Secured element for performing a user authentication and user authentication method

Patent metadata

Field	Value
Publication number	US-9584356-B2
Application number	US-201214122009-A
Country	US
Kind code	B2
Filing date	May 24, 2012
Priority date	May 25, 2011
Publication date	Feb 28, 2017
Grant date	Feb 28, 2017

Abstract

The invention relates to a secured element ( 9 ) including: —a communication interface ( 91 ); —an integrated circuit comprising a security module ( 93 ) comprising encryption based security features and configured to process authentication requests received on the communication interface. The secured element further. includes a MEMS microphone ( 94 ), said microphone being configured to capture a sound sequence and to provide the captured sound sequence to the security module.

First claim

The invention claimed is:

1. A secured element ( 9 ) comprising:
a communication interface ( 91 );
an integrated circuit comprising:
a security module ( 93 ) comprising encryption based security features and configured to process authentication requests received on the communication interface by receiving from a multi-media server an authentication binary string; and
a MEMS (Microelectromechanical systems) microphone ( 94 ), said microphone being configured to capture a sound sequence produced by a multi-media device, the sound sequence corresponding to the authentication binary string transmitted to the multi-media device by the multi-media server, and to provide the captured sound sequence to the security module,
the security module operable to compare the captured sound sequence to the authentication binary string and to transmit an authentication confirmation to the multi-media server by which the server proceeds with delivery of a multimedia stream to the multi-media device.

2. The secured element ( 9 ) according to claim 1 , wherein the integrated circuit further comprises a converter ( 96 ) configured to convert the captured sound signal into a binary string and configured to provide said binary string to the security module.

3. The secured element according to claim 2 , wherein said converter ( 96 ) is a dual-tone multi-frequency converter.

4. The secured element according to claim 1 , wherein the security module is configured to:
sign said authentication confirmation;
transmit the signed authentication confirmation on said communication interface to said multi-media server.

5. A remote service system ( 10 ), comprising:
a secured element ( 9 ) having:
a communication interface ( 91 );
an integrated circuit comprising:
a security module ( 93 ) comprising encryption based security features and configured to process authentication requests received on the communication interface by receiving from a multi-media server an authentication binary string; and
a MEMS (Microelectromechanical systems) microphone ( 94 ), said microphone being configured to capture a sound sequence produced by a multi-media device, the sound sequence corresponding to the authentication binary string transmitted to the multi-media device by the multi-media server, and to provide the captured sound sequence to the security module,
the security module operable to compare the captured sound sequence to the authentication binary string and to transmit an authentication confirmation to the multi-media server by which the server proceeds with delivery of a multimedia stream to the multi-media device;

a multi-media server ( 1 ), remotely accessible by said secured element, configured to:
send an authentication request to the secured element including an authentication binary string;
send a sound sequence to be played by multi-media device;
check a user authentication confirmation received from the secured element and based on the matching between the sound sequence captured by the secured element and corresponding authentication binary string;
provide an access to a service when the captured sound sequence matches the authentication binary string.

6. An authentication method for operating a multimedia device, a secured element having an integrated circuit card with a MEMS (Microelectromechanical systems) microphone, and a multimedia server such that the multimedia server delegates authentication to the secured element, comprising the steps of:
sending an authentication request from the multimedia server to the secured element the authentication request including an authentication binary string;
sending a sound sequence corresponding the authentication binary string from the multimedia server to the sound playing system and playing said sound sequence on the multimedia device;
capturing said sound sequence through the MEMS microphone integrated in a secured element on a single integrated circuit also comprising a security module;
checking by the security module of the integrated circuit the matching of the captured sound sequence to the authentication binary string;
if the captured sound sequence matches the authentication binary string, transmitting an authentication confirmation from the secured element to the multimedia server; and
upon receipt of the authentication confirmation, transmitting a multimedia stream from the multimedia server to the multimedia device.

Assignees

• Gressus Yvon
• Arnal Benoit
• Deniau Bernard
• Gemalto Sa

Inventors

• Gressus Yvon
• Arnal Benoit
• Deniau Bernard

Classifications

• H04L63/18

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title

• H04L63/0853 Primary

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04W12/06

  Authentication · CPC title

• H04L29/06 Primary

  Electricity · mapped topic

• H04L9/32

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title