WO2006042992A2

WO2006042992A2 - System and method for information access control

Info

Publication number: WO2006042992A2
Application number: PCT/FR2005/050853
Authority: WO
Inventors: Fabien Venries; Xavier Piednoir
Original assignee: France Telecom
Priority date: 2004-10-18
Filing date: 2005-10-14
Publication date: 2006-04-27
Also published as: WO2006042992A3

Abstract

The invention relates to a system for information access control, comprising: a mobile apparatus (300), for memorising a private signature key (key_priv) and means (330), for signing a message (m) representing said information, use of the private signature key (key_priv) and personal mobile apparatus (300) user data and a signature server (200), for memorising a public verification key (key_pub), associated with the signature key (key_priv) and means (230), for verifying the validity of said signature(s) using the public verification key (key_pub) and an access device (100), for invoking restriction as a function of the result of said verification. The above is of use for parental access control.

Description

System and method for controlling access to information

The present invention relates to a system and method for controlling access to information.

The invention may especially apply to the parental control of television program or the control of the information accessed via a computer on the Internet network.

In a general way, we will consider in the rest of this document that the information to which one wishes to control access is accessible via a device called "access device". This device can therefore consist in particular of a decoder connected to a television network or by a personal computer.

In a known manner, the access control systems, and in particular the parental control systems, use secret codes memorized in the access device, typically during the first use of this device. Such systems have a first major disadvantage in that they rely on a weak authentication system, the only knowledge of the password being sufficient to modify the parameters of the access control.

In addition, these systems can not be activated or parameterized remotely. The invention solves the aforementioned problems.

For this purpose, it aims at a system for controlling access to information, the actual control being implemented by an access to information device. This system comprises:

a mobile device comprising means for storing a private signature key and means for signing a message representative of the information, these signature means using the private signature key and a personal data of the user of the mobile equipment; and

a signature server comprising means for storing a public verification key associated with the private signature key and means for verifying the validity of the signature, these verification means using the public verification key;

- The access device being adapted to implement this access control, based on information representative of the result of the verification. In the remainder of this document, we will call "access control to information" any action to modify the access rights (prohibit, authorize, restrict, restore, ...) to this information, for a period of time determined or not. Thus, according to the invention, the access control is implemented when the signature server has verified the validity of the signature made by the mobile equipment, that is to say when the user of this equipment Mobile has been authenticated as a person authorized to control access to information. Advantageously, this responsible person may be remote from the access device.

Furthermore, the access control system according to the invention implements a strong authentication mechanism, making it very difficult or impossible to pirate the control system since it is necessary to be in possession of the control system. mobile equipment and personal data of the user to activate access control.

To this end, it will be recalled that in a strong authentication mechanism, also called "challenge-response":

an entity A wishing to authenticate presents an authentication request to an authentication entity B;

the authentication entity B generates a challenge, most often in the form of a random number, and transmits this challenge to the authenticating entity A;

the authenticating entity A signs the challenge received according to a known cryptographic algorithm and returns this signature to the authentication entity B; - the authentication entity B verifies the signature and validates, if necessary, the authentication of the entity A.

In a preferred embodiment, the aforementioned personal data is constituted by a personal code ("PIN") entered on the mobile equipment.

Alternatively, this personal data may be a biometric data of the user.

In a preferred embodiment, the signature means use the WIM ("Wireless Identity Module") technology defined by the OMA ("Open Mobile Alliance") standardization group. In a known manner, the WIM technology is a standardized PKI-based signature program ("Public Key Infrastructure") for performing electronic signatures and securing data exchanged as part of the Wireless Access Protocol (WAP). The implementation of WIM on SIM card can also allow its use outside the WAP, by exchange of ISO 7816 orders between the application of the mobile phone and the card, in particular for its use in association with proximity technologies, or the added unplanned features dabs WAP-WMLScriptCrypto API.

For more information, a person skilled in the art may, in particular, refer to the OMA reference documents: OMA-WAP-WIM-V1 -1-2002 / 024-C.pdf and WAP-161-WMLScriptCrypto-20010620 -a.pdf.

In an advantageous embodiment, the access device comprises means for creating the message to be signed, preferably from parameters defining the information to be controlled, these parameters being inputted with input means of this device.

