EP3189485A1

EP3189485A1 - Electronic ticket management

Info

Publication number: EP3189485A1
Application number: EP15767215.5A
Authority: EP
Inventors: Jean-Luc Grimault; Jean LEMAUVIEL; Franck GRUPELI
Original assignee: Orange SA
Current assignee: Orange SA
Priority date: 2014-09-02
Filing date: 2015-09-01
Publication date: 2017-07-12
Also published as: WO2016034810A1; FR3025377A1; US20170286873A1

Abstract

The invention concerns a method for providing an electronic ticket (4) by a security element (C, SIM) associated with a mobile terminal (T). The ticket (4) is stored in the mobile terminal and designed to access a service via an access control device (B). The method is characterised in that it comprises the following steps in the security element (C): a step (E10) of receiving the electronic ticket (4) originating from the mobile terminal (T); a step (E11) of temporarily storing the electronic ticket (4) in the security element (SEVI); a step (E13) of providing the electronic ticket for the access control device (B); - a step (E14, E15) of authentication taking into account at least one item of data contained in the ticket and one item of data linked to the security element; - a step (E17) of deleting the ticket (4) from the memory of the security device.

Description

Electronic ticket management.

Technical area

The invention relates to the general field of the dematerialization of title deeds otherwise known as "electronic tickets" and more particularly to the field of application in which an electronic ticket is intended to be stored in a mobile terminal capable of restoring said ticket to allow its user to access a property or more generally a service.

It finds a preferred application, but not limited to, in applications for which the mobile terminal renders the electronic ticket using a near field communication technique.

State of the art

Near field communication techniques are developing widely; the most used of these technologies for mobile telephony is that known by the acronym NFC (in English "Near Field Communication"). It is recalled that "NFC" communications, based mainly on the International Standard Organization (ISO) 14443, use wireless technologies to allow information to be exchanged between two peripherals distant from a short distance, typically less than ten centimeters. It has already been demonstrated the feasibility of electronic ticket dematerialization services on mobile terminals by means of contactless technology.

In particular, transport services are known in which public transport users use a dedicated application of their mobile terminal to buy electronic tickets and to validate their ticket at the entrance of the bus or tram by approaching their mobile terminal with a device. access control able to communicate with the mobile terminal, or more exactly with an element of the mobile terminal, by NFC near-field communication means to obtain the electronic ticket in order to check the validity thereof.

By "security element" is meant here a data storage and manipulation element to guarantee a user of the mobile terminal a high security since the data recorded in the security element is not accessible to an unauthorized user . By "user" is meant the user of the mobile terminal, which is also the customer of the ticket provider. This security element may for example be constituted by a SIM (Subscriber Identity Module) SIM card, used in mobile telephony to store the subscriber-specific information of a mobile network and the user's applications. its operator or in some cases third parties. This security element can still be a removable support type "Secure SD Card" or a security element integrated in the terminal ("Embedded Secure Element") or a secure area of the application processor through the use of a technology of integrated security in the processor and its peripheral components (for example "TrustZone" technology, registered trademark of the ARM company). In the case of a terminal supporting applications of the Android type (it is recalled that an Android application is a mobile application specifically developed for mobile terminals using the Android application system developed by the company Google), secure applications can also run in the Android terminal itself (from version 4.4 "KitKat"), thanks to the "HCE" ("Host Card Emulation") technology.

Subsequently, the terms "security element" and "SIM card" will be used interchangeably.

By "access control device" is meant a physical device capable of acquiring knowledge of the content of the electronic ticket and checking its validity in association with one or more verification servers (of the validity date of the ticket, etc.) and authentication (of the security element associated with the user of the mobile terminal). Subsequently, the terms "access control device" and "terminal" will be used interchangeably. By "ticket validation", we mean all two operations, namely ticket verification and authentication of the security element. In another example, the experiment "M-

Stadium ", in Caen, France, which showed the integration of contactless technology throughout an audience in a stadium: acquisition and dematerialization of electronic tickets on mobile devices, electronic ticket control and reading interactive tags in the stadium, etc. Users of such a system first load a ticket by means of a mobile application of their mobile terminal equipped with contactless technology. The data thus loaded, relating to the ticket, are stored and managed in a security element associated with the mobile terminal, in this case the SEVI card of the user, and then checked at the entrance of the stadium by means of a terminal. control.

It is also known, according to yet another example chosen in the banking world, payment services for which some banks have deployed, at merchants, electronic payment terminals without contact usable with both a bank card and a mobile terminal NFC with a security element like the SEVI card.

