Classifications

• • G—PHYSICS
  • G04—HOROLOGY
  • G04G—ELECTRONIC TIME-PIECES
  • G04G9/00—Visual time or date indication means
  • G04G9/0064—Visual time or date indication means in which functions not related to time can be displayed
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/60—Protecting data
  • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
  • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
• • G—PHYSICS
  • G04—HOROLOGY
  • G04G—ELECTRONIC TIME-PIECES
  • G04G21/00—Input or output devices integrated in time-pieces
  • G04G21/02—Detectors of external physical values, e.g. temperature
• • G—PHYSICS
  • G04—HOROLOGY
  • G04G—ELECTRONIC TIME-PIECES
  • G04G21/00—Input or output devices integrated in time-pieces
  • G04G21/02—Detectors of external physical values, e.g. temperature
  • G04G21/025—Detectors of external physical values, e.g. temperature for measuring physiological data
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
  • G06F21/31—User authentication
  • G06F21/32—User authentication using biometric data, e.g. fingerprints, iris scans or voiceprints
• • G—PHYSICS
  • G06—COMPUTING OR CALCULATING; COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
  • G06F21/31—User authentication
  • G06F21/36—User authentication by graphic or iconic representation

Definitions

• the present invention relates to a method for verifying the use of data archived in a watch which makes it possible in particular to control access to at least one confidential data item archived in a memory element of this watch.
• the invention also relates to a system implementing such a method as well as a watch comprising this system and a computer program.
• a watch includes a set of functions that can be used by the wearer. Such functions can make it possible to consult the personal data of this bearer or to access services such as banking services, commercial services (online shops, e-commerce companies) or even electronic messaging services or instant messaging.
• a drawback here resides in the fact that once the wearer of the watch is authenticated, it is possible for any individual to have access to the functions of the watch, in particular in the case where the latter has been stolen and thus be able to access the personal and confidential data of the holder. It will be understood that there is a need to find a solution, in particular which does not have the drawbacks of the prior art. Summary of the invention
• An aim of the present invention is therefore to provide a secure, reliable, secure and robust solution making it possible to control access to confidential data archived in a memory element of a watch.
• the invention relates to a method for controlling access to at least one confidential data item stored in a memory element of a watch, said memory element comprising two categories of data, general data and said confidential data, access to which by a function of said watch requires identification of its wearer, the method comprising the following steps:
• the step of determining comprises a sub-step of estimating a criterion of access to said datum which defines whether said data belongs to the category of confidential data or to the category of general data;
• the determination step includes a comparison sub-step between the estimated access criterion and a benchmark
• the verification step comprises a sub-step of presenting a graphic representation on / in the interface for broadcasting visual information of said watch;
• the verification step comprises a sub-step of generating a digital identification element from said at least one biometric information element included in the images acquired of the portion of skin;
• the verification step includes a sub-step for validating a digital identification element generated in anticipation of the identification of the wearer
• the biometric information element relates to a vascular network or to a texture of this skin.
• the invention also relates to a system for controlling access to at least one confidential data item stored in a memory element of a watch, implementing this method, the system comprising the following elements linked together: a processing unit, a multispectral skin biometric sensor, an input interface, an interface for broadcasting visual information and the memory element comprising two categories of data, general data and said confidential data.
• the invention also relates to a watch, in particular a connected mechanical watch, comprising such a system.
• the invention also relates to a computer program comprising program code instructions for executing the steps of this method when said program is executed by a processing unit.
• FIG. 1 is a schematic representation of a watch comprising a system for controlling access to at least one confidential data item archived in a memory element of this watch, according to one embodiment of the invention.
• FIG. 2 is a flowchart relating to a method of controlling access to at least one confidential data item archived in the memory element of the watch, according to the embodiment of the invention.
• a watch comprising a system 1 for controlling access to at least one confidential data item archived in a memory element of this watch.
• a watch 100 is preferably a connected mechanical watch 100 comprising a body such as a watch case, and a fastening element such as a bracelet making it possible to fix this body, for example to the wrist of the wearer.
• This watch 100 more precisely comprises in a non-limiting and / or non-exhaustive manner:
• a processing unit 2 comprising hardware and software resources, in particular at least one processor cooperating with a memory element 3, said memory element 3 comprising in particular two categories of data, general data 27 and confidential data 26;
• an interface for broadcasting visual information 4 such as a hybrid display dial provided with a first analog display component and a second digital and / or alphanumeric display component;
• an input interface 5 such as a keyboard or even a touch interface included for example in the interface for broadcasting visual information 4
• a multispectral skin biometric sensor 7 comprising at least one photographic sensor 8a, at the minus one multispectral light source 8b and at least one thermal image sensor 8c, the light source 8b being able to emit light radiation in wavelengths between 300 and 1100 nm, moreover this light source 8b can be of the laser type.
• the confidential data 26 are personal / secret / private data of the wearer of the watch 100 and whose access by a given function of this watch 100 requires identification of the wearer.
• General data is “public” data that may relate to the bearer and in relation to which a given function can freely access.
• the confidential data 26 can comprise digital files relating to images, videos, documents (for example in text, spreadsheet, XML, etc.) format comprising confidential information such as personal information of the person. carrier (bank, name, address, date of birth, weight, age, sex, heart rate, sleep cycle, etc.).
• These confidential data 26 may also understand encryption / decryption keys, certificates, authentication codes, passwords and personal codes.
• the processing unit 2 is connected, among other things, to the interface for broadcasting visual information 4, to the input interface 5 as well as to the multispectral biometric sensor 7. It will also be noted that the multispectral biometric sensor 7 is arranged in the body of the electronic device 100 and / or in the attachment element.
• the memory element 3 of the processing unit 2 of the watch 100 comprises confidential data 26 and general data 27 as well as parameters for classifying this data in one or the other of these. two categories confidential or general. These memory elements 3 also include.
• These memory elements 6 of the processing unit 2 also include at least one graphic representation 7 making it possible to identify the carrier, as will be seen below.
• This graphic representation 7 can for example be an image comprising at least one object.
• this image defines a scene comprising a plurality of objects such as dwellings, vehicles and / or a star such as the moon, etc. It is obviously understood that this image can define other types. scene comprising at least one object.
• These memory elements 6 also include data relating to a reference sequence 8 comprising reference identification portions of this graphic representation 7, said portions having been previously selected by the wearer of watch 100 during a configuration process. relating to the identification of the bearer.
• the system 1 is able to implement a method for controlling access to at least one confidential data item stored in a memory element of a watch, said memory element comprising two categories of data. data, general data 27 and said confidential data 26.
• This method comprises an authentication step 10 of the wearer of the watch 100 authorizing access to the use of functions of this watch 100.
