EP4147992B1 - Integrity protection system for sensitive assets - Google Patents

Description

The present invention relates to a device for protecting sensitive assets.

Such a device is shown in the document US 2008/047976 A1 disclosing the preamble of claim 1.

In the field of security, one challenge consists of protecting sensitive assets. Sensitive assets are, for example, sensitive information (documents, messages), encryption tools or even banking tools.

Thus, devices have been developed aimed at ensuring protection of the integrity of sensitive assets. Such devices use active opening detection elements aimed at detecting intrusions or attempted intrusions into the device. The active elements include detection sensors associated with a storage unit.

However, such active detection elements require a power source for the sensors and the storage unit. Therefore, so that the opening detection is also functional when the device is off (no main power supply), such active elements also integrate a backup power supply, such as a cell or a battery. The opening detection function is therefore limited to the lifespan of the emergency power supply (consumption and capacity of the emergency power supply).

There is therefore a need for a means of protecting sensitive assets with better reliability.

1. a. un contenant ayant une ouverture pour recevoir des biens sensibles,
2. b. un couvercle pour l'obturation de l'ouverture,

• une unité de fixation propre à fixer de manière irréversible le couvercle sur le contenant dans une position d'obturation de l'ouverture, le couvercle comprenant au moins une zone, dite zone d'amorce de rupture, de résistance plus faible que les autres zones du couvercle, la zone d'amorce de rupture étant propre à être endommagée avant l'unité de fixation suite à une tentative d'ouverture du couvercle fixé de manière irréversible sur le contenant,
• le dispositif comprenant, dans le contenant, au moins un canal de liaison entre un premier système et un second système, le niveau de sécurité du second système étant plus élevé que le niveau de sécurité du premier système, les biens sensibles étant des informations sensibles transitant dans le canal de liaison.

To this end, the present invention, as disclosed in claim 1, relates to a device for protecting sensitive property, the device comprising:

1. has. a container having an opening to receive sensitive goods,
2. b. a cover for closing the opening,

• a fixing unit capable of irreversibly fixing the lid on the container in a position for closing the opening, the lid comprising at least one zone, called the initiation zone of rupture, of lower resistance than the other zones of the lid, the area initiating rupture being likely to be damaged before the fixing unit following an attempt to open the lid fixed irreversibly on the container,
• the device comprising, in the container, at least one connection channel between a first system and a second system, the security level of the second system being more higher than the security level of the first system, the sensitive assets being sensitive information passing through the link channel.

• la zone d'amorce de rupture présente une épaisseur plus faible que les autres zones du couvercle ;
• la zone d'amorce de rupture forme un renfoncement par rapport aux autres zones du couvercle sur la face interne du couvercle, la face interne du couvercle étant la face du couvercle en vis-à-vis de l'ouverture dans la position d'obturation de l'ouverture ;
• la zone d'amorce de rupture est telle que l'endommagement de la zone d'amorce de rupture, suite à une tentative d'ouverture du couvercle, est visible depuis la face externe du couvercle, la face externe du couvercle étant la face du couvercle à l'opposé de l'ouverture dans la position d'obturation de l'ouverture ;
• l'unité de fixation comprend au moins une partie fixée et en contact avec une zone du couvercle, dite zone de fixation, la zone d'amorce de rupture étant adjacente à la zone de fixation ;
• l'unité de fixation comprend au moins une partie mâle fixée sur le contenant et au moins une partie femelle solidaire du couvercle, la partie mâle étant propre à être insérée de manière irréversible dans la partie femelle lors de la fixation du couvercle sur le contenant dans la position d'obturation de l'ouverture ;
• la partie mâle comprend un embout propre à être inséré dans la partie femelle, l'embout comprenant un mécanisme de blocage irréversible de l'embout dans la partie femelle ;
• le mécanisme de blocage est choisi dans le groupe constitué de : un clip, un grappin, un harpon et un jonc ;
• le canal de liaison est équipé d'un isolateur optique propre à transmettre l'information depuis le premier système vers le second système.