In all these examples, a service-specific application is developed and then installed in the security element, so that the security element can provide authentication of the user for access to the service (transport subscription, access to the football stadium, etc.) and at the same time manage service-specific data. Relatively complex techniques need to be used to load applications into the security element via service platforms located in the mobile operator infrastructure and / or OTA (over the air) service providers. ) which comply with the specifications published by the "Global Platform" association. Such platforms are expensive. The user can not install such an application himself in a SEVI card. In addition, the multiplication of dedicated applications considerably loads the SIM card which is generally limited in memory resources. The invention proposes a system for controlling access to a service by the user of a mobile terminal equipped with a security element, by validating an electronic ticket, which does not have such disadvantages.

The invention

According to a first functional aspect, the subject of the invention is a method of providing an electronic ticket by a security element associated with a mobile terminal, the ticket being stored in the mobile terminal and designed to access a service via an access control device, the method being characterized in that it comprises the following steps in the security element: a step of receiving the electronic ticket from the mobile terminal;

a step of temporary storage of the electronic ticket in the security element;

a step of providing the electronic ticket for the access control device;

an authentication step taking into account at least one piece of data contained in the ticket and data related to the security element. a step of erasing the ticket from the memory of the security device.

Advantageously according to the invention, the ticket is not exploited by the security element but only made available to the access control device by an application of the security element, called security application (in computer language, applet). Thus, the invention differs from current techniques which require the installation of an application specific to each service in the security element of the mobile terminal (SEVI card in particular), by example an application for access to a show and another application for transport tickets.

It is advantageous to host a single secure application for the provision of the ticket that will be consumed in the security element, regardless of the type of ticket. In fact, the storage of applications in the SIM card requires complex infrastructures of the OTA type. In addition, installing a security application specific to each service in the SIM card assumes that the card has enough memory, which is not always the case, and especially as the number of services increases, increasing by this makes the needs in memory and complexity.

Finally, a secure application in the SEVI card is often not sufficient to cover the needs of the service and must be associated with an application on the mobile, including a graphical interface adapted to the service. This set consisting of the specific application on mobile interacting with the specific security application on the SIM card is a complex technical set to develop and test.

The security element of the mobile terminal (SIM card for example) is used as a strong authentication means, namely to provide proof that the mobile terminal approaching the terminal has the correct security element, that is to say say that of the user of the mobile terminal with which the security element (the user's SIM card) is associated. It is therefore important that this strong authentication function remains dedicated to the SIM card.

In summary, the invention avoids the need to load a specific security application for each service in the security element (application that should specifically manage tickets according to the service to be rendered, ie an application for transport, an application for payment a third for shows, etc.) It still retains the advantages of the secure element, ie the strong authentication of the SEVI card which stores the electronic ticket, under the control of a secure applet which is satisfied to make the ticket available to the terminal and therefore does not perform any particular analysis or management of the ticket data.

According to a particular embodiment of the invention, a method as described above also includes the following steps: a step of receiving, from the mobile terminal, an erasure order of the stored ticket ;

Advantageously according to the invention, the ticket is stored in the security element only temporarily. It is typically removed from the SIM card when the user has benefited from the service (e.g. has passed the gantry gate associated with the access control device) and therefore no longer needs the ticket in the SEVI. The ticket can however be kept in the mobile (for example if it is a transport ticket valid for several days). It is advantageous, in accordance with the invention, to store the tickets in the mobile phone and to make them available temporarily in the secure memory of the SEVI card, because the tickets can be bulky (in number of bytes) and occupy a large memory space in the SIM card. By "erasure" is meant here deletion or replacement of the ticket, the deletion of releasing the memory while the replacement consists of storing another ticket (also temporary) instead of the ticket to be erased, typically the next ticket selected by the terminal mobile. This mode of implementation of the invention makes it possible, while benefiting from the authentication and security capabilities naturally linked to the security element, not to overload it.

According to a second particular mode of implementation of the invention, which can be implemented alternatively or cumulatively with the previous one, a method as described above is such that said ticket comprises at least one public key of the element security system, and is characterized in that it comprises the steps of: receiving a random event originating from the access control device; signature of the hazard by means of the private key of the security element; provision of the signed hazard for the access control device.

The security procedure implemented according to the invention is very simple: the ticket issued by the ticket provider includes a public key of the SEVI card of the user, whereas the security element (SEVI card) conventionally comprises the corresponding private key. If the hazard is correctly signed by the SEVI card, the access control device can decrypt it using the public key contained in the ticket, thus ensuring authentication of the SIM card and therefore the user of the mobile terminal.

According to a third particular mode of implementation of the invention, which can be implemented alternatively or cumulatively with the above, a method as described above is further characterized in that at least a portion of the ticket has been signed by means of a private key of the issuing entity.

