Method for generating at least one derived identity

1. A method of generating at least one derived identity of an individual ( 1 ) to be used by a service supplier, the method comprising the following steps:

generating a first identifier (id 1 ) from biometric data ( 5 ) of the individual using a user device;

defining a serial number (ns) associated with the individual by a service supplier device;

generating first check data (ctrl 1 ) by the service supplier device for verifying consistency between the first identifier (id 1 ) and the serial number (ns);

concatenating the serial number (ns), the first identifier (id 1 ), and the first check data (ctrl 1 ) by the service supplier device in such a manner as to form a first derived identity (ident 1 ) of the individual; and

storing the first derived identity in the user device, wherein

when the individual gains access to a service of the service supplier using the first derived identity stored in the user device, it is not possible to identify the individual from data of the individual stored in the service supplier device.

2. A method according to claim 1 , wherein the first identifier is generated from at least one derivation parameter.

3. A method according to claim 2 , further including a step consisting in defining a digital key (cln) serving to recover the derivation parameter, the first derived identity being formed by concatenating the serial number (ns), the first identifier (id 1 ), first check data (ctrl 1 ), and the digital key (cln).

4. A method according to claim 1 , wherein the first identifier (id 1 ) is obtained from a trapdoor function.

5. A method according to claim 3 , wherein the first identifier is the result of modular exponentiation of the type h 1 db.r1 mod M, where h 1 is a first derivation parameter, r 1 is a randomly defined second derivation parameter, M is a third derivation parameter or modulus, dB is a digital value representative of the user's biometric data ( 5 ), and wherein the digital key (cln) enables the first, second, and third parameters to be recovered.

6. A method according claim 3 , further including the following steps:

generating a second identifier (trunc(id 1 )) obtained by reducing the size of the first identifier (id 1 );

generating second check data (ctrl 2 ) for verifying consistency between the second identifier, the serial number, and the digital key; and

concatenating the serial number, the second identifier, the digital key, and the second check data so as to constitute a second derived identity (ident 2 ) of the individual.

7. A method according to claim 6 , wherein the second derived identity (ident 2 ) is for manually accessing personal data of the user stored by a service supplier.

8. A method according to claim 7 , further including a step consisting in generating a static identity (idi) of the form h 2 ident1 mod M′, where ident 1 is the first derived identity, h 2 is a fourth derivation parameter, and M′ is a modulus.

9. A method according to claim 1 , further including the step of generating a third derived identity (ident 3 ) or dynamic derived identity, the dynamic derived identity being formed by a first identification term of the form a=g 2 r2 and by a second identification term of the form b=h 2 (r2+c).ident1 , with g 2 s2 =h 2 , ident 1 being the first derived identity, h 2 being the fourth derivation parameter, g 2 and s 2 being the fifth and sixth derivation parameters, r 2 being a random seventh derivation parameter, and c being an eighth derivation parameter.

10. A method according to claim 9 , further including a step during which it is verified that (a.g 2 c ) s2.ident1 =b.

11. A method according to claim 9 , wherein the third derived identity is for remotely accessing the personal data of the user stored by the service supplier, and wherein the third derived identity (ident 3 ) is recalculated on each user access to the user's personal data.

12. A method according to claim 1 , wherein the first identifier (id 1 ) and/or the third derived identity (ident 3 ) and/or the static identity (idi) is/are generated by an identification medium ( 2 ) held by the individual and containing biometric data of the individual.

13. A method according to claim 12 , wherein the first identifier (id 1 ) and/or the third derived identity (ident 3 ) and/or the static identity (idi) is/are stored in the identification medium.

14. A method according to claim 12 , further including a step during which the identity of the user is verified by acquiring biometric data of the user and comparing it with the biometric data stored in the identification medium.