• This authentication step 10 therefore makes it possible to identify with certainty the wearer of the watch so that 'he can have access to the use of all the functions of this watch 100. In other words, it allows the wearer to provide proof of his identity by providing for the entry of an authentication code or a secret code through interaction between the wearer and the input interface 34.
• these functions can be implemented by processing algorithms executed by the processing unit 2 of the watch 100 as soon as these functions are activated / selected following an interaction between the wearer and the interface. input 5 of this watch 100. These algorithms thus executed require the use of general data 27 and / or confidential data 26.
• these functions of the watch may relate to a function of 'image or video editing, a word processing function, a connection function to a banking service, a connection function to a commercial service (online stores, e-commerce companies), a connection function to an electronic messaging or instant messaging service.
• the method comprises a step 11 of selecting one of said functions of the watch requiring the use of at least one of said confidential 26 or general 27 data archived in the memory element. .
• this function is selected from among all the functions of the watch which are displayed on the visual broadcast interface 4 and this, following an interaction between the wearer and the input interface 5 of this watch 100. As we mentioned previously, such an interaction then participates in the execution by the processing unit 2 of a processing algorithm aimed at performing this function on the basis in particular of at least one item of data archived in the memory element 3 which here is necessary for the implementation of this algorithm.
• the method then comprises a step 12 of determining the category to which said at least one item of data required by the function belongs.
• This step 12 comprises a sub-step 13 for estimating a criterion of access to said data item which defines the membership of said data item in the category of confidential data 26 or in the category of general data 27.
• This sub-step 13 comprises a phase of implementation of calculation operations by the processing unit 2 to obtain this access criterion and this, from said data, the nature or type of the function and a classification parameter for this data.
• Such a parameter is archived in the memory element of the processing unit of the watch by being associated with the corresponding data.
• This parameter defines whether said data belongs to one or other of the categories of confidential 26 or general 27 data, depending on the nature or type of the various functions of the watch, likely to require such data. as part of their implementation.
• this parameter can be used to define that data such as an image is confidential data for a given function and general data for another function of the watch. It is therefore understandable that in this context, the membership of the data in one or the other of these two categories is relative to the function which requires its use.
• the determination step 12 then comprises a comparison sub-step 14 between this estimated access criterion and a reference criterion.
• said at least one piece of data required by the function belongs to the category of confidential data 26 if the access criterion is greater than or equal to the reference criterion. Conversely, if the access criterion is less than the reference criterion then said at least one data item is included in the category of general data.
• the method comprises a step of verifying the identity of the wearer of the watch 100 from an interaction between the wearer of this watch 100 and a graphic representation included in said watch 100, more particularly a displayed graphic representation. on / in the interface for broadcasting visual information 4 of said watch 100.
• a step 15 is carried out systematically following the selection of a function in order in particular to allow the processing unit 2 to check that the wearer of watch 100 is still in possession of the latter and is indeed at the origin of the selection of the function.
• This step 15 comprises a sub-step 16 of presenting a graphic representation 7 on / in the interface for broadcasting visual information 4 of said watch 100.
• This sub-step 16 includes a generation phase 17 of the display, on / in the visual information distribution interface
• This phase 17 can include a sub-phase of selection by the wearer from among a sample of at least two graphic representations 7 displayed on the interface for broadcasting visual information 4, of the graphic representation 7 provided for the implementation. of this identification. It will be noted that the wearer is the only one to know the graphic representation 7 that he has chosen during a configuration process relating to this identification.
• This presentation sub-step 16 then comprises a triggering phase 18 of a countdown as soon as the generation phase 17 is carried out.
• the preconfigurable countdown is triggered once the graphic representation 7 is presented on the broadcast interface 4.
• Such a phase 17 participates from a limited time interval defined by this countdown, to be counted down. the estimated time necessary for entering the sequence of identification portions of graphic representation 7 displayed on / in on the broadcast interface 4.
• the verification step 15 comprises a selection sub-step 19 within the limited time interval of a sequence of at least two identification portions of said graphic representation 7 aimed at identifying said carrier, said sequence corresponding to an identification code of the bearer.
• identification portions are not directly visible in the graphic representation 7 presented on / in the broadcasting interface 4.
• the selection sub-step 19 comprises a display phase 20 of at least one of said. identification portions of the sequence in said graphic representation 7.
• This visualization phase 17 comprises a sub-phase for selecting at least one zone of interest of the graphic representation 7 capable of comprising said at least one identification portion .
• the wearer selects for example a first zone of interest or a second zone of interest by carrying out an enlargement of this first zone or this second zone from the input interface 5.
• the identification portions then become visible.
• each portion of identification useful for the realization / constitution of the sequence can be selected from the input interface 5.
• the sequence comprises an ordered number of identification portions and that the selected area of interest may for example comprise three identification portions of which only two are ordered successively one after the other in the sequence.
• the remaining identification portion requires, in order to be part of the sequence, the selection of an identification portion included in another zone of interest of the graphic representation 7.
• the verification step 15 comprises a validation sub-step 21 of the selected sequence.
• This validation sub-step 21 comprises a phase 22 of checking that the selection of the sequence of identification portions has been carried out within the limited time interval defined by the countdown. Insofar as this selection was not carried out within the limited time interval, the validation sub-step 21 comprises a renewal phase 23 of the presentation 16 and selection sub-steps 19.
• the establishment of access to watch 100 is deleted and in particular access to the functions of this watch 100.
• the wearer of the watch is invited to authenticate again in order to provide proof of his identity by entering an authentication code or a secret code, through an interaction between the carrier and input interface 5.
• the validation sub-step 21 then comprises a comparison phase 23, implemented by the processing unit 2, between said selected sequence and the sequence of reference 8.
• This comparison phase 23 comprises a sub-phase for rejecting the identification of the carrier if said sequence is appreciably different or different from the reference sequence 8.
• the execution by the unit of processing 2 of the processing algorithm aimed at performing this function is stopped by the processing unit 2.
• access to watch 100 is also eliminated and in particular access to the functions of this watch.
• the wearer of the watch is invited to authenticate again, during a new execution of the authentication step 10, in order to provide proof of his identity by entering a code.
• the comparison phase 23 also comprises a sub-phase for successfully identifying the carrier if said sequence is substantially similar or similar to the reference sequence 8.
• the method then provides for the implementation. a step 24 for authorizing the use of said at least one item of data belonging to the category of confidential data 26 as soon as the identity of the wearer of the watch is verified.
• the processing unit 2 continues the execution by the processing algorithm aimed at performing this function from the data stored in the memory element 6.
• the invention also relates to a computer program comprising program code instructions for the execution of steps 10 to 24 of this method when said program is executed by processing unit 2 of watch 100.