Advantageously, this signature of the message, or of a part of the message contained in the ticket by the secret key of the issuing entity makes it possible to add additional authentication relating to the identity of the service provider (and tickets): the device access control having access, directly or indirectly, to the public key of the issuing entity that provides the tickets, can verify the authenticity of this provider by decrypting the encrypted message.

According to another functional aspect, the subject of the invention is also a method for managing an electronic ticket in a mobile terminal with which a security element is associated, the ticket being provided for accessing a service via a control device. access, this method being characterized in that it comprises the following steps at the mobile terminal: a step of selecting an electronic ticket stored by the terminal;

a step of sending said ticket to the security module. Advantageously, the electronic ticket is stored and managed within the mobile terminal by a ticket management application that runs on the mobile terminal and communicates with the security element. The electronic ticket is stored in a memory of the mobile terminal out of the secure element and transferred only after it has been selected, for example by the user by means of a graphical interface offering him a choice of tickets.

In accordance with the invention, the electronic tickets and the associated application (ticket management application) are loaded into the mobile terminal by simple and flexible techniques known to those skilled in the art (for example SMS short messages (Short Message Service) or MMS (Multimedia Message Service), downloading to a mobile network server or the Internet via the mobile network, etc.) without the need for complex techniques used to load applications or data into the Internet. a SEVI card via OTA platforms. In such a context, the user of the invention can advantageously install the application itself on his mobile terminal (for example an Android or Apple type application). Such an application can be adapted to each type of service or even to each service (graphics and adapted menus) without there being complex interaction between this application and the secure application for authentication and provision of the ticket which is in the secure element. Such an application can be dedicated to a certain type of service or on the contrary a single application on the mobile can manage all the tickets of all the services, without loss of generalities for the invention. Thus, the user can load several management applications into his mobile phone which generally has a larger memory than the SIM card.

At the same time, the temporary storage of the ticket in the SIM card limits the number of communication sessions to be chained between the terminal and the set SEVI-MOBILE: indeed if the terminal had to communicate simultaneously with an application on the mobile phone and another application on the SIM card, it should open two separate sessions, for example a Bluetooth session (with the mobile terminal) and an NFC session (with the SIM card) or two NFC sessions, etc. It is of course easier to open a single session to the SIM card when it has the ticket.

According to a particular mode of implementation, a management method as described above is further characterized in that the communication between the security element and the access control device is performed in the near field.

Near-field communication offers many advantages in this context of dematerialized tickets: an intrinsic security to this mode of communication, since the user of the mobile terminal must be only a few centimeters from the terminal to be able to validate his ticket; but still, the NFC allows the consumption of the ticket even when the battery of the mobile terminal is discharged or when the mobile is off: in fact the access control device is capable of supplying the SEVI card via its NFC field, thus ensuring the reading of the ticket and the signed hazard in the absence of even battery.

According to a second particular mode of implementation of the invention, which can be implemented alternatively or cumulatively with the previous one, a management method as described above also includes a step of transmitting to the security module an erase order of said ticket. Advantageously, as noted above, this aspect of the invention reduces the space occupied by the tickets in the security element. Erasing can be a deletion or replacement of the ticket (by another ticket).

According to a third particular embodiment of the invention, which can be implemented alternatively or cumulatively with the above, a management method as described above also includes a prior step of receiving an electronic ticket in from a sending entity, said ticket comprising at least one public key of the user of the mobile terminal corresponding to the private key that is in the security element. Advantageously, as noted above, if the ticket issued by the ticket provider comprises a public key of the user's SIM card, while the security element comprises the corresponding private key, authentication of the SIM card and therefore the user of the mobile terminal is easily ensured.

According to a fourth particular mode of implementation of the invention, which can be implemented alternatively or cumulatively with the above, a management method as described above is further characterized in that the selection step is automatic. if the power level of the mobile phone is below a predetermined threshold, and is carried out according to a pre-established rule.

Advantageously, it is thus possible to process the ticket even when the mobile phone is almost discharged: once the ticket transferred into the SEVI card, the latter can be powered via the NFC near field and therefore no longer requires power from the mobile terminal, which can even be turned off.

According to a variant of this embodiment of the invention, a management method according to the invention is further characterized in that the pre-established rule consists in selecting the last ticket consulted by the user. Advantageously, the last ticket viewed or accessed by the user is selected as the most likely choice that the user would have made if he had himself made this selection, for example in a list of tickets.

According to a fifth particular embodiment of the invention, which can be implemented alternatively or cumulatively with the above, a management method as described above is further characterized in that the selection step is automatic. if the data contained in the ticket has certain predefined characteristics relating to the validity of the ticket. Advantageously, the ticket closest to its expiry date can thus be "pushed" automatically to the security module.

