EP1815633A2

EP1815633A2 - Granting and use of rights over a telecommunications network

Info

Publication number: EP1815633A2
Application number: EP05812495A
Authority: EP
Inventors: Stéphane Petit; François Boudet
Original assignee: France Telecom SA
Current assignee: Orange SA
Priority date: 2004-11-23
Filing date: 2005-10-21
Publication date: 2007-08-08
Also published as: WO2006056668A3; JP2008521310A; CN101065926A; KR20070086508A; US20090286511A1; WO2006056668A2

Abstract

The invention relates to a mechanism for granting and using a right by means of a portable object (MOB). The portable object in question comprises means which are used to communicate over a telecommunication network and which can receive a right that can be controlled by a verification device (VRF). The inventive method comprises the following steps, namely: a transmission step in which the portable object (MOB) transmits the right to a portable module (MSC); a storage step in which the right is stored in the module (MSC); and a verification step in which the right is verified by a verification device (VRF), whereby said verification device can read the rights stored on the module (MSC) in order to verify the validity of the right.

Description

DELIVERY AND USE OF RIGHTS THROUGH A NETWORK

TELECOMMUNICATIONS

Technical area

The invention relates to a mechanism for issuing and using rights through a telecommunications network.

The invention relates more particularly to the use of portable objects for the storage of rights to be controlled by a third person. A right may be a right of access to a secure area, a parking right on a parking space, or any other right giving rise to a control.

The portable objects in question may be indifferently mobile phones, PDAs (Personal Digital Assistant), laptops, or any other means capable of communicating with a network. The portable object chosen to illustrate the invention will be the mobile phone.

The network through which the portable object communicates may be arbitrary. It can be indifferently a long distance network (for example the GSM network, or the Internet network) or short distance (for example Bluetooth, Infra Red, Wifi, RFID (radio frequency identification), etc.).

State of the art

Mobile phones offer many services such as logical security services such as authentication; they thus make it possible to support payment services or control access to controlled areas.

A number of applications allow to download rights to a mobile phone from a server. The validity of the right is then verified to access a service.

In addition, a number of mobile phones are equipped with short-distance communication means. Thus an individual in possession of a mobile phone storing a right of access, can be at the entrance of a secure area and transmit a message including its access right, for example to a terminal provided for this purpose, for verification. When the phone comes to the terminal, it receives the right attached to the phone and checks whether this right gives access to the controlled area. If so, the owner of the phone is allowed to enter this area.

The problem is that rights control can only be done in the presence of the mobile phone, whose use is that its owner never part. This constraint limits the number of possible applications for using the mobile phone as a means of storing rights.

The invention

An object of the invention is to make possible the storage of rights on a mobile phone and the control of this information in the absence of both the phone and the owner of the phone, and while ensuring maximum security when using the stored rights.

For this purpose, according to the invention, the portable object transmits a right to a portable module to be stored, said module being able to receive a right of said portable object and to communicate with a control device able to read this right and to check the validity.

We thus see that each portable object is associated with one or more portable modules. These modules are intelligent extensions of the memory of the portable object allowing the portable object to act as a relay between an application server delivering rights and one or more portable modules attached to the portable object.

Advantageously any transfer of rights between the mobile phone and a portable module is done securely using a cryptographic algorithm. The relocation of the rights of the portable object to a module is therefore carried out with security ensuring that no malicious third party intercepts these rights for fraudulent use.

The invention will be better understood on reading the description which follows, given by way of example and with reference to the accompanying drawings. In these figures, for the sake of simplification of the description, the same elements bear the same references. The figures:

• Figure 1 illustrates a first computer system in which the invention can be implemented. This figure also shows the process steps illustrating an exemplary embodiment of the invention relating to the right to park on a parking space.

FIG. 2 illustrates in the form of an algorithm the method illustrating this first embodiment.

FIG. 3 illustrates a second computer system in which the invention can be implemented This figure illustrates the steps of a second embodiment of the invention relating to parking, and more particularly to the management of fines when the module stores an invalid right.

FIG. 4 illustrates in algorithm form the steps of the method illustrating this second embodiment.

Detailed description of exemplary embodiments illustrating the invention

FIG. 1 represents a SYS computer system including a portable MOB object communicating through a network with a rights server SERVI able to issue rights. In our exemplary embodiment, the portable object is a mobile phone MOB.

