WO2010003957A1

WO2010003957A1 - Electronic certification device

Info

Publication number: WO2010003957A1
Application number: PCT/EP2009/058610
Authority: WO
Inventors: Jérôme BETRANCOURT
Original assignee: Eci Sarl
Priority date: 2008-07-07
Filing date: 2009-07-07
Publication date: 2010-01-14
Also published as: FR2933560A1; FR2933560B1

Abstract

The invention relates to a device for generating, signing, and storing an electronic certification that comprises a plurality of references applicable to a batch of electronic documents, and that can be signed in a secured manner by a plurality of signers.

Description

ELECTRONIC CERTIFICATE DEVICE

TECHNICAL FIELD OF THE INVENTION

The present invention relates to a device for producing, signing and recording an electronic certificate containing a plurality of mentions applicable to a batch of electronic documents and capable of being signed by a plurality of signatories, said device comprising a processing, a smart card, a smart card reader, a communication base intended to receive said smart card reader and capable of communicating, on the one hand, with said processing unit, and on the other hand, with a central database, said central database containing in particular the information relating to the potential signatories of the electronic certificates and all the information relating to the electronic certificates already signed and registered.

The invention also relates to a method for producing, signing and recording an electronic certificate containing a plurality of mentions applicable to a batch of electronic documents and capable of being signed by a plurality of signatories by means of said device.

STATE OF THE PRIOR ART

An electronic signature certifies that an identified person has approved the content of a specific electronic document. said signature is admissible in court as evidence. The burden of proof is reversed if this electronic signature is "presumed to be reliable", that is, it meets a number of regulations or standards relating to the security of information systems.

The process of producing an electronic signature involves the following steps:

the signatory acquires, from a trusted third party, a pair of digital keys making it possible to perform asymmetric encryption. It is a private key and unique, held exclusively by the signatory, used for encryption, and a public key, free access, for decryption; a unique fingerprint of the electronic document to be signed is generated by means of a hash function;

- the unique fingerprint of the electronic document is encrypted by the holder of the private key;

- The encrypted fingerprint is associated with the electronic document then the whole is transferred to the recipient.

The recipient decrypts the initial fingerprint of the electronic document using the public key that it holds, again generates, with the same hash function as initially, a fingerprint from the received electronic document and compares the fingerprint decrypted and the newly generated fingerprint. If both fingerprints are identical, the recipient has confirmation that the electronic document received is strictly the same as the electronic document sent and that this is the key private key corresponding to the public key it holds that was used by the person holding this private key to encrypt the initial print of the electronic document and implicitly approve said electronic document.

The recipient ensures the validity of the electronic signature by consulting a certificate indicating the identity of the organization that issued the keys, the characteristics of the person linked to the public key used (surname, first name, position in the company...) . This certificate may have been transmitted with the electronic document or obtained elsewhere.

Finally, the use of the public key to encrypt an electronic document makes it possible to make it confidential and to only target it to the holder of the private key.

The devices and processes of the prior art of producing an electronic signature do not make it possible to produce, sign and register an electronic certificate containing a plurality of mentions. For example, it is impossible to certify that an electronic document has been read, but not approved, has been drafted, but not approved. Thus, the notion of traceability, that is to say the possibility of attesting the different statuses that the same electronic document can take over time, can not be implemented. You can not, for example, certify that the electronic document was written by that person and then read by another person, then received by another person then approved by another person .... This list is not exhaustive.

In addition, these devices do not allow a plurality of signatories to produce, sign and successively register an electronic certificate for the same electronic document. For example, one person certifies that he or she has drafted a contract and then three others approve it in turn. Moreover, these devices do not produce, sign and register an electronic certificate for a batch of electronic documents. For example, a person certifies that he has issued and approved, in one operation, a batch of ten invoices.

Finally, these devices do not make it possible to create an electronic signature without modifying the electronic document itself since its encrypted footprint is associated with it. The object of the invention is a device and a method allowing a plurality of signatories to produce, sign and register an electronic certificate containing a plurality of mentions applicable to a batch of electronic documents (any computer file capable of be viewed or listened to) without affecting the said electronic documents and making it possible to consult all the information relating to the electronic certificates already signed and registered. Another object of the invention is to comply with the standards relating to the safety of information systems, in particular by ensuring the protection of electronic documents and related operations against alteration or falsification using methods other than encryption. For example, electronic signatures signed and registered can be recognized as evidence, with reversal of the burden of proof.

Another object of the invention is to allow verification of the information available on the signatories before their signature is definitively endorsed. Thus, it is freed from the management of certificates related to the validation a posteriori electronic signatures. Another object of the invention is to validate the identity of persons by comparing elements obtained during the signature with a reference located exclusively in a central database. Thus, the best guarantee is the inviolability of the signature.

Another object of the invention is to condition the decryption and provision of a decrypted electronic document to the signature and registration of an electronic certificate acknowledging this provision. Thus, the exclusive recipient of a confidential electronic document is obliged to acknowledge receipt so that he can read it.

DESCRIPTION OF THE INVENTION The aims of the invention are achieved by means of a device comprising a unit of processing, a smart card, a smart card reader having three communication areas and a memory divided into four storage compartments, a communication base for receiving said smart card reader able to communicate with said unit processing and with a central database.

This device also comprises three management modules. The first management module is implanted on the processing unit. The second management module and the third management module are located on the smart card reader. Said three management modules cooperate to perform a first group of operations when the smart card reader is positioned on the communication base and a second group of operations when the smart card reader is removed from the communication base. Said first group of operations makes it possible to constitute the batch of electronic documents to be processed, to check the content of the electronic documents to be covered by the electronic certificate and to record the signed electronic certificate. Said second group of operations makes it possible to secure the data characterizing the electronic documents to be covered by the electronic certificate, to consult the electronic certificates produced, signed and registered by previous signatories, to decipher the electronic documents to be covered by the electronic certificate, produce and sign the electronic certificate. The objects of the invention are also achieved by a method implemented by means of the device according to the invention.

The aims of the invention are finally achieved by means of software which constitutes the three management modules.

The processing unit houses the first management module which is dedicated to the operations of the method according to the invention which take place in said processing unit and to the communications between said processing unit and the smart card reader.

The smart card reader is a mobile element having a memory subdivided into four storage compartments. The first storage compartment is dedicated to the data exchanged between the processing unit and the smart card reader. Said first storage compartment communicates exclusively with either said smart card reader or with said processing unit.

The second storage compartment is dedicated to the data characterizing the electronic documents to be covered by the electronic certificate. Said second storage compartment communicates exclusively with the smart card reader.

The third storage compartment is dedicated to temporary work data. Said third storage compartment communicates exclusively with the smart card reader. The fourth storage compartment is dedicated to the electronic attestation data already transmitted or to be transmitted to the central database. Said fourth storage compartment communicates exclusively with the smart card reader.

Said smart card reader also has three communication zones that can be opened or closed by physical interruption, depending on the operation in progress.

The first communication area is dedicated to communications between the first storage compartment of the smart card reader and the processing unit. Said first communication area does not allow any other communication and can be opened or closed, by physical interruption, by the smart card reader exclusively.

The second communication area is dedicated to communications between the smart card reader and the central database. Said second communication zone does not allow any other communication and can be opened or closed, by physical interruption, by the smart card reader exclusively.

The third communication zone is dedicated to communications between the first storage compartment of the smart card reader and said smart card reader. Said third communication zone does not allow any other communication and can be opened or closed, by physical interruption, by the smart card reader exclusively. The smart card reader hosts the second management module which is dedicated to the operations of the method according to the invention which take place in said smart card reader. Said second management module permanently has exclusive and direct access to the second storage compartment, the third storage compartment and the fourth storage compartment of the smart card reader. Depending on the operation in progress, said second management module may also have access, via the third communication area, to the first storage compartment of the smart card reader. Said second management module also manages a status indicator continuously indicating what is the current operation in the process of producing, signing and recording an electronic certificate.

The smart card reader hosts the third management module. Said third management module permanently has direct access to the first storage compartment of the smart card reader. Said third management module does not access any other element of said smart card reader and is dedicated to communications with the processing unit.

The users of the device according to the invention are previously identified and each is provided with a smart card in which are stored personal data.

The communication base can receive the smart card reader and establish communication with it through the first communication area and the second communication area of said reader. smart cards. The communication base is further connected to the telephone network to establish the private network by which the smart card reader and the central database will communicate. The use of a private network makes it possible to better protect the operations carried out with said central database.

The central database contains information about potential signatories of electronic certificates. Said central database also contains other information necessary for the operation of the device according to the invention.

Finally, the device according to the invention comprises a website consisting of a partial and public replica of the central database and allowing in particular the consultation of information relating to electronic certificates already signed and recorded in the central database. The objects of the invention are also achieved by the method implemented by means of the device according to the invention. The method includes a first group of executable operations when the smart card reader is positioned on the communication base and a second group of executable operations when the smart card reader is removed from the communication base.

Said first group of operations makes it possible to constitute the batch of electronic documents to be processed, to check the contents of the electronic documents to be covered by the electronic certificate and to register the signed electronic certificate.

When the smart card reader is positioned on the communication base and the current operation is the constitution of the batch of electronic documents to be processed:

the second management module inactivates the control and reading tools of the smart card reader,

the first communication zone remains closed by physical interruption,

the second communication zone remains closed by physical interruption,

the third communication zone remains open,

the second management module records the ad hoc instructions in the first storage compartment,

the second management module closes the third communication zone by physical interruption. Thus, the data contained in the second, third and fourth storage compartments are inaccessible to the processing unit and are therefore protected against any modification or falsification that could come from said processing unit, - the second management module opens the first one. communication zone thus enabling the communication between the first storage compartment and the processing unit to be established,

the communication between the first storage compartment and the processing unit is established thanks to the first management module which regularly tests the possibility of accessing said first storage compartment and initiating the communication in collaboration with the third management module. Said communication can be secured by encryption and thus protect the current operation against any modification or falsification,

the instructions introduced in the first storage compartment are read by the first management module which makes said first storage compartment appear on the processing unit as a mass memory reader accessible for reading and writing.

When the smart card reader is positioned on the communication base and the current operation is the verification of the content of the electronic documents to be covered by the electronic certificate:

the second management module inactivates the control and reading tools of the smart card reader, the first communication zone remains closed by physical interruption,

the second communication zone remains closed by physical interruption,

the third communication zone remains open; the second management module records the ad hoc instructions in the first storage compartment;

the second management module closes the third communication zone by physical interruption. Thus, the data contained in the second, third and fourth storage compartments are inaccessible to the processing unit and are therefore protected against any modification or falsification that could come from said processing unit, - the second management module opens the first communication area thus allowing communication between the first storage compartment and the processing unit to establish itself,

the communication between the first storage compartment and the processing unit is established by means of the first management module which regularly tests the possibility of accessing said first storage compartment and initiates the communication in collaboration with the third management module. Said communication can be secured by encryption and thus protect the current operation against any modification or falsification,

the instructions introduced into the first storage compartment are read by the first management module which reserves said first storage compartment for its exclusive use.

When the smart card reader is positioned on the communication base and the current operation is the registration of the signed electronic certificate:

the first communication zone remains closed by physical interruption. Thus, the operations carried out with the central database are inaccessible to the processing unit and are therefore protected against any alteration or falsification that may arise from the said processing unit,

the second management module opens the second communication zone thus enabling the communication between the smart card reader and the central database to be established,

the third communication zone remains open,

- When the operations with the central database are completed, the device is automatically restored to the ad hoc configuration, depending on the result of said operations carried out with the central database.

