WO2020249889A1

WO2020249889A1 - Chip card user authentication

Info

Publication number: WO2020249889A1
Application number: PCT/FR2020/050960
Authority: WO
Inventors: Yann Loïc AUBIN; Benoit MOUROUX
Original assignee: Idemia France
Priority date: 2019-06-13
Filing date: 2020-06-05
Publication date: 2020-12-17
Also published as: FR3097347B1; FR3097347A1

Abstract

The invention concerns a method implemented by a chip card (C1) interacting with a terminal (T1) using a near field contact-free communication or communication by contact, the method comprising: receiving a first command; in response, sending instruction data (DT1) to the terminal (T1) for presentation to a user (UR), the instruction data specifying: N predetermined events to be performed by the user by means of the chip card (C1) or the terminal (T1), N being equal to at least two, and time data defining a time sequence according to which the N events must be performed; after sending the instruction data, detecting events; determining whether the detected events conform with the instruction data (DT1); and, if so, successfully authenticating a user of the chip card.

Description

Title of the invention: Authentication of a user of a smart card

Technical area

[0001] The present invention is in the field of authentication mechanisms and relates more particularly to the authentication of a user of a smart card, this authentication using a terminal cooperating with this smart card.

Prior art

[0002] The use of smart cards (or microcircuit cards) is now widespread in everyday life. Such cards are for example used as bank cards, loyalty cards, access cards etc., and can take various formats depending on their respective uses. Smart cards can be designed to perform various types of functions, in particular to perform transactions, such as financial or banking transactions (payment transaction, transfer, etc.), authentication transactions, etc.

[0003] Traditionally, a smart card is designed to cooperate with an external terminal through contact areas accessible to the surface of the card. An external terminal can thus position appropriate contact pins on the contact pads of the card in order to establish contact communication. More recently, contactless smart cards have experienced an increasing boom due to the gain in speed and simplicity associated with contactless transactions. To do this, contactless cards embed a radio frequency antenna allowing the transmission and reception of RF signals with an external terminal.

[0004] A constant effort is made in the smart card industry to secure the use of smart cards against fraud. A current trend is to secure transactions carried out using a smart card using biometric authentication. To do this, some smart cards are today equipped with a biometric fingerprint sensor allowing a legitimate user to authenticate. Acquiring biometric fingerprints requires registering the biometric reference fingerprints of the legitimate user during an initialization phase called enrollment. This acquisition is a critical phase in the configuration of the smart card and must therefore be carried out in a secure manner in order to avoid fraudulent enrollment of biometric reference prints on the card. Likewise, the subsequent acquisition of biometric fingerprints in the normal use of the smart card may present a security risk.

[0005] More generally, it is not always possible for a smart card to reliably and securely authenticate a user, in particular with a view to authorizing or not the performance of any sensitive operation. either (acquiring a biometric fingerprint, carrying out a transaction, etc.).

[0006] There is therefore a need today to enable reliable and secure authentication of a user with a smart card. Since the resources of smart cards are often limited, it is desirable to be able to authenticate a user without requiring complex modifications to current smart cards or in-depth knowledge on the part of the users. Such an authentication mechanism is in particular necessary in order to allow a smart card to control the access of a user to any functionality of said card.

Disclosure of the invention

[0007] To this end, the present invention relates to a first method, implemented by a smart card cooperating with a terminal according to contactless communication in near field or by contact, the first method comprising:

- reception from the terminal of a first order;

- in response to at least said first command, sending setpoint data to the terminal for presentation to a user, said setpoint data specifying: o N predetermined events to be performed by the user by means of at least one among the smart card and the terminal, N being an integer equal to at least two, and

o temporal data defining a temporal sequence according to which the N events must be carried out;

- after sending the setpoint data, detection of events;

- determining whether the detected events comply with the setpoint data; and

- if so, successful authentication of a user of the smart card.

[0008] According to a particular embodiment, each of the N events specified in the setpoint data conform to one of the following types of events:

reception of at least one predetermined command or at least one predetermined datum coming from the terminal;

- detection of contactless communication in the near field or by contact between the smart card and the terminal; and

- detection of a predetermined event on a user interface of the smart card.

[0009] According to a particular embodiment, the N events specified in the instruction data include events according to at least two different types of events from among those defined above.

[0010] According to a particular embodiment, the N predetermined events according to the setpoint data comprise M contactless communication in the near field to be carried out successively between the smart card and the terminal, M being an integer such that M < NOT,

wherein said determining whether the detected events comply with the target data comprises:

- determination of whether near-field contactless communications detected as events between the smart card and the terminal are M in number and are performed in accordance with the time sequence.

[0011] According to a particular embodiment, said determination of whether the near-field contactless communications detected as events between the smart card and the terminal comply with said set data comprises:

a count to determine whether the smart card detects M near-field contactless communications in accordance with the set data; and

a temporal analysis to determine whether the successive contactless communications detected by the smart card comply with the temporal sequence specified in the setpoint data.

[0012] According to a particular embodiment, during said counting, the smart card detects a new contactless contact in the near field with the terminal on each detection of one or a plurality of:

- powering on the smart card (reception of a predetermined level of energy for the smart card to be powered on = start of communication);

- a power cut to the smart card (no voltage = end of communication); and

- receipt of a predetermined order.

[0013] According to a particular embodiment, the time sequence specified by the time data includes at least one of the following time parameters:

- at least one time interval between two consecutive communications;

at least one time interval between two consecutive time ranges during which all or part of the M communications must be performed; and - respective time ranges during which all or part of the M communications must be carried out

[0014] According to a particular embodiment, the time sequence specified by the time data comprises successive time ranges during which the M contactless communications in the near field must be respectively carried out between the smart card and the terminal.

According to a particular embodiment, the smart card sends the terminal all of the setpoint data in response to said first command.

[0016] According to a particular embodiment, the smart card sends the setpoint data to the terminal in separate data packets in response respectively to the first command and to at least one second command received from the terminal after the first command, so that said data packets collectively form the target data.

[0017] According to a particular embodiment, the smart card sends the setpoint data to the terminal in separate data packets all the P events detected during the time sequence, P being an integer such that P <N.

[0018] According to a particular embodiment, the smart card adapts at least one data packet before sending to the terminal, as a function of the course in time of at least one event previously detected during the time sequence.

[0019] According to a particular embodiment, if the user is successfully authenticated, the smart card authorizes the acquisition of reference biometric data during a user enrollment step by means of a sensor biometric of the smart card.

[0020] According to a particular embodiment, the smart card collects the energy emitted by the terminal during each connection in order to ensure its power supply. In a particular embodiment, the various steps of the first method of the invention are determined by computer program instructions.

Consequently, the invention also relates to a computer program on an information medium, this program being capable of being implemented in an electronic device such as a smart card, or more generally in a computer, this program comprising instructions adapted to the implementation of the steps of a first method as defined in this document.

[0023] The invention also relates to a recording medium (or information medium) readable by a computer, and comprising instructions of a computer program as mentioned above.

Correlatively, the invention relates to a second method implemented by a terminal cooperating with a smart card using contactless communication in the near field or by contact, the method comprising:

- sending to the smart card of a first order;

- in response to at least said first command, reception from the smart card of setpoint data specifying:

o N predetermined events to be performed by a user by means of at least one from among the smart card and the terminal, N being an integer equal to at least two, and

- presentation to the user of instructions for carrying out the N predetermined events in accordance with the time sequence, in which the N predetermined events include M communications to be carried out successively between the chip card and the terminal, M being an integer such as that M £ N; and

- contactless communication in near field or by contact carried out successively between the terminal and the smart card to authenticating the user with the smart card if said communications comply with the set data.

[0025] According to a particular embodiment, said second method comprises authentication of the user, in which said presentation of the instructions to the user is carried out only after having successfully authenticated the user during said authentication.

