Method and chip for authenticating to a device and corresponding authentication device and system

1. A method for authenticating to a device, comprising:

registering data associated with a credential related to a user role on said device thereby producing an encrypted credential with corresponding registered data;

deleting the credential responsive to said registering;

receiving, by the device, from a chip, said registered data;

retrieving, by the device, based on the registered data received, said encrypted credential that was encrypted by the chip during sail registering;

sending, by the device, to the chip, a decryption request for decrypting the encrypted credential including or being accompanied with the encrypted credential to be decrypted;

retrieving, by the chip, a secret key;

decrypting, by the chip, the encrypted credential by using the secret key to reproduce said credential;

sending, by the chip, to the device, as a decryption request response, the credential;

deleting the credential reproduced on the chip; then

verifying, by the device, whether the credential for said user role is or is not valid;

deleting the credential reproduced on the device; and then

authenticating the chip for said user role, by the device, only if the credential for said user role was deemed valid during said verifying.

2. The method according to claim 1 , wherein, to ascertain that the credential related to said user role associated with said encrypted credential is valid, the device decrypts successfully a predetermined encrypted key by using the credential, a key, as a decrypted encrypted key, having been used for encrypting at least one resource that belongs to either a chip user who is authorized to access the at least one resource or a role which a chip user has and authorizes to access the at least one resource, the device decrypts at least one encrypted resource by using the key, in order to access the at least one resource.

3. The method according to claim 1 , wherein, prior to decrypting the encrypted credential, the chip had successfully authenticated the user during said registering.

4. The method according to claim 3 , wherein, to authenticate successfully the user, the chip requests the user to provide user authentication credentials, the chip compares the provided user authentication credentials to predetermined reference user authentication credentials and the chip ascertains that the provided user authentication credentials matches the reference user authentication credentials.

5. An authentication device comprising:

a microprocessor;

at least one memory configured to store, for each chip to be authenticated, registered data in association with a predetermined encrypted credential; and

an interface,

wherein microprocessor of the authentication device is configured to:

register data associated with a credential related to a user role on said device thereby producing an encrypted credential with corresponding registered data;

deleting the credential responsive to said registering;

receive, via the interface, from a chip, said registered data;

retrieve, from the at least one memory, based on the registered data received, an associated encrypted credential that was encrypted by the chip during said registering;

send, via the interface, to the chip, a decryption request for decrypting the encrypted credential including or being accompanied with the encrypted credential to be decrypted to reproduce said credential;

receive, via the interface, from the chip, as a decryption request response, the credential, that credential since deleted on the chip responsive to sending it;

verify, whether the credential is or is not valid;

delete the credential on the authentication device; and then

authenticate the chip for said user role, only if the credential was deemed valid during said verify.

6. The authentication device according to claim 5 , wherein the authentication device is at least one element comprised in a group including:

a hardware security module type device;

a mobile device;

a mobile phone;

a user terminal;

a Personal Computer,

a tablet;

a computing device.

7. A chip for authenticating to a device, the chip comprising:

a microprocessor;

at least one memory configured to store registered data and a secret key, said registered data associated with a credential related to a user role on sail device; and

an interface configured to communicate with the device,

wherein the microprocessor of the chip is configured to:

register the data associated with the credential related to the user role on said device thereby producing an encrypted credential with corresponding registered data stored in the at least one memory;

delete the credential responsive to said registering;

retrieve, by the device, based on the registered data, said encrypted credential that was encrypted by the chip during said registering;

send, via the interface, to said device, the registered data stored in the at least one memory;

receive, via the interface, from the device, a decryption request for decrypting the encrypted credential that was encrypted by the chip, including or being accompanied with the encrypted credential to be decrypted;

retrieve the secret key from the at least one memory;

decrypt the encrypted credential by using the secret key to reproduce said credential;

send, via the interface, to the device, as a decryption request response, the credential; and

delete said credential reproduced on said chip after said send

wherein the device

verifies whether the credential for said user role is or is not valid;

deletes the credential reproduced on the device; and then

authenticates the chip for said user role only if the credential for said user role was deemed valid during said verifying.