FR3071949A1 - METHOD OF ESTABLISHING SECURE DIGITAL TRANSACTION FROM TWO CONNECTED EQUIPMENTS - Google Patents

Abstract

The present invention relates to a method for establishing a secure digital transaction from two connected devices (10, 20), • A first “master” device (10) executing an application performing the recording of an identifier IDs1 d a first associated service, and a recording of the accelerations of the equipment • At least one second "slave" equipment (20) executing an application recording an identifier IDs2 of the second user of said associated service, and a recording of the equipment accelerations.

Description

METHOD FOR ESTABLISHING A SECURE DIGITAL TRANSACTION FROM TWO CONNECTED EQUIPMENT.

Field of the invention

The present invention relates to the field of securing digital transactions between users each of whom has connected equipment provided with an accelerometer, by a physical gesture of mutual recognition carried out by knocking together users' equipment.

Connected devices can be cell phones or tablets. The transaction is fixed by a third-party application, for example a payment application, or information exchange, or authorization to access a material or digital resource.

PAYPAL offers a micropayment system between individuals, called Bump (trade name), by which the two parties carry out the transaction simply by hitting their cell phones. To use this functionality, users must simply connect 1 ¹ application to their existing PAYPAL (trade name) payment account. To make a money transfer, the debtor enters the amount he wants to transfer, knocks on the debtor's phone and confirms the transaction.

State of the art

International patent application WO 2011066381 proposes, in embodiments, the use of a first accelerometer to measure first acceleration data from a first device. Other interaction data, including time data and geographic location data, generated by the first device may also be recorded. The first acceleration data is compared by a remote server computer to second acceleration data generated by a second accelerometer in a second device. If the first and second accelerometer data are substantially equal, it can be determined that the devices have interacted and communications can be established. After communications are established, a financial transaction is made. The accelerometer data can be stored and / or used as part of the authentication process in a payment data processing network. Other embodiments of the invention use the accelerometer to generate movement security data to make a financial transaction more secure. The accelerometer data is used for authentication, security, encryption, session keys, non-repudiation or fraud protection.

International patent application WO 2015058300 describes another example of the use of a mobile or other devices containing accelerometers to provide two-factor authentication. According to one described embodiment, the user adds a movement pattern to the identity (ID) of the device to create a unique two-factor authentication.

International patent application WO 2011066387 describes methods for using a mobile device having an accelerometer to gain access to a secure or restricted area. A first device and a second device interact by making physical contact with each other, thereby generating interaction data which is representative of the physical interaction between the first and the second device. The first and second devices can be mobile phones. The second device can be a point of sale terminal, an access point device or any other fixed device (namely in a fixed position) positioned at a border, a door, a barrier or an entrance. Based on the interaction data, a server computer determines that the first device and the second device have established physical contact. After determining that the first device and the second device have established physical contact, communications can be established between the devices. The communications may relate to an access transaction comprising an exchange of information, such as references, between a person wishing to enter (who operates the first device) and a security guard (who operates the second device) to verify that the anyone wishing to enter is authorized or not authorized to have access to a particular area which is secured or restricted by the guard. Other embodiments relate to confirmation transactions. An access transaction and confirmation transactions can be combined with a financial transaction using a payment processing network.

International patent application WO 2012173637 describes another solution allowing, during a transaction, the capture of a gesture performed by a user of an electronic device (such as a cell phone). This gesture is analyzed to determine essential characteristics, such as accelerations of the electronic device during the gesture and associated time intervals. Then, the electronic device generates a token based on the essential characteristics, and supplies the token to a server. When a second token, associated with the token, is received by the server from a second electronic device, the server establishes a secure connection between the electronic device and the second electronic device.

Patent EP2374265 is also known which describes a method for pairing electronic devices. The method includes detecting a physical orientation of at least two electronic devices; detecting acceleration data when the two electronic devices are initially shaken together in close proximity to each other; generating code shared by the two devices when initially shaken together; and to pair these two electronic devices by means of an accelerometer when they are subsequently shaken together and a correspondence is found with the acceleration data and the code shared between them.

