Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
  • H04L63/0853—Network architectures or network communication protocols for network security for authentication of entities using an additional device, e.g. smartcard, SIM or a different communication terminal
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/12—Applying verification of the received information
  • H04L63/123—Applying verification of the received information received data contents, e.g. message integrity

Definitions

• the present invention relates to a method for authenticating a user through a terminal connected to a computer type network and comprising means for reading a ROM memory medium, of the CD, CD CARD or DVD type.
• the present invention is in the field of secure and remote authentication of a user, in particular the identification of a user through a computer type network.
• the invention relates more particularly to such an authentication method and its implementation device.
• the present invention will find a particular application in the field of banking and online payment, in the manner of a bank card.
• the remote authentication of a user can be performed through a system using a smart card.
• a computer can be provided with a terminal for reading a smart card.
• the latter contains authentication information, such as an electronic signature, which is then transferred from said terminal through said network to be compared and authenticated. Access is guaranteed.
• the connection is secured through known encryption tools and protocols.
• the object of the invention is to overcome the disadvantages of the state of the art by proposing a secure authentication method and its implementation device offering an optimal security, an impossible reproduction rendering them unfalsifiable.
• the invention creates a link between the data contained on a medium and the medium itself, so that the copy of one independently of the other is not feasible.
• the data relating to the support relates to the errors that occurred during the etching of said support.
• support is provided compatible with readers equipping most computer terminals, such as DVD players or CDs.
• the present invention therefore provides a unique, secure and tamper-proof payment solution.
• the present invention relates to a method for authenticating a user through a terminal connected to a computer type network and comprising means for reading a ROM memory medium, of the CD, CD CARD type. or DVD, in which, when creating said medium:
• identification data relating to said user are recorded, on the one hand, on said medium through etching means and, on the other hand, on storage means;
• said identification data are read through said reading means and transmitted through secure means of connection to said remote storage means through said network;
• said transmitted data is compared with said data contained on said storage means in order to be authenticated; said method also comprising:
• connection through secure means consists of:
• such a method may consist in transmitting bank data transparently to the user in order to automatically fill out an online payment form.
• the invention also relates to a device for implementing the authentication method, comprising a medium containing personal data concerning a user and able to be read through a terminal provided with reading means, said terminal being connected to the through a computer network, to means for comparing, on the one hand, said personal data with data contained on storage means and, on the other hand, information relating to the etching of said data on said medium with collected information relating to the physical level of said medium in the form of a trace listing the random errors that occurred during the etching of said medium.
• said comparison means comprise means for burning data concerning the user on said medium and means for collecting information relating to said etching, and means for storing said data and said information.
• said medium is a ROM memory comprising a chip.
• the present invention relates to a method of authenticating a user and its implementation device.
• the invention aims to authenticate a user from a terminal 1 connected to a computer network 2.
• the network 2 is preferably the Internet network but the invention also relates to any computer type network in which two terminals are connected to one another.
• the invention will find its application in the secure connection of a user, when transmitting information requiring a high level of confidentiality, for example in the case of access to an online payment site where it is necessary to communicate risk banking data.
• the invention also relates to any type of connection or access where it is necessary to identify with certainty the user wishing to connect, for example in the case of an intranet or other network.
• the present invention confers a strong authentication of the personal medium to the user and consequently of the latter. It uses the combined comparison, on the one hand, of characteristics related to a physical medium 3 with information related to these same characteristics previously stored and, on the other hand, information stored or contained on said medium with previously stored information.
• a user wishing to connect to an application, a payment site or the like, acquires a terminal 1, connected to said computer network 2, and comprising means 4 for reading said medium 3.
• the support 3 is a support equipped with a ROM-type memory such as a CD, CD CARD or DVD.
• This memory can be provided rewritable, such as a C-D or a DVD-RW, or non-rewritable, this characteristic thus conferring on said support 3 a security preventing the modification of the data recorded therein.
• the reading means 4 are of known type, such as a ROM-type memory reader, such as a CD and DVD disc player.
• said support 3 may comprise a chip so that it is compatible with smart card systems, in particular in the case of a CD CARD type support.
• the support 3 has been made in advance and sent through a conventional routing network, for example postal.