In a first preferred embodiment of the access control system according to the invention:

the access device comprises means for sending the message to the signature server; the signature server comprises means for transmitting the message to the mobile equipment; and

the mobile equipment comprises means for sending the signature to the signature server.

In this first embodiment, the message can be received by the mobile equipment, via a mobile telecommunications network, for example of the GSM, GPRS or UMTS type.

Thus, the access control can be activated remotely, as long as the mobile equipment is in an area covered by the mobile telecommunication network. In this first preferred embodiment, the message to be signed can be sent from the signature server to the mobile device using the SMS standard or a Push Wap type mechanism. In a second preferred embodiment of the access control system:

the access device comprises means for sending the message to the mobile equipment and means for sending the signature to the signature server; and

the mobile equipment comprises means for sending the signature to the access device.

This second preferred embodiment makes it possible to carry out the signature on the mobile equipment, even if it is not in an area covered by the mobile telecommunications network.

Indeed, in this embodiment, the message to be signed is sent to the mobile device directly by the access device, without passing through the signature server.

Preferably, in this second preferred embodiment, the communication means between the access device and the mobile use a proximity link.

This proximity link may notably comply with Bluetooth, IRDA, ISO 14443 or WLAN standards.

Correlatively, the invention relates to a method for controlling access to information, this access control being implemented, during an access control step, by an access device to the information. This process comprises:

a step of signing, by a mobile device, a message representative of the information, this step using a private signature key and a personal data item of the user of the mobile equipment; a step of verifying the validity of the signature by a signature server, this step using a verification key associated with the private signature key; and

a step of sending, by the signature server, information representative of the result of the verification step, for the implementation, if necessary, of the aforementioned access control step.

The invention also relates to a device for accessing information, this device comprising:

means for entering parameters for defining this information; means for creating a message from these parameters;

means for sending this message for signature by mobile equipment;

means for receiving an access control command from a signature server; and

means adapted to control access to the information upon receipt of this access control command.

The invention also relates to a computer program stored in a memory of an access device as mentioned above, this program comprising instructions adapted to implement:

a step of entering parameters defining this information;

a step of creating a message from these parameters;

a step of sending this message for signature by a mobile device; a step of receiving an access control command from a signature server; and

a step of controlling access to this information on receipt of this access control command.

The particular advantages of the access control method of the access device and the computer program being identical to those of the access control system mentioned above, they will not be recalled here.

Other aspects and advantages of the present invention will appear more clearly on reading the description of the two particular embodiments which will follow, this description being given solely by way of nonlimiting example and with reference to the appended drawings in which: :

FIG. 1 represents an access control system according to the present invention in a first embodiment;

FIG. 2 represents an access control method implemented in the system of FIG. 1; FIG. 3 represents an access control system according to the present invention in a second embodiment; and

FIG. 4 represents an access control method implemented in the system of FIG. 3. Figures 1 and 2 respectively represent an access control system and an access control method according to the invention in a first embodiment.

This system comprises a device 100 for accessing information, for example constituted by a demodulator connected to a cable or satellite television network.

The access device 100 may also be constituted by a personal computer connected to the Internet network.

This access device 100 comprises known means 140 for controlling access to information by a user and a memory 115 in which is stored a computer program P according to the invention.

These access control means 140 can in particular be used in the context of a parental control of the information (television programs) accessible to children. In the preferred embodiment described here, the access device 100 comprises input means 120 (keyboard, mouse, remote control, ...) making it possible to capture, during a step E20 implemented by the program of computer P, the parameters of definition of information for which one wants to control access. In the case where the access device 100 is constituted by a device for accessing a television network, these parameters are, for example, the time and the broadcast channel of a program or set of programs. .

When the access device is constituted by a computer, these parameters can be constituted by the URL address of a Web page available on the Internet or by keywords for filtering content.

The access device 100 comprises means not shown here, to create, during this same step E20, a message m from the aforementioned parameters. This message m may for example consist of a character string in which are concatenated the time and the broadcast channel of a television program ("TF1 # 20.30-22.00") and the type of modification of the rights of desired access ("prohibit", "authorize", "restore", ...). The system according to the invention also comprises a signature server 200 adapted to implement a public key based signature (PKI) algorithm.

