Method for managing a secure channel between a server and a secure element

    公开(公告)号:US10812467B2

    公开(公告)日:2020-10-20

    申请号:US15578895

    申请日:2016-05-24

    Applicant: GEMALTO SA

    Abstract: The invention is a method for managing a secure channel between a server and a secure element embedded in a first device, wherein a user agent embedded in a second device establishes a HTTPS session with the server and retrieves a web application from the server, the method comprising the steps: the server sends to the web application an application certificate which is linked to a specific data reflecting the identity of the server, the secure element gets the application certificate and the specific data, the secure element checks the validity of the application certificate and that the application certificate is consistently linked to the specific data, in case of successful checks, the secure element and the server generate an ephemeral session key and use it for opening a secure channel.

    Method of allowing establishment of a secure session between a device and a server

    公开(公告)号:US09635022B2

    公开(公告)日:2017-04-25

    申请号:US14651250

    申请日:2013-11-29

    Applicant: GEMALTO SA

    CPC classification number: H04L63/0853 G06F21/34 H04L63/083 H04L63/18

    Abstract: The invention is a method for allowing a user to establish a secure session between a device and a server by using a username/password associated with the user. The user provides the username for the device. In response to a message comprising the username, the server opens a session and generates an identifier of the session and sends the identifier to the device. The identifier is transmitted to a machine distinct from the device. The user provides the password for the machine. The machine sends an authenticating message to the server, the authenticating message comprises the identifier and an authenticating data generated from the password. The server sends a result message reflecting the result of the authenticating data checking to the device.

Patent Agency Ranking