[0026] According to a particular embodiment, in which the time sequence specified by the time data comprises at least one of the following time parameters:

- at least one time interval between two consecutive communications;

- at least one time interval (INT) between two consecutive time ranges (SL) during which all or part of the M communications must be carried out; and

- respective time slots during which all or part of the M communications must be carried out

[0027] According to a particular embodiment, the terminal receives, from the smart card, all of the setpoint data in response to said first command.

According to a particular embodiment, the terminal receives the setpoint data in separate data packets in response respectively to the first command and to at least one second command sent by the terminal after the first command, so that said packets data collectively form the setpoint data.

According to a particular embodiment, the terminal receives the setpoint data in separate data packets all the P events detected during the time sequence, P being an integer such that P <N.

According to a particular embodiment, the terminal receives the setpoint data in separate data packets, [0031] in which during said presentation of the instructions to the user, the terminal presents the instructions in separate sets of instructions as the data packets are received from the smart card.

[0032] In a particular embodiment, the various steps of the second method of the invention are determined by computer program instructions.

Consequently, the invention is also aimed at a computer program on an information medium, this program being capable of being implemented in an electronic device such as a terminal, or more generally in a computer, this program comprising instructions adapted to the implementation of the steps of a second method as defined in this document.

[0034] The invention also relates to a recording medium (or information medium) readable by a computer, and comprising instructions of a computer program as mentioned above.

Note that the programs mentioned in this presentation can use any programming language, and be in the form of source code, object code, or intermediate code between source code and object code, such as in a partially compiled form, or in any other desirable form.

[0036] In addition, the recording media mentioned above can be any entity or device capable of storing the program. For example, the medium may include a storage means, such as a ROM, for example a CD ROM or a microelectronic circuit ROM, or else a magnetic recording means, for example a floppy disk or a disk. hard.

On the other hand, the recording media can correspond to a transmissible medium such as an electrical or optical signal, which can be conveyed via an electrical or optical cable, by radio or by other means. The program according to the invention can in particular be downloaded from an Internet type network. [0038] Alternatively, the recording media can correspond to an integrated circuit in which the program is incorporated, the circuit being adapted to execute or to be used in the execution of the method in question.

The invention is also aimed at a smart card capable of implementing the first method of the invention as defined in this document, as well as a terminal capable of implementing the second method of the invention such as defined in this document.

[0040] More particularly, the invention relates to a smart card capable of cooperating with a terminal using contactless communication in the near field or by contact, comprising:

- a reception module configured to receive from the terminal a first command;

a sending module configured to send to the terminal, in response to at least said first command, setpoint data for presentation to a user, the setpoint data specifying:

o N predetermined events to be performed by the user by means of at least one among the smart card and the terminal, N being an integer equal to at least two, and

a detection module configured to detect events after the sending module has sent the setpoint data;

a determination module configured to determine whether the detected events comply with the setpoint data; and

an authentication module configured to successfully authenticate a user of the smart card if the detected events comply with the set data.

Note that the various embodiments mentioned in this document in relation to the first method of the invention as well as the associated advantages apply in a similar manner to the smart card of the invention. For each step of the first method of the invention, the smart card of the invention may include a corresponding module configured to perform said step.

Likewise, the invention is aimed at a terminal capable of cooperating with a smart card using contactless communication in the near field or by contact, comprising:

a sending module configured to send a first command to the smart card;

a reception module configured to receive from the smart card, in response to at least said first command, setpoint data specifying:

a presentation module configured to present the user with instructions for carrying out the N predetermined events in accordance with the time sequence, in which the N predetermined events include M put into communication to be carried out successively between the chip card and the terminal, M being an integer such that M £ N; and

a communication module configured to successively carry out contactless communications in the near field or by contact between the terminal and the smart card to authenticate the user with the smart card if said communications comply with the data of deposit

Note that the various embodiments mentioned in this document in relation to the second method of the invention as well as the associated advantages apply analogously to the terminal of the invention. In addition, for each step of the second method of the invention, the terminal of the invention can include a corresponding module configured to perform said step.

According to certain embodiments, the invention is implemented by means of software and / or hardware components. With this in mind, the term “module” can correspond in this document both to a software component, to a hardware component or to a set of hardware and software components.

A software component corresponds to one or more computer programs, one or more sub-programs of a program, or more generally to any element of a program or of a software capable of implementing a function or a set of functions, as described below for the module concerned. Such a software component can be executed by a data processor of a physical entity (smart card or terminal as the case may be) and is capable of accessing the material resources of this physical entity (memories, recording media, data bus. communication, electronic input / output cards, user interfaces, etc.).

Likewise, a hardware component corresponds to any element of a hardware assembly (or hardware) capable of implementing a function or a set of functions, as described below for the module concerned. It can be a programmable hardware component or with an integrated processor for executing software, for example an integrated circuit, a smart card, a memory card, an electronic card, etc.

Brief description of the drawings

[0049] Other characteristics and advantages of the present invention will emerge from the description given below, with reference to the accompanying drawings which illustrate exemplary embodiments thereof without any limiting nature. In the figures:

[0050] [Fig. 1] FIG. 1 schematically represents a smart card and a terminal, in accordance with a particular embodiment of the invention; [0051] [Fig. 2] FIG. 2 diagrammatically represents functional modules implemented by the smart card represented in FIG. 1, according to a particular embodiment of the invention;

[0052] [Fig. 3] Figure 3 shows schematically functional modules implemented by the terminal shown in Figure 1, according to a particular embodiment of the invention;

[0053] [Fig. 4] FIG. 4 represents, in the form of a diagram, the steps of a first method and of a second method implemented respectively by the smart card and the terminal shown in FIG. 1, according to a particular embodiment of the invention;

[0054] [Fig. 5] FIG. 5 schematically represents setpoint data according to a particular embodiment of the invention;

[0055] [Fig. 6] FIG. 6 schematically represents a time sequence as defined by setpoint data, according to a particular embodiment of the invention;

[0056] [Fig. 7] FIG. 7 represents, in the form of a diagram, the steps of a first method and of a second method implemented respectively by the smart card and the terminal shown in FIG. 1, according to a particular embodiment of the invention;

[0057] [Fig. 8] FIG. 8 represents a user carrying out successive communications of a smart card and of a terminal, according to a particular embodiment of the invention; and

[0058] [Fig. 9] FIG. 9 represents, in the form of a diagram, the steps of a first method and of a second method implemented respectively by the smart card and the terminal shown in FIG. 1, according to a particular embodiment of the invention.

Description of embodiments

As already indicated, the invention generally aims to authenticate a user with a smart card. The invention, according to various embodiments, uses a smart card as well as a terminal, the latter being able to cooperate together to allow the authentication of a user of the smart card. Thanks to interactions between the smart card and the terminal, an instruction is transmitted by the smart card to the terminal and then presented by the terminal to a user. This instruction indicates predetermined events (or operations) to be carried out by the user by means of the chip card and / or the terminal according to a particular time sequence. As indicated below, the nature of this instruction and the way in which this instruction is transmitted by the smart card to the terminal may vary depending on the case. The smart card is then capable of detecting events, possibly in cooperation with the terminal, and of verifying whether the events thus detected comply with the instruction previously transmitted to the terminal. From this verification, the smart card can authenticate or not the user. The user is only successfully authenticated if the events detected by the smart card match the events defined in the instruction and if these detected events are executed over time in accordance with the time sequence defined in the instruction.

The invention thus makes it possible to advantageously use a terminal to assist a smart card in the authentication of a user.

The invention also relates to corresponding methods, namely a first method implemented by the smart card and a second method implemented by the terminal, to allow such authentication.

Unless otherwise indicated, elements common or similar to several figures bear the same reference signs and have identical or similar characteristics, so that these common elements are generally not described again for the sake of simplicity.

