Grevin, Emmanuel

Provided is a system (100) and method (400) for performing mutual authentication of a protocol between devices based on short-lived certificates and random number nonces. A Personalization Agent (131) is a delegate to a Remote Service (130) and invokes a kernel-level service to check on a revocation status of participating devices and to issue CVC certificates in real-time to those devices, each personalized with a random key. This solves the issues encountered by existing protocol which use static key and hardcoded public key pinning. The use of unique keys for each device instance reduces the risks linked to key leakage or extraction and impersonation since. Short-lived certificates are generated that are valid only for the duration of communication session by clever use of random nonces in the CVC certificates issuance, where the random nonces play the role of a proof of time for the communication session that replaces the need of a synchronized clock to define validity period of the issued certificates. Other embodiments disclosed.

The invention is a method for performing a financial transaction using a digital bank card (25) hosted in a communicating apparatus (20) assigned to a user (50), said communicating apparatus comprising a financial application (26). The method comprises the following steps: - the financial application determines (S12) that an external factor authentication based on a hardware payment card (10) is required for the financial transaction; then - a checking entity retrieves from the hardware payment card, a set (61) of one or more static banking parameters (14, 15, 16) specifically assigned to the hardware payment card; then - the checking entity checks (S13, S18) that every banking parameter of the set is valid; then - the financial application authorizes (S20) processing of the financial transaction using the digital bank card only if every banking parameter in the set has been deemed valid by the checking entity.

Embodiments of the present disclosure relates to a device, and a method for processing a digital payment. A method comprises the steps of receiving information relating to a digital payment, on a user interface of a software application executed by a first device associated with a digital payment sender. The method further comprises the step of generating a quick response (QR) code based on the information and encrypting the generated QR code. The method also comprises the steps of rendering the encrypted QR code for a second device associated with a digital payment recipient. Further, the steps of receiving, encrypting, generating and rendering are performed in an event the first device is offline. And the encrypted QR code is scanned by a software application executed by the second device in an event the second device is online.

A smart card management (SCM) system 100 enabling usage of one or more smart cards over a remote desktop protocol (RDP) session, in accordance with an example embodiment. The system 100 may be communicatively coupled with a remote identity provider device 102 and a card emulator device 104 via a communication network 108. The card emulator 110 is configured to receive a request from the one or more applications to access the one or more smart cards, the request is received in the form of application protocol data units (APDUs), translate the received APDUs to custom logic associated with one or more smart cards, and host and manage instances associated with the one or more smart cards based on the custom logic to thereby enable the usage of the one or more smart cards over the remote desktop protocol (RDP) session. The instances are managed through one or more card model plugins.

The invention is a method for enrolling a payment instrument issued by remote financial entity (30) for a user (50) in a communicating equipment (10) hosting an identification wallet (20). Following receipt by the remote financial entity of an indication of a successful authentication and identification of said user by the identification wallet, the method comprises:generating, by the remote financial entity, credentials (31) associated to a bank account of the user;provisioning, by the remote financial entity, a financial namespace (21) in the identification wallet, said financial namespace comprising the credentials and a data element (22) identifying a financial transaction action to be triggered upon receipt of a document request targeting the data element; andassociating, by the remote financial entity, said credentials (31) with said data element (22).

The invention is a method implemented by an electronic apparatus (10) hosting a first application (11) able to perform payment transactions in conjunction with a terminal (20). The method comprises the steps of: obtaining, by the first application, first transaction data (D1) reflecting processing of a first payment transaction; retrieving by a hub application (18) hosted in the electronic apparatus, said first transaction data in a first format specific to the first application; converting and storing, by the hub application, in a memory (19) of the electronic apparatus, said first transaction data in a unified format different from said first format; and in response to receiving an export command (64) from a rendering device (15, 60), selecting, by the hub application, an export format based on the export command, then exporting a subset (40) of said first transaction data to the rendering device in said export format.

The invention is a method for detecting the source of a digital currency fraud, in which a server retrieves both a first currency token (T1) and an associated first signature (SG1) from a first element (SE1) and both a second currency token (T2) and n associated second signature (SG2) from a second element (SE2), both said first and second currency tokens containing a funding currency token (T3) originated from a third element (SE3),the server detects the existence of the digital currency fraud by identifying an anomaly between said first and second tokens, then determines, as a result of a verification of said first and second signatures, if the first token is a fake token created by the first element, if the second token is a fake token created by said second element or if the third element has unduly spent the funding currency token twice.

Disclosed are a method and a system for detecting collision between at least two areas on a body of a smart card. Exemplary method comprises designating a first area, on the body of the smart card, where a user is allowed to customize by placing object(s). The method further comprises designating exclusion zone(s), within the first area, where customization by the user is prohibited. The method further comprises receiving a user input corresponding to placement of the object(s), detecting whether there is a collision between any exclusion zone(s) and any object(s), and in response to the detected collision, generating a prompt for the user to adjust a corresponding position of a colliding object within the first area to avoid collision with any of the exclusion zone(s).

Provided is a system and method, implemented by way of a framework and protocol, for dynamic verification of an ML model trustworthiness in a zero-trust and distributed environment, based on ML model watermarking in conjunction with the production of an attestation. The attestation protocol for a MLaaS function verifies the origin and ownership of a trained ML model used therein. An attestation of origin (AO) result is produced to provide ML model ownership information, whereby a cloud application can evaluate the AO result to verify the ML model ownership information as to whether it can trust the ML model, for example, according to its policy and decide whether to use it or not. Other embodiments disclosed.

Embodiments of the present disclosure relates to a server, a user device, and methods for updating a facial digital image in an electronic document. A method comprises the steps of receiving, from a user, a selection of a facial digital image update option at a user interface of a software application executed on a user device. The method further comprises the steps of receiving a new facial digital image upon the selection of the facial digital image update option. The method also comprises the steps of transmitting a digital certificate generation request to a server. The method also comprises the steps of receiving a digital certificate comprising the new facial digital image and a new SOD and updating the electronic document with the new facial digital image and the new SOD associated with the new facial digital image.