Patent ID: 11922384
Assignee: ORANGE
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. A method implemented by a mobile terminal of a user, the method comprising obtaining at least one security token for use during an electronic transaction, wherein obtaining at least one security token comprises:
verifying an identity of the user of the mobile terminal;
generating, triggered by successful verification of the identity of the user, by a secure element of the mobile terminal, at least one identification value for the mobile terminal by using a first secret key shared between the secure element and a security token service provider device;
sending a request to the security token service provider device to obtain at least one security token for use by the mobile terminal during an electronic transaction, the request including the generated at least one identification value of the mobile terminal; and
receiving from the security token service provider device the at least one security token encrypted using a symmetric encryption algorithm, each security token being uniquely associated with a random number generated by the security token service provider device for the respective security token, different security tokens generated by the security token service provider device being respectively associated with different random numbers, and each security token being encrypted using an encryption key generated for the respective security token from the random number associated with the respective security token and from a second secret key shared between the security token service provider device and the secure element of the mobile terminal,
the method further comprising enabling the mobile terminal to process a request relating to an electronic transaction, wherein enabling the user mobile terminal to process the request comprises:
verifying, triggered upon receiving a predetermined request coming from a third-party device and relating to an electronic transaction, an identity of the user of the mobile terminal;
selecting, triggered by successful vertification of the identity of the user, a security token from the at least one encrypted security token stored in the mobile terminal and obtained from the security token service provider device, the selected security token being associated with a random number;
generating by the secure element of the mobile terminal for the selected security token an encryption key from the random number associated with the selected security token and from the second secret key shared between the token service provider device and the secure element, and used during the obtaining method;
decrypting the selected security token by use of the encryption key that has been generated; and
sending a response including the decrypted security token to the request from the third-party device.