FIG. 1 schematically represents the structure of a terminal T1 and of a smart card C1 in accordance with a particular embodiment of the invention. The terminal T1 and the smart card C1 are able to cooperate together to implement a procedure for authenticating a user UR with the smart card C1. To do this, the smart card C1 and the terminal T1 communicate together via an L1 link, by near-field contactless communication or possibly by contact, as described below.

[0065] The smart card C1 and the terminal T1 together form a system for authenticating a user UR with the smart card C1.

In this example, the smart card C1 comprises a processor 20, a communication interface 22, a non-volatile memory 24, a volatile memory 26 and, optionally, a biometric sensor 28.

[0067] The smart card C1 is capable of coupling with the terminal T1 to implement the invention. To this end, the smart card C1 can communicate with the terminal T1 by using its communication interface 22 to establish a communication link L1 with the terminal T1. In the examples described here, it is considered that the smart card C1 and the terminal T1 cooperate together in a near-field contactless communication (also known as "proximity communication" in English). This near-field contactless communication is preferably of the N FC type (for “Near Field Communication”), for example in accordance with the ISO / IEC 14443 standard. Other types of contactless communication allowing short-distance communication (ie. i.e. at a distance of less than 10 centimeters) are also possible.

Alternatively, the smart card C1 and the terminal T1 can be configured to communicate by contact. According to this alternative, the communication interface 22 can comprise external contacts arranged on the surface of the smart card C1, these external contacts being configured to cooperate by contact with the terminal T1, and more precisely with contact points of which is equipped with the communication interface 8 of the terminal T1.

In this example, the memory 24 is a rewritable non-volatile memory (of the flash, EEPROM or other type) or a read only memory (ROM), this memory constituting a recording medium (or information medium) in accordance with a particular embodiment, readable by the smart card C1, and on which is recorded a computer program PG1 conforming to a particular embodiment. This computer program PG1 comprises instructions for executing the steps of a first method according to an embodiment. particular. The steps of this first method are described in more detail later in particular embodiments of the invention.

The memory 24 is also suitable for storing DT1 setpoint data, the nature and use of which will be described in more detail later. These setpoint data DT1 define a setpoint that must be presented to the UR user on his terminal T1 to perform an authentication procedure. In this example, this DT1 setpoint data specifies:

- N predetermined events EV1 to EVN (collectively denoted EV) to be performed by the user by means of at least one of the smart card C1 and the terminal T1, N being an integer equal to at least two, and

time data TS defining a time sequence SQ according to which the N events EV must be carried out.

According to a particular example, the random access memory 26 can in particular be used to keep in memory a counter CT which allows the smart card C1 to follow the number of events detected during the authentication procedure (as described later. ).

The biometric sensor 28 which the smart card C1 has, if applicable, makes it possible to acquire biometric data 30, for example biometric data 30 representative of biometric characteristics of the user UR (fingerprint, facial print, etc. ...). However, embodiments without such a biometric sensor 28 are possible.

[0073] In general, the smart card C1 can be a bank card, a credit card, an access badge, an identity document or a bank card having any other function. According to a particular example, the smart card C1 is configured to carry out financial or banking transactions, for example according to the EMV standard.

The terminal T1 can be any electronic device comprising the technical means necessary to implement the steps of the second method of the invention. It may in particular be any one of a telephone (or smartphone), a computer, a tablet, a smart card reader, etc. The terminal T1 comprises in this example a processor 2, a non-volatile memory 4, a volatile memory (RAM) 6, a communication interface 8 and a user interface 10.

In this example, the memory 4 is a rewritable non-volatile memory (of the flash, EEPROM or other type) or a read only memory (ROM), this memory constituting a recording medium (or information medium) conforming to a particular embodiment, readable by terminal T1, and on which is recorded a computer program PG2 conforming to a particular embodiment. This PG2 computer program includes instructions for performing the steps of a second method according to a particular embodiment. The steps of this second method are described in more detail later in particular embodiments.

The communication interface 8 is configured to establish the link L1 with the communication interface 22 of the smart card C1 to allow the terminal T1 and the smart card C1 to communicate together (by radio frequency in the case of present) and thus implement the authentication method of the invention. In the embodiments described here, the communication interface 22 allows the terminal T1 to cooperate with the smart card C1 in a near-field contactless communication, as already indicated. By presenting the smart card C1 near the terminal T1, that is to say in its detection field of the terminal T1, the latter is able to put itself in communication with the smart card C1. In the same way, by presenting the terminal T1 close to the smart card C1, that is to say in the detection field of the smart card C1, the latter is able to put itself in communication with the terminal T 1.

Alternatively, the communication interface 8 can be configured to communicate by contact with the communication interface 22 of the smart card C1.

The user interface 10 allows the terminal T1 to interact with the user UR, so in particular to present to this user INS instructions representative of the setpoint data DT1 transmitted beforehand by the smart card C1, as described later. . User interface 10 can include for example a display screen. The user interface 10 is (or includes) for example a graphical user interface (GUI) capable of providing instructions in graphical form to the user. In addition or alternatively, the INS instructions can be in sound and / or vibratory form, or in any other form making it possible to convey instructions to a user.

It will be understood that the smart card C1 and the terminal T1 shown in Figure 1 are only exemplary embodiments, other implementations being possible within the framework of the invention. Those skilled in the art will understand in particular that certain elements of the smart card C1 and of the terminal T 1 are described in this document only to facilitate understanding of the invention, these elements not being compulsory for implementing the 'invention. As the person skilled in the art also understands, certain elements generally present in a smart card, and in a terminal intended to cooperate with such a smart card, have been intentionally omitted because they are not necessary for the understanding of the present document. invention.

As shown in Figure 2 in a particular embodiment, the processor 20 of the smart card C1, driven by the computer program PG1, implements a number of modules, namely: a receiving module MD2, a sending module MD4, a detection module MD6, a determination module MD8 and an authentication module MD10.

More specifically, the reception module MD2 is configured to receive from the terminal T1 a first command CMD1. The nature of this first CMD1 command may vary depending on the implementation considered.

The MD4 sending module is configured to send the terminal T1, in response to at least this first command CMD1, setpoint data DT1 for presentation to a user UR. As already indicated, the setpoint data specify:

- N predetermined events EV1 -EVN (collectively denoted EV) to be performed by the user UR by means of at least one among the smart card C1 and the terminal T1, N being an integer equal to at least two, and time data TS defining a time sequence SQ according to which the N events must be carried out.

The time sequence SQ characterizes how the N events EV must be executed over time, according to the setpoint data DT1.

The MD6 detection module is configured to detect EV events after the sending module MD4 sends the setpoint data DT 1.

The MD8 determination module is configured to determine whether the detected EV events conform to the setpoint data DT1, and more precisely to the predetermined events EV and to the time sequence SQ as defined in the setpoint data DT1 stored in the memory 24.

The MD10 authentication module is configured to authenticate a user, namely UR in this case, from the comparison of the EV events detected with the setpoint data DT1. In this example, the MD10 authentication module is thus configured to successfully authenticate the UR user of the C1 smart card if the EV events detected comply with the DT1 setpoint data. To do this, the EV events detected by the MD6 detection module must agree with the EV1 -EVN events defined in the DT1 setpoint data and must additionally occur (unfold) in time according to the time sequence defined in the setpoint data DT 1.

As shown in Figure 3 in a particular embodiment, the processor 2 of the terminal T1, controlled by the computer program PG2, implements a number of modules, namely: a sending module MD20, a reception module MD22, a presentation module MD24 and, optionally, a communication module MD26.

More specifically, the sending module MD20 is configured to send the smart card C1 a first command CMD1, as already indicated.

