EP3311342A1

EP3311342A1 - Method for delegating and verifying rights over a tutee between a tutor and a third party

Info

Publication number: EP3311342A1
Application number: EP16739234.9A
Authority: EP
Inventors: Cédric BARREAU; Alban Feraud
Original assignee: Idemia France SAS
Current assignee: Idemia France SAS
Priority date: 2015-06-22
Filing date: 2016-06-21
Publication date: 2018-04-25
Also published as: WO2016207538A1; FR3037700A1; US20190156446A1

Abstract

The invention relates to a delegation method allowing a tutor (10) to delegate rights over a tutee (20) to a third party (30), comprising the steps of: generating a delegation attestation (71) comprising: a third-party authorisation (33) including the rights over the tutee (21) delegated by the tutor (10) to a third party (31), storing the delegation attestation (71), and storing, if it is not already present, an affiliation attestation (51) giving effect to a tutorship relationship between a tutor (10) and a tutee (20) and including a tutor authorisation (13) comprising the rights allocated to the tutor (10) over the tutee (20). The invention further relates to the corresponding verification method.

Description

Method of delegation and verification of rights on a tutor between a tutor and a third party.

The present invention relates to the definition and implementation of relationships that may exist between a tutor, a tutored and at least one third, and securely. More particularly, the present invention relates to the delegation, by a guardian, of rights on a tutored to a third party.

A tutored person means, in the present, a person who can not carry out only a formality. The realization of such a formality requires the control of a guardian. A guardian means, in the present, a person holding rights for the tutored and able to carry out a formality on behalf of the tutored or authorize the tutored to carry out a formality. When a formality involves a tutored person, to our knowledge, there is currently no means of achieving such a formality taking into account the particular situation of the tutored, of his limited rights and, where appropriate, of the necessary intervention of the tutor.

The present invention overcomes these disadvantages and proposes to carry out a delegation to transfer the rights of the guardian to a third party, so that the latter is able to replace the guardian. The corresponding verification method is also proposed.

The subject of the invention is a method of delegation, by a tutor, of rights to a tutored person to a third party, comprising the following steps: creation of a delegation certificate comprising: a third party authorization including the rights delegated to the third party on the tutored by the tutor, storage of the certificate of delegation, storage, if it is not already present, of a certificate of affiliation materializing a tutoring relationship, between a tutor and a tutor, including a tutor authorization including rights allocated to the tutor on the tutored.

According to another characteristic, the method comprises the next step is the production of an electronic guarantee of the integrity and authenticity of the delegation certificate.

According to another characteristic, the electronic guarantee is a delegation seal produced by electronic signature of the delegation certificate by means of a cryptographic material guardian associated with the tutor, and the method still includes the following step: storage of the delegation seal .

According to another feature, the guardian cryptographic material includes a guardian public key and a guardian private key, and the portion of the guardian cryptographic material used to produce the delegation seal includes the guardian private key.

According to another characteristic, the delegation certificate also includes a guardian attribute and / or a tutored attribute and / or a third attribute.

According to another characteristic, the tutor is associated with a guardian cryptographic material, and the tutor attribute comprises at least part of the tutoring cryptographic material, and / or the tutor is associated with a tutored cryptographic material, and the tutored attribute comprises least part of the tutored cryptographic material, and / or the third party is associated with third-party cryptographic material, and the third-party attribute comprises at least a portion of the third-party cryptographic material.

According to another feature, the cryptographic material tutor includes a public key tutor and a private key tutor, and the part of the cryptographic material guardian included in the guardian attribute includes the public key tutor, and / or the cryptographic material tutored includes a public key tutored and a private key tutored, and part of the material cryptographic tutelage included in the tutored attribute includes the tutored public key, and / or the third party cryptographic material includes a third party public key and a third party private key, and the portion of the third party cryptographic material included in the third party attribute includes the third party public key .

According to another characteristic, the electronic signature step is conditioned on the provision of a guardian document and on the authentication of the bearer of the guardian document, by means of a PIN code associated with the guardian document, and / or an identification biometric, and / or proving that the holder knows a guardian attribute included in the certificate of affiliation or in the certificate of delegation.

According to another characteristic, the storage step (s) is (are) carried out: on a tutor document associated with the tutor, on a tutored document associated with the tutor, on a third party document associated with the third party, on a mass storage medium, on a network storage medium, or distributed over several of the previous media.

According to another characteristic, the tutor document, the tutored document and the third document are electronic documents, produced by an authority, the electronic tutor document storing the cryptographic material tutor, the tutored electronic document storing the cryptographic material tutored, and the electronic document third party stores the third party cryptographic material.

The invention also relates to a method of delegation, by a third party who has been delegated by such a delegation process, rights to a tutored, to a secondary third, including the following steps: creation of a delegation certificate comprising: a secondary third party authorization including the rights delegated to the third party on the tutored by the third party, storage of the delegation certificate, storage, if it is not already present, of an affiliation certificate embodying a tutoring relationship, between a tutor and a tutor, including a tutor authorization including the rights allocated to the tutor on the tutor, storage, if they are not already present, attestations of delegation materializing the successive delegations, between the tutor and the third party.

The invention also relates to a method of emancipation by a third party who has been delegated by such a delegation process, a tutored, comprising the following steps: - creation of an emancipation certificate comprising: a tutored authorization comprising the emancipated rights to the tutored by the third party, storage of the certificate of emancipation, storage, if it is not already present, of a certificate of affiliation materializing a tutoring relationship between a tutor and a tutor with a license tutor including the rights allocated to the tutor on the tutored, storage, if they are not already present, attestations of delegation materializing the successive delegations, between the guardian and the third party.

The subject of the invention is also a method for verifying a delegation, carried out by the delegation method, comprising the following steps: reading the affiliation certificate, possibly checking the origin and the integrity of the Affiliation certificate by control of the associated electronic guarantee, reading of the certificate of delegation, possible control of the origin and integrity of the delegation certificate by checking the associated electronic guarantee, exploitation of the third party authorization.

According to another characteristic, the control of the origin and the integrity of the affiliation certificate also comprises the following steps: reading of the seal of affiliation, checking of the seal of affiliation by means of at least a part authoritative cryptographic material, and the control of the origin and integrity of the delegation certificate also includes the following steps: reading at least part of the cryptographic material tutor, reading the delegation certificate, reading the delegation seal, control of the delegation seal by means of at least a portion of the cryptographic material guardian.

According to another characteristic, the material cryptographic authority includes a public key authority and a private key authority, and the portion of the authoritative cryptographic material used to control the affiliation seal includes the public key authority, and the cryptographic material guardian includes a public key guardian and a private key guardian, and the portion of the cryptographic material guardian used to control the delegation seal includes the public key guardian.

According to another characteristic, the method also comprises at least one of the following steps: if a tutored attribute is included in the certificate of affiliation or in the delegation certificate, possible control of the authenticity of the tutored person by proving that it knows the said tutored attribute, if a third party attribute is included in the certificate of affiliation or in the delegation certificate, a possible control of the authenticity of the third party by proving that he knows the said third attribute.

According to another characteristic, the method also comprises at least one of the following steps: if a part of the tutored cryptographic material is included in the affiliation certificate or in the delegation certificate, possible control of the authenticity of the document tutored in proving that he or she holds at least some of the tutored cryptographic material, if any part of the third party cryptographic material is included in the affiliation certificate or in the delegation certificate, any verification of the authenticity of the third party document proving that it owns at least some of the third party cryptographic material.

According to another characteristic, the method also comprises at least one of the following steps: if the tutored cryptographic material comprises a tutored public key and a tutored private key and if said tutored public key is included in the affiliation certificate or in the attestation of delegation, possible control of the authenticity of the tutored electronic document by proving that it holds the tutored private key, by means of a defi-response with said tutored public key, if the hardware cryptographic third party includes a third party public key and a third party private key and if said third party public key is included in the certificate of affiliation or in the delegation certificate, verification of the authenticity of the third party electronic document proving that it holds the third party private key, by means of a challenge-response with said third party public key.

