IP Library Granted Patent US 11,048,806
Granted Patent B2
US 11,048,806 · App. 16/170,073 · Granted Jun 29, 2021

Method for controlling the access to a secure area of an equipment, associated computer program, computer medium and equipment

Inventors: Xavier Degeneve (Lyons, FR); Baptiste Fouques (Villeurbanne, FR)
Assignee: ALSTOM TRANSPORT TECHNOLOGIES
G06F21/602G06F21/31G06F21/34G06F21/35G06F21/572G06F21/6218H04L9/3247H04L9/3265G06F2221/2149
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,048,806
App. No.
16/170,073
Granted
Jun 29, 2021
Kind
B2
Abstract

Disclosed is a method for controlling access to a secure zone of an electronic equipment from a computer file, the equipment including a memory including a reference access right to the electronic equipment. The method includes: —acquiring a reference authenticator via the computer file; acquiring an authenticator from the user; authenticating the user by comparing the authenticator from the user with the reference authenticator; acquiring an access right via the computer file when, at the end of the authentication, the authenticator from the user is compliant with the reference authenticator; and opening an access session to the at least one corresponding secure zone, when the acquired access right corresponds to the reference access right in the memory.

Claims (43)

1. A method for controlling access to a secure zone of a piece of electronic equipment from a computer file, the electronic equipment equipped with a memory comprising at least one secure zone, the computer file being specific to a user and stored on a computer medium, the computer file comprising a reference authenticator and a right to access the electronic equipment for at least one corresponding secure zone, and the memory comprising at least one reference access right to the electronic equipment,

the method being carried out by the electronic equipment and comprising:

acquiring the reference authenticator via the computer file after connecting the computer medium to the electronic equipment;

acquiring an authenticator from the user;

authenticating the user by comparing the authenticator from the user with the reference authenticator;

acquiring the access right via the computer file when, at the end of the authentication, the authenticator from the user is compliant with the reference authenticator; and

opening an access session to said at least one corresponding secure zone, when the acquired access right corresponds to the reference access right in the memory.

2. The method according to claim 1 ,

wherein the computer file is signed with a signature key, the signature key being associated with a certificate from a certification authority, the certificate from the certification authority linked to the signature key being stored in the memory, and

wherein the method further comprises, before acquiring the access right, verifying the signature of the computer file with the certification of the certification authority stored in the memory.

3. The method according to claim 1 , wherein the computer medium is a removable physical medium.

4. The method according to claim 3 , wherein the removable physical medium is a FLASH memory medium.

5. The method according to claim 4 , wherein the FLASH memory medium is a USB key.

6. The method according to claim 1 , wherein the computer medium is a virtual medium.

7. The method according to claim 6 , wherein the virtual medium is a computer file stored on a network server.

8. The method according to claim 1 ,

wherein the computer file comprises a validity date, the electronic equipment comprising a clock, and

wherein the opening of the access session further comprises comparing said validity date with a current date supplied by the clock, the session being open only when the validity date is after said current date.

9. The method according to claim 1 ,

wherein the computer file comprises at least one configuration aiming to modify the equipment, and

wherein the method further comprises executing the configuration on the electronic equipment after opening the session.

10. A computer program recorded on a non-transitory computer-readable recording medium, the computer program comprised of software instructions executable by a processor of a computer that, upon execution by the processor, causes the computer to carry out the method according to claim 1 .

11. A non-transitory computer-readable data storage medium configured to be connected to an electronic equipment, the medium having a computer file recorded thereon that is specific to a user, the computer file comprising a reference authenticator and an access right to the electronic equipment for at least one corresponding secure zone of said equipment, said equipment being equipped with a processor and a memory comprising at least one secure zone, the electronic equipment being configured to interact with the computer file, and the memory comprising at least one reference access right to the electronic equipment,

the computer medium operable with the electronic equipment so that, after connection of the computer medium to the electronic equipment, the electronic equipment:

acquires a reference authenticator via the computer file,

acquires an authenticator from the user,

authenticates the user by comparing the authenticator from the user with the reference authenticator,

acquires the access right via the computer file when the authentication module has authenticated the user, and

opens an access session to said at least one corresponding secure zone, when the acquired access right corresponds to the reference access right comprised in the memory.

12. The medium according to claim 11 , wherein the medium is a FLASH memory medium.

13. An electronic equipment, comprising:

a processor; and

a memory comprised of at least one secure zone,

wherein the electronic equipment is configured to interact with a computer file, the computer file being specific to a user and stored on a non-transitory computer-readable data storage medium, the computer file comprising a reference authenticator and an access right to the electronic equipment for at least one corresponding secure zone,

the memory comprising at least one reference access right to the electronic equipment, and

the processor of the equipment configured to cause the equipment to:

acquire a reference authenticator via the computer file after connection of the computer medium to the electronic equipment,

acquire an authenticator from the user,

authenticate the user by comparing the authenticator from the user with the reference authenticator,

acquire the access right via the computer file when the authentication module has authenticated the user, and

open an access session to said at least one corresponding secure zone, when the acquired access right corresponds to the reference access right comprised in the memory.

14. The electronic equipment according to claim 13 , wherein the electronic equipment is a piece of railway equipment configured to be placed on board a railway vehicle or to be installed on the ground along a railway line.

15. The electronic equipment according to claim 14 , wherein the electronic equipment is a motor, a display system, an air conditioning system, a piece of network equipment, a piece of security equipment, a piece of signaling equipment, a piece of railway control equipment, a light, a switch or a crossing.

Assignments (2)
DISSOLUTION AND TRANSFER OF ASSETS Recorded Sep 3, 2024
From: ALSTOM TRANSPORT TECHNOLOGIES
To: ALSTOM HOLDINGS
Reel/Frame 068823/0899 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 25, 2018
From: DEGENEVE, XAVIER; FOUQUES, BAPTISTE
To: ALSTOM TRANSPORT TECHNOLOGIES
Reel/Frame 047304/0448 →
Priority Claims (1)
FR 17 60159 · Oct 27, 2017 · national
Continuity (1)
Related Publication 20190130118A1 · May 2, 2019
Cited By (1)
US 12,321,426