According to a material aspect, the invention also relates to a security element associated with a mobile terminal able to make available to an access control device an electronic ticket stored in the mobile terminal, characterized in that it comprises the following modules: a reception module arranged to receive an electronic ticket from the mobile terminal;

a module for temporarily storing the ticket;

- A module for providing the electronic ticket for the access control device.

an authentication module able to take into account at least one piece of data contained in the ticket and a piece of data related to the security element.

a module for erasing the ticket from the memory of the security device.

The term module may correspond to both a software component and a hardware component or a set of hardware and software components, a software component itself corresponding to one or more computer programs or subprograms or more generally any element of a program capable of implementing a function or a set of functions as described for the modules concerned. In the same way, a hardware component corresponds to any element of a hardware set (or hardware) able to implement a function or a set of functions for the module concerned (integrated circuit, smart card, memory card, etc. .).

According to another material aspect, the invention also relates to a mobile terminal with which is associated a security element, able to manage a ticket intended to access a service via an access control device, characterized in that it comprises the following modules: - a module for selecting an electronic ticket in the memory of the terminal; a module for sending said ticket to the security module;

According to another material aspect, the invention also relates to a computer program adapted to be implemented by a method of providing electronic tickets as defined above, the program comprising code instructions which, when the program is executed by a processor, performs the steps of the method of providing electronic tickets.

According to another material aspect, the invention also relates to a computer program adapted to be implemented by an electronic ticket management method as defined above, the program comprising code instructions which, when the program is executed by a processor, performs the steps of the electronic ticket management method.

This security element, this terminal and these computer programs have features and advantages similar to those described above in connection with the methods of provision and management of tickets.

According to yet another material aspect, the invention relates to a recording medium readable by a data processor on which is recorded a program comprising program code instructions for executing the steps of the methods defined above.

The invention will be better understood on reading the description which follows, given by way of example and with reference to the accompanying drawings.

The figures: FIG. 1 represents the general context of one embodiment of the invention. FIG. 2 represents an architecture of a mobile equipment equipped with a subscriber identity module and an NFC module, able to implement an embodiment of the invention.

FIG. 3 represents the possible structure of an electronic ticket according to one embodiment of the invention.

FIG. 4 represents a flowchart illustrating the different steps of the method according to one embodiment of the invention.

DETAILED DESCRIPTION OF AN EMBODIMENT EXCHANGING THE INVENTION FIG. 1 corresponds to the general context of one embodiment of the invention; it is the local control, by an access control device or terminal (B), dematerialized tickets stored on the mobile (T) of a user (1), with authentication by the security element ( VS). In this embodiment of the invention, the mobile terminal (T) also has an NFC module (3) allowing the use of contactless communications between the mobile phone and the associated SIM card (in this case also referred to as SEV1-NFC) and the terminal (B).

It is recalled that the uses covered by the invention are those for which the user must prove to be in possession of a right of access to a service with a validity limited to a specific date or during a definite period of time (for example, a transport subscription for the month of October 2014) or with an electronic ticket number that can be verified when accessing the service (for example, access to a concert, sports competition, etc.). In this embodiment, it is considered that the intended application is a ticketing application delivering concert tickets. It is assumed here that the electronic tickets are delivered by SMS to the user: he has chosen an electronic ticket (here, in concert) from a service provider (5). The service provider (here, a provider of concert tickets), located in the example in a network (9), generated a ticket (4), signed it with its private key, then transmitted by SMS to the mobile phone of the user (T) (or several SMS, because of the intrinsic limitation of the size of an SMS). The network (9) is here a mobile network but other types of networks would be possible, for example the Internet, an Intranet, etc. The user can order his ticket on the server of the service provider (5), with his mobile terminal, through a data connection of the mobile network extending to the Internet, and receive his ticket on his mobile in the form of SMS . Before issuing the ticket, the service provider verified that the user is registered with a trusted authority (not shown). He obtained from a trusted authority the public key of the user, the name of the associated algorithm and the reference of the key. It is recalled that "public key" cryptography systems (also called "asymmetric cryptography") are methods that rely on the use of a public key (which is broadcast) and a private key (which is kept secret ). As part of the signature, the private key is used to sign a message and the public key is used to verify the validity of the signature of the message. An entity that has a certificate of the public key (certificate provided by a trusted authority) can thus authenticate the author of the message.