The invention also relates to an electronic document comprising an affiliation certificate and / or an associated electronic guarantee, and / or a certificate of delegation and / or an associated electronic guarantee.

According to another characteristic, the electronic document comprises a guardian attribute, respectively a tutored attribute, respectively a third party attribute, in order to form an electronic tutor document, respectively a tutored electronic document, respectively a third electronic document.

Other characteristics, details and advantages of the invention will emerge more clearly from the detailed description given below as an indication in relation to drawings in which:

FIG. 1 illustrates an affiliation between an electronic tutor document and a tutored electronic document,

- Figure 2 illustrates a delegation of rights to a tutor, performed by a tutor for the benefit of a third party,

- Figure 3 illustrates an emancipation benefiting a tutored by a third delegate,

- Figure 4 illustrates a delegation of rights on a tutored by a third delegated to the benefit of a secondary third.

The definition of the terms used in this letter should be clarified.

The tutored person is a person, whose prerogatives are limited, in that it can not carry out certain formalities alone, but can perform them under the supervision of a tutor. The tutored person is, for example, a person presenting limited legal capacity. It may be a minor, a person under guardianship or a person under guardianship. The tutor is, for example, a subordinate, whose access / permissions / rights on a system are defined under the control of a superior. The term tutored means in the present indifferently for all these terms.

By extension the term tutored is used in this to describe elements attached to the tutored person. This is the case of a tutored document, a tutored electronic document, a tutored cryptographic material, a tutored cryptographic pair, or a tutored public / private key.

The tutor is a person, having authority over the tutored, to allow the tutored to achieve, under the supervision of the tutor, operations that the tutored could not achieve alone. The guardian is, for example, a person with the capacity to represent the tutel, in the legal sense. It may be a parent or guardian in the case of a minor, a tutor in the case of a person under guardianship or a curator in the case of a person under guardianship. The tutor is, for example, a superior. The term guardian means in the present indifferently for all these terms.

By extension the term guardian is used in the present to qualify elements attached to the guardian person. This is the case of a tutor document, an electronic tutor document, a cryptographic tutor material, a cryptographic guardian pair, or a public / private key tutor.

The third is a person. He is able to receive a delegation from a guardian or another third party. He is able to replace the tutor in his prerogatives. Also some conditions may apply to third parties, such as majority or capacity.

By extension the term third party is used herein to describe elements attached to the third party. This is the case of a third document, an electronic document third, third-party cryptographic hardware, third-party cryptographic pair, or third-party public / private key.

A document is a medium capable of recording information. It can be a sheet, a cardboard, a booklet, a plastic card, a badge, a magnetic tape, able to receive a written inscription, drawn, printed, engraved, embossed, visible or hidden, a barcode, a QR code, etc .... A document is advantageously issued by an authority. In order to guarantee its origin, its authenticity, its origin and its integrity, a document advantageously comprises an authentication and / or security device: a buffer, an ampliation, a hologram, or any means of signature emanating from the authorization authority. issue in order to offer a guarantee of origin and integrity.

A particular case of document is an electronic document. An electronic document 11, 21, 31, 31 'is an information storage means, such as a memory, secured by a microcircuit or chip. Its shape can be variable and includes a microcircuit card, such as a credit card or a SIM card, a USB key, a memory card, such as an SD card, an RFID tag, etc. An electronic document thus comprises a storage area accessible only by means of a dialogue with the microcircuit, which makes it possible to apply any type of access control to the stored data. An electronic document 11, 21, 31, 31 'is thus able to store cryptographic material 12, 22, 32, 32'. The microcircuit gives the electronic document a processing capacity, making it possible to carry out calculations, comparisons and thus tests of coherence, authentication or encryption or an electronic signature.

Such an electronic document 11, 21, 31, 31 'can be used as a telephone card, social insurance card, bank card, driver's license, identity document, such as an electronic identity card, or travel document, such as an ePassport. Such an electronic document is most often attached to a person or carrier, and he allows to transport personal data in a secure manner, typically by cryptographic and / or biometric material. These data and materials may allow the holder of the electronic document to state his rights.

Thus, an identity document enables a person to prove his identity by giving a certain indication of his marital status. A social insurance card may contain a person's medical file as well as the state of his rights to care. A credit card allows a person to perform transactions, transfer, withdrawal, etc. on his bank account (s). A travel document allows a person to prove his identity and allows him to travel by allowing him to carry out a formality of control at the crossing of a border.

In the present description several interveners are holders of a cryptographic material 12, 22, 32, 32 ', 42, comprising for example a cryptographic pair 12, 22, 32, 32', 42. This cryptographic pair is personal and attached to a speaker (authority, tutor, tutored, third party, ...) and is stored securely, for example in an electronic document attached to the speaker. This cryptographic pair may be, in a known manner, an asymmetric cryptographic material comprising a public key PuKxx and a private key PrKxx associated, where xx is a code designating the speaker: Au = authority, tu = guardian, Te = tutored, Ti = third, Ti '= secondary third. Such a cryptographic pair 12, 22, 32, 32 ', 42 may, for example, be of the RSA type, two-key on elliptic curves, ECC or equivalent.

Such a cryptographic pair 12, 22, 32, 32 ', 42 allows several treatments. A basic property is that a signature by means of the private key PrKxx can be verified by means of the associated public key PuKxx, without however revealing or making it possible to deduce the private key PrKxx. The public key PuKxx can be broadcast to the recipients, who are then able to check, using the public key PuKxx, a signature made with the private key PrKxx, but without being able to achieve a signature.

An electronic document advantageously makes it possible to store a private key PrKxx, and to make a signature by means of this private key, without disclosing or externalizing said private key PrKxx, which remains specific to its holder and under its exclusive control.

This allows an agent to authenticate, proving that he is in possession of a private key PrKxx of his own, without disclosing this private key PrKxx. This is typically done by means of an exchange called defi-response. A controller, in possession of a person's PuKxx public key, challenges a suitor by submitting a random test data to him. The suitor signs the test data by means of its private key PrKxx and returns the signed data to the controller. The controller verifies the signed data returned by means of the public key PuKxx. If the signature received and the initial test data match, in that the signature received can be correctly verified from the test data by means of the associated public key, the suitor does indeed have the private key PrKxx and can reasonably be considered to be the nobody. This makes it possible to authenticate a person.

It is still possible to use such a cryptographic pair 12, 22, 32, 32 ', 42 to electronically sign data by making a seal 16, 17, 38, 39, 44, to ensure the integrity of a transmitted data. In this case, an issuer transmits data and accompanies this data with an electronic seal 16, 17, 38, 39, 44 made by signing, by means of its private key PrKxx at least a part or condensate of the data. The receiver, which has the public key PuKxx of the transmitter, checks the seal by means of said public key PuKxx and compares the result with the part or condensate of the data. If they are identical, the seal has been made by means of the private key PrK associated with the public key PuK, which attests that the data originates from the issuer and that the data is integrity and has no not changed since the signature. All cryptographic pairs used by the invention are pre-existing. Also an important advantage of the invention is not to require new cryptographic hardware.

Following these general considerations, it will now be described a delegation process allowing a tutor to delegate at least part of his rights on a tutored to a third party. A delegation requires a prior affiliation to materialize a tutoring relationship between a tutor and a tutor.

Also a description of an affiliation process, object of another request of the same claimant, is it recalled here for memory.

The delegation process is further associated with a verification method.

