FR2891101A1 - Electronic transaction e.g. commercial transaction, certifying method for e.g. computer, involves independently executing certification operations in each transaction sphere by engaging only certification in single transaction sphere - Google Patents

Abstract

The method involves performing certification preparation operations in a transaction sphere (1) during which certification data are loaded. Certification preparation operations are performed in another transaction sphere (8) by retrieving a preset part of the data. The certification operations are independently executed in each sphere by engaging only the certification in the single sphere without engaging the responsibility of any other sphere except an authentication operation based on identity proof operation or another certification data by an authentication authority of another sphere. An independent claim is also included for devices to certify an electronic object in a number of separated transaction spheres.

Description

2891101 1

  The present invention relates to a method for certifying encrypted transactions on electronic systems. It also relates to devices implementing the certification process of the invention.

  In the state of the art, it is known to use electronic devices to execute transactions which, in the context of the present invention, are unidirectional or pluridirectional information exchanges or transfers involving at least one user whose the identity is clearly defined. In this state of the art, we are confronted with two related problems which are respectively the certification of the transaction and its encryption.

  According to a view taken into account in the invention, the certification consists of accepting or rejecting proof of the identity of the user engaged in the transaction.

  According to a point of view taken into account in the invention, the encryption consists in protecting the secret of the transaction while ensuring that the addressee of the transaction will be able to access the information of the transaction.

  Thus, an electronic signature technique has already been proposed that associates special information with the information of the transaction. This electronic signature is intended to be processed so as to certify the identity of at least the user at the initiative of the transaction with at least the recipient of the transaction. This technique is currently perfectly defined by a set of public norms and state laws that are referred to for the understanding of the following.

  The problem underlying the invention arises from the fact that electronic transactions for which certification has become an essential or even required operation increase to 2891101 2 both in proportion to all transactions and in number of transaction areas. In these areas of transactions for which a need for certification has emerged are commercial transactions, transactions leading to a contractual commitment, banking transactions, transactions tending to establish the identity of a user and many others. again.

  However, the transactions generally implement an electronic object associated with the initiating user of the transaction. Depending on the circumstances, the electronic object may consist of a computer or terminal comprising at least one memory and a processor capable of performing connection processing to a signature preparation network or to a network for performing a transaction requiring a signature and encryption. In this case, the computer or terminal may cooperate with either a device for entering an alphanumeric code for recognizing the user or even for a device for entering a biometric code such as a fingerprint.

  The electronic object may also include at least one portable electronic object such as a microcircuit card, or a key such as a USB key for connecting to a USB port of a computer itself connected to a network. Of course, the invention also relates to portable electronic objects that do not require a galvanic connection, but to ensure a contactless connection, and even remotely, using at least one radio frequency channel or an infrared channel, directly with the or the certification preparation and / or transaction networks, or indirectly with the aid of a reader / recorder adapted from the electronic portable object with a computer and / or a connection terminal with one or the other aforementioned networks.

  Moreover, as is known, the certification operation of the signature associated with the transaction involves a certification authority that must comply with a set set of legal and regulatory requirements to perform such a certification or part of the certification. the latter which concerns it and in particular to have telecommunications resources for intervening in the aforementioned communication network or networks and to be provided with computing resources to execute at least part of the certification operation during a transaction.

  However, the number of social spheres in which certified transactions have become necessary is steadily increasing, and the transaction signing bodies or authorities operating there do not always have the capacity to comply with the legal and regulatory requirements allowing them to comply. carry out the certification or part of it that concerns them.

  One solution is to multiply the security objects to certify the signature of transactions in different spheres. However, such a solution is faced with practical limits, the same user can not without discomfort ensure the monitoring of several portable objects for the certification of electronic signatures of transactions.

  In order to limit the number of such objects, or their simulation on a terminal connected to a network, it has been proposed methods of derivation of digital keys and digital key chaining which will be described later and which can reduce the number of portable objects allowing the certification of electronic signatures of transactions associated with the same user. However, verifying the authenticity or certification of the digital signature as well as other similar or associated operations involves the responsibility of a single authority which may not be desirable.

