Abstract:
The transaction is made between an object and a terminal. According to the invention, an authentication value is inserted in the object which is a digital signature appearing on an identifier of the object. Each object also has a diversified key created from a base key diversified by the identifier. The terminal can thus authenticate the identifier and check that the debit has actually been made.Application to electronic payment.
Abstract:
The invention concerns a list signature method comprising: an organization phase whereby reliable authority defines parameters for implementing an anonymous electronic signature; a phase which consists in registering persons on a list of authorized members to generate a list signature, during which each person calculates a private key, and the reliable authority delivers to each person a certificate for membership of the list; a phase which consists in defining a serial number; a phase wherein a member of the list generates by means of certificate a signature containing an element common to all the signatures issued by one single member with one single serial number; a phase which consists in verifying whether the signature has been generated by a member of the list and whether the serial number has been used to generate the signature.
Abstract:
An anonymous and secure on-line payment system and method based on the partially blind signature cryptographic method with revocable anonymity. To this end, an Anonymity Server (SA) enables the Customer (C) to acquire on-line anonymous payment means on the basis of a protocol that does not enable the Anonymity Server to link the payment means to the Customer (C). The Payment Server (SdP) comprises means for opening an anonymous account using the anonymous payment means (50). A Customer (C) can make an on-line purchase from a Merchant Site (SM) without having to give a bank card number and remaining anonymous to the merchant and more generally to any entity present in the transaction or absent therefrom. However, this anonymity may be revoked by a trusted entity in the event of fraud on the Customer. Finally, a Customer can make payments when on the move.
Abstract:
A cryptographic method and apparatus for anonymously signing a message. Added to the anonymous signature is another signature which is calculated (operation 13) using a private key common to all the members of a group authorized to sign and unknown to all revoked members. The private key is updated (operations 8, 11) at group level on each revocation within the group and at member level only on anonymous signing of a message by the member.
Abstract:
An anonymous and secure on-line payment system and method based on the partially blind signature cryptographic method with revocable anonymity. To this end, an Anonymity Server (SA) enables the Customer (C) to acquire on-line anonymous payment means on the basis of a protocol that does not enable the Anonymity Server to link the payment means to the Customer (C). The Payment Server (SdP) comprises means for opening an anonymous account using the anonymous payment means (50). A Customer (C) can make an on-line purchase from a Merchant Site (SM) without having to give a bank card number and remaining anonymous to the merchant and more generally to any entity present in the transaction or absent therefrom. However, this anonymity may be revoked by a trusted entity in the event of fraud on the Customer. Finally, a Customer can make payments when on the move.
Abstract:
The invention concerns a system enabling a member (M) of a group (G) to produce, by means of customized data (z; K), a message (m) accompanied by a signature (8) proving to a verifier that the message originates from a member of the group (G). The invention is characterized in that the customized data is in the form of an electronic physical medium (26). Advantageously, the latter also incorporates: encrypting means (B3) for producing a customized cipher (C) from the customized data prior to the signature S of the message (m), means (B5) for producing a combination of a message m to be signed and the cipher (C) associated with said message, for example in the form of a concatenation of the message (m) with the cipher (C), and means (B6) for signing (Sig) the message (m) with the customized data (z; K) in the form of a cipher (C) associated with said message. Advantageously, the physical medium is a smart card (26) or the like.
Abstract:
A method for unique authentication of a user including federating an identity of said user for said service provider and an identity of the user for an identity provider, the federating including the steps of generating a user alias for that service provider and sending said identity provider a masked alias deduced from said alias, the identity provider associating said masked alias for that service provider with the identity of the user for the identity provider and sending the user elements for calculation by the user of a signature of a message containing the non-masked alias calculating said signature and sending the service provider said message with said signature, and the service provider verifying said signature, authenticating the user, and associating said alias with the user's identity.
Abstract:
The invention relates to a method for generating a list signature for a message to be signed, said method comprising steps which are carried out by an electronic material support of a member of a list. During said step, the electronic material support only generates an electronic signature according to a sequence number supplied to the electronic material support by a certifying authority, according to evidence of belonging to the list of members, to data relating to the electronic material support, and optionally to a key of an authority qualified to lift the anonymity of the generated signature.
Abstract:
In an electronic voting process, a voter (Vi) encrypts his vote (vi) according to the encryption scheme (ETM) of a tallier mix-net (50) used to tally up the votes cast. The voter (Vi) obtains on his encrypted vote, (xi), from an admin server module (20), a digital signature according to a fair blind signature scheme (FBSS). The encrypted vote (xi) is encrypted a second time, together with the unblinded digital signature (yi) thereof by the admin server, using the encryption scheme (EM) of a randomizing mix-net (40), to yield an output (ci), and the voter uses his own signature scheme (Si) to sign this, giving (σi). The voter sends an ID code and data including (ci,σi) to a bulletin board server (30). Discrepancies in this vote data can be detected and their origin traced by prompting the randomizing mix-net servers (40) to provide proofs of correctness, and using the signature-tracing mechanism of FBSS.
Abstract translation:在电子投票过程中,选民(Vi)根据加密方案(E TM TM)of of of of of of of of of of of of of of of of of of of of 一个更高的混合网(50)用于统计投票。 选民(V SUB>)从管理服务器模块(20)获得他的加密投票(x / i>),根据公平盲签名方案的数字签名 (FBSS)。 使用加密方案(E SUB>),加密第二次加密的投票(x < i>)以及管理服务器的未遮蔽的数字签名(y i i i i) (40)的随机混合网(40)中,以产生输出(c),并且选民使用他自己的签名方案(S< i< SUB>)来签名,给(sigma i SUB>)。 投票人向公告板服务器(30)发送一个ID码和数据,其中包括(c> i,igma igma igma igma igma i i i i i i i i。。。。。。。。。。。。。。。。) 可以通过提示随机混合网络服务器(40)提供正确性证明,并使用FBSS的签名跟踪机制来检测这个投票数据的差异,并且它们的起始点。
Abstract:
Method for carrying out an electronic transaction using several signatures.In the present invention, entities (or actors) are spread over a communication network and share keys. A message is encapsulated inside several cryptograms, and intermediate entities progressively decapsulate the cryptograms that they receive.The invention is applicable to all electronic transactions, in particular to “electronic wallet” applications.