Said second group of operations makes it possible to secure the data characterizing the electronic documents to be covered by the electronic certificate, to consult the electronic certificates produced, signed and registered by the previous signatories, to decipher the electronic documents to be covered by the electronic certificate, produce and sign the electronic certificate.

The operations of the second group of operations can only be performed on the instructions of the user when the smart card reader is removed from the communication base. Said operations are thus protected against any modification or falsification that could come from the processing unit.

When the smart card reader is removed from the communication base: the second management module closes the first communication zone by physical interruption. This is the default configuration for positioning on the communication base, - the second management module closes the second communication area by physical interruption. This is the default configuration for positioning on the communication base,

the second management module opens the third communication zone,

the second management module activates the control and reading tools of the smart card reader,

Thus, electronic documents present on the processing unit can be introduced by the signatory into the first storage compartment of the smart card reader when it is positioned on the communication base. A batch of electronic documents can thus be constituted. This characteristic therefore makes it possible to produce and sign an electronic certificate relating to a batch of electronic documents.

According to one embodiment, the introduction of electronic documents into the first storage compartment of the smart card reader is automated by using software installed on the processing unit.

As the batch of electronic documents is constituted, it can be moved, by the smart card reader, the first storage compartment (data exchanged between the processing unit and the smart card reader) to the third storage compartment (temporary work data) of said smart card reader. These electronic documents and the operations relating thereto will thus be protected from any modification or falsification by being physically separated from the processing unit and by being subject to security mechanisms specific to the smart card reader. This feature eliminates or complements encryption protection. This movement of the batch of electronic documents is possible only ordered by the signatory using the control tools of the smart card reader when it is not positioned on the communication base. No violation of the smart card reader from the processing unit is therefore possible during this operation.

The content of the electronic documents to be covered by the electronic attestation can be verified, by each successive signatory, using the first management module when the smart card reader is positioned on the communication base. The identical character of the verified electronic document and the electronic document that has been retained to be covered by the electronic certificate is checked by comparing the fingerprint, generated by the hash function, of the verified electronic document and the fingerprints, generated by the hash function, preserved and protected in the second storage compartment of the smart card reader (data characterizing the electronic documents to be covered by the certificate electronic). Several successive signatories can therefore ensure the content of the electronic documents to be covered by each electronic certificate and, by extension, obtain the guarantee that they produce and sign all electronic certificates relating to the same electronic documents.

The smart card reader allows each signatory to view the electronic certificates produced, signed and registered by the previous signatories, for the same batch of electronic documents. Each signatory can therefore produce and sign an electronic certificate for the same electronic documents with full knowledge of the facts. This consultation is only possible when the smart card reader is not positioned on the communication base. No violation of the smart card reader from the processing unit is therefore possible during this operation.

The choice of the mentions to be included in the electronic certificate and the request for decryption of the electronic documents can then be made using the smart card reader.

This operation is only possible when the smart card reader is not positioned on the communication base. No violation of the smart card reader from the processing unit is therefore possible during this operation. The list of information available for electronic certificates on the smart card reader is configurable. The content of the electronic certificates that can be signed is therefore not limited.

When the mentions to be included in the electronic certificate have been chosen and if a request for decryption of the electronic documents has been made, the signatory signs by identifying himself with the aid of the smart card reader. He presents his fingerprints to a module of the smart card reader dedicated for this purpose, introduces his smart card into the smart card reader and composes a personal code. This identification is only possible when the smart card reader is not positioned on the communication base. No violation of the smart card reader and the smart card introduced from the processing unit is therefore possible during this operation. When the identification of the signatory has been completed, the production of the signed electronic certificate and the possible decryption of the electronic documents are automatically performed by the smart card reader using the various data collected up to this stage of the process. . These operations are only possible when the smart card reader is not positioned on the communication base. No violation of the smart card reader from the processing unit is therefore possible during these operations. The electronic certificate does not contain the electronic documents concerned, but only their fingerprint, generated by hash function, and does not imply any modification of the original electronic documents.

When the electronic certificate is produced and signed, the identity of the signatory, validated in part with the aid of the smart card reader, must also be validated by the central database by positioning the smart card reader on the communication base. The signature of the electronic certificate is therefore not confirmed until the identity of the signatory has been the subject of the ad hoc verifications. This feature eliminates the management of certificates related to the validation, a posteriori, of electronic signatures.

Validation of the identity of the signatory is to ensure that the user of the smart card is the holder. For this purpose, the personal code of the signatory dialed from the smart card reader is compared to that which is written on the smart card and the fingerprints read from the smart card reader are compared with those entered in the smart card reader. the central database. Fingerprints never appear on the smart card, so they can not be obtained, even by violation of this card. This characteristic makes it possible to validate the identity of the signers by comparing elements obtained during the signature with a reference located exclusively in a central database. The inviolability of The signatory identification process is thus increased.

According to one embodiment, other verifications than those relating to the identity of the signatory are conducted. One can for example check the validity of the smart card over a given period, or the existence of a declaration of loss or theft of said smart card.

Once the identity of the signatory has been validated by the central database, the signed electronic certificate is automatically recorded. It is only after this registration that the signatory can recover any electronic documents decrypted within the chip card reader. This feature makes it possible to condition the decryption and provision of a decrypted electronic document to the signature and registration of an electronic certificate acknowledging this provision. Thus, the exclusive recipient of a confidential electronic document is obliged to acknowledge receipt so that he can read it.

The production, signature and registration of an electronic certificate for the same electronic documents can be implemented in a repetitive and indefinite manner. Several successive signatories may therefore produce, sign and register an electronic certificate for the same electronic document or batch of electronic documents. The process can be reset at any time to consider other electronic documents.

The information relating to the electronic certificates already signed and registered in the central database can be consulted on the website of the device.

The aims of the invention are finally achieved by software that constitutes the three management modules located on the processing unit and the smart card reader.

The software according to the invention comprises a first group of instructions for controlling the executable operations when the smart card reader is positioned on the communication base and a second group of instructions for controlling the executable operations when the card reader chip is removed from the communication base.

Said first group of operations makes it possible to constitute the batch of electronic documents to be processed, to check the content of the electronic documents to be covered by the electronic certificate and to record the signed electronic certificate.

Said second group of operations makes it possible to secure the data characterizing the electronic documents to be covered by the electronic certificate, to consult the electronic certificates produced, signed and registered by the previous signatories, to decipher the electronic documents to be covered by the certificate to produce and sign the electronic certificate.

BRIEF DESCRIPTION OF THE DRAWINGS

Other features and advantages of the invention will emerge from the description which follows, taken by way of non-limiting example, with reference to the appended figures in which:

FIG. 1 schematically illustrates a device according to the invention, FIG. 2 represents a diagram illustrating the installation steps of the device of FIG. 1, FIG. 3 represents a diagram illustrating the steps of use of the device during the constitution of a batch of electronic documents and the security of the data characterizing the electronic documents to be covered by the electronic attestation, figure 4 represents a diagram illustrating the steps of use of the device during the verification of the contents of the electronic documents to be covered by the electronic attestation, figure 5 represents a diagram illustrating the steps of use of the device during the consultation of the electronic certificates produced, signed and registered by previous signatories, figure 6 represents a diagram illustrating the steps of use of the device when decrypting electronic documents in front of be covered by an electronic certificate as well as during the production and signing of an electronic certificate, Figure 7 shows a diagram illustrating the steps of use of the device when registering a signed electronic certificate, the figure 8 represents a diagram illustrating the steps of use of the device during the Internet consultation of the information relating to electronic certificates already signed and recorded in the central database, FIG. 9 represents a diagram illustrating the steps of use of the device during encryption of electronic documents,

- Figure 10 shows a diagram illustrating the operating steps of the device when the smart card reader is positioned on the communication base. - Figure 11 shows a diagram illustrating the operating steps of the device when the smart card reader is removed from the communication base. FIG. 12 represents a diagram illustrating the operating steps of the device when it is required to secure the data characterizing the electronic documents to be covered by the electronic certificate. FIG. 13 represents a diagram illustrating the steps of operation of the device when the composition of the signatory's personal code is validated. FIG. 14 represents a diagram illustrating the steps of operation of the device when a signed electronic attestation must be registered in the central database.

DETAILED PRESENTATION OF PARTICULAR EMBODIMENTS

FIG. 1 illustrates a device for producing, signing and recording an electronic certificate containing a plurality of mentions applicable to a batch of electronic documents and capable of being signed by a plurality of signatories.

This device comprises a processing unit 2, a smart card 3, a smart card reader 4 having three communication zones 5, 6, 7 and a memory subdivided into four storage compartments 8, 9, 10, 11, a communication base 12 intended to receive said smart card reader 4 capable of communicating with said processing unit 2 and with a central database 13.

This device furthermore comprises three management modules, namely a first management module 1 implanted on the processing unit 2, a second management module 15 and a third management module 16 located on the smart card reader 4. Said modules 1, 15 and 16 cooperate to perform a first group of operations when the smart card reader 4 is positioned on the communication base 12 and a second group of operations when the smart card reader 4 is removed from the Basis of communication 12. The first group of operations makes it possible to constitute the batch of electronic documents to be processed, to check the content of the electronic documents to be covered by the electronic certificate and to record the signed electronic certificate. The second group of operations makes it possible to secure the data characterizing the electronic documents to be covered by the electronic certificate, to consult the electronic certificates produced, signed and registered by previous signatories, to decipher the electronic documents to be covered by the document. electronic certificate, produce and sign the electronic certificate. The processing unit 2 houses the first management module 1 which is dedicated to the operations of the method according to the invention which take place in said processing unit 2 and to the communications with the third management module 16. In the preferred embodiment of the invention, the processing unit 2 is a computer that includes conventional software for word processing, sound reading and communication.

The smart card reader 4 is a mobile element having a memory subdivided into four storage compartments.

The first storage compartment 8 is dedicated to the data exchanged between the processing unit 2 and the smart card reader 4, and is configured to communicate exclusively with either the second management module 15 via the third zone communication 6, ie with the first management module 1 via the third management module 16 and the first communication zone 5.

In the preferred embodiment of the invention, said data exchanged between the processing unit 2 and the smart card reader 4 are constituted by the electronic documents of the batch to be processed, by the fingerprints, generated by the hash function, electronic documents whose content has just been verified by the signatory and by the instructions given by the second management module 15 to the first management module 1.

The second storage compartment 9 is dedicated to the data characterizing the electronic documents to be covered by the electronic attestation.

Said second storage compartment 9 is configured to communicate directly and exclusively with the second management module 15. In the preferred embodiment of the invention, said data are constituted by the name of the electronic documents to be covered by the electronic attestation. , by the indicator indicating whether their content has been successfully verified by the signatory and the fingerprints, generated by hashing function, of said electronic documents.

The third storage compartment 10 is dedicated to the temporary work data and is configured to communicate directly and exclusively with the second management module 15. In the preferred embodiment of the invention, said temporary work data comprise the electronic documents to be decrypted, the electronic documents resulting from a decryption, the code of the mentions chosen to be included in the electronic certificate, the definition of the fingerprints. digital signatory read by the smart card reader 4, the personal code composed by the signatory to authorize the use of the smart card 3, the identity of the holder of the smart card 3, the code of unique identification of the holder of the smart card 3, the private encryption key attributed to the natural or legal person represented by the holder of the smart card 3, the public encryption key exchanges with the central database 13.

