.
• the various servers 9 are machines that can be very light and that the interfaces between the host stations 5 and the different servers 9 are particularly simple since they only convey actions on the files and not on the files and directories.
• the coherence of the local caches 8 with the host stations 5 and the personal supports 1 is ensured.
• the invention involves a disruption of habits related to the use of computer data.
• a software can, without having to be modified according to the client user, adapt to it.
• the software can read configuration files on the user space on which it is saved (user space of the editor) but it can also read additional configuration files on the user space of the client user. running.
• software can load its graphical appearance on a file of the user's user space of the user and, for example if the user is visually impaired, adapt the colors to his preferences.
• a website can, in the same way, adapt its appearance, without the need to request and save user preferences in a database specific to this website. All that is needed is to read a file (for example a cascading style sheet CSS file) on the user space of the user visiting this site.
• a file for example a cascading style sheet CSS file
• the CLE files of the users are not duplicated on all the stations where they must be used but are accessible in a simple and universal way on demand (for example by double-clicking on the icon representing them). It is therefore not necessary to exchange the files by manually transferring them from station to station or by sending them by e-mail.
• the quality of the use of the files is improved because the recipient user no longer has to accept to receive, nor to receive a file when a sender user sends him such a file. It is sufficient that the recipient user accesses this file when it actually needs it.
• the data generated by the use of computer resources (documents, letters, contacts, software, images, music, various digital creations, Internet sites, databases, etc.) are globally classified and accessible in a simple and direct way by the users without suffering from penalties related to their storage on a single station (possible destruction if destruction of the station, dependence of data on the operating system present on the station, limit of the recording space, etc.).
• the invention defines universal access to data from any host station to which the user connects his personal medium 1.
• the invention thus rests on a clear separation between the recording and the interpretation of the data.
• Interpreting the data according to the host stations increases the potential for using the data.
• an address book managed on a host station type personal computer can be classified and completed very simply with the keyboard and mouse of said host station.
• a user can also use this address book on a mobile-type host station when he plugs his personal support to the latter, thus allowing the mobile phone to know numbers useful to this user, and whatever the type or owner of the phone. portable proper.
• a user can memorize his favorite radio stations by connecting his personal support to a home theater-type host station and listen to them by connecting his personal support to a radio-type host station, or still on a more advanced type host station such as an interactive seat equipped with headphones.
• the invention makes it possible to create multiple access points to a user space. Instead of being grouped in a personal computer serving In all the tasks, the functionalities are conversely everywhere where the user needs them, the multiple host stations being each able to interpret at least part of the data of the user.
• the shopping list of a housewife can be interpreted by a refrigerator (host station) when it approaches with its own support identifying it.
• the refrigerator can calculate which foods are missing or even offer a recipe based on the family's tastes previously entered on a personal website of the house.
• the light, the heating, the operation of accessories can adapt in a living room or work depending on the user (s) present (s).
• a user can share a specific file of his user space interpreted by a host station type building door, for example the door of his home, with another user so that it can enter the same building (home), the door allowing this way access to it when it connects his personal support.
• the invention makes it possible to take into account the increasing importance that computing takes in everyday life, to alleviate the problem of the growing complication that currently exists for users with known systems: their data is scattered (servers, personal computers, telephones laptops, etc.), of various formats (for example, it is difficult to save a mobile phone address book on a personal computer) and difficult to access (the digital machine must be available and available to interpret them) .
• the user space information is clearly and simply accessible, independent of the execution host stations, always synchronized (up to date), and yet recorded disseminated on the servers, this which implies that the quality and durability of the recording are much higher than those obtained with personal computers.
• the invention also makes it possible to implement a recurring process for backing up the servers 9 making it possible to securely store the data of the user areas in the long term.
• filtering modules D compatible with other operating systems than WINDOWS® can be made in a manner similar to the example given above, and incorporated in the gateway process P.
• the IT functionalities, architectures and structures described above can be realized by simple programming of known computing devices, in particular for example using the JAVA language making it possible to write a program in a way that is not dependent on the operating system, in particular useful in the case of the treatment module C.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Computer Hardware Design (AREA)
• General Engineering & Computer Science (AREA)
• Computing Systems (AREA)
• Theoretical Computer Science (AREA)
• Software Systems (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Storage Device Security (AREA)

Applications Claiming Priority (3)

Publications (1)

Family

ID=35840505

Family Applications (1)

Country Status (3)

Families Citing this family (43)

Family Cites Families (9)

• 2005
  • 2005-11-04 EP EP05815148A patent/EP1836636A1/de not_active Withdrawn
  • 2005-11-04 WO PCT/FR2005/002751 patent/WO2006053958A1/fr not_active Ceased
  • 2005-11-17 US US11/280,347 patent/US20060107062A1/en not_active Abandoned

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events