In our exemplary embodiment, the communication protocol used is the WAP (Wireless Application Protocol); this protocol allows access to the Internet through a mobile phone.

The rights server SERVI can be a server including services for example a service that issues parking rights on a parking space. The user indicates to the server, for example, the chosen parking area of the vehicle as well as the desired parking time. The user receives a message including a right on this location. Preferably, this right is then stored temporarily in a memory of the MOB phone. In our exemplary embodiment, the mobile phone is coupled to a SIM (Subscriber Identity Module) card. However, the invention can be implemented on a phone that is not equipped with a SIM card.

The mobile phone MOB contains one (or more) cryptographic algorithm (s) to ensure the authentication of the phone / card pair and / or the couple phone / rights server. The cryptographic algorithm is indifferently symmetrical or asymmetrical. Its choice is made according to the desired degree of security.

According to the invention, the mobile phone MOB communicates with at least one portable module MSC. A portable module MSC is an electronic medium capable of communicating with the mobile phone MOB and with a VRF rights checking device.

According to the invention, the mobile phone MOB transmits the right to a portable module for storage. Said module comprises means for receiving the right and means for communicating with the VRF control device which is capable of thus verifying whether the right stored in the portable module MSC is valid or not. If the entitlement is invalid, the VRF verifier detects it and takes action. This action can be indifferently the issuance of a fine in the case of parking, or the prohibition of entry into a controlled area. If the entitlement is valid, the VRF verifier permits access to the service.

The MSC module can be equipped with contacts for its coupling with the phone. However, for ease of use, in the exemplary embodiment, the coupling between the module MSC and the telephone MOB is contactless.

In the example illustrated, the contactless module MSC comprises the following elements:

a memory capable of storing data, in particular data identifying the mobile telephone to which the module MSC is attached, This memory is non-volatile, for example an EEPROM type memory, so that the contents of an MSC module can be erased and be reused.

Writing means adapted to write received data in the memory; "Means for transmitting and receiving signals, such as a radio frequency antenna,

• To transmit a signal to the VRF verification device;

• To receive a signal from the MOB mobile phone and the VRF verification device;

• A microcontroller including a program for data processing, including the processing of data received and transmitted.

The module MSC can be indifferently of the passive or active type. Unlike a passive contactless card, an active contactless card contains its own source of energy.

In our example, all communications are logically secured by means of cryptographic algorithms, including authentication. An authentication algorithm is a process to formally and intangibly establish the identification of parties during an exchange or electronic transaction. This process implies that the parties confirm and validate their identification by technical means, such as password, or challenge response according to a known procedure of strong authentication (challenge / response).

Thus, the SERVI rights server has cryptographic means for authenticating the mobile phone MOB and establishing a secure communication with it.

The SERVI rights server also has cryptographic means for authenticating and establishing secure communication with the VRF verifier. The VRF verification device has a communication interface for communicating with the SERVI rights server.

The type of connection chosen between the SERVI rights server and the VRF verification device is arbitrary, it can be wired, long distance (RTC ₁ IP) or medium distance (a few meters). In the example shown, the contactless module MSC also has a short-distance communication means, for example about ten centimeters with one or more VRF verification devices (same interface with the mobile). In the same way, in our example, the VRF verification device has a short-distance communication means for communicating with the contactless modules MSC

In our exemplary embodiment, the mobile phone has a man-machine interface with its owner, and a short-distance interface with one or more contactless modules MSC. In the same way, the contactless module MSC preferably has a means of short-distance communication with the mobile phone MOB.

The VRF verification device can have a human machine interface that can be used for example by a rights verification agent. It can also be coupled with a physical access control system such as a highway toll barrier.

The mobile phone MOB also includes means for writing the rights in the memory of the contactless module MSC. This communication is effected by sending a signal to the module MSC, which receives the signal by means of its antenna. In our example, the module authorizes the writing only if it could authenticate the mobile as being the authorized mobile to write

In our exemplary embodiment, the verification device VRF comprises means capable of generating an electromagnetic field, and can thus activate the contactless module MSC and automatically read data contained in the module MSC. In return, the contactless module MSC comprises means capable of transmitting information to the verification device VRF in the form of radiofrequency signals. On reception, the verification device converts the received signals into digital information usable by its microcontroller.