The fourth storage compartment 11 is dedicated to the electronic attestation data already transmitted or to be transmitted to the central database 13 and is configured to communicate directly and exclusively with the second management module 15.

In the preferred embodiment of the invention, said data are organized in file, called electronic attestation file. Each electronic attestation file is generated by a signatory. The electronic attestation files present in the smart card reader 4 during the same operation relate to the same batch of electronic documents and have been recorded in the central database 13. Only the last of them may have not yet been transmitted to said central database 13.

These electronic attestation files include: fingerprints, generated by hash function, electronic documents covered by the electronic certificate, the identity of the holder of the smart card 3, the unique identification code of the cardholder at chip 3, the private key of encryption attributed to the natural or legal person represented by the holder of the smart card 3, the definition of the fingerprints of the signer read by the smart card reader 4, the personal code composed by the signatory to authorize the use of the smart card 3, the code of the mentions chosen to be included in the electronic certificate, the unique identifier of the electronic attestation file and the time stamp of the constitution of the file of electronic certificate.

Said smart card reader 4 also has three communication zones that can be opened or closed by physical interruption, depending on the operation in progress.

The first communication zone 5 is dedicated to communications between the first management module 1 and the third management module 16, thus by extension between the first storage compartment 8 of the smart card reader 4 and the processing unit 2. Said first communication zone 5 authorizes no other communication and can be opened or closed, by physical interruption, by the second management module 15 exclusively. Advantageously, said first communication zone 5 also allows the electrical recharge of said smart card reader 4.

The second communication zone 7 is dedicated to communications between the second management module 15 and the central database 13, thus by extension between the smart card reader 4 and the central database 13. Said second communication zone 7 authorizes no other communication and can be opened or closed, by physical interruption, by the second management module 15 exclusively.

The third communication zone 6 is dedicated to communications between the first storage compartment 8 of the smart card reader 4 and the second management module 15, therefore by extension between the first storage compartment 8 of the smart card reader 4 and the remainder of said smart card reader 4. Said third communication zone 6 authorizes no other communication and can be opened or closed, by physical interruption, by the second management module 15 exclusively.

In the preferred embodiment of the invention, the smart card reader 4 comprises a chip card reading zone 3 arranged to prevent said smart card reader 4 from being positioned on the communication base 12 when a smart card 3 is inserted in said read zone.

The smart card reader 4 houses the second management module 15 which is dedicated to the operations of the method according to the invention which is unrolled in said smart card reader 4. Said second management module 15 permanently has exclusive and direct access to the second storage compartment 9, the third storage compartment 10 and the fourth storage compartment 11 of the smart card reader 4. According to the operation in progress, said second management module 15 can also have access, via the third communication zone 6, to the first storage compartment 8 of the smart card reader 4. Said second management module 15 in addition to a status indicator permanently indicating what is the current operation in the process of producing, signing and registering an electronic certificate. In the preferred embodiment of the invention, said status indicator takes the following values: II as long as no data characterizing the electronic documents to be covered by the electronic attestation has been secured in the smart card reader 4, 12 as soon as the data characterizing unencrypted electronic documents, to be covered by the electronic certificate, have been secured in the smart card reader 4, 13 as soon as the data characterizing encrypted electronic documents, to be covered by the electronic certificate, have been secured in the smart card reader 4, 14 as soon as an electronic certificate has been produced and signed, 15 as soon as a decryption request has been made and the corresponding electronic certificate has been produced and signed. The smart card reader 4 houses the third management module 16 which permanently has direct access to the first storage compartment 8 of the smart card reader 4. Said third management module 16 does not access any other element of said reader 4 and is dedicated to communications with the first management module 1.

Advantageously, the smart card reader 4 also includes a screen for the dissemination of information and choice to the signatory, an alphanumeric keypad or a touch screen by means of which the signatory can give instructions to the smart card reader 4, a fingerprint reading area enabling the smart card reader 4 to acquire the definition of the signer's fingerprints and a light indicator signaling the state of the charge of the smart card reader 4 (unloaded, loaded, charge) .

In an alternative embodiment of the invention, the smart card reader 4 is integrated in a mobile phone. In this configuration, in addition to the possible pooling of a certain number of modules (screen, touch screen, alphanumeric keypad, etc.), said smart card reader 4 can communicate either with a computer, via the communication base 12, or with the rest of the mobile phone which then represents another type of processing unit 2.

Users of the device according to the invention are previously identified and each is provided with a smart card 3 in which are stored personal data. In the preferred embodiment of the invention, said data include the identity of the holder of the smart card 3, the personal code of the holder of the smart card 3, necessary for the use of said smart card 3, the unique identification code of the holder of the smart card 3, the private key of encryption attributed to the natural or legal person represented by the holder of the smart card 3 and the public encryption key of the exchanges with the database Central 13.

In a particular mode of use of the invention, the person represented by the holder of the smart card 3 may be said holder, but may also be a legal person. In the latter case, an electronic document may be intended for a legal person by being encrypted by the public encryption key of said legal person without the need to know a particular recipient individual. Within the entity that receives the encrypted electronic document, several natural persons representing the same legal entity, and therefore sharing the same private key encryption on their smart card 3, can decipher it. The communication base 12 can receive the smart card reader 4 and establish a communication with it through the first communication zone 5 and the second communication zone 7. Preferably, the connection of the communication base 12 to the unit treatment 2 is performed by a USB cable (Universal Serial Bus). However, the communication between the communication base 12 and the processing unit 2 can be achieved wirelessly via a Wi-Fi (Wireless Fidelity) link or a Bluetooth link without departing from the scope of the invention. The communication base 12 is further connected to the telephone network in order to establish the private network by means of which the smart card reader 4 and the central database 13 will communicate.

The central database 13 contains information relating to the potential signatories of the electronic certificates.

In the preferred embodiment of the invention, said information comprises the unique and perennial identifier of each smart card holder 3. This identifier is never exposed outside the central database 13, the code identification code of each smart card holder 3. This code is attached to the unique and perennial identifier and is implemented on the smart card 3. It changes regularly for security reasons, the personal code of the holder of the smart card. smart card, necessary for the use of said smart card 3. This code is implemented on the smart card 3, the definition of the fingerprints of each smart card holder 3. This definition of fingerprints is not never exposed outside the central database 13. The central database 13 also contains other information necessary for the operation of the device according to the invention.

In the preferred embodiment of the invention, said information comprises the private key encryption assigned to each person, physical or moral, represented by the smart card holders 3. Said private key encryption is located on the smart card 3 and changes regularly for security reasons, the public encryption key assigned to each person, physical or moral, represented by the smart card holders 3. Said public encryption key is published using the device's website 14, all the information relating to electronic certificates already signed and registered, the private encryption key exchanges with the smart card reader 4. Said private encryption key changes regularly for security reasons. The device finally has a site

Internet 14 consisting of a partial and public replica of the central database 13.

In the preferred embodiment of the invention, said Internet site 14 contains the public information relating to the electronic certificates already signed and registered in the central database 13 and the public encryption keys attributed to each person, physical or moral, represented by the smart card holders 3. The access to said site is secure and is carried out through a predefined personal account. When the smart card reader 4 is positioned on the communication base 12, the first communication zone 5, the second communication zone 7 and the third communication zone 6 are configured to allow either exclusive communication between the first storage compartment 8 the smart card reader 4 and the processing unit 2, an exclusive communication between the smart card reader 4 and the central database 13; In the first case, the third communication zone 6 is closed by physical interruption, the first communication zone 5 is open and the second communication zone 7 is closed by physical interruption. In the second case, the first communication zone 5 is closed by physical interruption, the third communication zone 6 is open and the second communication zone 7 is open.

When the smart card reader 4 is removed from the communication base 12, the first communication zone 5, the second communication zone 7 and the third communication zone 6 are restored to their default configuration, that is to say, the first communication zone 5 is closed by physical interruption, the second communication zone 7 is closed by physical interruption and the third communication zone 6 is opened. Installation of the device

Before using the device of the invention, the first management module 1 and the communication base 12 are installed. FIG. 2 represents a diagram illustrating the steps of installation of the device according to the invention.

In step 200, the first management module 1 is not installed on the processing unit 2 and the communication base 12 is not connected to said processing unit 2.

In step 210, the user installs the first management module 1 on the processing unit 2.

In step 220, if the first management module 1 is not correctly installed on the processing unit 2, the user is informed by the processing unit 2. He is also invited to renew the installation. The process resumes at step 210.

In step 220, if the first management module 1 is correctly installed on the processing unit 2, the user is informed by the processing unit 2. He is also invited to connect the communication base 12. to the processing unit 2. The process proceeds to step 230.

In step 230, the user connects the communication base 12 to the processing unit 2. It is informed by said processing unit 2 that said communication base 12 is connected and that it is working properly.

In step 240, the first management module 1 is installed on the processing unit 2 and the communication base 12 is connected to said processing unit 2. When it is made available to the user for the first time, the smart card reader 4 is initialized and electrically charged. Use of the device for constituting a batch of electronic documents and for securing the data characterizing the electronic documents to be covered by the electronic attestation

When the smart card reader 4 has never been positioned on the communication base 12, the user is informed by the smart card reader 4 that he can start building up a batch of electronic documents by positioning the smart card reader 4 on the communication base 12. FIG. 3 represents a diagram illustrating the steps of use of the device during the constitution of a batch of electronic documents and the security of the data characterizing the electronic documents before to be covered by the electronic certificate

In step 300, the constitution of the batch of electronic documents must be started or continued.

In step 302, if the smart card reader 4 is not positioned on the communication base 12, the process proceeds to step 304.

In step 304, the user positions the smart card reader 4 on the communication base 12. It is then informed by the smart card reader 4 that it is connected and that it is functioning correctly. and that he can, where appropriate, requesting the security of the data characterizing the electronic documents of the batch formed by previously removing the smart card reader 4 of the communication base 12. In addition, the first storage compartment 8 of the smart card reader 4 is presented to the user on the processing unit 2, as a mass memory reader. The user is informed by the processing unit 2 that he can start or continue building the batch of electronic documents. In this mass memory reader, the user can, by any means available on the processing unit 2, add documents to the batch of electronic documents, delete documents from the batch of electronic documents, or modify documents in the batch electronic documents.

In step 302, if the smart card reader 4 is positioned on the communication base 12, the process proceeds to step 306.

In step 306, if one or more documents are to be added to the constituted batch, the process proceeds to step 308.

In step 308, the user adds electronic documents to the constituted batch.

In step 306, if it is not appropriate to add one or more documents to the constituted batch, the process proceeds to step 310.

In step 310, if one or more electronic documents are to be deleted from the constituted batch, the process proceeds to step 312. In step 312, the user deletes electronic documents from the constituted batch. In step 310, if it is not appropriate to delete one or more electronic documents to the batch constituted, the process proceeds to step 314.

In step 314, if it is necessary to modify one or more electronic documents of the constituted batch, the process proceeds to step 316.

In step 316, the user modifies electronic documents of the constituted batch.