The MD22 reception module is configured to receive from the smart card C1, in response to at least the first command CMD1, the setpoint data DT1 as already defined above. The MD24 presentation module is configured to present (or provide) the user UR with INS instructions for carrying out the N predetermined events EV1 -EVN in accordance with the time sequence SQ. In other words, the INS instructions are representative of the setpoint data DT1. In the examples considered here, the presentation module MD24 uses the user interface 10 to provide the user UR in the form of INS instructions with the information necessary to authenticate himself with the smart card C1.

According to a particular embodiment, the N predetermined events EV as defined in the setpoint data DT1 comprise M communications to be carried out successively between the smart card C1 and the terminal T1, M being an integer such as M <N. M is for example such that: M> 1, or even M> 2 (in other words, there are at least 1, or even at least 2 communications to be carried out according to the reference data DT 1).

According to a particular embodiment, the MD26 communication module available to the terminal T1, if applicable, is configured to successively carry out contactless communication in the near field (generally denoted CM) between the terminal T1 and the smart card C1 to authenticate the UR user with the smart card C1. Authentication is successful if these successive CM communications are in accordance with the DT 1 setpoint data.

If necessary, the MD26 communication module is configured to successively carry out contactless communication in the near field (or possibly by contact) between the terminal T1 and the smart card C1 so as to authenticate the user with of the smart card C1 if the communications comply with the setpoint data DT 1.

The configuration and operation of the MD2-MD10 modules of the smart card C1 and of the MD20-MD26 modules of the terminal T1 will appear more precisely in the embodiments described below with reference to FIGS. 4-9. It should be noted that the MD2-MD10 and MD20-MD26 modules as shown in FIGS. 2-3 respectively only constitute non-limiting examples of implementation of the invention. FIG. 4 represents in the form of a diagram the steps implemented by the smart card C1 and the terminal T1 described above in order to implement an authentication method according to a particular embodiment of the invention. More precisely, the smart card C1 and the terminal T1 implement a first and a second method by executing the computer programs PG1 and PG2 respectively.

It is assumed that an UR user wishes to authenticate with his C1 smart card. To do this, he uses his terminal T1 to interact with the smart card C1 according to the authentication method of the invention. As already indicated, it is assumed in the following examples that the terminal T1 and the smart card C1 communicate together in a near field contactless communication, of the NFC type for example, although other implementations are possible. In the remainder of this document, each placing in communication (or coupling), generally denoted CM, between the smart card C1 and the terminal T1 is, unless otherwise indicated, carried out implicitly in contactless mode in the near field.

To do this, as soon as the terminal T1 and the smart card C1 are close to each other, they together establish a contactless communication in the near field (L1) in order to couple and to interact together. The pairing ends when the smart card C1 and the terminal T1 are far enough apart from each other.

As shown in Figure 4, during a first contactless communication in the near field CM1, the terminal T1 sends (B2) a first command CMD1 that the smart card C1 receives at the reception step A2 . This first CMD1 command can be of various kinds depending on the use case. It can be, for example, a RESET command according to the EMV standard or a command to read an identifier (or command to read a tag), for example of the NFC type or other.

In response to this command CMD1, the smart card C1 sends (A4) the setpoint data DT1 stored in its memory 24. The terminal T1 receives these setpoint data DT1 during a reception step B4. As already indicated, these setpoint data DT1 define a setpoint which must be presented to the user UR on the terminal T1 to perform an authentication procedure. In this example, this DT1 setpoint data specifies:

- N predetermined events EV1 to EVN (collectively denoted EV) to be performed by the user UR by means of at least the chip card C1 alone or by means of the chip card C1 and the terminal T1, N being a number integer equal to at least two, and

[0101] During a presentation step B6, the terminal then presents (provides) to the user UR INS instructions representative of the setpoint data DT1 transmitted by the smart card C1. The presentation of the INS instructions is done here via the user interface 10 (figure 1). To do this, the terminal T1 first determines the INS instructions from the DNT1 setpoint data received. It can perform any processing to obtain the INS instructions from the setpoint data DT1 (including decryption if the setpoint data DT1 is received in encrypted form). According to one particular example, the INS instructions include all or part of the setpoint data DT1. It is assumed in this example that the INS instructions are presented on a display screen forming part of the user interface 10 of the terminal T1, other implementations being however possible.

From the INS instructions received, the UR user is thus informed of the events (or operations) that he must perform by means of the smart card C1 and / or the terminal T1 to authenticate himself with the card. C1 chip. In other words, the INS instructions, representative of the setpoint data DT1, indicate tasks (ie the predetermined events EV) that the user UR must carry out in a predefined manner in time, that is to say according to the sequence time SQ defined in the time data TS. As described below, the nature of the predetermined events EV to be carried out, as well as the time sequence SQ to be observed, may vary depending on the case.

[0103] The setpoint data DT1 can define predetermined events EV that the user UR must execute by means of the smart card. C1 alone, or by means of the terminal T1 in cooperation with the smart card C1, or a combination of these two variants.

[0104] According to a particular example, each of the N predetermined events EV specified in the instruction data DT1 conform to one of the following types of events:

- reception by the smart card C1 of at least one predetermined command or at least one predetermined datum coming from the terminal T1;

- detection by the smart card C1 of a contactless communication in the near field (or by contact) CM between the smart card C1 and the terminal T1; and

- detection of a predetermined event EV on a user interface of the smart card (for example by means of the biometric sensor 28 or any other user interface of the smart card C1).

[0105] The setpoint data DT1 define, for example, one or more near-field contactless CM communications between the chip card C1 and the terminal T1 that the user UR must trigger by presenting the chip card C1 near the device. terminal T1. According to a particular example, a contactless communication in near field (or contactless coupling in near field) corresponds to a communication session between the smart card C1 and the terminal T1, during which the smart card C1 sends and / or receives at least one command or predetermined data. However, other embodiments are possible as described later. Thus, according to other exemplary embodiments, contactless communication (coupling) in the near field does not necessarily imply the exchange of any command or data between the smart card C1 and the terminal T1. As indicated below, a communication can result for example from a simple power-up of the smart card C1 induced by the terminal T1 located nearby, followed by an interruption of the power supply to the card. chip C1 without the latter being able to send and / or receive any command or data.

[0106] By bringing the smart card C1 closer and then away in and out of the detection field of the terminal T1, the user UR can thus successively initiate a plurality of communications CM between the smart card C1 and the terminal T1. As indicated above, each communication CM can for example comprise an opening of a session and an end of a communication session, and is thus detectable by the smart card C1 from any predetermined command (or data) received. terminal T1 during the current session. According to a variant, each communication CM is detected from the power-on and / or the interruption of an electrical supply to the smart card C1 (as described later).

[0107] Other types of predetermined events E V as defined in the setpoint data DT1 are however possible. For example, the DT1 setpoint data can define, as events to be carried out, one or more biometric captures that the user must carry out by placing, for example, his finger (or any other appropriate part of his body) on the biometric sensor. 28 or, one or more biometrics brought into contact with the biometric sensor 28. Certain EV events can also correspond to operations to be carried out on the terminal T1 by means of the user interface (for example: activate a button, initiate a voice command, ...). In this case, the terminal T1 is configured to indicate to the smart card C1, via the communication link L1, when such an event occurs. The predetermined EV events as defined in the DT1 setpoint data can include any combination or sub-combination of the various types of events considered in this document.

In addition, the time sequence SQ as defined in the setpoint data DT1 characterizes how the N EV events must be executed over time. Thus, the setpoint data DT1 can for example ask the user UR to carry out predetermined events EV in respective time ranges (of variable or fixed durations) or by respecting respective time intervals (variable or fixed) between each event.

