FR2841412A1 - Electronic work broadcast data protection having digital conditioning with data event and data remote computer stored and predetermined event triggering identifier connecting originator/remote computer/originator computer storing. - Google Patents

Abstract

The data protection method has data assigned in the originator user computer system. The digital conditioning corresponds to a predetermined event affecting data during subsequent use and guaranteeing the data integrity. An envelope file is created in the originator computer system, made up of data and digital conditioning attributes. The information is stored in a remote computer. When there is a predetermined event, there is an event identifier connecting between the originator and remote computer storing the events in the originator computer system.

Description

by a smart card.

  I:) is, oostit assuring in a combined way the conditionneme,: and the control of diffusion of a writable work ai ', nii that the evolutionary identification of the author of the work, ,,

user of the device.

  The purpose of the device is to assign properties to a set of digital documents permitting to guarantee identification, integrity, and the like. and control whatever the environment !: t

  uses or treatments performed.

  Several secondary objectives result from the main objective. We will talk about the concept of a document which is capable of interacting with the environment in which it

must evolve.

  In particular, the following features of the device may be considered as an innovation: - Non-exhaustive list: - The fad: to change the authentication of the user subscriber of the device in the case of transactions carried out by the subscriber - the fact of giving the possibility to a structure to manage its own subscribers while having a control operation externally without being able to know the behavior of its subscribers - L fact, that no work is preserved by the control device which is satisfied

  to archive condensate to carry out its controls.

  - to link the diffusion variables of a work to the actual work of changing the problem of computer security by transferring it

  containing, <. <computer pipes >>, to the content, the documents themselves.

  Thus, the documents remain secure in the usual environment! no securi se

the lambda user.

F, neijoe general:

  Unlike current solutions that dissociate treatments from the document itself,

  Our solution definitely binds the processes to the documents concerned. In the particular context of the digital signature, no need for the end user to use several products to authenticate, sign, follow or define the data. uses of the documents it creates. The treatments applied by our sclu'ior

  cover all its needs and open the way to multiple possibilities.

  The development of this "document conditioned" able to interact with the environment by the integration of multiple properties, gives the possibility to the user of control and dissemination of his creations at any time and in any place - to manage the dates of reception and the conditions of use (period, frequency, volume, ...) - of limit 'e' destina airs by authorizing the use only after identification (besides, I attriou-lior - a mechanism for triggering action goes beyond the simple autorsalior

opening of document).

  The implementation of this technology is very simplex, the final user manic ul-

  its "document conditions" like any other computer file.

  Remote services have a simple control role: the user is free to use the messaging service of his choice or simply to copy his "docs".

  conditions> 'on any support (floppy disk, cd-rom, zip, ...) to be delivered to the destinahnire.

  The device takes into account the movements of users within entrse in a highly secure network. We are able to route any den-andE

  user connection via a routing system of our own.

St: network structure.

  Our structure can be likened to a postal service.

  The post office has a "postal office", inserts documents into an envelope. The postal unit participates with the postal agency (another master unit) in controlling the properties of the envelope with the postal services. recipients. A postal unit headed <the postal management>, covers the structure. Agency and postal management wind SUT

  lnternet; the postal office may not be on the lnternet.

  The pyramid can grow to infinity. The postal management can have a definite agreement. Agencies can have an infinite number of offices, including the Ncmor

  Possible subscribers is depending on the traffic carried on each of them.

  The pyramid is strengthened by the addition of backup and conservation units and

  documents, not counting the units specific to the certification system.

  ; ; Xs, ^ ,; t = -, f, s 11 1> ^ s I International schedule>, 9 3)

LC 'lii'i' '' '^ S 1 3at \ Or \ /.

  CS0eltvO, ur '7, A C t pbOra \ te \ 04, y' 0, 0 -: s S: S:.:. 2 2> O <s 09, :: 5 ::. :: .-. _. 0 8ll! Ll W '=: s] is wur66 or34 salt w. nt e jj 'vt: 1i | s: ss: -0. r_, e Servurdecertfoali C ', 2, # 9 of stamps O, Q! FT 1 J 2 Sends 16 EECs of archl / es L Transmitter Receiver {., Pnaterial Mposition A progressive equipment giving the possibility of access to its identification number by programming and equipped with: an external communication equipment t either o a multimedia media player with non-repackable content (eg: cd-rcn) o an authentication medium allowing the modification of a remote memo area (ex: dongle, smart card, ...) available to each of the 4 << actors >> of the device: - the creator of the work, << Subscriber Subscriber >> the user of the work, << Receiver >> - the service of user management and remote control of the works issued, "posse office", - the management service of the posse offices, remote control of their functioning, << postal agency >> One or several time servers universe! accessible: - to the user management services "posse office" - to the management services of the posse offices << postal agency >> Compositor 'software (ha.que actor of the device uses his equipment to help a software that allows him to have his equipment and implement the features specific to its quality

cl actor in the device.

  The issuer, the subscriber, or the receiver, a simple user, have the same software whose

  Functionalities wind flanges for the simple user.

  The actors responsible for the use of the property offices have specific software. The actors responsible for the use of the postal agencies have specific software. The logic used in the context of this device may be modified to adapt to particular equipment or to specific requests from the act. ur without the device being itself modified in its operating mode

presently described.

  Use case - use C: totract a subscriber

  1. The posse office memorizes the subscriber's identity string, creates a code f.

  - condensate crypt - from this chain 2. I, e posse Office gives the subscriber a physical support (dongle, cd-corner, card a

  puce, ... on which is stored the code nicely.

