IP Library › Granted Patent US 12712732

Granted Patent B2

US 12712732 · App. 18/558,568 · Granted Aug 18, 2026

Method for authentication of a service provider device to a user device

Inventors: Georges Debois (Paris, FR); Gérald Maunier (Sanary sur Mer, FR); Mourad Faher (Marly le Roi, FR)

Assignee: THALES DIS FRANCE SAS

H04L9/321 G06F21/44 H04L9/3263

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 12712732
App. No.: 18/558,568
Granted: Aug 18, 2026
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

Provided is a method for post-quantum resistant authentication of a service provider device to a user device, using a legacy certificate of said service provider device and a quantum safe cryptography (QSC) certificate of said service provider device. The method includes verifying by a trusted third party device, using said identifier of the legacy certificate comprised in the QSC certificate, a binding of said QSC certificate to the legacy certificate of the service provider device, and verifying a validity of said QSC certificate by said trusted third party device. The binding and validity have been successfully verified by the trusted third party device, authentication of the service provider device to said user device, using said legacy certificate of the service provider device from which can be obtained said identifier comprised in the QSC certificate whose validity has been verified.

Claims (73)

1 . A method for post-quantum resistant authentication of a service provider device to a user device, using a legacy certificate of said service provider device and a quantum safe cryptography (QSC) certificate of said service provider device, wherein:

said legacy certificate (Legacy_CVC) is based on a legacy cryptographic protocol, and

said quantum safe cryptography certificate (QSC_Cert) is based on a QSC cryptographic protocol and comprises an identifier of the legacy certificate (Legacy_ID), said identifier of the legacy certificate being obtainable from said legacy certificate, and comprising:

verifying by a trusted third party device, using said identifier of the legacy certificate (Legacy_ID) comprised in the QSC certificate (QSC_Cert), a binding of said QSC certificate (QSC_Cert) to the legacy certificate (Legacy_CVC) of the service provider device,

verifying a validity of said QSC certificate (QSC_Cert) by said trusted third party device,

when said binding and validity have been successfully verified by the trusted third party device, authentication of the service provider device to said user device, using said legacy certificate (Legacy_CVC) of the service provider device from which can be obtained said identifier comprised in the QSC certificate whose validity has been verified; and

receiving from said trusted third party device an acknowledgment message indicating a successful verification by the trusted third party device;

wherein said authentication of the service provider device to said user device using said legacy certificate (Legacy_CVC) of the service provider device is performed by said user device and triggered by the reception of said acknowledgment message.

2 . The method of claim 1 , wherein said legacy cryptographic protocol is among RSA protocol, ECC protocol.

3 . The method of claim 1 , wherein said QSC cryptographic protocol is among hash-based, lattices-based and multivariate-based cryptographic protocol.

4 . The method of claim 1 , wherein said legacy certificate (Legacy_CVC) comprises a legacy certificate content and said identifier of the legacy certificate (Legacy_ID) is a hash of the legacy certificate content.

5 . The method of claim 1 , wherein said legacy certificate (Legacy_CVC) comprises a legacy certificate content and said identifier of the legacy certificate (Legacy_ID) is comprised in said legacy certificate content.

6 . The method of claim 1 comprising, performed by said user device:

obtaining said identifier of the legacy certificate (Legacy_ID) from information transmitted by said service provider device to be authenticated,

securely transmitting to said trusted third party device said obtained identifier of the legacy certificate (Legacy_ID),

wherein said trusted third party device uses said transmitted identifier of the legacy certificate (Legacy_ID) and said identifier of the legacy certificate (Legacy_ID) comprised in the QSC certificate (QSC_Cert) to verify a binding of said QSC certificate (QSC_Cert) to the legacy certificate (Legacy_CVC) of the service provider device.

7 . The method of claim 1 comprising, performed by said service provider device:

sending to said user device information from which said user device obtains said identifier of the legacy certificate (Legacy_ID),

sending to said trusted third party device information enabling the trusted third party device to obtain said QSC certificate (QSC_Cert).