According to particular embodiments, the device includes the following characteristics:

• the rupture initiation zone has a lower thickness than the other zones of the cover;
• the rupture initiation zone forms a recess relative to the other zones of the cover on the internal face of the cover, the internal face of the cover being the face of the cover facing the opening in the closed position of the opening;
• the break initiation zone is such that the damage to the break initiation zone, following an attempt to open the cover, is visible from the external face of the cover, the external face of the cover being the face of the cover opposite the opening in the position of closing the opening;
• the fixing unit comprises at least one part fixed and in contact with a zone of the cover, called the fixing zone, the break initiation zone being adjacent to the fixing zone;
• the fixing unit comprises at least one male part fixed on the container and at least one female part secured to the lid, the male part being capable of being inserted irreversibly into the female part when fixing the lid on the container in the shutter position of the opening;
• the male part comprises a tip suitable for being inserted into the female part, the tip comprising a mechanism for irreversibly blocking the tip in the female part;
• the blocking mechanism is chosen from the group consisting of: a clip, a grappling hook, a harpoon and a rod;
• the link channel is equipped with an optical isolator capable of transmitting information from the first system to the second system.

• [Fig 1], Figure 1, une représentation schématique d'un dispositif de protection de biens sensibles,
• [Fig 2], Figure 2, une représentation schématique vue en coupe selon l'axe II-II du dispositif de protection de biens sensibles de la figure 1, et
• [Fig 3], Figure 3, une représentation schématique vue en coupe selon l'axe III-III du dispositif de protection de biens sensibles de la figure 2.

Other characteristics and advantages of the invention will appear on reading the following description of embodiments of the invention, given by way of example only and with reference to the drawings which are:

• [ Figure 1], Figure 1 , a schematic representation of a device for protecting sensitive goods,
• [ Figure 2], Figure 2 , a schematic representation seen in section along axis II-II of the device for protecting sensitive assets of the figure 1 , And
• [ Figure 3], Figure 3 , a schematic representation seen in section along axis III-III of the device for protecting sensitive assets of the figure 2 .

A device 10 for protecting sensitive goods is a device capable of containing sensitive goods and protecting their integrity.

Sensitive assets are assets to be protected in integrity. Sensitive assets are physical items or intangible assets, such as data. Sensitive assets are, for example, sensitive information (documents, messages), encryption tools or even banking tools.

In an example of implementation, the device 10 comprises at least one link channel through which sensitive information passes between a first system and a second system. The security level of the second system is higher than that of the first system. Sensitive assets here are sensitive information.

Preferably, the link channel is equipped with an optical isolator capable of transmitting information from the first system to the second system.

Preferably, each of the first system and the second system is equipped with an optical network card. Each optical network card includes a receiving part and a transmitting part. The cards are able to detect the loss of reception of the optical signal and the receiving part of the card to emit an alarm if it no longer receives information from the transmitting part.

An example of such a link channel is described in the patent EP 1 686 758 B .

The protection device 10 is a passive device, in the sense that the protection device 10 does not have any power sources.

The protection device 10 comprises a container 13 having an opening 14 for receiving sensitive goods, a cover 16 for closing the opening 14, and a fixing unit 18 capable of irreversibly fixing the cover 16 on the container 13 in a position of closing the opening 14. The figures 1 to 3 illustrate an example of such a protection device 10.

The container 13 forms a receptacle for receiving sensitive goods. The dimensions of the opening 14 of the container 13 are adapted to receive predefined categories of sensitive goods (cards, connection channels, etc.).

The container 13 typically has a bottom 20 and a body 22 extending from the bottom 20 to form a space open to the outside via the opening 14. The body 22 thus comprises the side walls of the container 13.

Preferably, the container 13 is made in a single block, that is to say that the elements (bottom 20, body 22) of the container 13 are made from material. This makes it possible to limit the areas of container 13 vulnerable to intrusions.

Alternatively, as illustrated in the example of figures 1 to 3 , the bottom 20 and the body 22 form two distinct blocks, which facilitates manufacturing. In this case, the bottom 20 is fixed to the body 22 by a fastener (screws, nails, glue, welding for example).