International application WO 2010078094 describes another solution for pairing electronic devices consisting in detecting a physical orientation of at least two electronic devices; detecting acceleration data when the two electronic devices are initially shaken together in close proximity to each other; generating code shared by the two devices when initially shaken together; and to pair these two electronic devices by means of an accelerometer when they are subsequently shaken together and a correspondence is found with the acceleration data and the code shared between them.

US patent US 9467850 describes another solution where an accelerometer obtains a vibration profile in response to a relative movement of the first device and a second device. The equipment transmits an encrypted version of the vibration profile to the second device and receives an encrypted version of a vibration profile from the second device. A processor configures a secure channel between the transmitting equipment and the second device in which to exchange keys with the second device in order to decrypt the encrypted vibration profile received. The processor also decrypts the encrypted vibration profile received in response to at least one of the keys exchanged, compares the transmitted vibration profile with the received vibration profile and allows the sharing of resources with the second device if a correspondence occurs between the transmitted vibration profile and the received vibration profile.

Disadvantages of the prior art

The solutions have several disadvantages.

of the prior art present respective equipment,

Firstly, the authentication of the device is generally carried out as a function of the identification of the related ones from their identifiers then the confirmation of this relationship by the comparison of the information resulting from the collision. This leads to a security breach, since the collision information is used only to confirm the relationship between two previously paired.

for the equipment

Secondly, the solutions of the prior art can be disturbed when the processing and transmission times of the information differ between the connected equipment in interaction.

Solution provided by the invention

In order to remedy these drawbacks, the invention relates, in its most general sense, to a method of establishing a secure digital transaction from two connected devices, • A first “master” device executing an application carrying out the recording of an ID _sl identifier of a first associated service, and a recording of the equipment accelerations • At least one second "slave" equipment executing an application recording an ID identifier _s2 of the second user of said associated service, and a record of equipment accelerations

The method comprising, when each of said connected devices detects an acceleration exceeding a threshold value, the following steps:

• The recording of a digital sequence of accelerations during a predetermined time interval, • The verification of the conformity of the recorded digital sequence with a characteristic profile o In case of non-conformity, the return to the previous state o In case of conformity, the transmission to a server of a digital sequence S _± comprising

A timestamp D _±

The ID identifier _if registered on the connected equipment

The digital acceleration sequence A _± • The server performing in the background a comparison between all the digital sequences coming from the different connected equipment, the result of the comparison being positive when:

o The acceleration sequence A _± of a digital sequence S _± is congruent to the acceleration sequence Aj of a digital sequence S., o The time stamp D _± of said digital sequence S _± differs from the time stamp Dj of said digital sequence S., with a value less than a predetermined threshold value Δ • The server authorizing said transaction between ID _sl and ID _s2 corresponding to the result of the aforementioned comparison, • The server proceeding to the recording of information d accomplishment associated with the pair ID _sl and ID _s2 having completed said transaction.

Preferably, the method for establishing a secure digital transaction from two connected devices according to the invention is characterized in that • an identifier is recorded in the RAM of said device, when starting said transaction ID _at of a third-party application AT, • the digital sequence S _± transmitted by the equipment connected to the server further comprising said identifier ID _at • said step of authorization by the server of the transaction between ID _sl and ID _s2 consisting in order the transaction through said third party application.

According to a particular mode of implementation, • each of the devices calculates, at the start of the transaction, a temporary single token J _± , • The identifier ID _{if of} said connected equipment being constituted by said temporary single token J _± .

Advantageously, the digital sequence S _± transmitted to the server further comprises a digital message.

Preferably, the digital sequence S _± transmitted to the server further comprises a digital geolocation sequence.

According to a variant, the method of establishing a secure digital transaction from two connected devices further comprises a step of transmission to each of said connected devices by the server of a message of completion of said transaction.

According to another variant, the information recorded by the server after the completion of the transaction is recorded in a historical database and deactivated.