  The present invention makes it possible to compact the method of certification of the electronic signature as well as similar and associated operations by allowing with the same electronic object to carry out transactions in independent transaction spheres without tracing the responsibility of the certification to an authority. Central. Indeed, it relates to a certification process which consists: In a first step, to perform operations of preparation of a certification in a first sphere of transactions during which the first certification data are loaded; then In at least one subsequent step, independently of the operations carried out in said first sphere of transactions, to perform operations for preparing a certification in at least one other sphere of transactions by taking over a predetermined part of the first certification data; In a usage stage, to independently execute the certification operations in each of the transaction spheres by engaging the certification only in the only sphere of transactions concerned without engaging the responsibility of any other sphere except a authentication operation based on a proof of identity operation or other certification data by an authentication authority of at least one other sphere of transactions.

  According to one aspect of the invention, the method comprises, during a certification operation in at least one said second sphere of transactions, a validation step to request proof of the identity or authenticity of another data item. certification associated with an electronic transaction object for a user identified in said first sphere of transactions.

  According to one aspect of the invention, the method includes a step for recording validation requests in said first sphere.

  According to one aspect of the invention, the method includes a step for counting the validation service or proof of certification.

  According to one aspect of the invention, the method consists in said first sphere of transactions to download in at least one electronic object at least one encryption bullet and an electronic signature certificate relating to transactions in said first sphere of transactions.

  According to one aspect of the invention, subsequently during a certification in at least a second sphere of transactions the Cert_signA electronic signature certificate relating to said first sphere of transactions is used in said second sphere of transactions to deduce a proof of identity or authenticity of another certification parameter to validate an encryption packet in said second sphere (8; B).

  According to one aspect of the invention, subsequently during a certification in at least a second sphere of transactions the Cert_signA electronic signature certificate relating to said first sphere of transactions is used in said second sphere of transactions to deduce a proof of identity or authenticity of another certification parameter for generating a Cert_signB electronic signature certificate relating to transactions in said second sphere of transactions.

  The invention also relates to devices for certifying at least one electronic object in a plurality of separate transaction spheres of the kind comprising at least one electronic communications network for at least two transaction spheres, an item preparation station. electronic, at least one certification station for each sphere of transaction and at least one execution position of a transaction in at least one of said spheres. The electronic personalization device and the electronic object comprise computer resources to enable in at least a second sphere of transactions to prove the authenticity of an identification or other certification data resulting from certification operations in said first sphere. transactions.

  The invention also relates to devices for certifying at least one electronic object in a plurality of separate transaction spheres of the kind comprising at least one electronic communications network for at least two transaction spheres, an item preparation station. electronic, at least one certification station for each sphere of transaction and at least one execution position of a transaction in at least one of said spheres. According to the invention, the second sphere does not have any means of proving the authenticity of an identification or other certification data resulting from the certification operations in said first sphere of transactions but stores the said proof of an identification issued by of said first transaction sphere as proof for the generation of a certificate in the second sphere of transactions.

  Other aspects and features of the present invention will be better understood from the description and drawings in which: FIG. 1 is a diagram showing the means engaged in devices of the invention; and FIG. 2 is a flowchart of the certification method of the invention.

  In Figure 1, there is shown a diagram of the technical means engaged in the devices of the invention. Two spheres of transactions secured by electronic signature are considered: - sphere A linked to a certification authority A and bearing the reference 1; - sphere B linked to a certification authority B and bearing the reference 8.

  FIG. 1 shows: - an electronic device 2 which controls the transactions of the first sphere A of transactions under the control of a certification authority which produces personalization data according to a personalization operation PA of the various electronic objects such as object 4; an electronic device 3 which controls each transaction signed in the first sphere A of transactions under the control of an authentication authority during an AA request presented by a transaction recipient in sphere A of transactions; at least one electronic device 4 which carries out transactions at the request of certified electronic objects belonging to identified users who are at the initiative of TA transactions and which, during the transaction, presents a request AA for authentication of a digital signature from the electronic object 5, - at least one electronic object 5, which may be an electronic portable object connected to a transaction network or a certification preparation network according to the operation concerned, here in the first sphere A (referenced 1 in FIG. 1), for example by means of a reader-recorder of portable electronic objects, connected to a computer coupled to the aforementioned networks, or directly a computer coupled to the aforementioned networks and which comprises at least a memory zone 6, 7 for receiving certification and / or encryption data and, if appropriate, processor means for processing the transaction, the management and the certification of the digital signature as well as the management of transaction computing objects, with encryption and addition of digital signature during a transaction TA in the sphere A. In the second sphere 8, called sphere B , the same electronic devices are present respectively: - an electronic device 9 which controls the transactions of the second sphere B of transactions under the control of a certification authority which produces personalization data according to a personalization operation PB of the various electronic objects as the object 5; an electronic device 11 which controls each transaction signed in the second sphere B of transactions under the control of an authentication authority during an AB request presented by a transaction recipient in sphere B of transactions; at least one electronic device 11 which carries out transactions at the request of certified electronic objects belonging to identified users who are at the initiative of TB transactions and which, during the transaction, presents an authentication request AB of a digital signature from the electronic object 5.