The public key of the user provided by the trusted authority to the ticket provider is the public key whose corresponding private key is contained in the user's SIM card. In the context of this embodiment of the invention, it is managed by a secure authentication and transit application, which is called a ticket provisioning application, or in shorthand, secure application, that the we will describe later. For a subsequent authentication purpose, the service provider may have included in the ticket information provided by the trusted authority and the user. A possible format for such a ticket will be described later in support of Figure 3. The mobile terminal (T) contains a mobile application (for example an Android application) for managing electronic tickets, which notably enables the user to view the relevant information related to the ticket data (show name, date and time, etc.). ). When the mobile terminal receives an SMS, the mobile application detects the ticket, for example upon receipt of an SMS starting with a given identifier. This ticket is stored on the mobile. All tickets stored on the mobile appear in the interface that the mobile application for ticket management offers to the user, and are usable if their end of validity date is not earlier than the current date. Alternatively, the tickets can be managed by several applications on the mobile (one for transportation, another for shows, etc.). The dematerialized electronic tickets are therefore not stored in the security element but on the mobile terminal. As will be seen later, the security element serves only to authenticate the user and to transit the ticket (temporary storage before reading by the terminal (B)).

Each ticket is selectable by the user, for example by a touch of the finger on the touch screen of the mobile phone, and a dialog box can ask for confirmation of the selection of the ticket.

The security element (C), or SIM card, contains a secure application, also known as an applet (APS), which is installed on the SIM cards of the users of mobile terminals wishing to have access to the paperless ticket service. This is a unique app for all tickets. It is later called Applet, or security application, or APS. It can access the private key of the user in the memory of the SEVI card, which allows the SIM card, and therefore the user, to authenticate with the base station. This applet also makes it possible to temporarily store the ticket which will be read by the terminal. When the user selects the ticket (4) on his mobile terminal, the APM mobile management application sends the ticket to the applet of the SIM card and then asks the user to present his mobile terminal to the terminal.

When the user presents his mobile terminal at the base station, an NFC communication is established between the terminal and the SIM-NFC card contained in the mobile terminal of the user. The terminal can then communicate with the SIM card to read the previously stored ticket. The applet of the SIM then makes it possible to authenticate the user, of which only the SEVI card has the private key corresponding to the public key contained in the ticket. The terminal (B) also communicates with a ticket verification "business" server (7) which itself is in contact with a signature verification server that has the public key of the service provider (5) and verifies that the signature of the ticket (ie the signature by the service provider) is correct. These two servers are, according to this example, local servers. They can alternatively be in the terminal itself or in a local network, or in the wide area network.

After the reception phase of the ticket by NFC, followed by the random sending phase to the SIM card and reception of this signed randomness, the NFC terminal waits for the response of the ticket verification phases carried out by the business server ( 6) and the signature verification server (7). The NFC terminal may include a graphical interface, not shown, which enables it to display information intended for the bearer of the mobile terminal. For example, a "state" part indicates the state of the verification: the display of the terminal indicates in green that the access is authorized, in gray what the user must do and in red any error occurred. If the verification phase of the signature of the hazard by the SIM card, followed by the verification phase of the "business" fields of the ticket, followed by the verification phase of the signature of the service provider are correctly validated by the servers, then the terminal responds positively to the request of the user, for example it opens a gate to let it pass. The terminal detects when the mobile terminal is no longer placed on the NFC reader, and can then start a new check when a new terminal approaches the NFC terminal.

With reference to FIG. 2, a system comprises a terminal T able to communicate with a network (9) comprising a ticket provider, and a security element (C) able to be inserted into the terminal (T) and to communicate with a terminal (B) for performing the validation of an electronic ticket.

The terminal T is, for example, a mobile phone or a PDA (for "Personal Digital Assistant") or a tablet.

The terminal T conventionally comprises a processing unit, or "CPU"

(for "Central Processing Unit"), intended to load instructions in memory, to execute them, to perform operations; a set of memories M, including a volatile memory, or "RAM" (for "Random Access Memory") used to execute code instructions, store variables, etc. and a non-volatile memory, of the "ROM" type (of "Read Only Memory"), or "EEPROM" (for "Electronically Erasable Programmable Read Only Memory") intended to contain persistent data, used for example to store electronic tickets and the APM ticket management application.

The terminal T furthermore comprises:

a first communication module MCI able to communicate with the security element C via a first communication interface (II).

a second communication module MR, enabling communication, via a communication network, with remote servers, for example with the ticket provider (5) which is in the Internet network (9) accessible via the mobile network or on a mobile phone network. It is in this way that the mobile terminal (T) receives in particular the application APM (Mobile Application) ticket management (according to our example, in concert) loaded into a memory M of the mobile, and tickets.

a third NFC contactless communication module (3) capable of communicating the security element with a remote device via an NFC contactless link, for example terminal B located near the terminal T. contactless module NFC is also able to communicate with the security element C via an MC2 communication module and a second communication interface 12. It communicates with the mobile terminal via an interface MC3. The NFC module conventionally comprises an antenna adapted to transmit and receive messages modulated on the radio channel in NFC.

