Data verification method

1. A method for verifying data generated by an electronic device included in equipment suitable for communicating with a server via a communication network, the electronic device comprising a computing unit, a non-volatile one-time programmable memory and a volatile memory, the equipment comprising a rewritable non-volatile memory and a communication bus enabling the electronic device to store data in the rewritable non-volatile memory, wherein the method is implemented by the electronic device and comprises:

creating a secured channel by encryption between the equipment and the server;

obtaining a message authentication code key, referred to as an authentication key, from the server;

loading data to be verified and a message authentication code corresponding to said data from the rewritable non-volatile memory to the volatile memory, the message authentication code having been obtained by the electronic device from the authentication key and said data prior to the storage of said data and message authentication code in the rewritable non-volatile memory, the electronic device having had available the authentication key only at a time of generation of the message authentication code;

verifying the data to be verified using the authentication key and the message authentication code and allowing use of the data when the verification is positive, but disallowing use of the data when the verification is negative so that no data stored in the rewritable non-volatile memory can be used if the data has not been verified positively by means of the authentication key and the message authentication code, which limits the possibilities of replay attack.

2. The method according to claim 1 , wherein the data to be verified and the message authentication code have been encrypted using a first encryption key stored in the one-time programmable memory prior to storage thereof in the rewritable non-volatile memory and are deciphered following loading thereof in the volatile memory and prior to verification thereof.

3. The method according to claim 1 , wherein the data to be verified are used only when the secured channel between the equipment and the server can be created.

4. The method according to claim 1 , wherein the encryption used for creating the secured channel uses a second encryption key stored in the one-time programmable memory.

5. The method according to claim 1 , wherein the authentication key is obtained by the electronic device following a transmission by the electronic device of a request to obtain said authentication key from the server.

6. The method according to claim 1 , wherein the authentication key was previously generated by the electronic device and transmitted to the server.

7. The method according to claim 1 , wherein the authentication key was previously generated by the server and transmitted to the electronic device for generating security information.

8. The method according to claim 1 , wherein a different new authentication key is generated whenever data are stored by the electronic device in the rewritable non-volatile memory or at predefined regular time intervals or following a predefined number of storages of data in the rewritable non-volatile memory or at randomly determined instants.

9. An electronic device comprising circuitry adapted for implementing the method according to claim 1 .

10. Equipment able to communicate with a server via a communication network comprising a rewritable non-volatile memory and an electronic device according to claim 9 .

11. A system comprising a server and equipment according to claim 10 , the equipment being adapted for communicating with the server via a communication network.

12. A non-transitory information storage medium, storing a computer program comprising instructions for the implementation, by a device, of the method according to claim 1 , when said program is executed by a computing unit of said device.