A mutual authentication algorithm is preferably used when a connection has to be established with the contactless module MSC. In our example, this mutual authentication therefore concerns the communication between the module

MSC and the MOB mobile phone as well as the communication between the MSC module and the VRF verification device. Unlike simple authentication, mutual authentication implies that each party must authenticate the other.

The MSC module stores data in a structured way. The module MSC advantageously comprises several memory areas linked to rights storage of different types. For example, a memory zone may relate to a right relating to a parking space. Another memory zone may concern an entrance to a show, etc. Preferably, the memory zones are compartmentalized and logically sealed together, thus making it possible to support several services or levels of service.

The module MSC furthermore comprises means for managing the access rights to the different memory areas corresponding to the different VRF verification devices with which the module MSC is able to interact. For example, if the verification device is a device able to verify a right on a parking space, it is able to identify the corresponding memory area in the contactless module MSC and to extract the associated rights.

Another example, if the device in question is a toll barrier, the control logic of this barrier is suitable

- to detect the MSC portable module

- and identify the memory area in question.

Preferably, the reading of a memory area dedicated to a verification device VRF is possible only after mutual authentication and only for the memory area dedicated to this device.

FIG. 2 is an algorithm illustrating the various steps of the method implemented in the system described with reference to FIG. 1. FIG. 1 also includes references to these steps; that will help identify the sender and receiver of each message.

For use of this system in the context of paid parking for example, the method operates as follows: In a first step ET1, the mobile contacts the service issuing parking rights by connecting to the SERVI rights server by means of a human-machine interface and its long-distance communication mode.

- In a second step ET2, after authentication of the phone

MOB by the SERVI right server, the server SERVI possibly exchanges with the mobile phone MOB data relating to the right to park, and transmits to the mobile phone a right to park on a parking space. Preferably, the parking fee is certified by a certification authority.

In a third step ET3, the mobile phone contacts the contactless module MSC and performs a first mutual authentication with the MSC module.

In a fourth step ET4, if the mutual authentication is successful, the mobile phone MOB transmits to the contactless module MSC the parking right received from the rights server in the second step; If the memory of the MSC module is compartmentalized in memory zones, the received parking fee is stored in the memory area dedicated to parking. Conversely, if the mutual authentication is not successful, no communication can be established between the mobile phone MOB and the module MSC.

In a fifth step ET5, the verification device VRF contacts the contactless module MSC and performs mutual authentication.

o If this authentication is successful, the VRF verification device can access the memory area dedicated to parking rights.

o Conversely, if the mutual authentication is not successful, no communication can be established between the VRF verification device and the MSC module.

In a sixth step ET6, if the mutual authentication is successful in the step ET5, the verification device VRF receives from the contactless module MSC the parking right and verifies its characteristics, if the right is valid, the agent does not issue fines. On the other hand, if the right is not valid, the agent can verbalize in a traditional way by issuing a fine in paper format; it can also verbalize using a second embodiment of the invention which will be illustrated by a second embodiment illustrated below.

Figure 3 illustrates the second embodiment. Reference is also made to FIG. 4 which is an algorithm representing the sequence of steps illustrating this example.

The implementation of this example requires a second additional server SERV2 which manages the fines; We will designate it by SERV2 fine server. Note that depending on the possible applications of the invention, SERVI and SERV2 servers can be a single server. For example, when the issuer of the right performs the verification of the right, it may happen that the issuance and verification of the right are managed by the same server.

In our exemplary embodiment, the mobile phone MOB communicates with this server fines SERV2. In our example, the mobile phone is equipped with means of payment and therefore has a payment protocol for the dialogue with the server SERV2 fines. The protocol is ideally a secure protocol.

In this example, the VRF verification device has a long-distance communication means with the SERV2 fine server. It has ideally cryptographic means of mutual authentication with the server of fines. The verification device VRF optionally has a human-machine interface allowing a user to enter and receive information.

The SERV2 fine server can receive secure communications from different VRF check devices. It can store and manage data related to traffic violations, and has a secure payment protocol compatible with mobile phones.