In the embodiment described here, the signature server 200 is the ORANGE TRUST server of the MSSP type ("Mobile Signature Service Provider") defined in the documents ETSI SCP 102.204 and ETSI SCP 102.207. According to the invention, the access device 100 and the signature server 200 respectively comprise means 130 and 210 for access to a communication network 10. These communication means consist, for example, of a network card and software means implementing standard protocols (HTTP, ...) or proprietary protocols on standard telecommunication networks (PSTN, ADSL, ISDN, etc.).

Thus, and in a known manner, the access device and the signature server 200 can exchange digital data via the network 10.

Preferentially, this network 10 is constituted by the Internet network. During a step E30 of the first embodiment described here, the computer program P of the access device 100 sends, to the signature device 200, the message m obtained at the input step E20. In this first embodiment, the signature server 200 comprises means 240 for mobile communication enabling it to send and receive messages via a mobile communication network 20.

These mobile communication means 240 consist, for example, of a hardware and software module implementing a communication protocol of GSM, GPRS or UMTS type.

The signature server 200 is thus adapted to transmit, during a step E40, the message m to the mobile equipment 300 of a person authorized to prevent access to information by the access device 100.

Preferably, this transmission step E40 uses the SMS standard or a Push Wap type mechanism, respectively described in the documents "ETSI TS 100.901" and "WAP-251-Push Message-20010322-a.pdf". In a preferred embodiment, the mobile number 300 is communicated by the access device 100 to the signature server 200 during the aforementioned step E30 of sending the message m.

For this purpose, the mobile number 300 is stored in a memory 1 10 of the access device 100, for example during a preliminary step E10 implemented by the computer program P.

According to the invention, the mobile 300 performs, after receiving the message m by mobile communication means 310, the signature s of this message m, during a step E50. More specifically, upon receipt of the message m, the user of the mobile equipment 300 is invited to enter a personal code ("PIN"), this personal code unlocking the private key signature key_priv to generate the electronic signature s.

As a variant, a user's biometric data is used to unlock the private key key_priv, instead of the aforementioned personal code ("PIN").

In the embodiment described here, this signature step E50 uses a public key signature algorithm contained for example in the WIM.

For this purpose, the mobile 300 includes a memory 320 in which are stored a key signature private key_priv and PIN personal code. The signature step E50 is followed, in this first embodiment, by a step E60 sending the signature s to the signature server 200.

This signature is received during this step E60 by the mobile communication means 240 of the signature server 200 described above. According to the invention, the signature server 200 includes a memory 220 storing a public key key_pub verification key associated with the key private key_priv of the mobile 300.

The signature server 200 also comprises means 230 adapted to check the validity of the signature s using the public key key_pub. Thus, after receiving the signature s (step E60), the signature server 200 performs a test E70, in which it checks whether the signature s is valid, that is to say if the signature was made by a user authorized to control access to the information identified by the message m. If the signature is valid, the result of the verification test E70 is positive and this test is followed by a step E80 during which the signature server 200 sends an access control command to the access device 100.

On receipt of this order by the communication means 130 of the access device, the computer program P of the access device 100 implements, during a step E90, the access control to the information in cooperation with the aforementioned access control means 140.

Following this activation step E90, the access control method ends (step E100). On the other hand, if the signature is erroneous, the result of the verification test E70 is negative and the access control method ends (step E100).

In this case, the access device 100 does not receive an access control command, it does not implement the access control step E90 and the access rights remain unchanged.

In a preferred embodiment, the input means 120 of the access device 100 comprise means for requesting the change of the number of the mobile 300 stored in the preliminary step E10 in the memory 110 of the access device 100. this preferred embodiment, a message m 'representative of this request (for example "responsible change") is received for signature by the mobile 300 whose number was recorded during the preliminary step E10.

If this user accepts this request, he signs the message m 'as previously described and this signature has been verified by the signature server 200.

If this signature is correct, the signature server 200 then sends an unlock command to the access device 100 which proposes the entry of a new mobile number. We will now describe, with reference to Figures 3 and 4, an access system and an access method according to the invention, in a second embodiment. This second embodiment is particularly interesting when the mobile 300 is in an area that does not allow it to access the mobile network 20.

In this second embodiment, the access device 100 and the mobile equipment 300 respectively comprise means 150 and 340 of proximity communication.