In step 314, if it is not appropriate to modify one or more electronic documents of the batch constituted, the process proceeds to step 318.

At step 318, if the smart card reader 4 should not be removed from the communication base 12, the process resumes at step 306. At step 318, if the reader should be removed of smart cards 4 of the communication base 12, the process proceeds to step 320.

At step 320, the user removes the smart card reader 4 from the communication base 12. The user is then informed by the smart card reader 4 that he can start or continue building the batch of documents. by positioning said smart card reader 4 on a communication base 12. Moreover, if a batch of electronic documents is in the process of being constituted, the list of all the electronic documents that it contains and the command allowing the security of data characterizing the electronic documents of the constituted batch are presented to the user by the smart card reader 4. In step 322, if it is not appropriate to secure the data characterizing the electronic documents of the batch formed, the process resumes at step 300. Thus, the user can resume at any time the constitution of the batch of electronic documents by repositioning the smart card reader 4 on a communication base 12. A lot of electronic documents can be constituted at different times and in different places. In step 322, if it is necessary to secure the data characterizing the electronic documents of the constituted batch, the process proceeds to step 324.

In step 324, the user requests the security of the data characterizing the electronic documents of the batch constituted by selecting and validating the ad hoc order on the smart card reader 4.

In step 326, if the batch of electronic documents constituted contains both encrypted documents and unencrypted documents, the user is informed by the smart card reader 4 that the security can only concern one category. electronic documents and that he must resume the batching of electronic documents for this purpose. The process resumes at step 300.

In step 326, if the batch of electronic documents constituted contains only encrypted documents or unencrypted documents, the security takes place and the user is informed by the smart card reader 4. Moreover, data (resulting from securing) characterizing the electronic documents to be covered by the electronic attestation are presented to the user by the smart card reader 4. When securing has occurred on unencrypted electronic documents, the user is informed by the smart card reader 4 that he can check the contents by positioning the smart card reader 4 on a communication base 12. In addition, the order allowing the consultation of the electronic certificates registered by previous signatories and the order to produce an electronic attestation are presented to the user by the smart card reader 4. When the security has occurred on encrypted electronic documents, the command to request the decryption of electronic documents is presented to the user by the smart card reader 4. At step 328, the data characterizing the electronic documents to be covered by the electronic certificate are secured

The command allowing general abandonment is presented to the user by the smart card reader 4 when necessary. Before any implementation of this command, the user is invited to confirm his request.

Use of the device for checking the content of the electronic documents to be covered by the electronic certificate When the user positions the smart card reader 4 on a communication base 12 while the security has concerned encrypted electronic documents, he is informed by the smart card reader 4 that the only possible operation is the decryption of said documents. and that said decryption may be requested by previously removing the smart card reader 4 from the communication base 12. The process described below is therefore only interested in unencrypted electronic documents.

Figure 4 is a diagram illustrating the steps of using the device when verifying the content of the electronic documents to be covered by the electronic attestation.

At step 400, the verification of the content of the electronic documents to be covered by the electronic attestation must be started or continued.

In step 402, if the smart card reader 4 is not positioned on the communication base 12, the process proceeds to step 404.

In step 404, the user positions the smart card reader 4 on the communication base 12, the user is then informed by the smart card reader 4 that it is connected and that it is functioning correctly. and that the consultation of electronic certificates registered by previous signatories or the production of an electronic certificate may be performed by first removing the smart card reader 4 from the communication base 12. An interface for viewing and listening electronic documents present on the processing unit 2 is presented to the user by said processing unit 2. L The user is informed by said processing unit 2 that the content of the electronic documents to be covered by the electronic certificate can be verified. In step 402, if the smart card reader 4 is positioned on the communication base 12, the process proceeds to step 406.

In step 406, the user requests the viewing or listening of an electronic document present on the processing unit 2.

In step 408, the user views or listens to the electronic document.

At step 410, if it is necessary to validate the electronic document being viewed or listened to, the process proceeds to step 412.

In step 412, the user indicates that he validates the electronic document.

In step 410, if it is not appropriate to validate the electronic document being viewed or listened to, the process proceeds to step 414.

At step 414, if it is appropriate to continue checking the content of the electronic documents to be covered by the electronic attestation, the process resumes at step 406. At step 414, if it is not appropriate to continue checking the contents of the electronic documents to be covered by the electronic attestation, the process proceeds to step 416. At step 416, the user removes the smart card reader 4 of the communication base 12. It is then informed by the smart card reader 4 that it can continue checking the content of the electronic documents to be covered by the electronic certificate by repositioning the reader. Smart card 4 on a communication base 12. Thus, this verification can be done at different times and in different places. The data characterizing the electronic documents to be covered by the electronic certificate, the order allowing the consultation of electronic certificates registered by previous signatories, the order to produce an electronic certificate and the order to cancel the previous checks of electronic documents are presented to the user by the smart card reader 4. Before any implementation of said cancellation command of the previous checks, the user is invited to confirm his request.

At step 418, the verification of the content of the electronic documents to be covered by the electronic attestation is completed.

The command allowing general abandonment is presented to the user by the smart card reader 4 when necessary. Before any implementation of this command, the user is asked to confirm his request.

Use of the device for the consultation of electronic certificates produced, signed and registered by previous signatories.

Figure 5 shows a diagram illustrating the steps of use of the device when viewing electronic certificates produced, signed and registered by previous signatories.

In step 500, the electronic certificates of the previous signatories must be consulted.

In step 502, if the smart card reader 4 is positioned on the communication base 12, the process proceeds to step 504.

At step 504, the user removes the smart card reader 4 from the communication base 12. When the security has concerned unencrypted electronic documents, the user then has access to the order to request the consultation of the certificates produced, signed and registered by previous signatories. In step 502, if the smart card reader 4 is not positioned on the communication base 12, the process proceeds to step 506.

In step 506, the user selects and validates the order to request the consultation of electronic certificates produced, signed and registered by previous signatories. The list mentioning the identity of all the previous signatories is then presented to the user by the smart card reader 4.

At step 508, if further consultation of the electronic certificates produced, signed and registered by previous signatories, the process proceeds to step 514.

At step 514, the user selects the signer whose electronic certificate must be consulted.

In step 516, the user validates his selection to request the display of the content of said electronic certificate.

In step 518, the user consults the content of said electronic attestation. This information may be useful for the user to know if he too must produce and sign an electronic certificate for the same batch of electronic documents, and with what mentions. In step 520, the user validates the command allowing the return to the preceding screen. The process resumes at step 508.

At step 508, if further consultation of the electronic certificates produced, signed and registered by previous signatories is not appropriate, the process proceeds to step 510.

In step 510, the user selects and validates the command allowing the return to the previous screen. At step 512, the consultation of the electronic certificates of the previous signatories is completed.

Use of the device for the decryption of electronic documents to be covered by an electronic certificate as well as for the production and signature of an electronic certificate.

In order to ensure that the provision of the decrypted electronic documents can not be reneged on by the author of the decryption, the decryption is accompanied by the production, signature and registration of an electronic certificate stating that the electronic documents have been deciphered and made available.

For this purpose, the decryption of electronic documents or the production and signature of an electronic certificate are carried out in the same process. FIG. 6 represents a diagram illustrating the steps of use of the device during the decryption of the electronic documents to be covered by an electronic certificate as well as during the production and the signature of an electronic certificate.

In step 600, the user must decrypt electronic documents or produce and sign an electronic certificate.

In step 602, if the smart card reader 4 is positioned on the communication base 12, the process proceeds to step 604. In step 604, the user removes said smart card reader 4 from said communication base 12. The data characterizing the electronic documents to be covered by the electronic attestation are presented to the user by the smart card reader. 4. The user can decide to decrypt the electronic documents or to produce and sign his electronic certificate with full knowledge of the facts. If the security has concerned unencrypted electronic documents, the order to produce an electronic certificate is presented to the user by the smart card reader 4. If the security has concerned encrypted electronic documents, the order to request the decryption of the electronic documents is presented to the user by the smart card reader 4.

In step 602, if the smart card reader 4 is not positioned on the communication base 12, the process proceeds to step 606.

At step 606, if the electronic documents concerned with securing are unencrypted, the process proceeds to step 608.

In step 608, the user requests to produce an electronic attestation. The information that may be included in the electronic certificate is presented to the user by the smart card reader 4. The user is also asked to select the information that he wishes to include in his electronic certificate. At step 610, the user selects the mentions that he wishes to include in his electronic certificate and validates his selection. He is then invited to have his fingerprints read by the smart card reader 4.

In step 606, if the electronic documents concerned with securing are encrypted, the process proceeds to step 614.

In step 614, the user requests to decrypt the electronic documents. He is then asked to have his fingerprints read by the smart card reader 4.

In step 612, the user places a finger on the fingerprint reader of the smart card reader 4.

In step 616, if fingerprint reading has failed, the user is prompted to have their fingerprints read by the smart card reader 4. The process resumes at step 612. At step 616, if the fingerprint reading has been successful, the user is prompted to insert his smart card 3 in the smart card reader 4. The process proceeds to step 618.

In step 618, the user inserts his smart card 3 into the smart card reader 4.

In step 620, if the inserted smart card 3 does not work properly, the user is informed by the smart card reader 4. He is also asked to withdraw his smart card 3. The process proceeds to step 622. At step 622, the user removes his smart card 3. He is then invited to insert it again. The process resumes at step 618.

In step 620, if the inserted smart card 3 functions properly, the user is informed by the smart card reader 4. He is also asked to dial his personal code. The process proceeds to step 624.

In step 624, the user dials his personal code, necessary for the use of the smart card 3. The latter can be a 4-digit code.

In step 626, the user validates the dialed personal code.

In step 628, if the personal code dialed is wrong, the user is informed by the smart card reader 4. The process proceeds to step 634.

In step 634, if the composition of the personal code has been validated for the third time, the user is informed by the smart card reader 4. He is also informed that the production of the electronic certificate has been abandoned. and that his smart card 3 has been disabled. The user is also invited to remove his smart card 3. The process proceeds to step 636. In step 636, the user removes his smart card 3.

At step 638, the production of the electronic attestation has been abandoned. The smart card 3 has been disabled. At step 634, if the composition of the personal code has been validated less than three times, the user is informed by the smart card reader that he can renew the entry of his personal code within a maximum of three trials in total. The process resumes at step 624. At step 628, if the composed personal code is valid, the user is informed by the smart card reader 4. He is also informed that the electronic certificate has been produced. and signed and it must be registered by positioning the smart card reader 4 on a communication base 12. The user is also asked to remove his smart card 3. The process goes to step 630.

At step 630, the user removes his smart card 3.

At step 632, the electronic attestation has been produced and signed.

The command allowing the general abandonment and the command allowing the abandonment of the electronic certificate in progress are presented to the user by the smart card reader 4 when necessary. Before any implementation of these commands, the user is invited to confirm his request. Use of the device for the registration of a signed electronic certificate.

Figure 7 is a diagram illustrating the steps of using the device when registering a signed electronic certificate. At step 700, the electronic attestation must be recorded. In step 702, if the smart card reader 4 is not positioned on the communication base 12, the process proceeds to step 704.

In step 704, the user positions the smart card reader 4 on the communication base 12. It is then informed by the smart card reader 4 that it is connected, that it is operating correctly. and that communication with the central database 13 is in progress. In step 702, if the smart card reader 4 is positioned on the communication base 12, the process proceeds to step 706.