  Authenticate a subscriber 1. I, 'subscriber'. introduces an identification chain known by itself (requested at each connection) 2.]: 1 forms a crypt connection chain composed a. The code b. Condensate of the identification chain c. Of a chain of sequence (condensate of a log of transaction of the subscriber: el. Done modifies with each transaction carried out by the subscriber)

  3. The subscriber connects to the posse office following a secure protocol and issues it.

  4. The posse office decrypts the connection string (as follows: The Post Office permanently stores the condensate of the identification string. Other Gas and Use 1. I The Post Office compares the elements contained in the connection string with the elements specific to the subscriber it has memorized and eventually accepts connection 2. The Post Office and the Subscriber update, independently, a newspaper of transaction and modify respectively their sequence string for a next connection.A possible ternatve to the formation of the chain of sequence: For reasons of economy, the chain of sequence can be formed only from certai -re s particular transactions of the subscriber (ex: taking into account the only actions of production of a document conditions, not taken account of the actions of consultations, ...) (:: onstDiuer the condition mfvre 1. The issuer subscriber creates a document that is a vice loppe and the name, e 2.], 'subscriber' composes the contents of the envelope (insertion of different works) 3. The subscriber assigns different properties to the envelope, in particular: a. The list of co-signatories b. The list of recipients c. The list of actions to perform at opening: condition of use, (period, frequency, volume, acknowledgment of receipt ...) - the allocation of a triggering mechanism for action goes beyond simple authorization

opening of document.

  d. The list of properties likely to evolve (multiple signatures, dates <reception, ...) 4. The subscriber is authenticated with the Postal Office S. The subscriber transmits to the postal office a request for creation of envelope 6. l, e Burea.u Postal assigns a new envelope instance in a clean file to the subscriber and creates a file specific to the new envelope to store the properties of the envelope 7. l, e Postal Office asks a trusted clock for the current date and time. 8. The Postal Office transmits to the subscriber an identification string of the envelope consisting of: a. From the instance number specific to the envelope b. From the date and time of creation of the envelope c. The type of algorithm to use to generate the condensate d. D-es variables to be used to perform grouping 9.], Subscriber generates a condensate using the algorithm indicated from: a. Content of the envelope b. Dies properties of the envelope c. From the date and time of creation 10.], The subscriber transmits the condensate to the posse office 11.], The Post Office stores the condensate in the file specific to the envelope 12. Subscriber e, t Office posse each calculates a chain of time stamped sequence and sends this chain to the Postal Agency, 13. The postal agency compares the two channels received, controls the coherence of the timestamp and validates the successful completion of the transaction. of the two actors (Bureau de posse '14.].' subscriber ellectue: a. wn 1st grouping on the contents of the envelope, its properties and condensa-t

  correspond to all using the variables provided by the posse office.

  b. ur. second groupage composed of the 1st groupage, the number of instance of the envelope and the coordinates of the Bureau de Poste AIternative possible during the 2etne groupage: The variables provided by the Post Office and allowing to carry out the first groupage

  can be touted in clear at the end of the 2nd groupage.

Use this condition _

I '-.

  :, L1, 'ii.sssicssscss' i' "" 2C: is2 i: SO l> - ss - - Contract u ilm "Marc and his project" s: alain dubourg 3, _ _ pascal boisduvin 4sitc 1: : Copiar to recipients <- >> c =: 3 c ::: jean dardeni - >> c :: ..> ssc s: Er, fly <c-, s> ^ .:>. Irr, ariner, & micheie iafleur Wednesday, April 26, 2001 18H32 -. s: ii - 1 philippe contract -s .: c <.s- c <stone contract: C <s.: << i> 3is mare contract ccccssc Wednesday, April 26, 2001 6 pm OO - Creation of the Envelope .- Thursday, 27th April 2001 10:50 am - Stone reception Thursday, 27th April 2001 11:50 am Stone signature ":: 2), the receiving user performs a first grouping, and extracts from it: (a) the coordinates of the Post Office to be contacted at the following address: instance of the envelope 2. The receiving user connects to the specified Post Office when the user proceeds with the deletion of the envelope number 4. 1, e Post Office triggers the actions to be carried out at the open ure of the envelope a. The office of posse memorizes eventual properties likely to evolve (multiple signatures, dates of reception, ...) b. The posse office transmits these properties to the subscriber emitter, for envelope, to be appended to the initial envelope. The Post Office transmits the variables enabling the second division to be carried out, in particular the type of The algorithm uses the condensate 6 as a form. The user performs the second disassembly and reconstitutes the condensate of the envelope; and lemet to the Post Office 7.], the Post Office compares the condensate of the user with the initial condensate S.]., e Post Office may issue a certification in the form of an envelope (to be annexed to the envelope is returned) Subsonne: user identifies in the present device, provided with the right to create envelopes Postal Agency: Post Office Management and Control Equipment Post Office: Management equipment for subscribers and subscribers diffusion control of the Condensat envelope: also called Hash, or imprint - corresponds to the contraction of an initial element such that the initial element can not be obtained from the condensate and that any minimal variation of the initial element causes a modification Condensate (treatment) is carried out on a work (s) in order to guarantee the intrinsic properties and to control the subsequent diffusion (diffiusion point: elements allowing to ensure the tra viability of a work, and to master the conditions of use Envelope: name gives to the document containing the set of conditioned works