The security element C is for example a removable support type UICC (for "Universal Integrated Circuit Card"), also called "SIM card", a memory card hosting a secure element (SD card, Embedded Secure control ... ) or a specific memory area of the terminal as in the context of the HCE standard defined above.

The security element C, commonly used for authentication to the mobile network (case of the SEVI card) has the function, in addition to authenticate with the terminal, to store the specific information to the mobile subscriber (here called user and the processes that allow the device to authenticate to the mobile network. For this purpose it has the private key (K) of the user. It comprises a first transceiver module MCI 'able to communicate with the terminal T via the first communication interface II, a second transceiver module MC2' able to communicate with the NFC module via the second communication interface 12.

In this embodiment of the invention, the security element C is an SEVI card and conventionally comprises ROM type memories M 'containing in particular the operating system of the security element and programs implementing the security mechanisms. security, among others the authentication algorithm of the card, EEPROM type memories permanently containing directories and data defined by the mobile standard (eg GSM, UMTS, etc.), the authentication key (K) , or private key (of the user), as well as specific applications (APS) also called applets running in a RAM type memory. Applets are for example software programs using the "SEVI Application Toolkit" protocols according to the ETSI 102.223 recommendation, which make it possible to control certain functions of the mobile telephone, for example to communicate with the subscriber via the interface of the mobile phone. communication II between the SIM and the mobile phone T. In Figure 2 is shown the secure APS applet common to all electronic ticket services. It implements the functions of transi t / temporary storage of tickets, the provision of the ticket for reading via NFC and the signature of a random received by NFC.

To communicate with the SIM card, the mobile application uses SmartCard according to the ETSI 102.221 recommendation. It makes it possible to open a communication channel with the SIM card applets for sending the data (e.g. the ticket) in the form of packets. When communication is complete, the Android application closes the channel to allow other Android apps or NFC players to interact with the SIM card applet.

FIG. 3 represents the possible structure of an electronic ticket according to one embodiment of the invention. The electronic ticket is structured so as to be able to provide all the information, or data, enabling the authentication of the user. It also contains information about the expiry date, the place number, the name of the event, the date, and so on. for a ticket to a concert hall. Each service provider structures his ticket so that it can be read by the APM mobile application that receives the tickets. For example, an "identifier / value" type coding system may be used: the user data is then preceded by an identifier and separated from each other by separation data. The ticket (4) represented in FIG. 3 comprises the following data fields: the object of the ticket (Ml) contains the name of the event, the number of the place, the price, the date, etc.

The validity period (M2) contains the end date of validity of the ticket. The two-key reference (Cl) contains the reference of the user's key pair. The term "key pair" covers the set consisting of the private key contained in the SIM card and the public key corresponding to this private key. The private key is used by the SEVI card to sign the hazard sent by the terminal (B); the corresponding public key is used by the kiosk to verify this signature. Generally all services use the same bi-key, but sometimes services offered by large companies (eg transport companies) may wish to use a bi-key of their own. This reference (Cl) is therefore used to the terminal to know the key pair to use. Thanks to this reference read in the ticket, the terminal (B) indicates to the SIM card which private key it must use to sign the hazard and that its corresponding public key terminal itself must use to verify the signature of the randomness.

- The reference of the SEVI authentication algorithm (C2) is the reference of the algorithm that is associated with the user's key pair (Cl). Indeed, some companies may want, not only their own key pair, but also their own authentication algorithm.

Advantageously, there is only one private key in the SIM card and a single algorithm for all the services, which simplifies the SIM card, avoiding any specificity to the services in the card.

The public key of the SIM card (C3) is the public key of the user according to the bi-key reference (Cl).

The seller ticket identifier (SI) is the reference of the service provider who sold and signed the ticket.

The reference of the signature algorithm (S2) is the reference of the algorithm that is associated with the seller's key pair.

The signature (S3) is the signature obtained by signing the fields M1, M2, C1, C2, C3, SI and S2. This signature is made by the service provider (ticket vendor) before sending the ticket to the mobile of the user. FIG. 4 represents a kinematics of the exchanges between the different entities of the invention.