In step 706, if the response of the central database 13 has not been received within the allotted time, the user is informed by the smart card reader 4. Said user is also invited to withdraw the smart card reader 4 of the communication base 12 and to retry the operation. Said operation can possibly be done at the headquarters of the company that hosts the central database 13 if the link persisted to be defective. The process goes to step 708.

At step 708, the user removes the smart card reader 4 from the communication base 12.

In step 710, if communication with the central database 13 is not considered permanently defective, the process resumes at step 704. At step 710, if the communication with the central database 13 is considered permanently defective, the process proceeds to step 712.

In step 712, the user positions the smart card reader 4 on the communication base 12 at the headquarters of the company hosting the central database 13.

At step 706, if the response from the central database 13 has been received within the allotted time, the process proceeds to step 714. At step 714, if the signature of the signer of the electronic attestation has not been validated, the user is informed by the smart card reader 4. He is further informed that the electronic certificate during production has been de facto canceled. This situation occurs if the smart card 3 and the personal code of a person were used without the good fingerprints. The user is then reestablished either in the configuration of the smart card reader 4 positioned on the communication base 12 when the security has concerned unencrypted electronic documents, or in the configuration of the smart card reader 4 positioned on the base 12 when the security has concerned encrypted electronic documents. The process goes to step 716.

At step 716, the electronic attestation during production has been canceled.

At step 714, if the signature of the signer of the electronic attestation has been validated, the process proceeds to step 718. In step 718, if the security has concerned unencrypted electronic documents, the user is informed by the smart card reader 4 that the electronic certificate has been registered and that a new electronic certificate can be produced. for the same batch of electronic documents. The user is then reinstated in the configuration of the smart card reader 4 positioned on the communication base 12 when the security has concerned unencrypted electronic documents. The process goes to step 720.

In step 720, the electronic attestation is recorded. A new electronic certificate can be produced for the same batch of electronic documents.

In step 718, if the security has concerned encrypted electronic documents, the user is informed by the smart card reader 4 that the electronic certificate has been registered and that he can retrieve the electronic documents decrypted in the mass memory reader on the processing unit 2. The user is then re-established in the configuration of the smart card reader 4 positioned on the communication base 12 when the security operation has not yet taken place . The process proceeds to step 722.

At step 722, the electronic attestation is recorded. The user can retrieve the decrypted electronic documents. Use of the device for the internet consultation of information relating to certificates already signed and stored in the central database.

FIG. 8 represents a diagram illustrating the steps of using the device during the Internet consultation of information relating to electronic certificates already signed and registered in the central database.

At step 800, the electronic certificates of electronic documents available on the processing unit 2 must be consulted.

In step 802, the user connects to the website 14 of the device.

In step 804, if an account is to be created, the process proceeds to step 806. In step 806, the user creates an account.

In step 804, if no account is to be created, the process proceeds to step 808.

At step 808, the user opens his account.

At step 810, the user selects on the processing unit 2 the electronic documents from which he wishes to consult the electronic certificates. At step 812, the user requests to consult the electronic certificates of the selected electronic documents.

In step 814, the user consults the electronic certificates returned by the website 14 of the device. At step 816, if the consultation of the electronic attestations is to be continued, the process resumes at step 810.

At step 816, if the electronic attestations are not to be continued, the process proceeds to step 818.

In step 818, the user closes his account.

In step 820, the consultation of the electronic certificates is completed.

Use of the device for the encryption of electronic documents.

The encryption of an electronic document using a public encryption key makes it confidential and only for the holder of the corresponding private encryption key, which alone can decipher it.

FIG. 9 represents a diagram illustrating the steps of use of the device during the encryption of electronic documents.

In step 900, electronic documents available on the processing unit 2 must be encrypted.

In step 902, the user connects to the website 14 of the device.

At step 904, if an account is to be created, the process proceeds to step 906.

In step 906, the user creates an account. In step 904, if no account is to be created, the process proceeds to step 908. At step 908, the user opens his account.

In step 910, the user selects on the processing unit 2 the electronic documents that must be encrypted.

At step 912, the user searches, by means of the website 14, the natural or legal persons to whom the selected electronic documents must be intended. In step 914, the user associates each selected electronic document with the recipients ad hoc (natural or legal persons).

In step 916, the user requests the encryption of each electronic document selected by the public encryption key of each recipient that has been associated with it.

In step 918, if the encryption of electronic documents is to be continued, the process resumes at step 910. At step 918, if the encryption of electronic documents is not to be continued, the process proceeds to step 920.

In step 920, the user closes his account. In step 922, the encryption of the electronic documents is completed.

Operation of the device when the smart card reader 4 is positioned on a communication base 12. By default, before its first positioning on a communication base 12, the status indicator of the smart card reader 4 is set to II. Said smart card reader 4 displays the following message: "The constitution of the batch of electronic documents can be started by positioning the smart card reader on a communication base 12".

FIG. 10 represents a diagram illustrating the steps of operation of the device when the smart card reader is positioned on the communication base 12.

In step 1000, the smart card reader 4 is positioned on the communication base 12.

In step 1002, the second management module 15 inactivates the control and reading tools of the smart card reader 4. Said tools are in fact useless because the smart card reader 4 only needs to act autonomously or in exclusive communication with the first management module 1 of the processing unit 2. In step 1004, the second management module 15 performs self-diagnostic tests in collaboration with the communication base 12 to determine if the device is fully functional, knowing that it is assumed that the first management module 1 and the communication base 12 are already installed correctly.

At step 1006, if the self-diagnostic tests are unsatisfactory, the process proceeds to step 1008. In step 1008, the second management module 15 displays the following message: "The device is faulty and can not be used".

In step 1010, the device can not be used.

At step 1006, if the self-diagnostic tests are satisfactory, the process proceeds to step 1012.

In step 1012, the second management module 15 displays the following message: "The smart card reader is connected and it is working properly".

In step 1100, if the status indicator of the smart card reader 4 is set to II, the process proceeds to step 1102.

In step 1102, the second management module 15 inscribes the ad hoc instructions in the first storage compartment 8 so that said compartment can be presented on the processing unit 2 as a mass memory reader accessible in reading and writing.

In step 1104, the second management module 15 closes the third communication zone 6 by physical interruption. In step 1106, the second management module 15 opens the first communication zone 5.

In step 1108, the second management module 15 displays the following message: "If the batch of electronic documents is constituted, you can request the security of the data characterizing said electronic documents by withdrawing previously the smart card reader of the communication base ".

In step 1110, the first management module 1 establishes the communication with the third management module 16 of the smart card reader 4, reads the instructions entered in the first storage compartment 8, displays said compartment as a memory reader read and write accessible mass on the processing unit 2 and displays the following message "The constitution of the batch of electronic documents can be started or continued".

At step 1112, the smart card reader

4 is functional for the constitution of the batch of electronic documents. In step 1100, if the status indicator of the smart card reader 4 is not set to

II, the process proceeds to step 1200.

In step 1200, if the status indicator of the smart card reader 4 is set to 12, the process proceeds to step 1202.

In step 1202, the second management module 15 inscribes the ad hoc instructions in the first storage compartment 8 so that said compartment does not appear on the processing unit 2, is reserved for the exclusive use of the first management module 1 and that the viewing and listening interface of said module is displayed on said processing unit 2.

In step 1204, the second management module 15 closes the third communication zone 6 by physical interruption. In step 1206, the second management module 15 opens the first communication zone 5.

In step 1208, the second management module 15 displays the following message: "The consultation of the electronic certificates registered by previous signatories or the production of an electronic certificate can be achieved by previously removing the smart card reader from the base Communication". In step 1210, the first management module 1 establishes the communication with the third management module 16 of the smart card reader 4 reads the instructions entered in the first storage compartment 8 and displays the display interface and listens to electronic documents present on the processing unit 2.

In step 1212, the first management module 1 displays the message "The content of the electronic documents to be covered by the electronic attestation can be verified".

In step 1214, the smart card reader 4 is functional for the verification of the electronic documents.

In step 1200, if the status indicator of the smart card reader 4 is not set to 12, the process proceeds to step 1300.

In step 1300, if the status indicator of the smart card reader 4 is set to 13, the process proceeds to step 1302. In step 1302, the second management module 15 displays the following message: "The only possible operation for electronic documents being processed is decryption. This can be requested by previously removing the smart card reader from the communication base. "In step 1304, the smart card reader

4 is connected without being functional.

At step 1300, if the status indicator of the smart card reader 4 is not set to

13, the process proceeds to step 1400. In step 1400, the second management module 15 opens the second communication zone 7.

In step 1402, the second management module 15 establishes the communication with the central database 13. At step 1404, the second management module 15 transfers the encrypted electronic attestation file to the central database 13 .

At step 1406, the second management module 15 waits for a response from the central database 13.

In step 1408, the second management module 15 displays the following message: "Communication with the central database is in progress". In step 1410, if the response of the central database 13 has not been received within the allotted time, the process proceeds to step 1500.

In step 1500, the second management module 15 interrupts the communication with the central database 13. In step 1502, the second management module 15 closes the second communication zone 7 by physical interruption.

In step 1504, the second management module 15 displays the following message:

"The registration of the electronic certificate has not been confirmed Please remove the smart card reader from the communication base and try the operation again If the connection persists to be defective, please go to the headquarters of the company hosting the central database to perform this operation ".

In step 1506, the operation must be attempted again. The smart card reader 4 is connected without being functional.

In step 1410, if the response of the central database 13 has been received within the allotted time, the process proceeds to step 1600.

In step 1600, the second management module 15 interrupts the communication with the central database 13.

In step 1602, the second management module 15 closes the second communication zone 7 by physical interruption. At step 1604, if the signature of the signer of the electronic attestation has not been validated, the process proceeds to step 1700.

In step 1700, the second management module 15 deletes the electronic attestation files that were the object of the attempted registration (the encrypted file and the non-encrypted file). encrypted) and erases all data from the third storage compartment 10.

In step 1702, if the status indicator of the smart card reader 4 is set to 15, the process proceeds to step 1704.

In step 1704, the second management module 15 sets the status indicator of the smart card reader 4 to 13.

In step 1702, if the status indicator of the smart card reader 4 is not set to 15, the process proceeds to step 1706.

In step 1706, the second management module 15 sets the status indicator of the smart card reader 4 to 12. In step 1708, the second management module 15 displays the following message: "The electronic attestation which has just been produced has been canceled because the signature of the signatory of the said electronic certificate has not been validated by the central database ". The process resumes at step 1100.

At step 1604, if the signature of the signer of the electronic attestation has been validated and thus the electronic attestation has been recorded, the process proceeds to step 1606. At step 1606, if the indicator status of the smart card reader 4 is not set to 15, the process proceeds to step 1900.

In step 1900, the second management module 15 sets the status indicator of the smart card reader 4 to 12. In step 1902, the second management module 15 deletes the encrypted copy of the electronic attestation file that was recorded in the central database 13. At step 1904, the second module of Management 15 displays the following message: "The electronic certificate has been registered and a new electronic certificate can be produced for the same batch of electronic documents". The process resumes at step 1100.

At step 1606, if the status indicator of the smart card reader 4 is set to 15, the process proceeds to step 1800.

In step 1800, the second management module 15 transfers the decrypted electronic documents from the third storage compartment 10 to the first storage compartment 8.