In the example illustrated by the figures 1 to 3 , the container 13 is cylindrical. However, the container 13 is capable of having a completely different shape, parallelepiped for example.

The cover 16 is suitable for closing the opening 14 of the container 13. The dimensions and shape of the cover were therefore chosen according to the dimensions of the opening 14.

The cover 16 has an internal face 16A and an external face 16B opposite the internal face 16A. The internal face 16A is suitable for being placed opposite the opening 14 of the container 13 in the position of closing the opening 14. The external face 16B is the face of the cover 16 opposite to the opening 14 in the closing position of the opening 14.

The cover 16 is, for example, made of plastic or metal.

The cover 16 comprises at least one zone, called the initiation of rupture zone 30, of lower resistance than the other zones of the cover 16. In particular, each initiation of rupture zone 30 has a lower resistance than the other zones of the cover 16. cover 16 when traction is exerted on the cover 16.

The or each rupture initiation zone 30 is likely to be damaged before the fixing unit 18 following an attempt to open the cover 16 fixed irreversibly on the container 13. In particular, the shape, dimensions and /or the location of the break initiation zone 30 were chosen so that the break initiation zone 30 is damaged before the fixing unit 18 following an opening attempt. Damage designates permanent deformation or breakage of the cover 16 at the location of the initial rupture zone 30. Such damage depends in particular on the shape and thickness of the initial rupture zone 30.

The or each incipient rupture zone 30 has, for example, a thickness lower than the other zones of the cover 16, which makes the incipient rupture zone 30 less resistant to traction exerted on the cover 16.

The or each rupture initiation zone 30 forms, for example, a recess 31 on the internal face 16A of the cover 16 relative to the other zones of the cover 16. Such a recess 31 is particularly illustrated in the examples of the figures 2 And 3 . Such a recess 31 is, however, not visible from the external face 16B of the cover 16.

Advantageously, the rupture initiation zone 30 (shape, dimensions and/or location) is such that the damage to the rupture initiation zone 30, following an attempt to open the cover 16, is visible from the external face 16B of cover 16. This allows an operator to identify that an intrusion attempt has taken place, without needing to open the container 13.

Advantageously, the rupture initiation zone 30 is adjacent to a fixing zone 32 of the cover 16. The fixing zone 32 of the cover 16 is a zone on which the fixing unit 18 is in contact and fixed. By the term “adjacent”, it is understood in the immediate vicinity, in particular contiguous. Preferably, the rupture initiation zone 30 is located between a peripheral zone 33 of the cover 16 and the fixing zone 32, the peripheral zone 33 extending over at least 70% of the cover 16.

The fixing unit 18 is capable of irreversibly fixing the cover 16 to the container 13 in a position of closing the opening 14. By the term "irreversible", it is understood that once the cover 16 is fixed by the fixing unit 18 on the container 13 in the closed position, the fixing unit 18 cannot be dismantled, that is to say it does not allow the cover 16 to be separated from the container 13, except damage the cover 16 at the initial rupture zone 30.

In an example of implementation, the fixing unit 18 connects the cover 16 to the body 22 of the container 13, and preferably to the bottom 20 of the container 13.

In an example of implementation, the fixing unit 18 comprises at least one male part 41 fixed to the container 13 and at least one female part secured to the cover 16 (ie forming an integral part of the cover 16). The male part 41 is able to be inserted irreversibly into the female part 42 when fixing the cover 16 on the container 13 in the position of closing the opening 14.

For example, the male part 41 comprises a tip 44 capable of being inserted into the female part 42, the tip 44 comprising a mechanism 46 for irreversibly blocking the tip 44 in the female part 42.

The blocking mechanism 46 is, for example, a clip, a grappling hook, a harpoon or a rod.