Landscapes

• Engineering & Computer Science (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Theoretical Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Computer Hardware Design (AREA)
• Software Systems (AREA)
• General Engineering & Computer Science (AREA)
• Health & Medical Sciences (AREA)
• General Health & Medical Sciences (AREA)
• Life Sciences & Earth Sciences (AREA)
• Biophysics (AREA)
• Physiology (AREA)
• Databases & Information Systems (AREA)
• Bioethics (AREA)
• Storage Device Security (AREA)
• Electric Clocks (AREA)
• Collating Specific Patterns (AREA)

Applications Claiming Priority (2)

Publications (1)

Family

ID=68834969

Family Applications (2)

Family Applications Before (1)

Country Status (6)

Citations (6)

Family Cites Families (32)

• 2019
  • 2019-12-06 EP EP19214187.7A patent/EP3832406A1/de not_active Withdrawn
• 2020
  • 2020-11-24 US US17/781,273 patent/US12141309B2/en active Active
  • 2020-11-24 EP EP20808159.6A patent/EP4070164A1/de active Pending
  • 2020-11-24 WO PCT/EP2020/083155 patent/WO2021110470A1/fr not_active Ceased
  • 2020-11-24 CN CN202080084344.9A patent/CN114787724A/zh active Pending
  • 2020-11-24 JP JP2022533117A patent/JP7329146B2/ja active Active
  • 2020-11-24 KR KR1020227018143A patent/KR102744008B1/ko active Active

Patent Citations (6)

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events