  For the same identified user, having at least one electronic signature, there may be several electronic objects as the object 5 and that has already been described without it being necessary to go further. But, it can be a single electronic object, such as an electronic portable object consisting of a microcircuit card or a memory stick, for example on USB port, with or without encryption and certification processor, these functions then being provided by the computer on which the electronic portable object is connected.

  According to the invention, the first sphere of transactions A first produces a customization of an electronic certification object 5 associated with the user having a unique ID identity. The authentication authority of the authentication device 3 thus has proof of the identity of the user carrying or associated with the electronic object 5.

  When this user wants to initiate a transaction in a second sphere of transactions B, like sphere 8 of Figure 1, he must perform the same personalization and certification operations specific to this second sphere, and so on if there are any others.

  But according to the invention, the authentication device 10 of the digital signature transmitted during a transaction TB in the second sphere B is connected with the authentication device 3 of the digital signatures of the transactions of type TA in the first sphere A and an IT resource for proof of identity is then executed which enables the identity associated with the digital signature to be certified or authenticated during a VAB identity validation operation so that, at its sole responsibility, the The authentication authority that has received the AB authentication request from the signed transaction in the second sphere will produce the authentication message of the digital signature.

  Other certification data may be validated instead of or in addition to the identity of the user in the VAB validation operation between the two authentication devices 10 and 3 in both spheres.

  In particular, the authentication device 3 in the first sphere A, which holds the proof of certification root here on the identity of the user, comprises means for storing the flow of VAB authentication requests.

  In a particular embodiment, the authentication device 3 in the first sphere A, which holds the proof of certification root here on the identity of the user, comprises a means for counting the validation service or the proof of root certification. here, on the identity of the user, each of the authentication devices of the various second spheres and to deduce a billing information from the validation or probation service of the signature in each second sphere.

  Each sphere of transactions is equipped with electronic devices connected in one or more communications networks, directly, or via a terminal (in the case of an electronic portable object such as a microcircuit card) and making it possible to perform at least one of the following operations: a secure transaction, particularly of the kind comprising the issue of a computer object, data and / or program, encapsulated in the meaning of the object languages or not, encrypted so as to render its content unusable by any device not having a decryption authorization, computer object which is combined or associated with an electronic signature: this operation is the current operation which is normally established when the course of the invention is conducted correctly; an operation for preparing at least one computer object, data and / or program, encapsulated in the meaning of the object languages or not, if necessary encrypted so as to render its content unusable by any device not having a decryption authorization, and which contains data and / or programs for preparing the certification of a computer object intended to assist or subsequently execute a transaction in the sphere of transactions considered; a certification operation of a secure transaction in the course of which an electronic object or an electronic portable object coupled to a terminal or computer coupled to a transaction network, the electronic object being provided with electronic and / or computer resources for associating a digital signature and, where appropriate, the encryption of at least one computer object involved in the transaction with at least one other transaction machine, connected on the same transaction network and in the relevant sphere of transactions; an authentication operation of the electronic signature associated with the transaction computer object involving the user initiating the transaction, the addressee of the transaction, who must receive the proof of authentication of the signature and an authority of the transaction; authentication of the electronic signature or part of it, such as the identity of the user initiating the transaction.

  According to the invention, it is during this last authentication operation of the electronic signature that the only operation that brings the two transaction spheres together is the authentication authority of the electronic signature associated with the computer object in question. certification course that can initiate a connection during which this second sphere authority submits a request for the purpose of obtaining a probation or validation of the identification data of the initiating user of the transaction in the second transaction sphere . As defined above, validation or probation may relate to other certification data of the digital signature depending on the nature of said digital signature.

  In Figure 2, there is shown a flow chart of the method of the invention in a particular embodiment.