In this example, the contactless module MSC preferably comprises a memory area dedicated to fines. Referring to Figure 4 which illustrates the process steps relating to the second embodiment. The following steps may constitute a continuation of the steps illustrated above ET1-ET6:

In a seventh step ET7, the user of the verification device VRF, usually an agent, finds the offense. The finding can be simply visual, for example when the vehicle is poorly parked. This observation can also consist, after mutual authentication allowing the reading of the contactless module MSC, in the verification of the invalidity of the rights which are stored there (cf ET6). It will also be possible to read, for example, the authorized parking area for this vehicle, in this memory zone, the vehicle registration, the owner's address, and special features such as the reduced mobility of the driver allowing a better appreciation of the vehicle. offense.

In an eighth step ET8, according to one embodiment of the invention, the verification device VRF communicates with the contactless module MSC and proceeds to a mutual authentication (if it has not been performed at the same time). step ET7). In case of successful authentication, the VRF verification device writes in the memory area reserved for this purpose the characteristics of the offense, preferably accompanied by an electronic signature.

During a ninth step ET9, the verification device VRF transmits to the server fines SERV2, for example via a secure long-distance communication, the characteristics of this fine, preferably accompanied by its electronic signature.

Note that the direction of execution of steps ET8 and ET9 is irrelevant.

- During a tenth step ET10: when the contactless module MSC can enter into secure communication with the mobile phone MOB, the mobile phone MOB reads, after mutual authentication with the MSC module in the reserved memory area of the label, the certified characteristics of the fine and stores them preferably in a temporary memory. In an eleventh step ET11: After storing the characteristics of the fine, the mobile phone MOB contacts the fine server SERV2 and transmits the fine, accompanied by its electronic signature.

During a twelfth step ET12, the fine server SERV2 authenticates the mobile phone MOB and implements a remote payment protocol with it.

During a thirteenth step ET13, the fine server SERV2 transmits to the mobile phone MOB an electronic certificate of payment of the fine.

- During a fourteenth ET14 step, after receiving this certificate, the mobile MOB enters secure short distance communication with the contactless module MSC to possibly erase the data stored in the module relating to the offense. This feature is interesting when the size in bytes allocated to the memory area is not very important.

Regarding the paid parking control, the contactless module

MSC can be permanently in the vehicle, or even included in the elements of the car (windshield for example). Once the parking rights are acquired using the mobile phone, they are transferred to the MSC contactless module attached to the vehicle, and the verification is done in a simple way by approaching the VRF verification device of the windshield .

On the other hand, the module preferably comprises means for temporarily storing the right received in its storage means. Thus once the right become invalid, for example when the period of use of the right is over, the right is erased from the memory.

The implementation of the invention is not limited to the two embodiments described above. The principle of the invention can extend to any application in which rights must be verified.

We saw that an MSC module could support several different memory zones; it is therefore possible to store, with different access rights, other data including vehicle identification data such as data relating to the registration certificate, or data relating to the technical control. In addition, an MSC module can store all the official papers associated with driving a vehicle.

In general, the invention relates to a method for issuing and using a right via a portable object MOB. As has been seen, the method comprises the following steps:

a step of transmission, by the portable object MOB, of the right to a portable module MSC;

a step of storing the right in said module MSC;

a step of verifying said right by a verification device, said verification device being able to read the rights stored on the module MSC to check the validity of the right.

The invention also relates to the portable module MSC. This module includes

- Receiving means adapted to receive the right attached to the portable object MOB

storage means for storing the right received;

transmission means capable of transmitting the stored right to said VRF verification device to check the validity of the right.

The invention also relates to the portable object MOB. This portable object is characterized in that it comprises means for transmitting a right to a portable module MSC, said module being able to store the right, the right being able to be verified by a verification device VRF to check Ia. validity of the right.

The invention also relates to a verification device VRF comprising means for communicating with a portable module MSC, reading means adapted to read a right stored on the module (MSC), verification means for verifying the validity of the right.

The invention also relates to the computer program capable of being implemented on a portable object MOB. This program includes instructions for code which, when the program is executed on said portable object, performs a step of transmitting the right to a portable module MSC, said module being able to store the right, the right being then able to be verified by a verification device VRF for check the validity of the right.

The invention also relates to the computer program adapted to be implemented on a portable module MSC as defined above. This program includes code instructions which, when the program is executed on said portable MSC module, perform the following steps:

a receiving step adapted to receive the right attached to the portable object MOB

a storage step for storing the right received;

a transmission step capable of transmitting the stored right to said verification device (VRF) to check the validity of the right.