[0109] The setpoint data DT1 may for example require that the user present his finger once on the biometric sensor 28, then carry out two successive contactless communication in near field, and finally initiate the sending of a command. from the terminal T1 to the smart card C1 in a predetermined manner (activation of a button, movement of the terminal T1 causing the sending of a command on detection of movement ....), and this according to a particular SQ time sequence (for example, with a pause interval between 2 and 4 seconds between each event, or by indicating the time limits start and end of each time period during which an event must occur). Of course, many variations are possible within the scope of the invention.

[0110] According to a particular embodiment, the N predetermined events EV as specified in the instruction data DT1 comprise events according to at least two types of different events from among those defined above. It is thus possible to increase the security level of the authentication procedure. According to a particular example, the setpoint data DT1 define at least one contactless CM communication in the near field to be carried out between the smart card C1 the terminal T1 and at least one operation to be carried out on a user interface of the smart card. C1 (or on the user interface 10 of the terminal T1).

[01 11] The INS instructions are advantageously generated by the terminal T1 so as to present the setpoint data DT1 in an efficient and clear manner to the user UR wishing to authenticate with the smart card C1.

[01 12] After presentation (B6) of the INS instructions, the smart card C1 monitors whether EV events are detected. During a detection step A8, the smart card C1 thus detects a plurality of EV events. For example, it is assumed that all or part of the EV events thus detected correspond to the reception from the terminal T1 of a respective command CMD2 (or of a data item PR) which may or may not vary over time. According to a particular example, these CMD2 commands are received (A8) during respective contactless CM communications made successively in the near field between the smart card C1 and the terminal T1. As already indicated, other implementations are however possible (for example, a contactless coupling in the near field can be detected each time the smart card C1 is powered on by the terminal T 1).

[01 13] During a determination step A10, the smart card C1 determines whether the EV events thus detected in A8 comply with the data of setpoint DT1 stored in its memory 24. To do this, the smart card C1 compares each EV event detected in A8 with the predetermined events EV as defined in the setpoint data DT1 and analyzes the course over time of the EV events detected in A8 to determine whether they are performed (or occurring) in accordance with the time sequence SQ. If the smart card C1 determines that the EV events detected in A8 match the predetermined EV events as defined in the setpoint data DT1 and that the detected EV events occur over time according to the time sequence SQ, then the method continues at authentication step A14, otherwise the method continues at A12.

[01 14] During the authentication step A14, the smart card C1 determines that the user UR has correctly performed the requested sequence of operations according to the setpoint data DT1 and, consequently, authenticates the user. UR successfully.

[01 15] According to a particular example, the UR user can then normally use his C1 smart card. On detection (A14) that the authentication has passed successfully, the smart card C1 can for example authorize or activate any functionality (or operation) F1 (A16, figure 4). According to one particular example, the smart card C1 authorizes (A16) as a function F1 the acquisition of biometric data on the biometric sensor 28. These biometric data can be stored as reference biometric data in the memory of the card. C1 chip (phase of enrollment of the biometric data of the legitimate user on the C1 chip card). Thus, during subsequent uses (to carry out a transaction for example), the smart card C1 can compare biometric data 30 newly acquired on the biometric sensor 28 with the reference biometric data previously stored in its memory, and deduce therefrom whether a user is successfully authenticated, which makes it possible to perform reliable biometric authentication without the intervention of the terminal T1 again being necessary.

[01 16] On the other hand, during step A12, the smart card C1 determines that the user UR has not performed the requested sequence of operations in accordance with the setpoint data DT1 and, consequently, deduces therefrom that the UR user authentication failed. [01 17] Following the detection (A12) of the authentication failure, the smart card C1 can thus block (or prohibit) during a blocking step A18 the implementation of any functionality (or operation), such as F1 for example, by the smart card C1.

[01 18] An UR user is thus able to authenticate himself efficiently and securely with the smart card C1 using the terminal T1, despite the resources generally limited by nature of the smart card C1. Thus, the user can take note of the tasks to be performed from the user interface of his terminal T1, then performs these tasks according to the specifications of the instruction transmitted by the smart card C1. The smart card C1 can then detect events occurring directly on its user interface and / or in cooperation with the terminal T1, and determine, from a comparison of the events detected with what is provided in the instruction, whether the User authentication passed or failed. The remote resources of the terminal are thus advantageously used to allow authentication with the smart card.

[01 19] The smart card C1 can be configured to regularly (possibly randomly) modify the setpoint data DT1, possibly at each new iteration of the authentication method of the invention with an external terminal (T1 or other) .

[0120] Certain terminals (smartphones or others) are sometimes also limited in the interactions that they are able to implement with a smart card. Thus, a terminal can be structurally and / or by its software configuration limited in the commands or data that it is able to send to the outside, for example according to contactless communication in the near field (or by contact). Thus, some smartphones are limited by their configuration so that they can only send by contactless near-field communication commands to read a tag (or identifier), of the NFC or other type, upon detection of each new setting. in CM communication with an external entity such as a smart card. The invention advantageously makes it possible to take advantage of such terminals, including when they have such limitations, in spite of everything in order to authenticate in a reliable and secure manner a user with a smart card external to the terminal. In response to one or tag reading commands coming from the terminal T1, the smart card C1 can thus be configured to send the setpoint data DT1 to the terminal T1 and to check subsequently whether events conforming to these setpoint data are detected, as described in this document according to particular embodiments.

[0121] According to a particular example, the events to be carried out according to the setpoint data DT1 comprise at least one operation that the user UR must carry out according to the time sequence SQ by making the smart card C1 interact with the terminal T1, for example. by coupling and / or decoupling the smart card C1 and the terminal T1.

[0122] According to a particular example, the terminal T1 performs an authentication of the user UR before presenting the INS instructions (B6, FIG. 4). Thus, the terminal T1 can be configured to carry out an internal authentication of the user, so that the presentation (B6, FIG. 4) of the INS instructions to the user UR is carried out only after having successfully authenticated the user. user during this internal authentication. To do this, the terminal T1 can include an internal authentication module configured to authenticate the user by any suitable method, such as for example by means of any secret code, or by acquiring a biometric fingerprint. . This authentication is for example performed before sending B2 (Figure 4) of the CMD1 command or between steps B2 and B6. The terminal T1 can optionally be configured to send the CMD1 command only if this prior internal authentication has been successfully passed. The terminal T1 can still be configured to send in or with the command CMD1 (B2, figure 4) an indicator to indicate to the smart card C1 that the user UR has been successfully authenticated by the terminal T1, so that the smart card C1 sends the setpoint data DT1 only if such an indicator is received beforehand.

[0144] The use of the terminal T1 to present the instruction, and possibly also to carry out all or part of the events required in the instruction, makes it possible to facilitate the authentication process while maintaining a high level of security. Indeed, only the UR user having access to the terminal T1 is capable of read the setpoint data and therefore deduce therefrom the tasks to be carried out to authenticate with the smart card C1.

[0124] The smart card C1 can be configured to send the setpoint data DT1 in encrypted form to the terminal T1, in order to further secure the authentication method of the invention.

[0125] As already indicated, the nature of the predetermined events to be performed, their number or even the time sequence to be observed for the user UR to authenticate successfully, may vary depending on the case. Non-limiting examples of implementation are described below.

[0126] A particular embodiment is now described with reference to Figures 5-8. More specifically, the smart card C1 and the terminal T1 shown in Figures 1-3 implement a first and a second method by executing the computer programs PG1 and PG2 respectively.

As represented in FIG. 5, it is assumed in this example that the reference data DT1 define:

- predetermined events EV1 -EVN (collectively denoted EV), comprising M contactless communication in the near field to be carried out successively between the smart card C1 and the terminal T1, M being an integer such that M <N, and

time data TS defining a time sequence SQ according to which the N events (including the M contactless communication in the near field) must be carried out.