  During a personalization step (see operation PA between the device 2 and the electronic object 5 in FIG. 1) in the first sphere or sphere A in which in particular the identity of the user of the electronic object of transaction and certification is controlled, and according to a known technology of electronic signature certification, a computer object of 2891101 12 certification is uploaded to a suitable memory 6 of the electronic object.

  In particular, such a computer object comprises, in addition to an encryption program and an electronic signature program, a group of data comprising a bi-key BC_A composed of the data of two encryption keys (K_priv, K_pub) _A relating to encryption in the first sphere A of transactions. The biclef BC_A comprises in the technology considered in the embodiment: - a confidential encryption key K_priv; and a public encryption key K_pub.

  The group of data downloaded in step 20 also includes an electronic signature certificate in the transactions of the first sphere A associated with the user and the electronic object 5. In the technology considered in the exemplary embodiment, a such certificate is noted: Cert_signA (ID, K_pub) which is therefore a software operator whose arguments are: ID: an identifier associated in a proven way with the user of the electronic object 5; K_pub is the public encryption key of the aforementioned BC_A biclef.

  According to one aspect of the invention, the authentication authority that controls the authentication device 3 (FIG. 1) keeps a proof of the identification ID of the user or a validation resource of this identity at the disposal of the user. possible future VAB validation requests (FIG. 1) produced by the authentication devices 10 of the second spheres B as the transaction sphere 8 (FIG. 1).

  According to the method of the invention, the transactions in the first sphere A are executed in a conventional manner.

  In a step 22, if the user who has provided proof of identity ID to the authentication authority of the first sphere A (at the authentication device 3 Figure 1) wants to obtain digital signature certification in a second transaction sphere such as sphere 8 (FIG. 1) the control authority of the second sphere B downloads a certification computer object in a suitable memory 7 of the electronic object 5. This computer object is analogous to the object computer downloaded in the previous step 20 and it comprises: -a biclef BC B and - a Cert_signB electronic signature certificate.

  The set BC B associated with the transaction sphere B is composed of: - a private encryption key K_privB, and - a public encryption key K_pubB.

  The certificate Cert_signB is a software operator, similar to the aforementioned certificate but whose arguments are: - ID: the identifier associated in a proven way with the user of the electronic object 5 and already registered in the other certificate Cert_signA; - K_pubB is the public encryption key of the biclef BC_B mentioned above.

  In step 24, when the user of the electronic object 5 (FIG. 1) wishes to execute a transaction in the second sphere B, the method of the invention comprises a step in which the user proves his identity according to the authentication authority of the first sphere A in the context of the electronic signature authentication in sphere B. For this purpose, according to a particular embodiment of the method of the invention, during the transaction in sphere B, the certificate Cert_signA (ID, K_pub) of the sphere A is transmitted to the control authority of the second sphere B. During a personalization step PB (FIG. 1), the article BC B is securely downloaded under an encrypted form based on the public key taken from the certificate Cert_signA to the memory concerned 7 of the electronic object of the user. The message transferred during this personalization is thus represented in the form of Cipher (K_pubA; {K_privB, K_pubB}) that a decryption resource of the computer object 5 retranscribed in the form of the aforementioned BC B bib.

  Alternatively, in a step 28, the control authority of the second sphere B records the proof according to the authentication authority of the first sphere A who knows the identity ID of the user.

  In a step 30, the control authority of the second sphere B composes the certificate Cert_signB of the electronic signature of the user ID in the second sphere B and downloads it to him in his memory 7.

  In a particular embodiment, the second sphere B has no means of proving the authenticity of an identification or other certification data resulting from the certification operations in said first sphere of transactions A, but the device of control 9 and / or the authentication device or devices 10 comprise a computer means for requesting in a VAB connection (FIG. 1) with the authentication device 3 in the first sphere A, to archive the proof of an identification originating from said first transaction sphere. In response, the authentication device 3 of the first sphere A downloads to the control device 9 or the authentication device 10 of the second sphere B a computer object (data and / or program) containing the means of proof of the the identity of the user who initiates a transaction in the second sphere B. The computer object of proof of identity is then used by the authentication station 10 when the user submits a certification request as it has been described above. The authentication device then executes the proof of identity computer object, ie OI_Preuve (ID), a computer object admitting a user identifier as an input parameter and producing a TRUE / FALSE boolean response if the proof of identity identity archived on the authentication station 10 (preferred embodiment) or on the authentication station 3 of the first sphere A, in another embodiment) is correct or not.