8 . The method of claim 1 comprising, performed by said trusted third party device:

obtaining said QSC certificate (QSC_Cert),

receiving from said user device an identifier of the legacy certificate (Legacy_ID), wherein verifying a binding of said obtained QSC certificate (QSC_Cert) to the legacy certificate (Legacy_CVC) of the service provider device, comprises matching said received identifier of the legacy certificate (Legacy_ID) with said identifier of the legacy certificate (Legacy_ID) comprised in the obtained QSC certificate (QSC_Cert),

and wherein verifying a validity of said QSC certificate (QSC_Cert) comprises verifying a validity date and a revocation status of said obtained QSC certificate (QSC_Cert).

9 . The method of claim 8 comprising performed by said trusted third party device, sending to said user device an acknowledgment message indicating a successful verification by the trusted third party device of:

the binding of said QSC certificate (QSC_Cert) to the legacy certificate (Legacy_CVC) of the service provider device, and

the validity of said QSC certificate.

10 . The method of claim 8 wherein said authentication of the service provider device to said user device comprises, performed by said trusted third party device:

authenticating said service provider device using said legacy certificate (Legacy_CVC) of the service provider device when said verification by the trusted third party device of the binding of said QSC certificate (QSC_Cert) to the legacy certificate (Legacy_CVC) of the service provider device, and of the validity of said QSC certificate is successful,

securely sending to said user device an acknowledgment message indicating a successful authentication of the service provider device.

11 . A computer program comprising a non-transitory computer-readable medium having stored thereon software code comprising instructions that, when executed by at least one processor, cause the at least one processor to perform a method for post-quantum resistant authentication of a service provider device to a user device, using a legacy certificate of said service provider device and a quantum safe cryptography (QSC) certificate of said service provider device, wherein:

said legacy certificate (Legacy_CVC) is based on a legacy cryptographic protocol, and

verifying a validity of said QSC certificate (QSC_Cert) by said trusted third party device,

receiving from said trusted third party device an acknowledgment message indicating a successful verification by the trusted third party device;

12 . A user device comprising a processor and an input-output interface configured for performing a method for post-quantum resistant authentication of a service provider device to a user device, using a legacy certificate of said service provider device and a quantum safe cryptography (QSC) certificate of said service provider device, wherein:

said legacy certificate (Legacy_CVC) is based on a legacy cryptographic protocol, and

verifying a validity of said QSC certificate (QSC_Cert) by said trusted third party device,

receiving from said trusted third party device an acknowledgment message indicating a successful verification by the trusted third party device;

13 . A service provider device comprising a processor and an input-output interface configured for performing a method for post-quantum resistant authentication of a service provider device to a user device, using a legacy certificate of said service provider device and a quantum safe cryptography (QSC) certificate of said service provider device,

wherein:

said legacy certificate (Legacy_CVC) is based on a legacy cryptographic protocol, and

verifying a validity of said QSC certificate (QSC_Cert) by said trusted third party device,

and

receiving from said trusted third party device an acknowledgment message indicating a successful verification by the trusted third party device;

wherein said authentication of the service provider device to said user device using said legacy certificate) of the service provider device is performed by said user device and triggered by the reception of said acknowledgment message.

14 . A trusted third party device comprising a processor and an input-output interface configured for performing a method for post-quantum resistant authentication of a service provider device to a user device, using a legacy certificate of said service provider device and a quantum safe cryptography (QSC) certificate of said service provider device,

wherein:

said legacy certificate (Legacy_CVC) is based on a legacy cryptographic protocol, and

verifying a validity of said QSC certificate (QSC_Cert) by said trusted third party device,

receiving from said trusted third party device an acknowledgment message indicating a successful verification by the trusted third party device;

15 . A system comprising a user device, a service provider device and a trusted third party device configured for performing a method for post-quantum resistant authentication of a service provider device to a user device, using a legacy certificate of said service provider device and a quantum safe cryptography (QSC) certificate of said service provider device,

wherein:

said legacy certificate (Legacy_CVC) is based on a legacy cryptographic protocol, and

verifying a validity of said QSC certificate (QSC_Cert) by said trusted third party device,

receiving from said trusted third party device an acknowledgment message indicating a successful verification by the trusted third party device;