Method for securing a telecommunications terminal which is connected to a terminal user identification module

1. A method for securing a telecommunications terminal containing a terminal user identification module, comprising:

a step of carrying out a procedure for pairing the terminal with the identification module, comprising the sub-steps of:

loading from a server in a secure manner a first item of software which comprises a pairing key on the identification module;

loading from the server in a secure manner a second item of software which is capable of operating in conjunction with the first item of software on the telecommunications terminal;

transmitting from the server a pairing key which corresponds to that of the first item of software to the second item of software;

storing the pairing key transmitted in a secure storage zone of the telecommunications terminal;

prior to any response from the first item of software to a request from the second item of software, verifying by the first item of software in said module that the pairing key of the second item of software stored on the communications terminal is valid;

responding to the request when and only when the second item of software is in valid possession of the pairing key.

2. The method for securing a telecommunications terminal according to claim 1 , wherein the transmission of the pairing key to the second item of software is conditional upon a procedure for authorising the telecommunications terminal.

3. The method for securing a telecommunications terminal according to claim 2 , wherein since the terminal has means for identification and authentication of the terminal, the procedure for authorising the terminal is carried out automatically by means of verification, by the first item of software loaded on the identification module, or by an authentication server, of the validity of the identification and authentication means.

4. The method for securing a telecommunications terminal according to claim 3 , wherein the identification and authentication means comprise an RSA key pair and a certificate transmitted by a certification authority and the verification of the validity of the means includes authentication of the RSA key pair and the certificate.

5. The method for securing a telecommunications terminal according to claim 1 , wherein the verification of the possession of the pairing key by the second item of software is carried out via a “challenge-response” process from the first item of software to the second item of software.

6. The method for securing a telecommunications terminal according to claim 1 , wherein the identification module comprises at least a third item of software which is capable of operating with a complementary item of software loaded on the terminal and responds to a request from the complementary item of software thereof only after having verified with the first item of software that the second item of software is in valid possession of a pairing key.

7. The method for securing a telecommunications terminal according to claim 1 , wherein the pairing key serves to establish a session key which allows the exchanges between the terminal and the identification module to be encrypted.

8. The method for securing a telecommunications terminal according to claim 1 , wherein the verification of the pairing key by the first item of software further involves the positioning of flags which mark a difference between the configuration recorded in the identification module and the current configuration of the telecommunications terminal.

9. The method for securing a telecommunications terminal according to claim 8 , wherein the flags and the configuration information may be read and updated in a secure manner by means of an authentication server.

10. A system for securing a telecommunications terminal containing a terminal user identification module, comprising:

means for secure loading from a server and storage of a first item of software comprising a pairing key in the identification module;

means for secure loading from the server of a second item of software which is capable of operating in conjunction with the first item of software on the telecommunications terminal;

means for secure loading from the server and storage of a pairing key of the second item of software; and

means for communicating between the first and the second item of software comprising means for validating the pairing key of the second item of software which are capable of authorising communication only upon verification by the first item of software that the second item of software is in valid possession of the pairing key.

11. A telecommunications terminal which comprises means for communicating with a user identification module contained in the telecommunications terminal, comprising:

means for loading from a server, storing and implementing a second item of software which is capable of operating with a first item of software which is present on the identification module; and

means for secure storage of a pairing key, said means for secure storage being connected to means for validating the pairing key using the first item of software which is present on the identification module.

12. A user identification module which comprises means for communicating with a telecommunications terminal containing the user identification module, comprising:

means for secure loading from a server and storage of a pairing key which corresponds to a pairing key which is stored on the terminal, and a first item of software which is capable of operating with a second item of software which is present on the terminal; and

means for validating the pairing key of the terminal from the pairing key of the module, means for validating being capable of authorising communication only after verification that the second item of software is in valid possession of the pairing key.

13. A software product which comprises a first module useable on a telecommunications terminal and a second module useable on a module for identification of a user of the telecommunications terminal, configured to implement the method according to claim 1 .

14. A method for securing a telecommunications terminal according to claim 2 , wherein the verification of the possession of the pairing key by the second item of software is carried out via a “challenge-response” process from the first item of software to the second item of software.

15. A method for securing a telecommunications terminal according to claim 3 , wherein the verification of the possession of the pairing key by the second item of software is carried out via a “challenge-response” process from the first item of software to the second item of software.

16. A method for securing a telecommunications terminal according to claim 4 , wherein the verification of the possession of the pairing key by the second item of software is carried out via a “challenge-response” process from the first item of software to the second item of software.

17. A method for securing a telecommunications terminal according to claim 2 , wherein the identification module comprises at least a third item of software which is capable of operating with a complementary item of software loaded on the terminal and responds to a request from the complementary item of software thereof only after having verified with the first item of software that the second item of software is in valid possession of a pairing key.

18. A method for securing a telecommunications terminal according to claim 3 , wherein the identification module comprises at least a third item of software which is capable of operating with a complementary item of software loaded on the terminal and responds to a request from the complementary item of software thereof only after having verified with the first item of software that the second item of software is in valid possession of a pairing key.

19. A method for securing a telecommunications terminal according to claim 4 , wherein the identification module comprises at least a third item of software which is capable of operating with a complementary item of software loaded on the terminal and responds to a request from the complementary item of software thereof only after having verified with the first item of software that the second item of software is in valid possession of a pairing key.

20. A method for securing a telecommunications terminal according to claim 2 , wherein the pairing key serves to establish a session key which allows the exchanges between the terminal and the identification module to be encrypted.