Verfahren zum Betrauen von Daten unter Verwendung einer Sicheren Komponente

Details

Veröffentlichungs-Nr.

EP4554141

Aktenzeichen

EP23306935

Anmeldetag

9. November 2023

Veröffentlichung

14. Mai 2025

Rechtsraum

EP

IPC

H04L9/06H04L9/08H04L9/32H04L9/40

Abstract

The invention relates to a method to entrust requested data at a relying party, said requested data coming from an unsecure software component in a user equipment of a user, said user equipment having a secure component storing data hash of said data and having a pseudonym.The secure component produces a cryptogram being a concatenation of several ciphertexts successively obtained by chaining executions of a trust cryptography function using a secure component's secret key, said function being applied to successive plaintexts comprising at least the secure component's pseudonym and data hash of the data corresponding to data's references requested by the relying party which then receives and deciphers the requested data that has been enciphered by the software component using the last ciphertext concatenated in at least said cryptogram and an applicative cryptography algorithm. The cryptogram is sent to a trust service for de-concatenation and chaining executions of a trust cryptography function correlated to the trust cryptography function of the secure component to extract the secure component's pseudonym and the data hash of the data corresponding to the given data's reference in successive de-ciphered plaintexts. The method entrusts received deciphered data only if the extracted pseudonym corresponds to the received pseudonym, and if the data hash corresponding to the given data's reference extracted by the trust service corresponds to the data hash corresponding to the given data's reference calculated by the relying party.

Anmelder

Firma

THALES DIS FRANCE SAS

Land

🇫🇷 Frankreich

Fachgebiete