In an example of implementation, as illustrated by the figures 2 And 3 , the male part 41 is a rod (also called a tie rod) whose end 44 has a slot 48. The male part 41 is fixed to the container 13 (the bottom 20 in this example), for example by screwing. The female part 42 is a housing dimensioned to receive the tip 44 when the tip 44 is compressed so that the width of the slot 48 of the tip 44 is reduced. Once the tip 44 is inserted into the housing, the tip 44 is held irreversibly in the housing due to the slot 48 which has moved aside. The end piece 44 with the slot 48 forms in this example a clip system.

In another example, the clip system is produced by a ball-spring system, the ball forming the male part 41 and the spring forming the female part 42.

In another example, the housing has the shape of a rod, that is to say a ring with an opening for the passage of the rod.

In yet another example, the fastening unit 18 consists of a weld.

In an example of implementation, the fixing unit 18 comprises several male parts 41 associated with female parts 42, which makes it possible to consolidate the fixing of the cover 16 on the container 13.

Thus, such a device 10 makes it possible to detect opening attempts in an entirely passive manner, and thus to identify possible intrusions, and attempts to trap sensitive goods protected by the device 10. The reliability of the detection is therefore improved by compared to a prior art system for which a power source is required. In particular, the rupture initiation zone 30 on the cover 16 makes it possible to make intrusion attempts visible, over a predetermined zone.

Such a device 10 is particularly of interest in the field of security, but also in other fields, in particular to exclude, from the manufacturer's warranty, products which have been opened.

Those skilled in the art will understand that the embodiments and variants previously described can be combined to form new embodiments provided that they are technically compatible.

Claims (9)

1. A device (10) for protecting sensitive goods, the device (10) comprising:

   a. a container (13) with an opening (14) for receiving sensitive goods,

   b. a cover (16) to close the opening (14),

   c. a fixing unit (18) for irreversibly fixing the lid (16) to the container (13) in a position in which the opening (14) is closed,

   the lid (16) comprising at least one zone, referred to as the rupture initiation zone (30), of lower strength than the other zones of the lid (16), the rupture initiation zone (30) being suitable for be damaged before the fixing unit (18) following an attempt (14) to open the lid (16) irreversibly fixed to the container (13), characterised in that the device (10) comprises, in the container (13), at least one link channel between a first system and a second system, the security level of the second system being higher than the security level of the first system, the sensitive goods being sensitive information passing through the link channel.
2. A device (10) according to claim 1, in which the rupture initiation zone (30) has a smaller thickness than the other zones of the cover (16).
3. A device (10) according to claim 1 or 2, in which the rupture initiation region (30) forms a recess (31) relative to the other regions of the cover (16) on the inner face (16A) of the cover (16), the inner face (16A) of the cover (16) being the face of the cover (16) opposite the opening (14) in the position in which the opening (14) is closed.
4. A device (10) according to any one of claims 1 to 3, wherein the rupture initiation zone (30) is such that damage to the rupture initiation zone (30), following an attempt to open the lid (16), is visible from the outer face (16B) of the lid (16), the outer face (16B) of the lid (16) being the face of the lid (16) opposite the opening (14) in the position in which the opening (14) is closed.
5. A device (10) according to any one of claims 1 to 4, in which the fixing unit (18) comprises at least one part fixed and in contact with an area of the cover (16), known as the fixing area (32), the rupture initiation area (30) being adjacent to the fixing area (32).
6. Device (10) according to any one of claims 1 to 5, in which the fixing unit (18) comprises at least one male part (41) fixed to the container (13) and at least one female part (42) integral with the lid (16), the male part (41) being suitable for being inserted irreversibly into the female part (42) when the lid (16) is fixed to the container (13) in the position in which the opening (14) is closed.
7. A device (10) according to claim 6, in which the male part (41) comprises an end piece (44) suitable for being inserted into the female part (42), the end piece (44) comprising a mechanism (46) for irreversibly locking the end piece (44) in the female part (42).
8. A device (10) as claimed in claim 7, wherein the locking mechanism (46) is selected from the group consisting of: a clip, a grapple, a harpoon and a snap ring.
9. A device (10) according to any one of claims 1 to 8, in which the link channel is equipped with an optical isolator suitable for transmitting information from the first system to the second system.

Images