In the preferred embodiment, these proximity communication means are contactless means adapted to establish a communication link in accordance with the ISO 14443 standard. In a variant, they may be constituted by infrared, Bluetooth or USB communication modules. ...

In this second embodiment, the message m obtained during the inputting step E20 is transmitted during a step E30 'to the mobile equipment 300 using this proximity communication link. This sending step E30 'is implemented by the computer program P.

On receipt of this message, the mobile equipment 300 implements the signature step E50 already described, then sends, in return, the signature s to the access device 100 during a step E60 ', using the means of communication of proximity.

Upon receipt of this signature s, the access device 100 transmits, during a step E65 ', this signature to the server 200 using the network communication means 130 already described.

On receipt of the signature s, the signature server 200 checks during the test E70 already described whether the signature is valid or not.

This signature verification test E70 is followed by the steps E80 and E90 already described.

Claims

1 - Information access control system implemented (E90) by a device (100) for accessing said information, this system comprising;

a mobile equipment (300) comprising means (320) for storing a private signature key (keyjDriv) and means (330) for signing a message (m) representative of said information, said means (330) signature using said private signature key (key_priv) and personal data (PIN) of the user of said mobile equipment (300);

a signature server (200) comprising means (220) for storing a public verification key (key__pub) associated with said private signature key (key_priv), and means (230) for verifying the validity of said signature (s), these verification means (230) using said public verification key (key_pub); and

an access device (100) adapted to implement (E90) access control to said information, according to information representative of the result of said verification; said access control system being characterized in that: - the access device (100) comprises means (150) for sending the message (m) to said mobile equipment (300) and means (130) for sending said signature (s) to the signature server (200); and in that

the mobile equipment (300) comprises means for sending (340) said signature (s) to the access device (100). 2 - Access control system according to claim 1, characterized in that said access device (100) comprises means for creating said message (m), preferably from definition parameters of said information, entered with input means (120) of said access device (100).

3 - Access control system according to claim 1 or 2, characterized in that the means (150, 340) for communication between the access device

(100) and the mobile equipment (300) use a proximity link.

4 - Method for controlling access to information, said access control being implemented during a step (E90) of access control by a device (100) for accessing said information, said method being characterized in that it comprises:

a preliminary step (E20) of creation of said message (m) by said access device (100), preferably from definition parameters of said information, inputted with input means (120) of said access device (100);

a step (E30 ') of sending, by said access device (100), the message (m) to said mobile (300) for implementing said signature step (E50);

a step (E50) of signature, by a mobile equipment (300), of a message (m) representative of said information, this step (E50) using a private key signature (key_priv) and a personal data (PIN) the user of the mobile equipment (300);

a step (E60 ^! ) of sending, by said mobile (300), said signature (s) to the access device (100); a step (E65 ^! ) of sending, by the access device (100), the signature

(s) at the signature server (200) for performing said verification step (E70);

a step (E70) for verifying the validity of said signature (s) by a signature server (200), this step (E70) using a public verification key (key_pub) associated with the private signature key (key_priv ); and

a step (E80) of sending, by the signature server (200), information representative of the result of said verification step (E70), for the implementation, if necessary, of said step (E90 ) access control.

5 - Device for accessing information comprising: - means (120) for input of definition parameters of said information;

means for creating a message (m) from said parameters;

means (150) for sending, to a mobile equipment (300), said message (m) for signature by this mobile equipment (300); - means (150) for receiving a signature (s) from said mobile equipment (300);

means (130) for sending said signature (s) to a signature server (200); means (130) for receiving an access control command from said signature server (200); and

means (140) adapted to control access to said information on receipt of said access control command. 6 - An access device (100) according to claim 5, characterized in that said means (150) for communication with the mobile equipment (300) are means of proximity communication.

7 - Computer program stored on a memory (115) of an information access device, said program including instructions adapted to implement:

a step (E20) for inputting definition parameters of said information;

a step (E20) of creating a message (m) from said parameters; a step (E30 ¹ ) of sending, to a mobile device (300), said message

(m) for signature by this mobile equipment (300);

a step (E60 ¹ ) for receiving a signature (s) originating from said mobile equipment (300);

a step (E65 ¹ ) of sending said signature (s) to a signature server (300);

a step of receiving an access control command from said signature server (200); and

a step (E90) of controlling access to said information on reception of said access control command.