[0128] It is thus possible for example to envisage that the predetermined events EV according to the setpoint data DT1 define M communications CM to be carried out (M <N) between the smart card C1 and the terminal T1, as well as at least one another EV event to be performed, different from a CM communication setting between the smart card C1 and the terminal T1 (for example the acquisition or detection of a biometric fingerprint 30 on the biometric sensor 28 of the smart card C1 ). In this case, the smart card C1 verifies whether each of the events EV as defined in the setpoint data DT1 (namely the M contactless communication in the near field CM and said at least one other event EV) are performed in accordance with the time sequence SQ. Alternatively, the N predetermined events EV as defined in the setpoint data DT1 can all correspond to communications CM to be made between the smart card C1 and the terminal T1 (in this case: M = N). According to this variant, the smart card C1 checks whether M (= N) placed in contactless communication in the near field CM are carried out in accordance with the time sequence SQ.

In the following, we consider for simplicity the case where N = M = 3, that is to say a case where the reference data DT1 define 3 predetermined events EV1, EV2 and EV3 to be carried out, these predetermined events EV are all near-field contactless CM communications to be carried out successively between the smart card C1 and the terminal T1, although other implementations are possible.

As shown in FIG. 6, it is assumed in this example that the time sequence SQ according to the time data TS defines 3 time ranges SL1 to SL3 (collectively denoted SL) during which the events EV1, EV2 and EV3 must be carried out respectively . In other words, the time sequence SQ provides that:

- the event EV1 must occur in the time range SL1;

- the event EV2 must occur within the time range SL2; and

- the EV3 event must occur within the SL3 time frame.

[0131] The time data TS can define the time ranges SL in various ways. According to a particular example, the time data TS can define a pair (start times, end time) for each time range SL, namely: (t1, t2) for the time range SL1; (t3, t4) for the time range SL2; and (t5, t6) for the time range SL3. Alternatively, the time data TS can define, for each time range SL, one or the other of the start time and the end time, as well as the duration of the time range (for example the start time t1 and a predetermined time span for carrying out the event EV1 from the start time t1, etc.). [0132] The temporal data TS can thus define respective time ranges SL during which all or part of the communications CM (corresponding to the predetermined events EV1, EV2 and EV3) must be carried out between the smart card C1 and the terminal T 1.

[0133] According to one variant, the temporal data TS can define at least one time interval INT between two consecutive CM communications, or between two consecutive time ranges during which two CM communications must be carried out respectively (FIG. 6). . The temporal data TS indicate for example that a time interval between 2 and 4 seconds must be respected between each of the events EV1, EV2 and EV3.

[0134] According to a particular example, the temporal data TS define a frequency or rate with which the user UR must comply in order to trigger the predetermined events EV.

In general, the time sequence SQ specified by the time data DT1 may for example include at least one of the following time parameters:

at least one time interval INT between two consecutive contactless CM communications (or more generally between two consecutive predetermined events EV);

at least one time interval (INT) between two consecutive time ranges SL during which all or part of the M communications CM must be performed (or more generally between two consecutive predetermined events EV); and

- respective SL time ranges during which all or part of the M communications must be carried out.

[0136] The user UR can thus be made to comply with various temporal instructions when he performs the M communications CM. The SQ time sequence can force the UR user to perform CM porting at a given rate, frequency or speed by approaching and moving the smart card C1 and the terminal T1 away from each other as shown in Figure 8.

[0137] It is now assumed that an UR user wishes to authenticate with his C1 smart card. To do this, the user UR places the smart card C1 near the terminal T1 so as to perform a first communication CM1 between the smart card C1 and the terminal T1. During this communication CM1, the smart card C1 and the terminal T1 cooperate by contactless communication in the near field via a link L1 (FIG. 1). More precisely, the smart card C1 carries out the steps A2-A4, and the terminal T1 carries out the steps B2-B6, as already described previously with reference to FIG. 4.

In the present example, the INS instructions presented by the terminal T1 are therefore representative of the setpoint data DT1 as described above with reference to FIGS. 5-6. In other words, the INS instructions invite the user UR to successively carry out 3 predetermined events EV1 -EV3 (namely: 3 communications CM between the smart card C1 and the terminal T1) during 3 time ranges SL1 -SL3 distinct, respectively.

[0139] After presentation (B6) of the INS instructions, the user UR carries out successive approaching and moving away movements of the smart card C1 relative to the terminal T1 in order to trigger CM communications, as shown in figure 8. At the same time, a monitoring phase (A8) is implemented during which the smart card C1 monitors whether EV events are detected, and more particularly monitors in this example whether contactless CM communications. in the near field occur between the smart card C1 and the terminal T1 (FIG. 7). In addition, the smart card C1 performs a count (A31) of each communication CM thus detected in A8 to determine whether the N predetermined events specified in the setpoint data DT1 have been detected (with N = M = 3 in this example). In the example considered here, this counting A31 is performed by the smart card C1 using a counter CT, stored in a memory of the smart card C1 (in the memory 24 or the memory 26 for example) , this counter CT being incremented on each new connection CM detected. To count CM communications using the CT counter, the card to C1 chip can have an internal energy source, such as a cell, battery, supercapacitor, etc. (the battery and / or the supercapacitor can, where appropriate, be configured to recharge during the couplings between the smart card C1 and the terminal T1).

[0140] According to a particular example, during the counting A31, the smart card C1 detects a new communication CM between the smart card C1 and the terminal T1 on each detection, by the smart card C1, of one any or a plurality of:

- a powering of the smart card C1 (resulting from the reception from the terminal T1 of a predetermined level of energy so that the smart card C1 is powered up);

- a power supply interruption of the smart card C1 (corresponding to a decoupling of the smart card C1 from the terminal T1); and

- reception of a predetermined command (or of a predetermined parameter) from the terminal T 1.

[0141] According to a particular example, the smart card C1 collects the energy emitted by the terminal T1 during each contactless CM communication in the near field, in order to ensure its power supply. Thus, switching on and / or interrupting its power supply can be recognized by the smart card C1 as indicating that CM has been put into communication with the terminal T1. Alternatively, or cumulatively, the smart card C1 can detect a new communication CM on receipt of a command or predetermined data from the terminal T1.

In the remainder of this example, it is assumed that the smart card C1 detects a new communication CM with the terminal T1 on each reception of a predetermined command CMD2. This CMD2 command corresponds for example to a RESET command according to the IS07816 standard, to which the smart card C1 can respond by a standardized message ATR (ANSWER TO RESET).

[0143] More specifically, during a detection step A30 (FIG. 7), the smart card C1 thus detects, as event EV1, a second contactless communication CM2 in the near field between the card to C1 chip and terminal T1. This detection A30 results for example from the reception of a command CMD2 sent (B30) by the terminal T1. The smart card C1 then increments (A32) by one the counter CT stored in its memory 26.

[0144] It is then assumed that the user UR moves the smart card C1 away from the terminal T1, thus leading to the end of the CM2 coupling between the smart card C1 and the terminal T1.

[0145] Subsequently, the user UR again approaches the smart card C1 of the terminal T1, triggering a new communication CM3 during which the terminal T1 sends (B34) a command CMD2 that the smart card C1 receives during of a detection step A34. The smart card C1 thus detects (A34), as an event EV2, a third contactless communication CM3 in the near field between the smart card C1 and the terminal T1. The smart card C1 then increments (A36) by one the counter CT stored in its memory 26.

[0146] Similarly, it is then assumed that the user UR moves the smart card C1 away from the terminal T1, thus leading to the end of the coupling CM3 between the smart card C1 and the terminal T 1.

[0147] Subsequently, the user UR again approaches the smart card C1 of the terminal T1, triggering a new CM4 communication during which the terminal T1 sends (B38) a CMD2 command that the smart card C1 receives during of a detection step A38. The smart card C1 thus detects (A38), as an event EV3, a fourth CM4 contactless communication in the near field between the smart card C1 and the terminal T1. The smart card C1 then increments (A40) by one the counter CT stored in its memory 26.