It is thus realized that, in addition to the main advantage of being able to export rights outside the mobile phone to memory extensions constituted by contactless modules MSC, the invention also offers other advantages.

For example, we have seen that the module comprises means for verifying the rights of the portable object (MOB) to write a right in said module (MSC). It also includes means for verifying the right of said verification device (VRF) to read a right in said module (MSC). Thus, only the authorized MOB portable object or the authorized VRF verification device can access the data stored in the MSC module,

It has also been seen that the module comprises storage means compartmentalised in several memory zones, and in that the verification of rights applies to the zones taken in isolation. This allows the storage of rights for different applications on the same module MSC.

In addition, the memory areas are compartmentalized and logically sealed together. This makes it possible to securely support several services or service levels stored in respective areas on the same module MSC. It has also been seen that the module MSC comprises means for mapping to a memory zone a set of respective portable objects authorized to access the contents of this memory zone. Thus, the module MSC can verify that the portable object wishing to access the area storing a right has an identifier stored in its storage means and that this portable object is the one authorized to communicate with this memory area of the MSC module.

The module also includes means for temporarily storing the right received in its storage means. Thus, the right can be used only a limited number of times or for a predetermined duration.

It is clear that, thanks to the invention, in the case of ticketing, for example, the notion of group ticket, be it entertainment or transport, or any other application in which a right is to be distributed, is simplified. several members of a group. Tickets can be ordered and paid from a single mobile phone and then distributed to different MSC contactless modules distributed to group members, allowing them to use the individual verification process as shown above and with reference to Figure 2.

Claims

claims

1. A method for issuing and using a right via a portable object (MOB), said portable object comprising means for communicating with a telecommunications network, said portable object (MOB) being able to receive a right that can be controlled by a verification device (VRF), characterized in that it comprises the following steps:

a step of transmission by the portable object (MOB) of the right to a portable module (MSC);

a step of storing the right in said portable module (MSC);

a step of verifying said right by a verification device (VRF), said verification device being able to read the right stored on the module (MSC) to check the validity of the right.

2. Portable module (MSC) capable of communicating with a portable object (MOB) and with a verification device (VRF), said portable object storing a right able to be verified by said verification device (VRF), characterized in that 'He understands

receiving means adapted to receive the right attached to the portable object (MOB);

storage means for storing the right received;

transmission means capable of transmitting the stored right to said verification device (VRF) to check the validity of the right.

3. Module according to claim 2, characterized in that it comprises means for verifying the rights of the portable object (MOB) to write a right in said module (MSC).

4. Module according to claim 2 or 3, characterized in that it comprises means for verifying the right of said verification device (VRF) to read a right in said module (MSC).

5. Module according to one of claims 2 to 4, characterized in that it comprises storage means compartmentalized in several memory areas, and in that the verification of rights applies to the areas taken separately.

6. Module according to claim 5, characterized in that the module

(MSC) comprises means for mapping to a memory area a set of respective portable objects entitled to access the contents of that memory area.

7. Module according to one of claims 2 or 3, characterized in that it comprises means for temporarily retain the right received in its storage means.

8. Portable object (MOB) capable of receiving rights, said rights being able to be controlled by means of a verification device (VRF), characterized in that it comprises means for transmitting a right to a portable module (MSC), said module being able to store the right, the right being able to be verified by said verification device (VRF) to check the validity of the right.

9. Verification device (VRF) capable of controlling a right derived from a portable module (MSC) as defined in one of claims 2 to 7, characterized in that it comprises

means for communicating with the portable module (MSC),

reading means adapted to read the right stored on the module (MSC),

- means of verification to verify the validity of the right.

10. Computer program adapted to be implemented on a portable object (MOB), said object being able to store a right, said program comprising code instructions which, when the program is executed on said portable object (MOB), realizes a step of transmitting the right to a portable module (MSC), said module being able to store the right, the right being then able to be verified by a verification device (VRF) to check the validity of the right.

11. Computer program adapted to be implemented on a portable module (MSC) as defined in claim 2, said program comprising code instructions which, when the program is executed on said portable module (MSC), performs the steps following:

a receiving step adapted to receive the right attached to the portable object (MOB)

a storage step for storing the received right;

- A transmission step capable of transmitting the stored right to a verification device (VRF) to control the validity of the right.