According to a particular mode of implementation, the information recorded by the server after the completion of the transaction is recorded for the completion of new transactions between said identifiers ID _sl and ID _s2 .

Detailed description of a nonlimiting example of

1'invention

The present invention will be better understood on reading the detailed description of a nonlimiting example of the invention which follows, referring to the appended drawing where:

- Figure 1 shows a schematic view of a system according to the invention.

The invention relates, according to an exemplary embodiment, to a method making it possible to secure a universal data transfer platform including the following hardware:

• A transmitter connected equipment, which can be a mobile phone (10) • A receiver connected equipment (20), which can be a mobile phone or a fixed device • A server (30), responsible for receiving the transfer request, the authorize, and effect the actual transfer.

Connected equipment must have the following capacities:

• An accelerometer (11, 21) • The ability to use an application, which can be developed on a mobile Operating System.

• Data transmission capacities over the Internet, which may include wireless, wi-fi or other communications

The validation processes of the collision procedure are executed on a server with the following capacities:

• The ability to use an application, which can be developed on a fixed Operating System.

• Data transmission capacities over the Internet, which may include wireless, wi-fi or other communications

Each of the connected devices execute software applications, comprising:

An application, operating on a “transmitter” and developed by a so-called “Application Client”, the third-party “receiver” connected equipment, and information to be transmitted to the software connection interface (API) that can be supplied through • An application programming interface (“ API ") defining an exchange protocol between the connected equipment and the server • An application, called" Server Application "running on the server, receiving and processing the messages received by said protocol.

The process of mutual recognition of users takes place as follows:

• The user of the transmitting connected equipment defines, using the Mobile Application, the following elements:

• "Data to Transfer", the nature of the information can be of any type: amount of money, contact data ... As well as all the properties relating to this information. The definition of this data, as well as the means for the user to provide it, are defined by the Client Application.

• The "Recipient", recipient of the information, which can be any information identifying a user in a globally unique way: account number, email address, identifier ... The definition of this data, as well as the means for the user to providing them is defined by the Client Application.

The user of the transmitter connected equipment performs two close shocks (40, 41) on the receiver connected equipment ("double-check").

The double check (40, 41) is detected by the application on the transmitting connected equipment (10), which then triggers the transmission of the Data to Transfer and of the Recipient via the API.

turn, as well as Message, and add authentication authentication containing at least

The API, to Transfer encapsulates the Data to the Recipient in information • Information allowing to identify the mobile application used • A key allowing to identify the message in a globally unique way • The Date of emission / reception of the double -check • Temporal Tolerance, time interval set by the developer of the mobile application.

• The signal, picked up by the accelerometer during the double check.

• Signal Tolerance, tolerance threshold set by the developer of the mobile application.

The API then orders the sending of the message to the server

Likewise, the double-check (40, 41) is detected by the application on the connected receiver equipment (20), which then triggers the transmission of the Data to be Transferred and of the Recipient via the API. Steps 4 and 5 are then carried out on the receiver connected equipment (20).

The server receives, in a continuous stream, the messages from all the receiving and transmitting connected equipment, stores them in a database and adds the following information to them:

• The Reception Date. When received by the server, the Status is automatically assigned corresponding to the Server System Date.

• Recognition Date information. When received by the server, the Update Date is automatically assigned the value NULL.

• Corresponding Message information. When received by the server, the Corresponding Message is automatically assigned the value NULL.

• Information of Date of Acknowledgment of Customer Receipt. When received by the server, the Client Acknowledgment Date is automatically assigned the value NULL.

• Server Acknowledgment Date information. When received by the server, the Server Acknowledgment Date is automatically assigned the value NULL.