The first need relates to the definition of the tutoring relationship, linking a tutor 10, and a tutored 20, and associated rights, to materialize said tutoring. For this, as illustrated in Figure 1, it is achieved an affiliation between a tutor 10 and a tutored 20, by means of an affiliation process. Such affiliation is materialized by a certificate of affiliation 51 which includes at least one guardian authorization 13 including the list of rights allocated to tutor 10 on tutoré 20. Such affiliation certificate 51 may include any medium or means of registration. sustainable.

It may be a handwritten or printed letter, a microfilm, a sound recording listing these rights, etc. Such an affiliation certificate 51 is, after its creation, registered or stored so that it can be subsequently consulted for use and allow a tutor or a tuteman to assert at least one of his rights.

According to an advantageous embodiment, an affiliation certificate is advantageously digital in order to be stored and processed by computer.

In order to secure an affiliation certificate 51, it is advantageously produced a guarantee of integrity and authenticity. Such a guarantee is advantageously affixed to or associated with the affiliation certificate 51 in that it incorporates at least one element of the affiliation certificate 51 in order to be linked thereto. Such a guarantee is advantageously difficult to reproduce and resistant to any modification in order to constitute a secure guarantee. In addition, the guarantee is advantageously provided by the authority 40 which issues the affiliation certificate 51 in order to authenticate the origin of the affiliation certificate 51 and its integrity.

Such a guarantee can take various forms, from the simplest to the most complex, depending on the desired security. Thus, a guarantee may be a right of access to writing, held by the authority 40, on the medium or part of the medium in which the affiliation certificate is stored. A sharing of access rights with an organization performing the verification may help to guarantee the authenticity and integrity of the affiliation certificate 51. A guarantee may still be any security device capable of being controlled by a verifier . An electronic guarantee of integrity can still, for example, be a checksum. Other embodiments of such a guarantee and the associated methods of verification are possible and only limited by the imagination of those skilled in the art.

It is advantageously possible to use said guarantee in order to verify it and thus confirm the authenticity and integrity of the affiliation certificate 51.

According to a preferred embodiment, the guarantee is electronic.

According to a preferred embodiment, the electronic guarantee is an affiliation seal 44 produced by electronic signature of the affiliation certificate 51 by means of an authoritative cryptographic material 42 associated with an authority 40. This authority 40 may be a trusted third party and in a particular case, the authority 40 issuing the certificate of affiliation 51.

After producing such an affiliation seal 44, by electronic signature, this affiliation seal 44 is advantageously stored. It may be stored anywhere, together or separately from the affiliation certificate 51. It may, according to a particular embodiment, be incorporated in the affiliation certificate 51. The only constraint is that the seal of affiliation Affiliation 44 may be re-read if necessary, for example to carry out an audit of the affiliation certificate 51.

According to one characteristic, the affiliation certificate 51 also includes an attribute of the tutor and / or an attribute of the tutor. An attribute here refers to an element, record, datum, possession, etc. relative or associated with the respective person of the guardian and / or tutored, and allowing to establish a link with the person. For example, this may include the person's name, social security number, photo ID, preferred color, PIN code, biometric data, cryptographic means, etc.

According to one embodiment, the tutor 10 is associated with a tutoring cryptographic material 12. In this case, the tutor attribute may be composed of at least a portion of the tutoring cryptographic material 12. Similarly, the tutor may be associated with tutored cryptographic material 22. In this case, the tutored attribute comprises at least a portion of the tutored cryptographic material 22.

It has been seen previously that both the affiliation certificate 51, and a possible affiliation seal 44, could be stored. This storage can be performed on any medium, as long as it can be read for future use. Thus, this storage can be performed on a tutorial document 11 associated with the tutor 10, on a tutored document 21 associated with the tutored tutorial 20, but more generally on any mass storage medium, such as a local hard disk, a memory card, a USB key , a microcircuit card, a phone, etc. or on such a mass storage medium accessible via a communication network, and which is designated network storage medium. Each of the stored elements can be in extenso on only one of these supports or still to be divided into several parts, each part being stored on a storage medium, among the previous supports.

According to a preferred embodiment, the tutor 10 is associated with an electronic document tutor 11 and the tutor 20 is associated with a tutored electronic document 21. In this case, as illustrated in FIG. 1, an affiliation is performed, electronically, between the tutor 10 represented by the electronic tutor document. 11 and the tutored 20 represented by the tutored electronic document 21, by means of an affiliation method.

According to a preferred embodiment, the cryptographic tutor material comprises a guardian cryptographic pair 12 comprising a public key tutor PuKTu and a private key tutor PrKTu. According to a preferred embodiment, the tutored cryptographic material comprises a tutored cryptographic pair 22 comprising a tutored public key PuKTe and a tutored private key PrKTe. The cryptographic guardian pair 12, respectively tutored 22, is typically stored on the tutorial electronic document 11, respectively tutored 21.

The electronic tutor 11 and tutored 21 documents are produced by an authority 40. This authority 40 has an authoritative cryptographic material 42 comprising an authoritative cryptographic pair 42 comprising an authoritative public key PuKAu and a private key authority PrKAu. This authoritative cryptographic pair 42 is typically stored in a very secure "super" electronic document 41, also called a hardware security module MMS (or hardware security module HSM) serving as a cryptographic safe. All the security of the system according to the invention is based on the preservation of the secrecy of the authoritative cryptographic material and particularly of the private key authority PrkAu.

Authority 40 refers here to the body in charge of issuing electronic documents 11, 21. Thus, for a travel document, it is typically a government, or in the practice of a certifying industrialist document (document sign or DS in English) working for the account and under the control of the government and to which the government technically subcontracts the manufacture of electronic documents.

As in the general case previously described, the affiliation process comprises a first step of creating an affiliation certificate 51. This affiliation certificate, which materializes the tutoring relationship, includes a guardian authorization 13. It can still include a guardian attribute, for example in the form of the public key tutor PuKTu. The tutor authorization 13 is a file including the rights of the tutor 10, the tutor 20. This tutor authorization 13 defines the tutor (s), the tutor (s), and the tutor's rights on the tutor: what the tutor can do for and / or instead of the tutored, what the tutor can allow the tutored with or without the presence of the tutor, what the tutor can possibly delegate to a third party, the possible conditions of exercise of these rights and the possible limits, both in space and time, of these rights.

The definition of these rights is related to the application. Thus, in a secure database access system, the rights may include the areas of the base accessible or not to the tutored, the modalities: read only, write, delete, and the possible modifications of these zones and modalities that the tutor can realize. In the case of a travel document of a minor child (tutored), the rights of the parent (guardian) are defined by law and may be modified by court order.

During a second step, the whole, via at least one part or condensate from each of the constituents, of the content of the affiliation certificate 51 is the subject of an electronic signature by means of the authoritative private key PrKAu. This produces an affiliation seal 44, guaranteeing the origin (the authority 40) and the integrity of the affiliation certificate 51.

In a third step the attestation Affiliation 51 and Affiliation Seal 44 are stored, together or separately, for example, in the tutorial electronic document 11, in the tutored electronic document 21, or in both.

According to one embodiment, it is still possible to store the affiliation certificate 51 and the affiliation seal 44 partly in the electronic tutor document 11 and partly in the electronic tutored document 21. In this case, the recovery of the two elements, for example for verification, requires the electronic tutor document 11 and the tutored electronic document 21. This is applicable in cases where a formality, requiring the affiliation certificate 51 and the affiliation seal 44, requires the presence conjoint of the tutor electronic document 11 and the tutored electronic document 21.

According to another embodiment, the affiliation certificate 51 and / or the affiliation seal 44 may still be stored, if necessary partially, in at least one other medium. Advantageously if a reading of one or the other is necessary, it is appropriate that said support can be present or at least accessible remotely to allow said reading.