  In the preferred embodiment, as the input parameter, to the proof of identity computer object the authentication station 10 passes the parameter ID transmitted in the certification request provided by the user. If the proof is positive, the certification process on the authentication station 10 continues with the generation of a certificate in the second sphere of transactions. If the proof is negative, the certificate is not generated in the second sphere.

  As can be seen from the foregoing, the second sphere of transactions B has recognized the validity of the proven identity with the first sphere A control authority exclusively as proof of identity. The supervisory authority of the first sphere of transactions does not recognize

  nor does it endorse any of the operations of the supervisory, certification or authentication authorities of the second sphere of transactions B. The second sphere of transactions B does not involve the computer certification objects associated with the first transaction sphere A. In particular, there is no link between the digital signature certificates of the two first A and second B transaction spheres. Of course, what has just been described on the identity parameter ID can relate to one or more other parameters. exploited in the certification for example, parameters contained in the digital signature.

Claims (4)

  1 - A process for certifying transactions using an electronic signature which consists of: in a first step, performing operations for preparing a certification in a first sphere of transactions during which the first certification data are loaded; then - in at least one subsequent step, independently of the operations carried out in said first sphere of transactions, performing operations for preparing a certification in at least one other sphere of transactions by taking up a predetermined part of the first certification data; - in a step of use, to carry out independently the certification operations in each of the spheres of transactions by engaging the certification only in the sphere of transactions concerned without engaging the responsibility of any other sphere with the exception of an authentication operation based on a proof of identity operation or other certification data by an authentication authority of at least one other sphere of transactions.   2 Method according to claim 1, characterized in that it comprises, during a certification operation (TB) in at least one said second sphere of transactions (8; B), a validation step (VAB) to request a proof of the identity (ID) or authenticity of another certification data associated with an electronic transaction object for an identified user (ID) in said first sphere of transactions (1; A).   Method according to claim 2, characterized in that it comprises a step for storing the validation requests (VAB) in said first sphere (1; A).   4 Process according to claim 3, characterized in that it comprises a step for accounting for the validation service or proof of certification.     Method according to any one of the preceding claims, characterized in that it first consists in said first sphere of transactions (1; A) to be downloaded into at least one electronic object (5) at least one encryption packet (BC_A) and one certificate of electronic signature (Cert_signA) relating to the transactions in said first sphere of transactions (1; A).   6 Process according to claim 5, characterized in that subsequently, during certification in at least one second sphere of transactions (8; B), the electronic signature certificate (Cert_signA) relating to said first sphere of transactions (1; 8) is exploited in said second sphere of transactions to derive a proof of identity or authenticity from another certification parameter to validate an encryption packet in said second sphere (8; B).   7 - Process according to claim 5 or 6, characterized in that subsequently, during a certification in at least a second sphere of transactions (8; B) the electronic signature certificate (Cert_signA) relating to said first sphere of transactions (1). 8) is exploited in said second sphere of transactions to deduce a proof of identity or authenticity of another certification parameter for the generation of an electronic signature certificate (Cert_signB) relating to the transactions in said second sphere of transactions (8; A).   8 - Devices for certifying at least one electronic object (5) in a plurality of separate transaction spheres (1, 8) of the kind comprising at least one electronic communications network for at least two transaction spheres, a preparation station an electronic object, at least one certification station for each transaction sphere and at least one execution station of a transaction in at least one of said spheres, the devices being intended to implement the method according to the any of claims 1 to 7, characterized in that they include computing resources to enable in at least a second sphere of transactions to prove the authenticity of an identification or other certification data from certification operations in said first sphere of transactions.   9 - Devices for certifying at least one electronic object (5) in a plurality of separate transaction spheres (1, 8) of the kind comprising at least one electronic communications network for at least two transaction spheres, a preparation station an electronic object, at least one certification station for each transaction sphere and at least one execution station of a transaction in at least one of said spheres, the devices being intended to implement the method according to the any one of claims 1 to 7, characterized in that the second sphere does not have means to prove the authenticity of an identification or other certification data from certification operations in said first sphere of transactions but archive said proof of an identification resulting from said first transaction sphere as proof for the generation of a certificate in the second sphere of tra nsactions.