It is assumed here that the prerequisites for obtaining the ticket, already described in support of FIG. 1, have been fulfilled during a step E0: the concert ticket (4) has been loaded onto the mobile of the user who wishes to pass the terminal of the concert hall. A sequence of steps, transparent for the user, are then performed between the mobile (T), the SEVI-NFC card (C) and the terminal (B), shown at the top of Figure 4:

When the user approaches, during a step El, the terminal (B), with his mobile (T) hosting the ticket, he selects on his mobile application the ticket (4) he wants to consume. The APM ticket management application on the mobile sends the ticket, during a step E2, to the APS applet of the SIM card and the ticket is stored temporarily in step El i in a memory (Μ ') SIM card. It is a temporary storage before reading by the terminal (B). As is well known to those skilled in the art, to be sure that the ticket is sent to the correct applet, it can be identified by an identification number (called AID). It is recalled here that the secure applet does not know or manage the contents of the ticket: it only makes temporary storage of the ticket that will be consumed. The applet of the SEVI card verifies during a step E12 that the ticket is received (the loading of the ticket may require several data packets), then optionally returns a response attesting to the good reception of the APM application of management of the ticket on the mobile, which receives it during a step E3 and can then ask the user to present his phone at the base station.

When the user is sufficiently close to the terminal, it reads the ticket (E20) in the memory of the SIM card under control of the NFC module (E13): the terminal B immerses the mobile terminal in an electromagnetic field from its NFC module. When the emitted electromagnetic field is sufficiently high to properly power the NFC module of the SEVI card, ie when the mobile phone is sufficiently close to the terminal for the NFC module of the SEVI card to be powered, a communication can be established according to the protocol NFC between the two devices. In particular, as shown schematically by the bidirectional arrow surmounted by the ticket, the terminal can read the ticket in the memory of the SEVI-NFC. Such NFC communication is well known to those skilled in the art and will not be detailed further. However, during the reading and subsequent authentication phases, the data flow of the NFC session passes through a controller (CLF for ContactLess Frontend) of the NFC module, which redirects the data to the SEVI-NFC card via the Single Wire Protocol (SWP). The invention makes it possible to open a single session to the SIM card, via the interface 12, and none to the mobile.

During a step E20, the terminal reads the key reference (Cl) and the algorithm reference (C2) to be used on the SIM card for the signature of the next hazard. Advantageously, there is only one private key in the SIM card and a single signature algorithm for all services, which simplifies the SIM card, avoiding any specificity to the various services.

During an authentication step E21, the terminal sends the SEVI-NFC a randomly generated number, also called a random number. Having a different random number each time prevents a person who has succeeded in recovering a signature of an old random number from reusing it.

The SEVI card receives the hazard (A) during a step E14. During the step E15 it signs it using its private key, and returns the random signed S {A} to the terminal. To sign the random number, the applet uses cryptographic libraries of the SIM card well known to those skilled in the art. Note that only the SIM card of the user of the mobile terminal has this key, which implies that the user is strongly authenticated by this signature.

The terminal receives the signature S {A} during the step E22 and then checks (E23) using the public key of the user, which it read in the ticket, that the signature of this random number has been done with the private key of the user. If step E23 fails, the process stops and the terminal does not give access to the service.

The SIM card of the user being correctly authenticated, the terminal checks during the step E24 the date of validity of the ticket: if it is incorrect, the process stops and the terminal does not give access to the service.

The user being correctly authenticated (via his SIM card) and the valid date, the terminal sends during a step E24 the "business" fields of the ticket (Ml, M2: name of the concert, date, place number, etc.). ) to the business server (6). The business server verifies (E30) that the business fields are correct. If they are incorrect, the process stops and the terminal does not give access to the service.

The business server has the signature (S3) of the ticket verified by the signature verification server (S3) (step E31) by the signature verification server (7) because the server (7) has the public key of the service provider that has signed the ticket. If the signature of the ticket is valid, the business server sends to the terminal (E32) its agreement to allow the user to access the service, that is to say here enter the room. The terminal opens the gantry (E25) and the user can enter.

If the signature is not correct after step E31, the process stops and the terminal does not give access to the service. Once the user has entered, the ticket can be unloaded from the memory of the SIM card (El 6). According to a first example, the SIM card contains only one ticket at a time (ticket in transit); a new ticket (from concert 2) hunts the concert ticket 1 in the SIM: when the user selects the ticket 2, it is transmitted to the SIM which erases the ticket 1, and the same for the following tickets. This avoids unnecessarily overloading the mobile memory. Alternatively, an order is issued by the management application on the mobile (APM) to the applet (APS) of the SEVI card (E4). Note that even when the battery of the mobile terminal is about to be exhausted, the invention can nevertheless make the service to the user. For example, according to a variant of the invention, when the battery reaches a critical threshold, the ticket whose validity date expires earlier can be selected and therefore stored in the SEVI card. Thus, even if the battery of the mobile is exhausted when the user presents it to the terminal, the latter will be able to recover the ticket stored in the SEVI card by feeding it via the electromagnetic field NFC.