Figure 1 illustrates an embodiment of the affiliation method. An affiliation certificate 51 is created including a guardian authorization 13 containing the rights of the guardian 10. The electronic guardian document 11 provides (indicated by a thin arrow) systematically (indicated by a solid line) the public guardian key PuKTu. The tutored electronic document 21 provides (indicated by a thin arrow) optionally (indicated by a dotted line) the tutored public key PuKTe. The electronic safe authority 41 signs (indicated by a thick arrow) the certificate of affiliation 51 by means of the private key authority PrKAu and produces an affiliation seal 44. The affiliation certificate signed 51 and the seal of affiliation affiliation 44 are stored (indicated by a large white arrow), for example, in the tutored electronic document 21 and / or in the electronic document tutor 11. The public key tutor PuKTu is useful, as described later, for verification operations. As such, the public key guardian PuKTu is included in the certificate of affiliation 51.

For another function, described below, verifying the authenticity of the tutored electronic document 21, respectively of the electronic tutor document 11, it may be useful to have the tutored public key PuKTe, respectively of the public key tutor PuKTu. Also, optionally, the affiliation certificate 51 may further include the PuKTe tutored public key.

Attestation of Affiliation 51 is the highest level certificate, which most other operations will depend on. It is signed by the authority 40, can only be produced by the authority and requires the presence of the electronic document (s) 11,21 or medium (s) on which the certificate (s) affiliate 51 is stored.

Once created, an affiliation can be verified, typically prior to the completion of a formality. A verification process depends on the form and content of the affiliation. Thus an affiliation with no associated guarantee, can only be difficult to verify, except to achieve an aspect control.

An affiliation including a guarantee, electronic or not, can be verified. The verification mode is dependent on the form of the guarantee.

An affiliation verification method performed by the previously described method comprises the following steps. A first step is to read the affiliation certificate 51 from the medium where it is stored. Then a check is made by checking the associated guarantee.

In the case where the guarantee is an affiliation seal 44, another step consists in reading the affiliation seal 44 from the support (s) on which it has been stored. a second step the origin and integrity of the affiliation certificate 51 are verified by means of the affiliation seal 44. This verification is carried out at means of authoritative cryptographic material 42.

If this verification proves to be positive, the affiliation certificate 51 is deemed to be authentic and intact, and its contents, including the guardian authorization 13, can be used safely.

The affiliation method and the affiliation verification method, under the control of the authoritative cryptographic pair 42, ensure that the affiliation certificate 51 has a high level of legitimacy, since it is guaranteed by the authority 40.

Depending on the embodiment, the control may change form. In the case where a guardian attribute is available, the authenticity of the guardian 10 can be controlled by offering the guardian the possibility, for example by means of a dialogue via a man-machine interface, to prove that he knows the guardian attribute. included in the certificate of affiliation 51.

This proof can be done in different ways and this knowledge must be understood in a very broad way. This knowledge can be by knowledge proper or by possession. It can be direct or indirect. It can still be partial or complete.

Direct knowledge refers to a knowledge that the holder directly holds. So a wearer knows his name or date of birth directly. He is a natural bearer of his facial image comparable to a photo ID or a biometric print of which he can give or give back a sample or an image. Direct knowledge is still a password or a PIN. An indirect knowledge or possession / possession is understood by means of a visual, magnetic, storage medium, which can then be presented during the inspection. This is the case of a barcode, a photo or graphic representation, a password, a cryptographic material.

The control is then validated if the carrier claiming to be the tutor 10 is able to respond to the request for guardian attribute evidence made to him by presenting directly or indirectly a satisfactory answer in terms of expected guardian attribute.

If the guardian attribute consists of a part of the cryptographic material guardian 12 included in the affiliation certificate 51, the control of the authenticity of the guardian document 11 can be done by proving that the guardian document 11 holds at least a part of the material cryptographic tutor 12.

If the cryptographic material guardian 12 includes a public key guardian PuKTu and a private key tutor PrKTu, the verification of the authenticity of the electronic document guardian 11 is performed by proving that it holds the private key tutor PrKTu. This is typically done by challenge-response, as previously described, with the public key tutor PuKTu, if said public key tutor PuKTu is available, for example included, in the certificate of affiliation 51.

The tutor 10, and with him his electronic tutor document 11, is thus able to prove that he holds the private key tutor PrKTu corresponding to the public key tutor PuKTu extracted from the certificate of affiliation 51 and so s' authenticate.

This can typically be done during a checkout if the guardian 10, with his guardian electronic document 11, is present and involved in said formality.

Depending on what is available, the control can change form. In the case where a tutored attribute is available, the authenticity of the tutored can be controlled by offering the tutored the possibility, for example by a dialogue by means of a man-machine interface, to prove that he knows the tutored attribute. included in the certificate of affiliation 51.

As for the tutor, this knowledge must be understood in a very broad way.

The control is then validated if the bearer who claims to be the tutored one is able to respond to the tutored attribute proof request made to him by directly or indirectly presenting a satisfactory answer in terms of the expected tutored attribute. If the tutored attribute consists of a part of the tutored cryptographic material 22 included in the affiliation certificate 51, the control of the authenticity of the tutored document 21 can be done by proving that the tutored document 21 holds at least a part of the material cryptographic tutored 22.

If the tutored cryptographic material 22 comprises a tutored public key PuKTe and a private key tutored PrKTe, the verification of the authenticity of the tutored electronic document 21 is achieved by proving that it holds the tutored private key PrKTe. This is typically done by challenge-response, as previously described, with the public tutored PuKTe key, if said tutored public key PuKTe is available, for example included, in the affiliation certificate 51.

The tutored 20, and with him his tutored electronic document 21, is thus able to prove that he holds the private key tutored PrKTe corresponding to the tutored public key PuKTe extracted from the certificate of affiliation 51 and so s' authenticate.

This can typically be done during a control formality, if the tutored 20, with his tutored electronic document 21, is present and involved in said formality.

Affiliation is the first brick, essential, of the building. It can be used for different operations: emancipation and delegation.

A delegation to a third party 30 allows a tutor 10 to delegate at least one right to a tutor 20 by transferring this right to a third party 30, in order to allow the third party 30 to replace the tutor 10, in that it can allow the tutored to perform a formality, normally only feasible in the presence of the tutor 10, in the presence of the third party 30, including in the absence of the tutor 10. In this case, the necessary effective presence of the guardian 10 is replaced by the presence of the third party 30 and by a certificate of delegation 71 indicating what rights the guardian authorizes the third party to exercise for him and within what limits of time and space. For this purpose, a delegation process includes a step of creating a delegation certificate 71. Such a delegation certificate 71 includes a third party authorization 33 comprising the rights emancipated to the third party 30 by the tutor 10.

Like the certificate of affiliation 51 and in similar terms, the delegation certificate 71 is advantageously stored, so that it can be later found to be controlled and operated.

The delegation certificate 71, in order to be exploited and / or controlled, requires a certificate of affiliation 51 in order to define the link between the tutor 10 and the tutor 20. It is supposed that such a certificate of affiliation 51 pre-exists and is already stored. Otherwise, it can be created on the occasion of the delegation, and / or be stored.

As for the affiliation certificate 51, a guarantee of integrity and authenticity may be produced associated with the delegation certificate 71. This guarantee may be electronic.

According to a preferred embodiment, the electronic guarantee is a delegation seal 17 produced by electronic signature of the delegation certificate 71 by means of a cryptographic material tutor 12 associated with the tutor 10.

After producing such a delegation seal 17, by electronic signature, this delegation seal 17 is advantageously stored. It may be stored anywhere, together or separately from the delegation certificate 71. It may, according to a particular embodiment, be incorporated in the delegation certificate 71. The only constraint is that said delegation seal 17 may be be re-read when necessary, for example to carry out a verification process of the delegation certificate 71.