• identification data 5 are recorded on said support 3.
• These data are personal to each user and may relate to the identity of the person (name, surname, contact details, bank account number , etc.) and may contain an identifier of connection for the recognition of said support 3 when using the latter.
• This data may also include the bank details of the user, said support 3 can be issued by a bank.
• the recording of said data is performed by etching through conventional etching means. On the other hand, these same data are copied and stored in storage means 6.
• An advantage of the present invention resides in the fact that information 7 relating to the etching of said medium 3 is stored on said storage means 6.
• This etching information 7 is collected in the form of a trace after the finalization of said medium 3.
• This trace lists the errors that occurred during this operation of etching at the physical level of said support 3.
• each etching produces random physical errors, impossible to reproduce, and unique to each support 3.
• the surface of said support 3 therefore contains an identification of its own.
• An advantage in terms of security therefore consists in comparing the trace of the support 3 with the support 3 used during the connection. Thus, any reproduction or duplication of the support 3 is not possible.
• Another advantage lies in the fact that only the trace of the inserted medium 3 is transmitted over the network, the comparison being made with the trace stored on a remote server. Thus, in case of falsification, the original data are not transmitted, minimizing the risk of piracy.
• this data may be encrypted beforehand and / or encoded to prevent any modifications or interception during the transfer.
• secure connections and secure data transfer protocols can be used (SSL, private and public key encryption or other).
• the communicated identifier makes it possible to find within the storage means 6 the data previously recorded and linked to the user and his bank details.
• Data cohesion provides a first step in authenticating the user.
• the bank details can be specific to online use, through specific forms and automatically filled by means dedicated to this purpose.
• the invention consists of transparently transmitting bank data to the user in order to automatically fill out an online payment form.
• comparison means 11 connected to said network 2 and said storage means 6.
• the latter can group the data stored therein. known manner in the form of a database.
• connection through secure means 8 can be based on the entry and encrypted sending of a confidential code 9 known to the user alone.
• This code can be transmitted to the user at the same time or separately from said medium 3, by means of classic mailing, by electronic mail or any other means.
• an application is executed on said terminal 1 opening input means 10 through which the user can enter his code 9.
• These input means 10 comprise an interface for entering said code 9, especially through a keyboard or a keypad, especially a secure keypad.
• the code 9 can be directly compared with code encoded and encrypted on the support 3.
• the support 3 can be recognized during each introduction in the reader 4 and may not be requested later.
• This usage option facilitates the repeated identification of the same user, for example in the case of several separate and consecutive purchases.
• the code 9 is then encrypted and sent through the network 2, through secure lines, to said storage means 6. It is then decrypted and compared with the previously recorded code, when performing the support 3, in said storage means 6. Once the validity of the code 9 has been checked, the user, with authentication of the medium 3 as previously mentioned, obtains an access authorization.
• the user can enter up to three times said code 9 before blocking said data contained in said storage means 6. In other words, access to the data is immediately blocked and the further use of the support 3 will not allow any connection.
• security messages can be sent to an administrator managing the system. The support 3 is then unusable until the restoration of access to the data or the realization of another support 3.
• comparison means 11 remote and connected, on the one hand, to the storage means 6 and, on the other hand, to said network 2. On request, they make it possible to compare the data received by the network with the data contained in the storage means 6, in particular and vice versa the data transmitted with the identification data 5, the data relating to the support 3 with the trace, and finally the code 9.
• the present invention thus provides a secure way to access sensitive areas on a network safely.
• a dedicated application preferentially remains the payment on the Internet. It is no longer necessary to transmit his bank details from his terminal or computer whose security is less than banking networks.
• the invention does not require any additional device and is adaptable to any terminal equipped with a CD, DVD or similar type of reader. Compatibility is optimal while providing strong authentication of the support 3 and its user.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Computer Hardware Design (AREA)
• Computing Systems (AREA)
• General Engineering & Computer Science (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Signal Processing For Digital Recording And Reproducing (AREA)
• Storage Device Security (AREA)
• Collating Specific Patterns (AREA)

Applications Claiming Priority (2)

Publications (1)

Family

ID=36651278

Family Applications (1)

Country Status (4)

Family Cites Families (4)

• 2005
  • 2005-09-07 FR FR0552701A patent/FR2890509B1/fr not_active Expired - Fee Related
• 2006
  • 2006-09-06 EP EP06808284A patent/EP1922856A2/de not_active Withdrawn
  • 2006-09-06 US US12/065,958 patent/US20080209520A1/en not_active Abandoned
  • 2006-09-06 WO PCT/FR2006/050845 patent/WO2007028925A2/fr active Application Filing

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events