Patent ID: 11922384
Assignee: ORANGE
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 7:
8. A mobile terminal, having a processor and software including modules, comprising:
a secure element;
an identification module configured to verify an identity of a user of the mobile terminal;
a first generator module included in the secure element and activated upon successful verification of the identity of the user by the identification module, the first generator module being configured to generate at least one identification value for the mobile terminal by using a first secret key shared between the secure element and a security token service provider device;
a first send module configured to send a request to the security token service provider device to obtain at least one security token for use by the mobile terminal during an electronic transaction, the request including the generated at least one identification value for the mobile terminal; and
a reception module arranged to receive from the security token service provider device the at least one security token encrypted using a symmetric encryption algorithm, each security token being uniquely associated with a random number generated by the security token service provider device for the respective security token, different security tokens generated by the security token service provider device being respectively associated with different random numbers, and each security token encrypted by use of an encryption key generated for the respective security token from the random number associated with the respective security token and from a second secret key shared between the token service provider device and the secure element of the mobile terminal,
wherein the identification module is also activated upon receiving a predetermined request coming from a third-party device and relating to an electronic transaction, the mobile terminal further comprising:
a selection module, activated upon successful verification of the identity of the user by the identification module, that is configured to select a security token from among the at least one encrypted security token stored in the mobile terminal by the storage module;
a second generator module included in the secure element of the mobile terminal and configured to generate an encryption key for the selected security token from the random number associated with the selected security token and from the second secret key shared between the security token service provider device and the secure element;
a decryption module configured to decrypt the selected security token by use of the encryption key that has been generated; and
a second send module configured to send a response including the decrypted security token to the request from the third-party device.