According to one characteristic, the delegation certificate 71 also includes an attribute of the tutor and / or an attribute of the tutor and / or an attribute of the third party. An attribute here refers to an element, record, datum, possession, etc. relative or associated with the respective person of the tutor and / or tutored and / or third party, and to establish a link with the person.

According to one embodiment, the tutor 10 is associated with a tutoring cryptographic material 12. In this case, the tutor attribute may be composed of at least a portion of the tutoring cryptographic material 12. Similarly, the tutor may be associated with In this case, the tutored attribute comprises at least a portion of the tutored cryptographic material 22. Similarly, the third party 30 may be associated with third-party cryptographic material 32. In this case, the third-party attribute includes at least some of the third party cryptographic material 32.

It has been seen previously that both the delegation certificate 71, and a possible delegation seal 17, could be stored. This storage can be performed on any medium, as long as it can be read for future use. Thus, this storage can be performed on a tutorial document 11 associated with the tutor 10, on a tutored document 21 associated with the tutored 20, or on a third document 31 associated with the third party 30, but more generally on any mass storage medium or on such a mass storage medium accessible via a communication network, and which is designated network storage medium. Each of the stored items can be in extenso on only one of these supports or be divided into several parts, each part being stored on a storage medium, among the previous supports.

According to a preferred embodiment, the tutor 10 is associated with an electronic tutor document 11, the tutor 20 is associated with a tutored electronic document 21, the third party 30 is associated with a third electronic document 31.

In this case, as illustrated in FIG. 2, a delegation operation is performed and implemented electronically by a delegation method. As in the general case previously described, the delegation method comprises a first step of creating a delegation certificate 71 which includes a third party authorization 33. The third party authorization 33 is, like the authorization guardian 13, a file comprising the rights delegated to the third party

30 by the tutor 10. It defines, what the third party 30 can do for the tutored 20 instead of the tutor 10, including in the absence of the tutor 10. The third party authorization 33 still includes the possible conditions of exercise of these rights and the possible limits, both in space and time, of these rights.

Logically, the rights thus delegated to the third party 30 can not go beyond the rights actually available to the tutor 10. Also the third party authorization 33 is advantageously a subset of the guardian authorization 13. This necessary relationship can be verified at the time of the creation of the third party authorization 33 during the delegation process. Alternatively, this relationship can be verified at any time by one of the verification methods, for example prior to the exercise of one of the rights.

During a second step, at least a part or condensate of the content of the delegation certificate 71 is the subject of an electronic signature by means of the private key tutor PrKTu. This produces a delegation seal 17, guaranteeing the origin (guardian 10) and the integrity of the delegation certificate 61.

During a third step, the delegation certificate 71 and the delegation seal 17 are stored, together or separately, advantageously in the tutored electronic document 21, in the third electronic document.

31 or in both. Storage in the electronic document tutor 11 (or in another electronic document) would also be possible, but turns out in practice not very effective since the purpose of a delegation is to allow the guardian 10 to be absent. Here the use of a network medium for performing the storage is advantageous, insofar as said network is accessible during use, verification or exploitation of the delegation certificate 71.

In order to allow verification of the delegation certificate 71 and the delegation seal 17, a copy of the affiliation certificate 51 and associated affiliation seal 44, produced by the aforementioned affiliation method, is necessary. Also, if they are not already present on the tutored electronic document 21 or the third electronic document 31, the affiliation certificate 51 and the affiliation seal 44 are advantageously stored in the tutored electronic document 21, in the third electronic document 31 or in both.

According to one embodiment, it is still possible to store the affiliation certificate 51 and the affiliation seal 44, respectively the delegation certificate 71 and the delegation seal 17, partly in the tutored electronic document 21 and in part in the third electronic document 31. In this case the recovery, for example for a verification, requires the tutored electronic document 21 and the third electronic document 31. This is applicable in cases where the formality requiring the certificate of affiliation 51 and the affiliation seal 44, respectively the delegation certificate 71 and the delegation seal 17, requires the joint presence of the tutored 20 and the third party 30 and therefore the joint presence of the tutored electronic document 21 and the third electronic document 31.

Alternatively again, any alternative storage medium is here possible to the extent that it is accessible when needed. The tutored electronic document 21, in that it usually accompanies the tutored 20, is a support advantageously available and present. Similarly, the third electronic document 31, in that it generally accompanies the third party 30, is a support advantageously available and present.

Figure 2 illustrates an embodiment of the delegation method. A delegation certificate 71 is created comprising a third party authorization 33 containing the rights delegated to the third party 30. The tutored electronic document 21 provides (indicated by a thin arrow) optionally (indicated by a dotted line) the tutored public key PuKTe. The third electronic document 31 provides (indicated by a thin arrow) optionally (indicated by a dash dotted) PuKTi third party public key. The electronic document guardian 11 signs (indicated by a thick arrow) the delegation certificate 71 by means of the private key tutor PrKTu and produces a delegation seal 17. The signed delegation certificate 71 + 17 is stored (indicated by a large white arrow) in the tutored electronic document 21, in the third electronic document 31 or in both. The affiliation certificate signed 51 + 44, made during the affiliation process, is still stored in the tutored electronic document 21, in the third electronic document 31 or in both.

The tutor 10, via his electronic tutor document 11, acts, during the delegation process, as an authority. However, its level of security and its legitimacy are conferred on it by the authority 40. Also the presence of the certificate of affiliation 51, in addition to the delegation certificate 71 is required. It is thus in the presence of a stack of attestations 51, 71, which complement each other and confer security coming from the highest level: authority 40.

In contrast to the affiliation which requires a signature by the authority and can therefore only be achieved in the premises and by means of the cryptographic infrastructure 41 of the authority 40, the delegation uses a signature by the tutor 10. The creation of a delegation certificate 71 requires the electronic document guardian 11 for the signature step by means of the private key tutor PrKTu. It still requires the tutored electronic document 21 and / or the third electronic document 31 for the step of storing the delegation certificate 71 and the delegation seal 17 and, if necessary, for the step of copying / storing the document. certificate of affiliation 51 and affiliation seal 44. However, these electronic documents 11, 21, 31 are portable and autonomous. Thus the electronic document tutor 11 can autonomously perform the signature step. As a result, very advantageously, the delegation process can be achieved by means of a very light infrastructure. So, by example, a person equipped with an electronic document reader, as the case may be: SD card reader, USB reader, microcircuit card reader, etc., available on a personal computer or equivalent and a simple and standard software application adapted, can achieve, for example from home, the delegation process if it has the electronic document tutor 11 and the electronic document tutored 21 and / or third electronic document 31. There is thus no need for a connection to a secure network, neither through a trusted third party nor from a body authorized by the authority 40.

For another function, already mentioned above, to verify the authenticity of the tutored electronic document 21, respectively the third electronic document 31, it may be useful to have the tutored public key PuKTe, respectively the third public key PuKTi. Also, optionally, and particularly if it is not included in the affiliation certificate 51, the delegation certificate 71 can still include the public key tutored PuKTe. Similarly, optionally, the delegation certificate 71 may further include the third party public key PuKTi.

In return for the simplicity of the means for implementing the delegation method, the signature by the tutor 10 becomes an important step in the delegation process and makes it possible to transmit rights vested in the tutor 10 by the authority 40 itself. Therefore, it should be ensured that the signature step is well performed, preferably in the presence, but at least with the agreement, of the tutor 10 and not only in the presence of the tutor electronic document 11, which could be accessible by example tutored 20. Also according to an advantageous optional feature, the electronic signature step of the delegation process is conditioned to an authentication of the holder of the electronic document guardian 11. This authentication is intended to ensure the presence, but especially the consent of the tutor 10 to the delegation, in principle and in its content. This authentication of the document holder Electronic tutor 11 can be performed by any means. Thus, for example, the entry of a secret code, type PIN code associated with the electronic document tutor 11, may be required. A biometric identification check may alternatively or additionally authenticate the guardian.