Other variants of automatic ticket selection when the battery threshold is reached can be imagined: selection of the last ticket consulted by the user, selection according to the data relating to the validity period of the ticket, selection according to the environment (prefer a metro ticket if you are near a station), etc. We can also plan to store not one, but some tickets in the SEVI card. It goes without saying that the embodiment which has been described above has been given for purely indicative and not limiting, and that many modifications can be easily made by those skilled in the art without departing from the scope of the invention.

Claims

claims

Method of providing an electronic ticket (4) with a security element (C, SIM) associated with a mobile terminal (T), the ticket (4) being stored in the mobile terminal and provided for accessing a service via an access control device (B), the method being characterized in that it comprises the following steps in the security element (C): a step (E10) for receiving the electronic ticket (4) from the mobile terminal (T);

a step (El i) of temporary storage of the electronic ticket (4) in the security element (SEVI);

a step (E13) of providing the electronic ticket for the access control device (B);

an authentication step (E14, E15) taking into account at least one piece of data contained in the ticket and data related to the security element.

a step of erasing (E17) the ticket (4) from the memory of the security device.

A method of providing an electronic ticket (4) according to claim 1, characterized in that it further comprises the following steps: a step (El 6) of reception, from the mobile terminal (T), d an erase order of the ticket stored in the security element;

A method of providing an electronic ticket (4) according to claim 1, said ticket comprising at least one public key of the security element, characterized in that it comprises the steps of: receiving (El 4) d a hazard from the access control device (B);

signature (El 4) of the hazard by means of the private key of the security element;

provision (E15) of the signed hazard for the access control device. Method of providing an electronic ticket (4) according to claim 1 characterized in that at least a portion of the ticket has been signed by means of a private key of the issuing entity.

Method of managing an electronic ticket in a mobile terminal (T), terminal with which is associated a security element (C, SIM), the ticket (4) being provided to access a service via an access control device (B), this method being characterized in that it comprises the following steps at the mobile terminal: a step (El) for selecting an electronic ticket stored by the terminal;

a step (E2) for sending said ticket to the security module.

Method for managing an electronic ticket (4) according to claim 5, characterized in that the communication between the security element (SEVI, C) and the access control device (B) is carried out in the near field ( NFC).

A method for managing an electronic ticket in a mobile terminal (T) according to claim 5, characterized in that it further comprises a step (E3) for sending to the security module an erase command of said ticket.

A method for managing an electronic ticket in a mobile terminal (T) according to claim 5, characterized in that it further comprises a preliminary step (EO) for receiving an electronic ticket from an issuing entity ( 5,9), said ticket comprising at least one public key of the user of the mobile terminal corresponding to the private key that is in the security element.

A method for managing an electronic ticket in a mobile terminal (T) according to claim 5, characterized in that the selection step (El) is automatic if the power supply level of the mobile telephone (T) is reached. below a predetermined threshold, and is carried out according to a pre-established rule.

10. A method for managing an electronic ticket in a mobile terminal (T) according to claim 9, characterized in that the pre-established rule is to select the last ticket consulted by the user.

11. A method for managing an electronic ticket in a mobile terminal (T) according to claim 5, characterized in that the selection step is automatic if the data contained in the ticket include certain predetermined characteristics relating to the validity of the ticket. .

12. Security element (C, SIM) associated with a mobile terminal (T) adapted to make available to an access control device (B) an electronic ticket (4) stored in the mobile terminal characterized in that it comprises the following modules: a reception module (MCI ') arranged to receive an electronic ticket from the mobile terminal (T),

a module (Μ ') for temporary storage of the ticket;

a module (MC2 ') for providing the electronic ticket for the access control device (B);

an authentication module (APS) of the security element (C) able to take into account at least one piece of data contained in the ticket (C3) and a piece of data (K) linked to the security element.

a module for erasing the ticket (4) from the memory of the security device.

13. Mobile terminal (11) with which is associated a security element (C, SIM), able to manage a ticket (4) provided for accessing a service (S) via an access control device (B), characterized in that it comprises the following modules:

A module (APM) for selecting an electronic ticket in the memory (M) of the terminal;

A module (MCI) sending said ticket to the security module.

14. A computer program comprising code instructions for the implementation of the electronic ticket delivery method according to claim 1, when the latter is executed by a processor.

A computer program having code instructions for implementing the ticket management method according to claim 5, when executed by a processor.