In step 1802, the second management module 15 erases all the data of the fourth storage compartment 11.

In step 1804, the second management module 15 erases all the data of the third storage compartment 10.

In step 1806, the second management module 15 erases all the data of the second storage compartment 9.

In step 1808, the second management module 15 sets the status indicator of the smart card reader 4 to II. In step 1810, the second management module 15 displays the following message: "The attestation electronic has been registered. The decrypted electronic documents can be retrieved from the mass memory reader on the processing unit. "The process resumes at step 1100. Operation of the device when the chip card reader 4 is removed from the communication base 12.

Figure 11 is a diagram illustrating the steps of operation of the device when the smart card reader is removed from the communication base.

In step 2000, the smart card reader 4 is removed from the communication base 12.

In step 3000, the first management module 1 of the processing unit 2 detects that the first storage compartment 8 of the smart card reader 4 becomes inaccessible.

In step 3002, if the first storage compartment 8 is displayed as a mass storage drive on the processing unit 2, the process proceeds to step 3004.

In step 3004, the first management module 1 deletes said mass memory reader.

In step 3014, the smart card reader 4 is autonomous.

In step 3002, if the first storage compartment 8 is not displayed as a mass storage drive on the processing unit 2, the process proceeds to step 3006. In step 3006, if the interface for viewing and listening to electronic documents of the processing unit 2 is displayed, the process proceeds to step 3008.

In step 3008, the first management module 1 closes said viewing and listening interface.

In step 3010, the smart card reader 4 is autonomous.

In step 3006, if the viewing and listening interface of the electronic documents of the processing unit 2 is not displayed, the process proceeds to step 3012.

In step 3012, the smart card reader 4 is autonomous.

In step 2002, the second management module 15 continues, until the end, the operations that were started while smart card reader 4 was positioned on the communication base 12.

In step 2004, the second management module 15 closes the first communication zone 5 by physical interruption.

In step 2006, the second management module 15 closes the second communication zone 7 by physical interruption. In step 2008, the second management module 15 opens the third communication zone 6.

In step 2010, the second management module 15 activates the control and reading tools of the smart card reader 4. Said tools are indeed necessary because the smart card reader 4 goes have to act on instructions or actions of the user.

In step 2012, if the status indicator of the smart card reader 4 is set to II, the process proceeds to step 2100.

In step 2100, if there are electronic documents in the first storage compartment 8 of the smart card reader 4, the process proceeds to step 2106. In step 2106, the second management module 15 displays the following message: "The constitution of the batch of electronic documents can be started or continued by positioning the smart card reader on a docking base", displays the list of all the electronic documents contained in the first storage compartment 8, displays the command allowing the security of the data characterizing the electronic documents of the constituted batch and displays the command allowing the general abandonment.

At step 2108, the smart card reader 4 is autonomous.

In step 2100, if there is no electronic document in the first storage compartment 8 of the smart card reader 4, the process proceeds to step 2102.

In step 2102, the second management module 15 displays the following message: "The constitution of the batch of electronic documents can be started by positioning the smart card reader on a docking base". At step 2104, the smart card reader 4 is autonomous.

In step 2012, if the status indicator of smart card reader 4 is not set to II, the process proceeds to step 2014.

At step 2014, if the status indicator of the smart card reader 4 is not set to

12, the process proceeds to step 2200.

At step 2200, if the status indicator of the smart card reader 4 is not set to

13, the process proceeds to step 2202.

In step 2202, the second management module 15 displays the following message: "The electronic certificate has been produced and signed It must be registered by positioning the smart card reader on a communication base."

In step 2204, the smart card reader 4 is autonomous.

In step 2200, if the status indicator of the smart card reader 4 is set to 13, the process proceeds to step 2206.

In step 2206, the second management module 15 displays the data characterizing the electronic documents to be covered by the electronic attestation, displays the command for requesting the decryption of the electronic documents and displays the command allowing general abandonment.

In step 2208, the smart card reader 4 is autonomous. In step 2014, if the status indicator of smart card reader 4 is set to 12, the process proceeds to step 2016.

In step 2016, the second management module 15 reads the fingerprints, generated by hash function, entered in the first storage compartment 8 by the first management module 1

(fingerprints of verified electronic documents whose content has been validated by the user). In step 2018, the second management module 15 compares the fingerprints read in step 2016 with those stored in the second storage compartment 9.

In step 2020, for each equivalence found between said fingerprints read and said stored fingerprints, the second management module 15 sets to "True" the indicator of the corresponding electronic document specifying that said document has been verified successfully, otherwise said indicator is left in its original state.

In step 2022, the second management module 15 erases the fingerprints, generated by the hash function, entered in the first storage compartment 8. In step 2024, the second management module 15 displays the data characterizing the electronic documents. to be covered by the electronic certificate, displays the following message: "The content of the electronic documents to be covered by the electronic certificate can be checked by positioning the card reader chip on a communication base ", displays the command to consult the electronic certificates registered by previous signatories, displays the command to produce an electronic certificate, displays the command to cancel the previous checks of electronic documents and displays the command allowing general abandonment.

In step 2026, the smart card reader 4 is autonomous.

Operation of the device when the security of the data characterizing the electronic documents to be covered by the electronic certificate is requested. FIG. 12 represents a diagram illustrating the steps of operation of the device when the security of the data characterizing the electronic documents to be covered by the electronic certificate is requested. At step 4000, the security of the data characterizing the electronic documents to be covered by the electronic attestation was requested.

In step 4002, the second management module 15 controls the nature of the electronic documents contained in the first storage compartment 8.

In step 4004, if the first storage compartment 8 contains encrypted electronic documents and unencrypted electronic documents, the process proceeds to step 4100. In step 4100, the second management module 15 displays the following message: "The batch of electronic documents constituted contains both encrypted documents and non-encrypted documents, or the security can only concern one category of electronic documents. You must resume the constitution of the lot for this purpose. "

In step 4102, the security is abandoned. In step 4004, if the first storage compartment 8 contains only one category of electronic documents, the process proceeds to step 4006.

In step 4006, the second management module 15 transfers the electronic documents contained in the first storage compartment 8 to the third storage compartment 10.

In step 4008, the second management module 15 erases all the data of the first storage compartment 8.

In step 4010, if the third storage compartment 10 contains encrypted electronic documents, the process proceeds to step 4300. In step 4300, the second management module 15 inscribes the name of each electronic document of the third compartment storage 10 in the second storage compartment 9.

At step 4302, the second management module 15 sets the status indicator of the smart card reader 4 to 13. In step 4304, the second management module 15 displays the following message: "the data characterizing the electronic documents to be covered by the electronic attestation have been secured.", Displays the data characterizing the electronic documents to be covered by the electronic certificate, displays the command to request the decryption of electronic documents and displays the command allowing general abandonment.

At step 4306, the data characterizing the electronic documents to be covered by the electronic attestation are secured.

In step 4010, if the third storage compartment 10 contains unencrypted electronic documents, the process proceeds to step 4200.

In step 4200, the second management module 15 generates, through a hash function, the fingerprint of each electronic document contained in the third storage compartment 10.

In step 4202, the second management module 15 inscribes the print and the name of each electronic document of the third storage compartment 10 in the second storage compartment

9.

In step 4204, the second management module 15 erases all the data of the third storage compartment 10. In step 4206, the second management module 15 sets the status indicator of the smart card reader 4 to 12.

In step 4208, the second management module 15 displays the following message: "the data characterizing the electronic documents to be covered by the electronic attestation have been secured, the content of said electronic documents can be verified by positioning the card reader chip on a communication base. ", displays the data characterizing the electronic documents to be covered by the electronic certificate, displays the order allowing the consultation of the electronic certificates registered by previous signatories, displays the order to produce an electronic certificate and displays the command for general abort.

At step 4210, the data characterizing the electronic documents to be covered by the electronic attestation are secured.

Operation of the device when it is indicated that an electronic document is validated.

As part of the verification of the content of the electronic documents to be covered by the electronic attestation, when it is indicated that an electronic document is validated, the first management module 1 generates, for the electronic document currently being viewed or listening, an imprint with the ad hoc hash function and written this imprint in the first storage compartment 8 of the smart card reader 4. Operation of the device when the electronic certificates produced, signed and registered by the previous signatories are requested.

In the context of the consultation of electronic certificates produced, signed and registered by previous signatories, when said consultation is requested, the second management module 15 reads each electronic attestation file contained in the fourth storage compartment 11 of the card reader chip 4, extracts the identity of the signer who produced it, signed and recorded, displays the list of all said identities and displays the command to return to the previous screen. The second management module 15 also associates each displayed signer identity with a pointer to the corresponding electronic attestation file in the fourth storage compartment 11. Operation of the device when the display of the contents of an electronic attestation is requested.

In the context of the consultation of electronic certificates produced, signed and registered by previous signatories, when the display of the content of an electronic certificate is requested by validating the selection of the identity of a signatory, the second management module 15 reads the data contained in the electronic attestation file designated by the pointer associated with the identity of the selected signatory, displays the identity of the signatory selected, the date and time of the signature of the electronic attestation (time stamp of the smart card reader 4 at this time) and the mentions included in the electronic certificate. The second management module 15 also displays the command allowing the return to the previous screen.

Operation of the device when the production of an electronic certificate is requested.

In the context of the production of an electronic attestation, when said production is requested, the second management module 15 displays the certification information that may be included in the electronic certificate. Each mention is associated with a unique code that will be recorded in the electronic attestation file. The second management module 15 also displays the command allowing the general abandonment, the command allowing the abandonment of the electronic certificate in progress and the following message: "Please select the mentions to include in your electronic certificate.". Operation of the device when the selection of the particulars to be included in the electronic certificate is validated.

In the context of the production of an electronic certificate, when the selection of the particulars that must be included in said electronic certificate is validated, the second management module 15 writes the code of all the mentions selected in the third storage compartment 10 of the document. smart card reader 4 and displays the following message: "Please have your fingerprints read by the smart card reader." Operation of the device when decryption of electronic documents is requested.

In the context of the production of an electronic certificate, when the decryption of the electronic documents is requested, the second management module 15 inscribes, in the third storage compartment 10, the code of the mention stipulating that the documents have been decrypted and available. The second management module 15 also displays the command allowing general abandonment, the command allowing the abandonment of the electronic certificate in progress and the following message: "Please have your fingerprints read by the smart card reader. ". Operation of the device when the user's finger is affixed to the fingerprint reading area of the smart card reader 4.

In the context of the production of an electronic attestation, when the finger of the user is affixed to the fingerprint reading area of the smart card reader 4, the second management module 15 reads the fingerprints of the card reader. user. If the operation has proceeded correctly, the second management module 15 enters the definition of the signer's fingerprints in the third storage compartment 10 and displays the following message: "The acquisition of your fingerprints has succeeded. your smart card. " If the operation has not proceeded correctly, the second management module 15 displays the following message: "The acquisition of your fingerprints has failed. again your fingerprints by the reader. "The second management module 15 also displays the command allowing the general abandonment and the command allowing the abandonment of the electronic attestation in progress.

Operation of the device when the smart card 3 is inserted in the smart card reader 4.