The collection of the consent of the tutored 20, is a priori required for a delegation. In addition, depending on the case, the tutored 20 is not necessarily able to give such consent. However, a step of collecting such consent can easily be included in a delegation process, for example by means of a tutored authentication step 20, by verification of a PIN code and / or by a biometric test. .

The collection of the consent of the third party 30, to receive the delegation can easily be included in a delegation process, for example by means of a step of authentication of the third party, by verification of a PIN code and / or by a biometric test .

Once created, a delegation may be verified, typically prior to the completion of a formality requiring a right exercised by the third party 30. Before any use of a delegated right, it is preferable to check the delegation.

A method of verifying a delegation depends on the form and content of the delegation.

A delegation including a guarantee, electronic or not, can be verified. The verification mode is dependent on the form of the guarantee.

A method of verifying a delegation performed by the previously described delegation method comprises the following steps. A first step is to read the affiliation certificate 51 from the medium on which it was stored. In a second step, the origin and integrity of the affiliation certificate 51 are verified by means of a check of the associated electronic guarantee. A third step is to read the delegation certificate 71 from the medium on which it was stored. During a fourth stage the origin and the integrity of the delegation certificate 71 are verified by means of a check of the associated electronic guarantee.

In the case where the affiliation guarantee is an affiliation seal 44, another step is to read the affiliation seal 44 from the medium (s) on which it has been stored. As previously in the affiliation process, in another step, the origin and integrity of the affiliation certificate 51 are verified by means of the affiliation seal 44. This verification is carried out by means of the material authority cryptographic 42.

In the case where the delegation guarantee is a delegation seal 17, another step consists in reading the delegation seal 17 from the medium (s) on which it has been stored. In another step, the origin and the integrity of the delegation certificate 71 are verified by means of the delegation seal 17. This verification is carried out using the cryptographic material 12.

If these two verifications prove positive, the delegation certificate 71 is deemed to be genuine and integrity, and its content, including the third party authorization 33, can be used safely to apply the rights delegated to the third party.

According to one embodiment, the authoritative cryptographic material 42 comprises an authoritative public key PuKAu and a private key authority PrKAu, and the affiliation seal 44 has been realized by means of the private key authority PrKAu. Also, the public key authority PuKAu, corresponding to the private key authority PrKAu used for the signature of the affiliation certificate 51, is necessary and makes it possible to verify the seal of affiliation 44. These first two stages substantially repeat the steps of the verification process of the affiliation because the legitimacy of the delegation is certified by the certificate of affiliation 51. This step still makes it possible to extract the public key tutor PuKTu from the certificate of affiliation 51 with an assurance on its origin and its integrity.

According to one embodiment, the cryptographic material tutor 12 includes a public key tutor PuKTu and private key tutor PrKTu, and the delegation seal 17 was realized by means of private key tutor PrKTu. Also, the origin and the integrity of the delegation certificate 71 is verified by means of the delegation seal 17. For this, the public key guardian PuKTu, corresponding to the private key tutor PrKTu used for the signature of the attestation of delegation 71, is necessary and allows verification of the delegation seal 17.

The verification of the delegation seal 17 by means of the public key tutor PuKTu makes it possible to ascertain the origin of the delegation certificate 71, which has been created under the supervision of the tutor 10, and that its content is integrates, unchanged since its broadcast. The content of the delegation certificate 71 and in particular the contents of the third party authorization 33 can thus be trusted, which can then be exploited to apply the rights delegated to the third party.

The availability of the public key tutor PuKTu with the delegation verifier is acquired, since this public key tutor PuKTu is provided by the certificate of affiliation 51, certified by the authority 40, and that key has been extracted previously.

The delegation process and the delegation verification method, under the control of the guardian cryptographic pair 12, assures the delegation attestation 71 a high-level legitimacy, since guaranteed by the guardian 10, the legitimacy of the tutor 10 being the same. -the same guarantee, via the affiliation, under the control of the authoritative cryptographic pair 42, by the authority 40.

As above, in the case where, in the content of the affiliation certificate 51, there is a guardian attribute, for example a tutoring cryptographic material 12, such as for example the public key tutor PuKTu, it is possibly possible to verify the authenticity of the guardian 10. The term "possibly" refers to the case where the guardian 10 and / or the electronic tutor document 11 are actually present during the formality. Indeed, the purpose of the delegation may be to allow the tutor 10 to be absent.

This proof can be done in different ways and this knowledge must be understood in a very broad way.

The control is then validated if the carrier claiming to be the guardian 10 is able to respond to the request for guardian attribute evidence made to him by presenting directly or indirectly a satisfactory response in terms of expected guardian attribute.

If the guardian attribute consists of a portion of the guardian cryptographic material 12, the authenticity check of the guardian 10 and the guardian document 11 can be done by proving that the guardian document 11 holds at least a part of the guardian cryptographic material 12.

If the cryptographic material guardian 12 includes a public key guardian PuKTu and a private key tutor PrKTu, the verification of the authenticity of the tutor 10 and the electronic tutor document 11 is performed by proving that he holds the private key tutor PrKTu. This is typically done by challenge-response, as previously described, with the public key tutor PuKTu, if said public key tutor PuKTu is available, for example included, in the certificate of affiliation 51 or in the certificate of emancipation 61 .

Similarly, according to the embodiment, if a tutored attribute, such as for example a tutored cryptographic material 22, such as for example the tutored public key PuKTe is available, in that it is, for example, included in the certificate of affiliation 51 and / or in the delegation certificate 71 and / or on any medium accessible during the verification, it is possible to proceed, in a similar way, to the control of the authenticity of the tutored 20 and thus, if necessary, the tutored electronic document 21.

Depending on the embodiment, the control may change form. In the case where a tutored attribute is available, the authenticity of the tutored can be controlled by offering the tutored the possibility, for example by a dialogue by means of a man-machine interface, to prove that he knows the tutored attribute. .

The control is then validated if the bearer who claims to be the tutored one is able to respond to the tutored attribute proof request made to him by directly or indirectly presenting a satisfactory answer in terms of the expected tutored attribute.

If the tutored attribute consists of a part of the tutored cryptographic material 22, the verification of the authenticity of the tutored 20 and the tutored document 21 can be done by proving that the tutored document 21 holds at least a part of the tutored cryptographic material 22.

If the tutored cryptographic material 22 comprises a tutored public key PuKTe and a tutored private key PrKTe, the verification of the authenticity of the tutored 20 and the tutored electronic document 21 is achieved by proving that it holds the tutored private key PrKTe. This is typically done by challenge-response, as previously described, with the PuKTe tutored public key, if said tutored public key PuKTe is available, for example included, in the affiliation certificate 51 or in the delegation certificate 71.

The tutored 20, and with him his tutored electronic document 21, is thus able to prove that he holds the tutored private key PrKTe corresponding to the tutored public key PuKTe extracted from the certificate of affiliation 51 or the attestation of delegation 71 and thus to authenticate.

Similarly, according to the embodiment, if a third attribute, such as for example a third-party cryptographic material 32, such as for example the third-party public key PuKTi is available, in that it is, for example, included in the certificate 51 and / or in the certificate of delegation 71 and / or on any medium accessible during the verification, it is possible to proceed, in a similar way, to the control of the authenticity of the third party 30 and thus the where applicable, third party electronic document 31.

Depending on the embodiment, the control may change form. In the case where a third party attribute is available, the authenticity of the third party 30 can be controlled by offering the third party the possibility, for example by a dialogue through a human machine interface, to prove that he knows the third-party attribute. .