[0148] The detections A30, A34 and A38 thus collectively represent a step of detecting A8 of the successive communications CM2, CM3 and CM4 (FIG. 7). Likewise, the increments A32, A36 and A40 collectively represent the counting step A31 of the successive communications CM2-CM4 detected by the smart card C1.

[0149] During a determination step A10, the smart card C1 then determines (A50) whether the detected EV events (A8) comply with the data. setpoint DT1 stored in its memory 24. As already indicated, the smart card C1 performs a count (A31) using the counter CT to monitor the number of CM communications detected between the smart card C1 and the terminal T1. Thus, from the counter CT, the smart card C1 determines during a verification step A50 whether M near-field contactless CM communications have been detected during the monitoring phase in accordance with the setpoint data DT1 ( with N = M = 3 in this example). In the example considered here, the smart card C1 detects (A50) that 3 communications CM2, CM3 and CM4 have occurred between the smart card C1 and the terminal T 1, in accordance with the setpoint data DT 1.

[0150] In addition, still during the determination step A10, the smart card C1 carries out (A52) a time analysis to determine whether the communications CM2, CM3 and CM4 thus detected comply with the specified time sequence SQ. in the setpoint data DT1. To do this, the smart card C1 checks whether each CM2-CM4 communication has occurred during the respective time period SL1 -SL3 allocated to it in the time sequence SQ defined in the setpoint data DT1. To do this, the smart card C1 can for example implement an internal clock possibly supplied by a battery with which the smart card C1 is equipped. According to a particular example, the smart card C1 determines a reference point in time from a time data item transmitted by the terminal T1 itself. The terminal T1 can for example be configured to transmit a respective time data item in association with each CM connection made, this time data item indicating an instant during which the corresponding CM connection CM takes place.

[0151] If the smart card C1 detects that the CM2-CM4 communications have indeed taken place in the corresponding ranges SL1 -SL3, as for example shown in FIG. 6, the user UR is authenticated successfully and the method is carried out. continues with steps A14 and A16 as already described previously with reference to FIG. 4.

[0152] If, on the other hand, the smart card C1 detects that at least one of the communications CM2-CM4 has not occurred in the corresponding ranges SL1 -SL3 (or if the smart card C1 does not detect the 3 bets in successive communication as required in the setpoint data DT1), the authentication of the user UR fails and the method continues with steps A12 and A18 as already described previously with reference to FIG. 4.

Note that the determination step A10, and more particularly the verification step A50 and the time analysis A52, can be carried out in parallel with the detection step A8, that is to say as -and-as EV events are detected by smart card C1.

[0154] Furthermore, as already indicated, various implementations can be envisaged for transmitting the instruction data DT1 from the smart card C1 to the terminal T1. In the preceding examples, the smart card C1 transmits (A4) to the terminal all of the setpoint data DT1 in response to the first command CMD1 received at A2 (FIGS. 4 and 7). The chip card C1 can thus transmit all of the setpoint data DT1 at once (in a grouped fashion) to the terminal T1 for presentation to the user, before the latter carries out the events (or operations) EV requested by the terminal. C1 smart card.

As described below in a particular example, the smart card C1 can however be configured to transmit to the terminal T1 the setpoint data DT1 by separate data packets, for example in response respectively to the first command CMD1 and to at least one second CMD2 command received from the terminal T1 after the first CMD1 command, so that these data packets collectively form the setpoint data DT 1.

[0156] A particular embodiment is now described with reference to FIG. 9. More precisely, the smart card C1 and the terminal T1 represented in FIGS. 1-3 implement a first and a second method by respectively executing the computer programs PG1 and PG2.

For simplicity, it is considered that the setpoint data DT1 are as described in the particular example described above with reference to FIGS. 5-8, namely that the setpoint data DT1 define: - predetermined events EV1, EV2 and EV3 (collectively denoted EV), these events all being contactless CM communications in the near field to be carried out successively between the smart card C1 and the terminal T 1, (M = N = 3 ), and

time data TS defining a time sequence SQ according to which the N events must be carried out.

During a CM1 communication, the terminal T1 sends (B2) a first command CMD1 that the smart card C1 receives at A2, as described previously with reference to FIGS. 4 and / or 7. In response, the smart card C1 sends (A60) to the terminal T1 a first data packet PQ1 specifying:

- the first predetermined event EV1 to be performed, and

- time data TS1 indicating a portion of the time sequence SQ during which the event EV1 must be carried out.

[0159] After reception (B60) of the first data packet PQ1 by the terminal T 1, the latter presents (B62) to the user UR a first set of instructions INS1 representative of this first packet PQ1. Thus, this first set of instructions INS1 invites the user UR to perform a new contactless CM communication in the near field between the smart card C1 and the terminal T1 in accordance with the time data TS1. It is assumed that the user UR puts an end to the first communication CM1 (by moving the smart card C1 away from the terminal T1), then carries out a second contactless communication CM2 in the near field between the smart card C1 and the terminal T1 (by placing the smart card C1 again near terminal T1) in accordance with the received INS1 instruction set.

Thus, a new contactless communication CM2 in the near field with the terminal T1 is detected (A30) by the smart card C1. During this second communication CM2, the smart card C1 receives (A30) a CMD2 command sent (B30) by the terminal T1 and increments (A32) the counter CT, in an identical manner to what is described previously with reference to in figure 7. [0161] On detection (A30) of the CM2 communication being placed (or on detection of the CMD2 command), the smart card C1 sends (A64) to the terminal T1 a second data packet PQ2 specifying:

- the second predetermined event EV2 to be performed, and

- time data TS2 indicating a portion of the time sequence SQ during which the event EV2 must be carried out.

[0162] After reception (B64) of the second data packet PQ2 by the terminal T1, the latter presents (B66) to the user UR a second set of instructions INS2 representative of this second packet PQ2. Thus, this second set of instructions INS2 invites the user UR to carry out a new contactless CM communication in the near field between the smart card C1 and the terminal T1 in accordance with the time data TS2. It is assumed that the user UR puts an end to the second communication CM2 (by moving the smart card C1 away from the terminal T1), then carries out a third contactless communication CM3 in the near field between the smart card C1 and the terminal T1 (by placing the smart card C1 again near terminal T1) in accordance with the received INS2 instruction set.

[0163] Thus, a new contactless communication CM3 in the near field with the terminal T1 is detected (A34) by the chip card C1. During this third communication CM3, the smart card C1 receives (A34) a command CMD2 sent (B34) by the terminal T1 and increments (A36) the counter CT, in an identical manner to what is described previously with reference to in figure 7.

[0164] On detection (A34) of the CM3 communication being placed (or on detection of the new CMD2 command), the smart card C1 sends (A68) to the terminal T1 a third data packet PQ3 specifying:

- the third predetermined event EV3 to be performed, and

- TS3 time data indicating a portion of the time sequence SQ during which the event EV3 must be performed.

[0165] After reception (B68) of the third data packet PQ3 by the terminal T1, the latter presents (B70) to the user UR a third set of instructions INS3 representative of this third PQ3 packet. Thus, this third set of instructions INS3 invites the user UR to carry out a new contactless CM communication in the near field between the smart card C1 and the terminal T1 in accordance with the time data TS3. It is assumed that the user UR puts an end to the third communication CM3 (by moving the chip card C1 away from the terminal T1), then performs a fourth contactless communication CM4 in the near field between the chip card C1 and the terminal T1 (by placing the smart card C1 again near terminal T1) according to the received INS3 instruction set.