In the context of the production of an electronic certificate, when the smart card 3 is inserted in the smart card reader 4, the second management module 15 assigns the digit 0 to the code composition test counter. 3. If the smart card 3 is functioning properly, the second management module 15 displays the following message: "The smart card is functional, please enter your personal code.". If the smart card 3 is not functioning properly, the second management module 15 displays the following message: "The smart card is not functional, please remove it from the reader." The second management module 15 also displays the command allowing the general abort and the command allowing the abandonment of the electronic attestation in progress. Operation of the device when the user's smart card 3 is removed from the smart card reader 4.

In the context of the production of an electronic certificate, when the smart card 3 is removed from the smart card reader 4, it is not functional or is functional but the composition of the personal code is not complete or not validated, the second management module 15 displays the following message: "Please insert your smart card into the reader.". In other cases, when the smart card 3 is removed from the smart card reader 4, no action is taken. Operation of the device when the composition of the signer's personal code is validated.

FIG. 13 represents a diagram illustrating the steps of operation of the device when the composition of the signer's personal code is validated.

In step 5000, the composition of the personal code has been validated. In step 5002, the second management module 15 registers the personal code composed in the third storage compartment 10.

In step 5004, the second management module 15 increments the composition test counter of the personal code.

In step 5006, the second management module 15 compares the personal code dialed and that which is written on the smart card 3.

In step 5008, if the personal code dialed and the personal code on the smart card 3 are not identical, the process proceeds to step 5100.

In step 5100, if this is the third attempt at dialing a PIN, the process proceeds to step 5200. In step 5200, the second management module 15 erases the following data from the third storage compartment 10: the code of the mentions that were to be part of the electronic attestation, the definition of the signer's fingerprints and the personal code composed by the signatory.

In step 5202, the second management module 15 sets to "False" all indicators indicating whether the content of the electronic documents has been verified successfully. The verifications of the current signatory are thus canceled.

In step 5204, the second management module 15 invalidates the smart card 3.

In step 5206, the second management module 15 displays the following message: "The composite code is erroneous for the third time, the production of the current certificate has been abandoned Your smart card has been invalidated. . " At step 5208, the production of electronic attestation is abandoned. The smart card 3 is disabled.

In step 5100, if it is not the third attempt to compose a personal code, the process proceeds to step 5300.

In step 5300, the second management module 15 erases the personal code composed by the signatory of the third storage compartment 10.

At step 5302, the second management module 15 displays the following message: "The code is wrong, please try again. only have a total of three tries, after which your card will be invalidated. "

In step 5304, the personal code must be dialed again. At step 5008, if the personal code dialed and the personal code entered on smart card 3 are identical, the process proceeds to step

5010.

In step 5010, the second management module 15 reads the following data on the smart card 3: the identity of the holder of the smart card 3, the unique identification code of the holder of the smart card 3, the private key of encryption attributed to the person, physical or moral, represented by the holder of the smart card 3, the public encryption key of the exchanges with the central database 13 and inscribes said data in the third storage compartment 10 .

At step 5012, if the status indicator of the smart card reader 4 is set to 13, the process proceeds to step 5400.

In step 5400, the second management module 15 decrypts all the electronic documents contained in the third storage compartment 10 by means of the private encryption key attributed to the person, physical or moral, represented by the holder of the smart card 3.

In step 5402, the second management module 15 erases all the electronic documents at the origin of the decryption. Only documents Decrypted electronic devices therefore remain in the third storage compartment 10.

In step 5404, the second management module 15 erases all the data of the second storage compartment 9.

In step 5406, the second management module 15 generates, by means of a hash function, the fingerprint of each electronic document contained in the third storage compartment 10. In step 5408, the second management module 15 inscribed the fingerprint, generated by hash function, and the name of each electronic document contained in the third storage compartment 10 in the second storage compartment 9. In step 5410, the second management module 15 reads the fingerprints, generated by hash function, electronic documents contained in the second storage compartment 9.

In step 5412, the second management module 15 reads the following data in the third storage compartment 10: the identity of the holder of the smart card 3, the unique identification code of the smart card holder 3 , the private key of encryption attributed to the person, physical or moral, represented by the holder of the smart card

3, the definition of the signer's fingerprints, the signatory's personal code and the code of the particulars to be included in the electronic certificate.

In step 5414, the second management module 15 constitutes the electronic attestation file, in particular by means of the read data. previously: fingerprints, generated by hash function, electronic documents, the identity of the holder of the smart card 3, the unique identification code of the holder of the smart card 3, the private key encryption assigned to the person, natural or legal, represented by the holder of the smart card 3, the definition of the signatory's fingerprints, the signatory's personal code, the code of the particulars to be included in the electronic certificate, a unique identifier of the file of the electronic attestation and a timestamp of the constitution of the electronic attestation file. In addition, the second management module 15 records the electronic attestation file thus constituted in the fourth storage compartment 11.

In step 5416, the second management module 15 encrypts the electronic attestation file by means of the public encryption key exchanges with the central database 13 (read in the third storage compartment 10). Thus, an encrypted electronic attestation file and an unencrypted electronic attestation file are available in the fourth storage compartment 11. In step 5418, the second management module 15 erases all the data of the third storage compartment 10 except the decrypted electronic documents.

In step 5420, the second management module 15 sets the status indicator of the smart card reader 4 to 15. In step 5422, the second management module 15 sets all the indicators to "False" indicating whether the content of the electronic documents has been verified successfully. In step 5424, the second management module 15 displays the following message: "The code composed is correct, the electronic certificate has been produced and signed and must now be recorded by positioning the smart card reader on a base of Please remove your chip card. "

At step 5426, the electronic attestation is produced and signed. Electronic documents are deciphered. In step 5012, if the status indicator of the smart card reader 4 is not set to 13, the process proceeds to step 5500.

In step 5500, the process is the same as step 5410. In step 5502, the process is the same as step 5412.

In step 5504, the process is the same as step 5414.

In step 5506, the process is the same as step 5416.

In step 5508, the second management module 15 erases all the data of the third storage compartment 10.

In step 5510, the second management module 15 sets the status indicator of the smart card reader 4 to 14. In step 5512, the process is the same as step 5422.

In step 5514, the process is the same as step 5424. In step 5516, the electronic attestation is produced and signed.

Operation of the device when a signed electronic certificate has to be registered in the central database 13. Figure 14 shows a diagram illustrating the steps of operation of the device when a signed electronic certificate must be registered in the central database.

In step 6000, an electronic attestation must be recorded in the central database 13.

In step 6002, the central database 13 deciphers the electronic attestation file received using the private key encryption exchanges with the smart card reader 4.

In step 6004, the central database 13 searches for the unique and perennial identifier of the holder of the smart card 3 which corresponds to the unique identification code of the holder of the smart card 3 transmitted by the attestation file. electronic. When said unique and durable identifier has been found, the personal code and the definition of fingerprints associated with it are compared with those transmitted by said electronic attestation file. In case of equivalence, the identity of the signatory of the electronic certificate is validated. This testifies that the user of the smart card had the correct personal code and good fingerprints.

In step 6006, if the identity of the signer has been validated, the process proceeds to step 6200.

In step 6200, the central database 13 searches the records of said database associated with the same unique identifier as that of the electronic attestation file received. In step 6202, if there are records of the central database 13 associated with the same unique identifier as that of the received electronic attestation file, the process proceeds to step 6204. At step 6204, the central database

13 deletes said records. This arrangement makes it possible to manage the recurring transmissions of the same electronic attestation file and to take into account only the last transmission. This situation may arise when, as a result of a communication problem between the smart card reader 4 and the central database 13, the electronic attestation file has been received and processed by the central database 13 but no response was received in return by smart card reader 4. The process could not be completed within the smart card reader 4, the signer of the electronic certificate is seen forced to try registration recurrently until its complete success and can thus generate several records of the same electronic certificate. In step 6202, if there is no record of the central database 13 associated with the same unique identifier as that of the electronic attestation file received, the process proceeds to step 6206.

In step 6206, the central database 13 records the data transmitted by the electronic attestation file received. During this registration, the unique and durable identifier of the holder of the smart card 3 is associated with the unique identifier of the electronic attestation file received, the timestamp performed by the smart card reader 4, fingerprints. , generated by hashing function, electronic documents, the mentions included in the electronic certificate concerning said electronic documents and a time stamp of the recording in the central database 13.

In step 6208, the central database 13 composes the response to the smart card reader 4 indicating that the identity of the signer of the electronic attestation has been validated and that the electronic attestation has been recorded.

In step 6210, the central database 13 transmits said response to the smart card reader 4.

At step 6212, the electronic attestation has been recorded in the central database 13.

In step 6006, if the identity of the signer has not been validated, the process proceeds to step 6100. In step 6100, the central database 13 deletes the received electronic attestation file.

In step 6102, the central database 13 composes the response to the smart card reader 4 indicating that the identity of the signer of the electronic attestation has not been validated.

In step 6104, the central database

13 transmits said response to the smart card reader 4. In step 6106, the electronic attestation has not been recorded in the central database 13.

Functioning of the device when it is requested a consultation, by Internet, information relating to electronic certificates already signed and registered in the central database.

When a request is made for consultation, via the Internet, of information relating to electronic certificates already signed and registered in the central database 13, the website of the device

14 generates, by hash function, the fingerprints of the electronic documents that have been selected on the processing unit 2 for a consultation of electronic certificates, search in its database (replica of the central database 13) every information related to said electronic document fingerprints, records the consultation request and transfers all information from the search to the processing unit 2. All communications between the processing unit 2 and the website of the device 14 are secure. Operation of the device when electronic document encryption is requested.

When the encryption of electronic documents is requested, the website of the device 14 stores the encryption request and encrypts the electronic documents that have been selected on the processing unit 2. The said encryption is done using the public encryption keys assigned to the persons, whether natural or legal, which have been selected and associated with each electronic document selected on the processing unit 2. All communications between the processing unit 2 and the website of the device 14 are secure. Functioning of the device when the cancellation of previous verifications of secure electronic documents is requested.

When the cancellation of the previous verifications of the electronic documents is requested, the second management module 15 displays the following message: "Do you really want to cancel the previous verifications of the electronic documents?". If the user confirms, the second management module 15 sets to "False" all indicators indicating whether the content of the electronic documents has been verified successfully. If the user does not confirm, no action is taken.

Operation of the device when the abandonment of the electronic certificate in progress is requested. When the abandonment of the electronic certificate in progress is requested, the second module Management 15 displays the following message: "Do you really want to abandon the electronic certificate in progress?". If the user confirms, the second management module 15 deletes the following data from the third storage compartment 10: the code of the mentions that were to be part of the electronic attestation, the definition of the signer's fingerprints, the code composed by the signatory. When the status indicator of the smart card reader 4 is set to 12, the second management module 15 also sets to "False" all indicators indicating whether the content of the electronic documents has been verified successfully. If a smart card 3 is inserted in the smart card reader 4, the second management module 15 displays the following message: "Please remove your smart card.". Finally, the second management module 15 restores the default configuration according to the current value of the status indicator of the smart card reader 4. If the user does not confirm, no action is implemented.

Operation of the device when general abandonment is requested.