The control is then validated if the carrier claiming to be the third party 30 is able to respond to the third party attribute proof request made to him by directly or indirectly presenting a satisfactory response in terms of the expected third attribute.

If the third party attribute consists of a portion of the third party cryptographic material 32, the third party and third party document authenticity control 31 may be done by proving that the third party document 31 holds at least a portion of the third party cryptographic material 32.

If the third party cryptographic material 32 comprises a third party public key PuKTi and a third party private key PrKTi, the verification of the authenticity of the third party 30 and the third electronic document 31 is performed by proving that it holds the private third party key PrKTi. This is typically done by challenge-response, as previously described, with the third-party public key PuKTi, if said third-party public key PuKTi is available, for example included, in the affiliation certificate 51 or in the delegation certificate 71. The third party 30, and with it his third electronic document 31, is thus able to prove that he holds the third party private key PrKTi corresponding to the third party public key PuKTi extracted from the certificate of affiliation 51 or the certificate delegation 71 and thus to authenticate.

An illustrative example with a travel document system depicts a minor child (tutored 20) authorized to cross a border only in the company of one of his parents (guardian 10) and a third party 30 who receives by delegation at least a party rights of a parent. A certificate of affiliation 51 indicates a parent. However, it is difficult and inappropriate to modify or create a certificate of affiliation 51 solely for the use of a delegated third party by means of the authority 40. Also a delegation certificate 71 is used, which indicates that the third party 30 is authorized to replace the parent 10 of the tutored 20, for example for the formality of crossing the border. Border control of the electronic document 21 of the child alone would indicate that he can not cross the border. The third party authorization 33 establishes the right of the third party 30 to replace the parent (guardian 10) for the accompaniment of the child (tutored 20) at the crossing of the border. The certificate of delegation 71 read by the controller to the electronic document 21 of the child 20 and / or the electronic document 31 of the third party 30, makes it possible to determine that a relative 10 has made a delegation to the third party 30, and the Attestation of affiliation 51 proves that this parent 10 is himself authorized by the authority 40 to delegate this right.

A delegation allows, in a first mode, to make a third party 30 proctor of the guardian 10. The presence of the third party 30 can then replace the presence of the tutor 10. The third party 30 is authorized to act as if he were the tutor 10 affiliated and can by its mere presence, allow the tutored 20 to perform a formality requiring the presence of a guardian 10.

According to another embodiment, illustrated in FIG. 3, if the delegation towards the third party 30 includes such a right, the third party 30 can in turn realize an emancipation from the 20. Everything is happening substantially as for a "direct" emancipation performed by a tutor 10, the third 30 replacing the tutor 10. Such emancipation is more particularly described in another application of the applicant.

As illustrated in FIG. 3, there exists a delegation certificate 71, previously produced and defining, by means of a third party authorization 33, the rights that the guardian 10 delegate to the third party 30. If these rights include the right to emancipate the tutored 20, the third party 30, may issue a certificate of emancipation 81. Like a "direct" emancipation certificate issued by a tutor 10, the emancipation certificate 81 includes a tutored authorization 23 defining the rights that the third party 30 emancipates from the tutored 20. Then the third party 30, by means of its third electronic document 31, signs the emancipation certificate 81 by means of the private third party key PrKTi to produce an emancipation seal 38. L Emancipation certificate 81 and the emancipation seal 38 are stored, for example, on the tutored electronic document 21.

The signature step by the third party 30 is advantageously subject to authentication (PIN, biometrics, etc.) of the third party 30. In order to prove that the third party 30 has the authority to carry out such an emancipation, the certificate of delegation 71 and the seal 17 are also stored, for example, on the tutored electronic document 21. In order to prove that the tutor 10 has the authority to perform such delegation, the affiliation certificate 51 and the seal of affiliation 44 are also stored, for example, on the tutored electronic document 21. The tutored electronic document 21 is thus depository of a stack of attestations making it possible to go back to the authority 40 and making it possible to guarantee the content of the rights emancipated to the tutor. , so that the tutored 20 can make use of it.

The verification of a right during a formality then includes the cascading verification of all these certificates stacked.

In another mode, illustrated in Figure 4, if the delegation to the third party 30 includes such a right, the third party 30 can in turn perform a delegation to a secondary third 30 '. Everything happens substantially as for the "direct" delegation of the tutor 10 to the third party 30 and illustrated in Figure 2, the third 30 replacing the guardian 10 and the secondary third 30 'substituting for the third 30. As illustrated in FIG. Figure 4, there is a delegation certificate 71, previously produced and defining, by means of a third party authorization 33, the rights that the guardian 10 delegates to the third party 30. If these rights include the right to delegate again to another third party 30 'that is called third party 30', the third party 30, where appropriate by means of his third electronic document 31, can issue a delegation certificate 91. Like the delegation certificate 71 "direct" the delegation certificate 91 includes a secondary third authorization 33 'defining the rights that the third party 30 delegates to the secondary third party 30'.

According to one embodiment, it may further comprise the public key tutored PuKTe and the secondary public third key PuKti '.

Then the third party 30, by means of his third electronic document 31, signs the delegation certificate 91, by means of the private third party key PrKTi to make a delegation seal 39. The delegation certificate 91 and the delegation seal 38 are stored, for example, on the tutored electronic document 21 and / or the secondary third electronic document 31 'and / or on any medium.

The signature step by the third party 30 is advantageously subject to authentication (PIN, biometrics, etc.) of the third party 30. In order to prove that the third party 30 has the authority to perform such delegation, the certificate of delegation 71 and the delegation seal 17 are also stored, for example, on the tutored electronic document 21 and / or the secondary third electronic document 31 'and / or on any medium. In order to prove that the guardian 10 has the authority to perform such delegation, the affiliation certificate 51 and the affiliation seal 44 are also stored, for example, on the electronic document. tutored 21 and / or the secondary electronic document secondary 31 'and / or on any support. The tutored electronic document 21 and / or the secondary third electronic document 31 'and / or the other medium is thus depository of a stack of attestations allowing to go back to the authority 40 and making it possible to guarantee the content of the rights delegated to secondary third 30 ', so that the tutored 20 can make use of it.

If the secondary party 30 'receives the right to delegate, a new delegation, accompanied by a new level of attestation can be achieved, and so on.

Logically, in the case of a transfer of rights, by emancipation or by delegation, direct, of second or nth rank, the rights transferred can not exceed the rights actually available to the transferor. Also, any transferred authorization is advantageously a subset of the transferring authorization. This necessary relation can be verified at the moment of the creation of the authorization transferred during the creation process: emancipation or delegation. Alternatively, this relationship can be verified at any time by one of the verification methods, for example prior to the exercise of one of the rights.

Claims

1. A method of delegation, by a tutor (10), rights to a tutored (20), to a third party (30), characterized in that it comprises the following steps:

creating a delegation certificate (71) comprising:

a third party authorization (33) including the rights delegated to the third party (31) on the tutored (21) by the tutor (10), - storage of the delegation certificate (71),

storage, if not already present, of a certificate of affiliation (51) embodying a tutoring relationship, between a tutor (10) and a tutor (20) including a tutor authorization (13) including the allocated rights to the tutor (10) on the tutor (20).

The delegation method of claim 1, further comprising the step of:

production of an electronic guarantee of integrity and authenticity of the delegation certificate (71).

3. A method of delegation according to claim 21, wherein the electronic guarantee is a delegation seal (17) produced by electronic signature of the delegation certificate (71) by means of a cryptographic material guardian (12) associated with the tutor ( 10), and wherein the method further comprises the following step:

- storage of the delegation seal (17).

4. The delegation method according to claim 3, wherein the cryptographic guardian material (12) comprises a public guardian key (PuKTu) and a guardian private key (PrKTu), and wherein the part of the cryptographic guardian material (12) used to produce the Delegation seal (17) includes private guardian key (PrKTu).