[0166] Thus, a new contactless CM4 communication in the near field with the terminal T1 is detected (A38) by the chip card C1. During this fourth CM4 communication, the smart card C1 receives (A38) a CMD2 command sent (B38) by the terminal T1 and increments (A40) the counter CT, in an identical manner to what is described previously with reference to in figure 7.

[0167] The method then continues as already described in the previous embodiments. In particular, the smart card C1 carries out the steps A10-A18 as already described with reference to FIGS. 4 and / or 7.

As illustrated in FIG. 9, it is possible for the smart card C1 to transmit the setpoint data DT1 by separate data packets collectively forming the setpoint data DT1 in their entirety. The setpoint data DT1 are in this example sent by the smart card C1 in response to the various commands CMD1 and CMD2 originating from the terminal T1. The UR user is thus informed of the operations to be carried out during the authentication process.

[0169] However, many implementations are possible. As already indicated, the nature of the predetermined events EV required in each data packet PQ1 -PQ3 may vary depending on the case (placing CM in communication, receiving a predetermined command, performing an operation on the chip card C1,. ..). The smart card C1 can provide any data to the terminal T1 allowing the latter to determine which INS instructions must be supplied to the user UR in order to carry out the authentication process. According to a particular example, the smart card C1 sends the setpoint data DT1 to the terminal T1 in packets spread over time (for example in the form of one or more bits) on detection of each predetermined event EV such as as defined in the setpoint data DT 1.

[0171] According to a variant, the smart card C1 can send such data packets intermittently, that is to say in response to only part of the events detected by the smart card C1. Thus, the smart card C1 can for example be configured to send the setpoint data DT1 to the terminal T1 in separate data packets all the P events detected during the time sequence SQ, P being an integer such that P <N For example, the smart card C1 can send a data packet, corresponding to a portion of the setpoint data DT1, every two or three events detected by the smart card C1 (for example every 2 or 3 communications detected by smart card C1 with terminal T1). This makes it possible to limit the resources required to transmit the instruction. The T1 terminal can be configured to present the instruction sets in any way suitable for the user (grouped, spread over time ...)

The transmission by packets of data in the form spread over time of the setpoint data DT1 to the terminal T1 can advantageously allow the smart card C1 to adapt the setpoint over time, depending on the way in which the setpoint takes place. the authentication method, and in particular as a function of the events previously detected and / or of the time frame in which these events are registered. Thus, according to a particular example, the smart card C1 is configured to adapt at least one data packet (PQ2 or PQ3 in FIG. 9 for example) before it is sent to the terminal T1, as a function of the course in time of at least a previously detected EV event (A30 or A34 in FIG. 9 for example) during the time sequence SQ.

[0173] For example, if the first EV event (s) are detected a little late by the smart card C1 or if these events conform to the time sequence but close to a time limit tolerance, the smart card C1 can adapt the DT1 setpoint data, in particular to help the UR user (if the latter is not used to this type of procedure) or, at on the contrary, to make the time sequence more complex (for example by lengthening the time sequence, by increasing the number and / or the complexity of the tasks to be performed, ...) in order to further secure the authentication process in the event of doubt as to to the authenticity of the user. The smart card C1 can thus dynamically adapt the setpoint data DT1 to the behavior of the user (person with reduced mobility who presents his card a little too slowly, etc.).

[0174] According to a particular example, if one or more contactless communications required in the setpoint data DT1 are not performed correctly and fail, the smart card C1 can dynamically determine the setpoint data DT1 to adapt the type of events to be carried out. For example, the C1 smart card may require contact pitches if one or more near-field contactless pitches have failed, which facilitates the authentication process while maintaining a good level of security.

It should be noted on the other hand that the order in which the steps of the methods of the invention are linked together as described above with particular reference to FIGS. 4, 7 and 9 is only one example of embodiment. variants are possible.

[0176] A person skilled in the art will understand that the embodiments and variants described above constitute only non-limiting examples of implementation of the invention. In particular, those skilled in the art may consider any adaptation or combination of the embodiments and variants described above in order to meet a very specific need.

Claims

[Claim 1] Method implemented by a smart card cooperating with a terminal according to contactless communication in near field or by contact, the method comprising:

- reception from the terminal of a first order;

- in response to at least said first command, sending setpoint data to the terminal for presentation to a user, said setpoint data specifying:

- after sending the setpoint data, detection of events;

- determining whether the detected events comply with the setpoint data; and

- if so, successful authentication of a user of the smart card.

[Claim 2] The method of claim 1, wherein each of the N events specified in the setpoint data conforms to one of the following types of events:

- detection of a predetermined event on a user interface of the smart card.

[Claim 3] The method of claim 2, wherein the N events specified in the instruction data include events according to at least two different types of events from among those defined in claim 2.

[Claim 4] A method according to any one of claims 1 to 3, wherein the N events predetermined according to the set data comprise M contactless communication in the near field to be carried out successively between the chip card and the terminal , M being an integer such that M £ N,

determining whether the near-field contactless communications detected as events between the smart card and the terminal are M in number and are carried out in accordance with the time sequence.

[Claim 5] The method of claim 4, wherein the time sequence specified by the time data includes at least one of the following time parameters:

- at least one time interval (INT) between two consecutive communications (CM);

- respective time slots (SL) during which all or part of the M communications must be carried out.

[Claim 6] A method according to any one of claims 1 to 5, in which the smart card sends all the setpoint data to the terminal in response to said first command.

[Claim 7] Method according to any one of claims 1 to 5, in which the smart card sends the setpoint data to the terminal in separate data packets in response respectively to the first command and to at least one second command received in from the terminal after the first command, so that said data packets collectively form the setpoint data.

[Claim 8] The method of claim 7, in which the smart card sends the setpoint data to the terminal in separate data packets all the P events detected during the time sequence, P being an integer such that P <N .

[Claim 9] Method according to claim 6 or 7, in which the smart card adapts at least one data packet before sending to the terminal, as a function of the course in time of at least one event previously detected during the sequence temporal.

[Claim 10] A method implemented by a terminal cooperating with a smart card according to contactless communication in the near field or by contact, the method comprising:

- sending to the smart card of a first order;

- presentation to the user of instructions to carry out the N predetermined events in accordance with the time sequence, in which the N predetermined events include M put in communication with perform successively between the smart card and the terminal, M being an integer such as M £ N; and

- Contactless communication in near field or by contact carried out successively between the terminal and the smart card to authenticate the user with the smart card if said communications comply with the set data.

[Claim 11] A method according to claim 10, said method comprising user authentication, wherein said presentation of instructions to the user is performed only after successfully authenticating the user in said authentication.

[Claim 12] A method according to claim 10 or 11, wherein the time sequence specified by the time data includes at least one of the following time parameters:

- at least one time interval between two consecutive communications;

- respective time ranges during which all or part of the M communications must be performed.

[Claim 13] A method according to any one of claims 10 to 12, wherein the terminal receives the set data in separate data packets,

wherein during said presentation of the instructions to the user, the terminal presents the instructions in separate instruction sets as the data packets are received from the smart card.

[Claim 14] Smart card capable of cooperating with a terminal according to contactless communication in the near field or by contact, comprising: - a reception module configured to receive from the terminal a first command;

[Claim 15] Terminal capable of cooperating with a smart card according to contactless communication in the near field or by contact, comprising:

- a sending module (MD20) configured to send a first command to the smart card;

a reception module (MD22) configured to receive from the smart card, in response to at least said first command, setpoint data specifying:

o temporal data defining a temporal sequence according to which the N events must be carried out; a presentation module (MD24) configured to present the user with instructions for carrying out the N predetermined events in accordance with the time sequence, in which the N predetermined events include M communications to be carried out successively between the smart card and the terminal, M being an integer such that M £ N; and

- a communication module (MD26) configured to successively perform contactless communications in the near field or by contact between the terminal and the smart card to authenticate the user with the smart card if said communications comply with to the setpoint data.