The present invention relates to a method for generating a prime number and using it in a cryptographic application, comprising the steps of: a) determining at least one binary base B with a small size b = log2(B) bits and for each determined base B at least one small prime pi such that B mod pi = 1, with i an integer, b) selecting a prime candidate YP, c) decomposing the selected prime candidate YP in a base B selected among said determined binary bases : YP = ?yjBi d) computing a residue yPB from the candidate YP for said selected base such that yPB = ?yj e) testing if said computed residue yPB is divisible by one small prime pi selected among said determined small primes for said selected base B, f) while said computed residue yPB is not divisible by said selected small prime, iteratively repeating above step e) until tests performed at step e) prove that said computed residue yPB is not divisible by any of said determined small primes for said selected base B, g) when said computed residue yPB is not divisible by any of said determined small primes for said selected base B, iteratively repeating steps c) to f) for each base B among said determined binary bases, h) when, for all determined bases B, said residue yPB computed for a determined base is not divisible by any of said determined small primes for said determined base B, executing a known rigorous probable primality test on said candidate YP, and when the known rigorous probable primality test is a success, storing said prime candidate YP and using said stored prime candidate YP in said cryptographic application.
H04L 9/30 - Clé publique, c. à d. l'algorithme de chiffrement étant impossible à inverser par ordinateur et les clés de chiffrement des utilisateurs n'exigeant pas le secret
G06F 7/72 - Méthodes ou dispositions pour effectuer des calculs en utilisant une représentation numérique non codée, c. à d. une représentation de nombres sans base; Dispositifs de calcul utilisant une combinaison de représentations de nombres codées et non codées utilisant l'arithmétique des résidus
2.
AUTHENTICATION SERVER OF A CELLULAR TELECOMMUNICATION NETWORK AND CORRESPONDING UICC
The invention proposes an authentication server of a cellular telecommunication network, the authentication server being arranged for generating an authentication token to be transmitted to a telecommunication terminal, the authentication token comprising a message authentication code and a sequence number, wherein the message authentication code is equal to: MACx = KIdx XOR f1 (AMF, SQNx, RAND,K) with KIdx being a key index information in the form of a bias of a MAC equal to: MAC = f1(K,AMF,SQNx, RAND) with f1 being a function, K a key, RAND a random number and SQNx a sequence counter relative to a corresponding key Kx derived from the key K and KIdx, and AMF the content of an authentication management field as defined in 3GPP TS 33.102.
The invention relates to a method for producing a radiofrequency device (1) comprising a first antenna circuit connected to a radiofrequency chip and a second antenna circuit associated with, or coupled to, the first circuit, said method being characterised in that it comprises the following steps: formation of the first antenna circuit in the form of a conductive wire deposited in a guided manner on a first substrate; and formation of the second antenna circuit in the form of a conductive wire deposited on the same first substrate in a guided manner and at a calibrated distance from the first antenna circuit.
G06K 19/077 - Supports d'enregistrement avec des marques conductrices, des circuits imprimés ou des éléments de circuit à semi-conducteurs, p.ex. cartes d'identité ou cartes de crédit avec des puces à circuit intégré - Détails de structure, p.ex. montage de circuits dans le support
4.
METHOD FOR PRODUCING A SINGLE-SIDED ELECTRONIC MODULE INCLUDING INTERCONNECTION ZONES
The invention relates to a method for producing a module (17) having an electronic chip including metallisations which are accessible from a first side of the metallisations and an integrated circuit chip which is arranged on the second side of the metallisations, opposite the first side. The method is characterised in that it comprises the step of forming electrical interconnection elements (9C, 9C, 30) which are separate from the metallisations, directly connecting the chip, and are arranged on the second side of the metallisations. The invention also relates to a module corresponding to the method and to a device comprising said module.