Each time a message is received, the server compares this message (the "Message Received") to the other messages stored in the database at least on the following criteria:

The Recognition Date is NULL

The identifier of the mobile application is identical

The Reception Date is the interval determined by Time

The signal is similar. The similarity is a function of the Tolerance using an algorithm which can all or part of the techniques included in the determined Tolerance Signal to use following or others not mentioned

Statistical analysis Hidden Markov models • A Hough transform • A neural network

If the server identifies in the database a stored message corresponding to the criteria described in step 8, it then selects the 2 records and updates them as follows:

• The Corresponding Message information takes the value of the same field for the Received Message • The updated Recognition Date takes the value of the Server System Date

At regular intervals, the mobile application of the receiver connected equipment (20) and the transmitter connected equipment (10) connect to the server and consult the status of the message they have transmitted. If, in the record corresponding to the message, the Recognition Date is different from NULL, then the mobile applications receive the information corresponding to the Corresponding Message and perform the following operations:

• They process the Corresponding Message. Processing is determined by the developer of the mobile application.

• They send an acknowledgment of receipt to the server. This message includes at least the following information:

• Identifier of the Message Transmitted • System Date of the receiver connected equipment

At regular intervals, the Server receives the acknowledgments of receipt of the mobile applications, and then updates the dates of acknowledgments of receipt of the corresponding messages.

Claims (8)

claims 1 - Method for establishing a secure digital transaction from two connected devices, • A first “master” device (10) executing an application recording an identifier ID _sl of a first associated service, and a recording of the accelerations of the equipment • At least one second “slave” equipment (20) executing an application carrying out the recording of an identifier ID _s2 of the second user of said associated service, and a recording of the accelerations of the equipment said method comprising, upon detection by each of said connected devices of an acceleration (40, 41) exceeding a threshold value, the following steps: • The recording of a digital sequence of accelerations during a predetermined time interval, • The verification of the conformity of the recorded digital sequence with a characteristic profile o In case of non-conformity, the return to the previous state o In case of conformity, the transmission to a server of a digital sequence S _± comprising A time stamp D _± The identifier ID _if recorded on the connected equipment The digital acceleration sequence A _± • The server (30) performing the task of bases a comparison between all the digital sequences coming from the various connected devices, the result of the comparison being positive when: o The acceleration sequence A _± of a digital sequence S _± is congruent to the acceleration sequence Aj of a digital sequence S., o The time stamp D _± of said digital sequence S _± differs from the time stamp Dj of said digital sequence S., with a value less than a predetermined threshold value Δ • The server (30) authorizing said transaction between ID _sl and ID _s2 corresponding to the result of the aforementioned comparison, • The server (30) performing the recording of completion information associated with the pair ID _sl and ID _s2 having completed said transaction. 2 - Method for establishing a secure digital transaction from two connected devices according to claim 1 characterized in that • there is recorded in the RAM of said device, during the start of said transaction, an identifier ID _at d 'a third party application AT, • the digital sequence S _± transmitted by the equipment connected to the server further comprising said identifier ID _at • said step of authorization by the server of the transaction between ID _sl and ID _s2 consisting in ordering the transaction by said third party application. 3 - Method for establishing a secure digital transaction from two connected devices according to claim 1 characterized in that: • each of the pieces of equipment calculates, at the start of the transaction, a temporary single token J _± , • The identifier ID _{if of} said connected piece of equipment being constituted by said temporary single token J _± . 4 - Method for establishing a secure digital transaction from two connected devices according to claim 1 characterized in that the digital sequence S _± transmitted to the server further comprises a digital message. 5 - Method for establishing a secure digital transaction from two connected devices according to claim 1 characterized in that the digital sequence S _± transmitted to the server further comprises a digital geolocation sequence. 6 - Method for establishing a secure digital transaction from two connected devices according to claim 1 characterized in that it further comprises a step of transmission to each of said devices connected by the server of a completion message of said transaction. 7 - Method for establishing a secure digital transaction from two connected devices according to claim 1 characterized in that the information recorded by the server after the completion of the transaction is recorded in a historical database and deactivated. 8 - Method for establishing a secure digital transaction from two connected devices according to claim 1 characterized in that the information recorded by the server after the completion of the transaction is recorded for the completion of new transactions between said ID _sl and ID _{s2 identifiers} .