公开(公告)号：US20180176211A1

公开(公告)日：2018-06-21

申请号：US15578895

申请日：2016-05-24

Applicant: GEMALTO SA

Inventor： Gil BERNABEU ,  Olivier POTONNIEE ,  HongQian Karen LU

IPC: H04L29/06 ,  H04L9/08 ,  H04L9/32 ,  H04L9/30

CPC classification number: H04L63/0823 ,  H04L9/0844 ,  H04L9/3013 ,  H04L9/3242 ,  H04L63/0428 ,  H04L63/0853 ,  H04L63/166 ,  H04W12/003 ,  H04W12/00407 ,  H04W12/06

Abstract: The invention is a method for managing a secure channel between a server and a secure element embedded in a first device, wherein a user agent embedded in a second device establishes a HTTPS session with the server and retrieves a web application from the server, the method comprising the steps: the server sends to the web application an application certificate which is linked to a specific data reflecting the identity of the server, the secure element gets the application certificate and the specific data, the secure element checks the validity of the application certificate and that the application certificate is consistently linked to the specific data, in case of successful checks, the secure element and the server generate an ephemeral session key and use it for opening a secure channel.

公开(公告)号：US20150312252A1

公开(公告)日：2015-10-29

申请号：US14651250

申请日：2013-11-29

Applicant: GEMALTO SA

Inventor： Olivier POTONNIEE

IPC: H04L29/06 ,  G06F21/34

CPC classification number: H04L63/0853 ,  G06F21/34 ,  H04L63/083 ,  H04L63/18

Abstract: The invention is a method for allowing a user to establish a secure session between a device and a server by using a username/password associated with the user. The user provides the username for the device. In response to a message comprising the username, the server opens a session and generates an identifier of the session and sends the identifier to the device. The identifier is transmitted to a machine distinct from the device. The user provides the password for the machine. The machine sends an authenticating message to the server, the authenticating message comprises the identifier and an authenticating data generated from the password. The server sends a result message reflecting the result of the authenticating data checking to the device.

Abstract translation: 本发明是一种允许用户通过使用与用户相关联的用户名/密码在设备和服务器之间建立安全会话的方法。 用户提供设备的用户名。 响应于包含用户名的消息，服务器打开会话并生成会话的标识符，并将该标识符发送到设备。 标识符被发送到与设备不同的机器。 用户提供机器的密码。 机器向服务器发送认证消息，认证消息包括标识符和从密码生成的认证数据。 服务器将反映认证数据检查结果的结果消息发送给设备。