G06K 19/077 - Supports d'enregistrement avec des marques conductrices, des circuits imprimés ou des éléments de circuit à semi-conducteurs, p.ex. cartes d'identité ou cartes de crédit avec des puces à circuit intégré - Détails de structure, p.ex. montage de circuits dans le support
5.
METHOD FOR REMOTE SUBSCRIPTION MANAGEMENT OF AN EUICC, CORRESPONDING TERMINAL
The invention concerns a method for remote subscription management of an eUICC (23) cooperating with a terminal (24), the eUICC (23) comprising a private key (Prkeu) and a public certificate (Cert-eu) signed by its manufacturer, the public certificate (Cert-eu) also comprising an information allowing a subscription manager server (20), with no prior knowledge of the eUICC (23), to decide if it can agree to manage the eUICC (23), the method comprising: a- At the occurrence of an event, establishing a secure channel between the terminal (24) and the subscription manager server (20) by using the public certificate (Cert-eu) and dedicated cryptographic services of the eUICC (23); b- Sending from the terminal (24) to the subscription manager server (20) a subscription management request, being considered as an enrolment request by the subscription manager server (20); c- Verifying, thanks to the information comprised in the received public certificate from the eUICC (23), in the subscription manager server (20) if the eUICC (23) is entitled to be managed by the subscription manager server (20) and, if yes: d- Performing a key establishment procedure between the subscription manager server (20) and the eUICC (23) by using the eUICC (23) public certificate, this step being the enrolment of the eUICC by the SM-DP; e- Establishing between the subscription manager server (20) and the eUICC (23) a secure channel with the keys generated at step -d-; f- Executing by the subscription manager server (20) the subscription management request on the eUICC (23).
A system, method and computer-readable storage medium with instructions for operating a processor of an electronic device to protect against unauthorized manipulation of the code pointer by maintaining and updating a code pointer complement against which the code pointer may be verified. Other systems and methods are disclosed.
G06F 21/52 - Contrôle des usagers, programmes ou dispositifs de préservation de l’intégrité des plates-formes, p.ex. des processeurs, des micrologiciels ou des systèmes d’exploitation au stade de l’exécution du programme, p.ex. intégrité de la pile, débordement de tampon ou prévention d'effacement involontaire de données
7.
SERVER AND METHOD FOR SECURE AND ECONOMICAL SHARING OF DATA
The present invention relates to a web server (WS) having a web application using published API of one or more cloud storage providers (SP), said web application being dedicated to secure and economical sharing of encrypted files (EF) residing at the cloud storage providers (SP), said files being managed under a virtual folder (VF) which is shared by a group of different entities (UEA, UEB).
The invention proposes a method consisting in: - opening (102), at the request of the UICC (101), a data channel between the terminal and the server; - performing a mutual authentication between the UICC and the server by using the bootstrap credentials; - requesting (105, 107), from the UICC to the server, the delivery of a subscription profile by using the unique serial number; - if a subscription profile exists for the UICC, downloading (106, 108) the subscription profile to the UICC.
H04W 8/20 - Transfert de données utilisateur ou abonné
G06F 21/00 - Dispositions de sécurité pour protéger les calculateurs, leurs composants, les programmes ou les données contre une activité non autorisée
9.
METHOD FOR MANAGING CONTENT ON A SECURE ELEMENT CONNECTED TO AN EQUIPMENT
The invention concerns a method for managing content on a secure element (20) connected to an equipment (21), this content being managed on the secure element from a distant administrative platform (22). According to the invention, the method consists in: Establishing, at the level of the administrative platform a secure channel between the equipment (21) and the administrative platform (22), thanks to session keys generated by the secure element (20) and transmitted to the equipment (21); - Transmitting to the administrative platform (22) a request to manage content of the secure element (20); - Verifying at the level of the administrative platform (22) that this request originates from the same secure element (20) that has generated the session keys and, if positive, authorizing the management and, if negative, forbid this management.