When the general abort is requested, the second management module 15 displays the following message: "Do you really want to give up everything?". If the user confirms, the second management module 15 erases all the data of the four storage compartments 8, 9, 10, 11, positions the status indicator of the smart card reader 4 to II. If a smart card 3 is inserted in the smart card reader 4, the second module of management 15 displays the following message: "Please remove your smart card." Finally, the second management module 15 restores the default configuration according to the current value of the status indicator of the smart card reader 4. If the user does not confirm, no action is implemented. INDUSTRIAL APPLICATIONS OF THE INVENTION

The device according to the invention is particularly intended to: - build legal value traceability of any electronic document that can be viewed or listened to. This includes, for any electronic document, knowing and being able to prove by whom and when it was created, accessed, approved and received. The list of information that can be attached to an electronic document is not limiting, other uses can be imagined

- mass approval of electronic documents such as invoices or other recurring documents

- the signing of multi-party electronic acts such as contracts;

- intervene in all exchanges of electronic documents requiring an acknowledgment of receipt with legal value, especially in relations with the administration (tax declarations, certificates ...).

Claims

1. Device for producing, signing and recording an electronic certificate containing a plurality of mentions applicable to a batch of electronic documents and capable of being signed by a plurality of signers, said device comprising: a processing unit ( 2), a smart card (3), - a smart card reader (4) having three communication zones (5, 6, 7) and at least one storage memory, a communication base (12). ) for receiving said smart card reader (4) capable of communicating with said processing unit (2) and with a central database (13) device characterized in that it comprises three management modules, a first module management unit (1) implanted on the processing unit (2), a second management module (15) and a third management module (16) located on the smart card reader

(4), said management modules cooperating to perform a first group of operations when the chip card reader (4) is positioned on a communication base (12) and a second group of operations when the smart card reader (4) is removed from the communication base (12), said first group of operations making it possible to constitute the batch of electronic documents to be processed, to check the content of the electronic documents to be covered by the electronic attestation and to record the signed electronic attestation, said second group of operations making it possible to secure the data characterizing the electronic documents to be covered by the electronic certificate, to consult the electronic certificates produced, signed and registered by previous signatories, to decipher the electronic documents to be covered by the electronic certificate, to produce and sign the electronic certificate.

2. Device according to claim 1 wherein the processing unit (2) houses the first management module (1) which is dedicated to the operations that take place in said processing unit (2) and the communications with the third module of management (16).

3. Device according to claim 1 wherein the chip card reader (4) is a mobile element having a storage memory and characterized in that said storage memory comprises a first storage compartment (8) dedicated to the data exchanged between the processing unit (2) and the smart card reader (4), and communicating exclusively with either the second management module

(15) via the third communication zone (6), or with the first management module (1) via the third management module (16) and the first communication zone (5), said data exchanged between the communication unit processing (2) and the chip card reader (4) including electronic documents of the batch processing, fingerprints, generated by hashing function, electronic documents whose content has just been verified by the signer, and instructions given by the second management module (15) to the first management module (1).

4. Device according to claim 1, wherein the smart card reader (4) is a mobile element having a storage memory and characterized in that said storage memory comprises a second storage compartment (9) dedicated to the data characterizing the electronic documents to be covered by the electronic certificate, and communicating directly and exclusively with the second management module (15), said data being constituted by the name of the electronic documents to be covered by the electronic certificate, by the indicator specifying whether their content has been successfully verified by the signatory and the fingerprints, generated by hashing function, of said electronic documents.

5. Device according to claim 1, wherein the smart card reader (4) is a mobile element having a storage memory and characterized in that said storage memory comprises a third storage compartment (10) dedicated to temporary data. of work, and communicating directly and exclusively with the second management module (15), said data comprising the electronic documents to be decrypted, the electronic documents resulting from a decryption, the code of the mentions chosen to be included in the electronic certificate, the definition of the signer's fingerprints read by the smart card reader (4), the personal code composed by the signatory in order to to authorize the use of the smart card (3), the identity of the smart card holder

(3), the unique identification code of the smart card holder (3), the private key of encryption attributed to the natural or legal person represented by the holder of the smart card (3), the public key of encryption of exchanges with the central database (13).

6. Device according to claim 1, wherein the chip card reader (4) is a mobile element having a storage memory and characterized in that said storage memory comprises a fourth storage compartment (11) dedicated to data storage. electronic certificate already transmitted or to be transmitted to the central database (13) communicating directly and exclusively with the second management module (15), said data being organized in electronic attestation files comprising the fingerprints, generated by function hashes, electronic documents covered by the electronic certificate, the identity of the smart card holder (3), the unique identification code of the smart card holder (3), the encryption private key assigned the natural or legal person represented by the holder of the smart card (3), the definition of the signer's fingerprints read by the smart card reader (4), the personal code composed by the signatory to authorize the use of the smart card (3), the code of the information chosen to be included in the electronic certificate, the unique identifier of the electronic attestation file and the timestamp of the constitution of the electronic attestation file.

7. Device according to claim 6, wherein the electronic attestation files present in the chip card reader (4) during the same operation relate to the same batch of electronic documents and are subject to a registration in the central database (13).

8. Device according to claim 6, wherein each electronic attestation file is generated by a signatory.

9. Device according to claim 1 wherein: the first communication zone (5) of the smart card reader (4) is dedicated to communications between the first management module (1) and the third management module (16), said first communication zone (5) allowing no other communication and which can be opened or closed, by physical interruption, by the second management module (15) exclusively, the second communication zone (7) is dedicated to communications between the second management module (15) and the central database (13), said second communication zone (7) not allowing any other communication and which can be opened or closed, by physical interruption, by the second management module (15) exclusively, the third communication zone (6) is dedicated to communications between the first storage compartment (8) of the smart card reader (4) and the second management module (15), said third communication zone (6) allowing no other communication and can be opened or closed, by physical interruption, by the second management module (15) exclusively.

10. Device according to one of claims 3 to 9 wherein the chip card reader (4) comprises a chip card reading area (3) arranged to prevent said smart card reader (4) d to be positioned on the communication base (12) when a chip card (3) is inserted in said reading zone.

11. Device according to claim 1 wherein the chip card reader (4) further comprises a second management module (15) dedicated to operations taking place in said chip card reader (4) and having permanent access exclusive and direct to the second, third and fourth storage compartments (9, 10, 11) of the smart card reader (4).

12. Device according to claim 11 wherein according to the current operation, said second management module (15) can also have access, via the third communication area (6), to the first storage compartment (8) of the reader. smart cards (4).

The device according to claim 11 wherein said second management module (15) is configured to manage a status indicator continuously indicating what is the current operation in the process of producing, signing and recording a electronic certificate.

Device according to claim 1, in which the chip card reader (4) comprises a third management module (16) permanently having direct access to the first storage compartment (8) of the smart card reader (4). said third management module (16) not accessing any other element of said smart card reader (4) and being dedicated to communications with the first management module (1).

15. Device according to claim 1 wherein the smart card (3) includes personal data including the identity of the holder of said smart card (3), the personal code of the smart card holder (3), the unique identification code holder of the smart card (3), the private key of encryption attributed to the natural or legal person represented by the holder of the smart card (3) and the public encryption key of the exchanges with the central database (13). ).

Device according to claim 1, in which the communication base (12) is adapted to receive the smart card reader (4) and to establish communication with this reader (4) via the first communication zone (5) and the second communication zone (7) of said smart card reader

(4).

17. Device according to claim 16, wherein the connection of the communication base (12) to the processing unit (2) is performed by a USB cable (Universal Serial Bus).

Apparatus according to claim 16, wherein the communication base (12) is further connected to the telephone network for establishing the private network by means of which the smart card reader (4) and the central database (13) ) communicate.

19. Device according to claim 1 wherein the central database (13) contains in particular information relating to the potential signatories of the electronic certificates, said information comprising the unique and perennial identifier of each smart card holder (3).

20. Device according to one of claims 1 to 19, further characterized in that it comprises Internet site 14 consisting of a partial and public replica of the central database (13), said website (14) containing the information of electronic certificates already signed and recorded in the central database (13) and the public encryption keys attributed to each person, whether natural or legal, represented by the smart card holders (3), access to that site being secure and realizing through a predefined personal account.

21. A method of producing, signing and recording an electronic certificate containing a plurality of mentions applicable to a batch of electronic documents and capable of being signed by a plurality of signers by means of a device comprising a unit of electronic documents. processing (2), a smart card (3), a smart card reader (4), a communication base (12) for receiving said smart card reader (4) and able to communicate with said smart card reader (4) processing (2) and with a central database (13), characterized in that it comprises a first group of operations when the chip card reader (4) is positioned on a communication base (12) and a second group of operations when the smart card reader (4) is removed from the communication base (12), said first group of operations making it possible to constitute the batch of electronic documents to be processed, to check the content of the electronic documents to be covered by the electronic attestation and to record the signed electronic attestation, said second group of operations making it possible to secure the data characterizing the electronic documents to be covered by the electronic certificate, to consult the electronic certificates produced, signed and registered by previous signatories , to decipher the electronic documents to be covered by the electronic certificate, to produce and sign the electronic certificate.

22. The method of claim 21 wherein, when the chip card reader (4) is positioned on the communication base (12), the first communication zone (5), second communication zone (7) and third zone Communication

(6) are either in a first configuration allowing exclusive communication between the first storage compartment (8) of the smart card reader (4) and the processing unit (2), or in a second configuration allowing exclusive communication between the smart card reader (4) and the central database (13).

23. The method of claim 22 wherein, in said first configuration, the third communication zone (6) is closed by physical interruption, the first communication zone (5) is open and the second communication zone (7) is closed by physical interruption.

24. The method of claim 23 wherein, immediately before the closing of the third communication zone (6) and the opening of the first communication zone (5), instructions for the first management module (1) are registered in the first storage compartment (8) by the second management module (15) and in which, after closure of the third communication zone

(6) and opening the first communication zone (5), the first management module (1) supports the first storage compartment (8) or to present it as a mass memory reader accessible for reading and writing on the processing unit

(2), or to enter data directly.

The method of claim 24 wherein all data written in the first storage compartment (8) by the first management module (1) will be read by the second management module (15) only after the smart card reader (4) is removed from the communication base (12).

26. The method of claim 22 wherein in said second configuration the first communication zone (5) is closed by physical interruption, the third communication zone (6) is open and the second communication zone (7) is open.

27. The method of claim 21 wherein, when the chip card reader (4) is removed from the communication base (12), the first communication zone (5) is closed by physical interruption, the second communication zone 7 is closed by physical interruption and the third communication zone (6) is open.

28. Software for implementing the method according to one of claims 21 to 27 when executed by means of a device comprising a processing unit (2) a smart card (3) a card reader to chip (4), a communication base (12) for receiving said chip card reader (4) capable of communicating with said processing unit (2) and with a central database (13), characterized in that it comprises three management modules (1, 15, 16) located on the processing unit (2) for the first management module (1) and on the smart card reader (4) for the other two modules of management (15, 16).

29. Software according to claim 28, characterized in that it comprises a first group of instructions for controlling the executable operations when the chip card reader (4) is positioned on a communication base (12) and a second group of instructions to order executable operations when the smart card reader (4) is removed from the communication base (12), said first group of operations making it possible to constitute the batch of electronic documents to be processed, to check the content of the electronic documents to be covered by the electronic attestation and to record the electronic attestation signed, and the second group of operations making it possible to secure the data characterizing the electronic documents to be covered by the electronic certificate, to consult the electronic certificates produced, signed and registered by previous signatories, to decipher the electronic documents to be covered by the electronic certificate, to produce and sign the electronic certificate.