5. Method of delegation according to any one of claims 1 to 4, wherein the certificate of delegation (71) still includes a guardian attribute and / or a tutored attribute and / or a third party attribute.

The delegation method according to any of claims 1 to 5, wherein the tutor (10) is associated with a guardian cryptographic material (12), and the tutor attribute comprises at least a portion of the guardian cryptographic material (12) , and / or the tutored (20) is associated with tutored cryptographic material (22), and the tutored attribute includes at least a portion of the tutored cryptographic material (22), and / or the third (30) is associated with a tutored cryptographic material (22); third-party cryptographic material (32), and the third-party attribute includes at least a portion of the third-party cryptographic material (32).

The delegation method according to any one of claims 3 to 6, wherein the cryptographic guardian material (12) comprises a public guardian key (PuKTu) and a private guardian key (PrKTu), and the portion of the guardian cryptographic material (12). ) used to produce the delegation seal (17) includes the private key guardian (PrKTu).

The delegation method according to any one of claims 6 or 7, wherein the guardian cryptographic material (12) comprises a guardian public key (PuKTu) and a guardian private key (PrKTu), and the part of the guardian cryptographic material (12). ) included in the guardian attribute includes the public key guardian (PuKTu), and / or the tutored cryptographic material (22) includes a tutored public key (PuKTe) and a tutored private key (PrKTe), and the tutored part of the cryptographic material (12) included in the tutored attribute includes the tutored public key (PuKTe), and / or the third party cryptographic material (32) includes a third party public key (PuKTi) and a third party private key (PrKTi), and the hardware portion Third party cryptographic (32) included in the third party attribute includes the third party public key (PuKTi).

The delegation method according to any one of claims 3 to 8, wherein the electronic signature step is conditioned to a supply of a guardian document (11) and an authentication of the bearer of the guardian document (11), by means of a PIN code associated with the guardian document (11), and / or a biometric identification, and / or by proving that the holder knows a guardian attribute included in the certificate of affiliation (51) or in the certificate of delegation (71).

10. The method of delegation according to any one of claims 1 to 9, wherein the (the) step (s) of storage is (are) carried out (s):

on a tutor document (11) associated with the tutor (10),

- on a tutored document (21) associated with the tutored (20),

- on a third document (31) associated with the third party (30),

- on a mass storage medium,

- on a network storage medium,

or spread over many of the previous media.

The method of delegation according to claim 10, wherein the tutor document (11), the tutored document (21) and the third document (31) are electronic documents, produced by an authority (40), where the electronic tutor document ( 11) stores the cryptographic material tutor (12), where the tutored electronic document (21) stores the cryptographic material tutored (22), and wherein the third electronic document (31) stores the third cryptographic material (32).

Delegation method, by a third party (30) having received delegation by a delegation method according to any one of claims 1 to 12, rights to a tutored (20), to a secondary third (30 '), characterized in that it comprises the following steps:

- creation of a certificate of delegation (91) including:

- a secondary third authorization (33 ') including the rights delegated to the secondary third (31') on the tutored (21) by the third (30),

- storage of the certificate of delegation (91),

storage, if not already present, of a certificate of affiliation (51) embodying a relationship of tutoring, between a tutor (10) and a tutor (20) including a guardian authorization (13) including the rights allocated to the guardian (10) on the tutored (20),

storage, if they are not already present, attestations of delegation (71,91) materializing the successive delegations, between the guardian (10) and the third party (30.

13. A method of emancipation by a third party (30) having received delegation by a delegation method according to any one of claims 1 to 12, a tutored (20), characterized in that it comprises the following steps:

creating an emancipation certificate (81) comprising:

- a tutored authorization (23) including the emancipated rights to the tutored (20) by the third party (30,30 '),

- storage of the certificate of emancipation (81),

storage, if not already present, of a certificate of affiliation (51) embodying a tutoring relationship between a tutor (10) and a tutor (20) including a guardian authorization (13) including the rights allocated to the tutor (10) on the tutored (20),

storage, if they are not already present, attestations of delegation (71,91) materializing the successive delegations, between the guardian (10) and the third party (30).

14. A method of verifying a delegation performed by the delegation method according to any one of claims 2 to 11, characterized in that it comprises the following steps:

- reading the certificate of affiliation (51),

possible verification of the origin and integrity of the affiliation certificate (51) by checking the associated electronic guarantee,

- reading of the delegation certificate ^■ (71),

possible control of the origin and integrity of the delegation certificate (71) by checking the associated electronic guarantee, - exploitation of the third party authorization (33).

15. The verification method according to claim 14, wherein the control of the origin and integrity of the affiliation certificate (51) further comprises the following steps:

- reading the seal of affiliation (44),

- checking the affiliation seal (44) by means of at least part of the authoritative cryptographic material (42), and where the control of the origin and integrity of the delegation certificate (71) still includes the following steps:

reading at least part of the cryptographic material guardian (12),

- reading the delegation certificate (71),

reading the delegation seal (17),

control of the delegation seal (17) by means of at least a part of the cryptographic guardian material (12).

The verification method of claim 15, wherein the authoritative cryptographic material (42) comprises an authoritative public key (PuKAu) and an authoritative private key (PrKAu), and wherein the portion of the authoritative cryptographic material (42) used to control the Affiliate seal (44) includes the public key authority (PuKAu), and where the cryptographic material guardian (12) includes a public key guardian (PuKTu) and a private key guardian (PrKTu), and where part of the cryptographic material guardian (12) used to control the delegation seal (17) includes the public key guardian (PuKTu).

17. The verification method according to any one of claims 14 to 16, further comprising at least one of the following steps:

if a tutored attribute is included in the certificate of affiliation (51) or in the delegation certificate (71), possible control of the authenticity of the tutored (20) by proving that he knows the said tutored attribute,

if a third party attribute is included in the certificate of affiliation (51) or in the certificate of delegation (71), possible control of the authenticity of the third party (30) by proving that he knows the said third attribute.

18. The verification method according to any one of claims 14 to 17, further comprising at least one of the following steps:

- if part of the tutored cryptographic material (22) is included in the certificate of affiliation (51) or in the delegation certificate (71), possible control of the authenticity of the tutored document (21) by proving that he holds at least part of the tutored cryptographic material (22),

- if part of the third party cryptographic material (32) is included in the certificate of affiliation (51) or in the certificate of delegation (71), possible control of the authenticity of the third document (31) by proving that it owns at least some of the third-party cryptographic material (32).

19. The verification method according to claim 18, further comprising at least one of the following steps:

if the tutored cryptographic material (22) comprises a tutored public key (PuKTe) and a tutored private key (PrKTe) and if said tutored public key (PuKTe) is included in the affiliation certificate (51) or in the attestation of delegation (71), possible control of the authenticity of the tutored electronic document (21) by proving that it holds the tutored private key (PrKTe), by means of a challenge-response with said tutored public key (PuKTe) ,

- if the third party cryptographic material (32) comprises a third party public key (PuKTi) and a third party private key (PrKTi) and if said third party public key (PuKTi) is included in the affiliation certificate (51) or in the certificate of delegation (71), possible verification of the authenticity of the third electronic document (21) by proving that it holds the third party private key (PrKTi), by means of a challenge-response with said third party public key (PuKTi) .

20. Electronic document comprising an affiliation certificate 51 and / or an associated electronic guarantee, and / or a delegation certificate 71 according to any one of claims 1 to 11 and / or an associated electronic guarantee according to any one of the Claims 2 to 11.

21. Electronic document according to claim 20, comprising a guardian attribute, respectively a tutored attribute, respectively a third attribute, according to any one of claims 5 to 11, to form an electronic document guardian (11), respectively an electronic document tutored (21), respectively a third electronic document (31).