H04W 8/20 - Transfert de données utilisateur ou abonné
G06F 21/00 - Dispositions de sécurité pour protéger les calculateurs, leurs composants, les programmes ou les données contre une activité non autorisée
10.
METHOD FOR PERSONALIZING A SECURE ELEMENT COMPRISED IN A TERMINAL
The invention proposes a method for personalizing a first secure element comprised in a first terminal, said method consisting in: Providing the user of the first terminal with a second secure element; Linking the first and second secure elements in or through the first terminal; Personalizing securely the first secure element with data comprised in the second secure element, security being based on certificate verification and asymmetric encryption between the secure elements.
H04W 8/20 - Transfert de données utilisateur ou abonné
G06F 21/00 - Dispositions de sécurité pour protéger les calculateurs, leurs composants, les programmes ou les données contre une activité non autorisée
11.
METHOD FOR TRANSMITTING A SIM APPLICATION OF A FIRST TERMINAL TO A SECOND TERMINAL
The present invention concerns a method for transmitting a Sim application of a first terminal to a second terminal, the Sim application being stored in a secure element included in the first terminal, the access to the Sim application being locked by a Pin code. According to the invention, the method consists in: i - exporting thed Sim application from the first terminal to a distant site, by including the Pin code as well as a remote loading code; ii - ask to the user of the second terminal to enter the remote loading code in the second terminal; iii - in the event the remote loading code entered by the user matches the remote loading code that has been exported, authorizing the installation of the Sim application in a secure element of the second terminal, and otherwise, do not install the Sim application in the secure element of the second terminal.
H04W 8/20 - Transfert de données utilisateur ou abonné
G06F 21/00 - Dispositions de sécurité pour protéger les calculateurs, leurs composants, les programmes ou les données contre une activité non autorisée
12.
METHOD FOR TRANSFERRING SUBSCRIPTION INFORMATION BETWEEN TERMINALS
The present invention concerns a method for transferring securely the subscription information and user data from a first terminal to a second terminal, the terminals respectively containing a first and a second UICC. According to the invention, the method consists in: i- transmitting an identifier of the second terminal to the first terminal; ii- transmitting from the first terminal to a secure vault the identifier of the second terminal and an identifier of the first UICC; iii- transmitting from the secure vault to the first terminal a subscription installation public key of the second terminal; iv- in the first UICC, packaging and encrypting the subscription information and user data with the subscription public installation key of the second terminal; v- transmitting the package to the second UICC of the second terminal; vi- installing the package on the second UICC.
H04W 8/20 - Transfert de données utilisateur ou abonné
G06F 21/00 - Dispositions de sécurité pour protéger les calculateurs, leurs composants, les programmes ou les données contre une activité non autorisée
13.
METHOD FOR PRODUCING A DEVICE COMPRISING A TRANSPONDER ANTENNA CONNECTED TO CONTACT PINS AND DEVICE OBTAINED
The invention relates to a method for producing a device comprising a transponder antenna connected to contact pins, said method comprising the steps of: providing or producing an antenna (3) with terminal connections (7b, 8b) in contact with a substrate, placing the contact pad (5, 6) on the substrate ad connecting the same to the terminal sections of the antenna (7b, 8b), the connection being produced by means of a soldering (38) by introducing energy between the pads (5, 6) and the terminal sections (7b, 8b). The method is characterised in that the pads (5, 6) are placed such as to provide a surface (40) facing an antenna terminal connection section (7b, 8b), said section being arranged on the substrate (2, 2b, 2f ) and the soldering energy being directly applied to the pads (5, 6). The invention also relates to the device obtained.
H01Q 1/22 - Supports; Moyens de montage par association structurale avec d'autres équipements ou objets
G06K 19/077 - Supports d'enregistrement avec des marques conductrices, des circuits imprimés ou des éléments de circuit à semi-conducteurs, p.ex. cartes d'identité ou cartes de crédit avec des puces à circuit intégré - Détails de structure, p.ex. montage de circuits dans le support
brevets
