Patent Application
20100309003
The invention relates to a method of producing a proof of presence or of operation of an entity in an identified zone for a duration greater than a given threshold, and an electronic monitoring system. In particular, the invention applies to the tracking of persons under conditional freedom or in a probationary situation, or else to the generation of proofs of reliability and of availability of devices.
The production of a formal proof of presence or of operation of an entity, whether it is a person or an object, is necessary in many applications. It is, for example, useful to create such a proof to certify the presence of an employee in his workplace over a duration greater than or equal to the duration stipulated in his work contract. The generation of this type of proof is also necessary with electronic home judicial control systems. The production of a formal proof relative to the time of use of a piece of equipment beyond an accumulated time greater than a contractual threshold, and justifying, for example, the application of a differentiated rate, is still another example, as is the proof of reaching equipment availability objectives.
To establish such proof, implementing access control means at a site to date the entries and exits of the entity to be controlled is known. Using control and recording means to activate elementary events produced by said entity is also known. It is also possible to track the position of the entity at all times. These technical solutions have in common the need to store spatial and temporal information peculiar to the entity. In particular, when the entity is a person, the use of time of the latter is then at least partially stored. In particular, when the entity is a device, operations performed on the latter are then at least partially stored. This information may have a confidential character. Broadcasting this information, voluntarily or following an infraction (compromise by a physical or computer-based attack), is thus potentially prejudicial to the private life or raises problems of confidentiality. In addition, the proof produced by these technical solutions is only reliable if the integrity of the corresponding means is guaranteed, which is not always possible to verify by means of devices whose, cost or flexibility of use are proportional compared with the issues.
One particular object of the invention is to mitigate the aforementioned disadvantages. For this purpose, the object of the invention is a method of producing a proof of presence and/or of the availability of an entity in a site over a period greater than or equal to a presence threshold. The method comprises:
The method produces proof of the presence and/or of the availability of the entity in the site over a period that is greater than or equal to the presence threshold only if the secret and the secret candidate are equal.
The transmission duration of each message may be less than or equal to the duration of the transmission period, each message being transmitted at a random time within the time slot of the transmission period duration, the transmission of said message ending at the latest at the end of the transmission period.
Furthermore, each message may comprise a transmission date and/or sequence number. In particular, this embodiment enables security to be increased, and particularly enables the security of the underlying transmission against playback to be improved. The messages may also be signed, allowing a possible playback of old messages M by a third party that had recorded them to be detected.
In an embodiment of the method according to the invention, the transmission of messages is dependent on the detection of the presence of the entity. In particular, the entity may be identified from an access control list.
In another embodiment of the method according to the invention, the messages are transmitted after connection to the entity.
Still another object of the invention is a monitoring system adapted to the implementation of the method according to the invention. In particular, the system comprises:
The monitoring system may also comprise detection or constraint means of the position of the tracking device in the site, in particular allowing the position of the tracking device in the site and therefore ultimately the validity of the proof produced to be guaranteed. The means to establish a data link inside the site between the tracking device and the detecting equipment comply with, for example, IEEE specification 802.15.4.
In an embodiment, the tracking device is a transmitting tracking device adapted to the transmission of messages, the piece of equipment detecting the presence and/or availability of the entity being adapted to receive and store messages.
In another embodiment, the tracking device is a receiving tracking device adapted to receiving and storing messages, the piece of equipment detecting the presence and/or availability of the entity being adapted to transmitting messages.
One of the advantages of the invention is, in particular, that the invention enables the exceeding of a minimum presence rate (respectively an operation rate) to be proven, i.e., to produce proof of attendance (respectively proof of availability) in the zone identified during the monitoring period, and thus is applied for both a continuous presence (respectively an ongoing operation) and to accumulated intermittent presences (respectively irregular operation). Another advantage of the invention is that the history of presence dates and times (respectively operation) during the monitoring period is useless for constructing the proof.
Other characteristics and advantages of the invention will appear more clearly upon reading the following description with regard to the attached drawings that represent:
a, a block diagram of the method according to the invention of producing proof of the presence or of operation of an entity in a zone identified during a duration that is greater than a given threshold;
b, a time chart of a case of utilization of the method according to the invention of producing proof of the presence or of operation of an entity;
a illustrates, by a block diagram, the method according to the invention of producing proof of the presence or of operation of an entity in a zone identified during a duration that is greater than a given presence threshold SP.
The method according to the invention comprises a first step 10 of generating a sequence SEQ comprising an integer m of messages M. The sequence SEQ is generated from a secret P such that the secret P may be reconstituted from the knowledge of an integer i of messages M greater than or equal to an integer k called the threshold k. Therefore, if an entity has knowledge of an integer i greater than or equal to the integer k of messages M, said entity will be able to reconstitute the secret P. On the contrary, when this entity will only have knowledge of an integer j strictly less than the integer k, said entity will not be able to reconstitute the secret P. To generate the sequence SEQ, it is possible, for example, to define a polynomial Q of degree k-1 with values in a finite field, wherein the coefficient of degree 0 is equal to the secret P, and wherein the message m of ordinal rank x in sequence SEQ (x being an integer between 1 and m) is equal to the value of the function of the polynomial Q for argument x. Thus, the secret P may be reconstituted by the knowledge of at least k messages M, by utilizing, for example, the Lagrange interpolation to recover polynomial Q and thus ultimately the secret P. Such a method is, for example, disclosed in the article A. Shamir, “How to share a secret,” Communications of the ACM, 22-1979, pp. 612-613. In general, any method operating equivalently, generally brought together under the term threshold cryptography diagram, may be suitable for generating the sequence SEQ.
The method according to the invention comprises a second step 20 of transmitting the sequence SEQ. Thus, successively, each message M of the sequence SEQ is transmitted during a transmission period T. Each message is transmitted once during the monitoring period of duration m.T.
In a particular embodiment of the second step 20, the expected duration for transmitting each message M is substantially equal to the transmission period T.
In a particular embodiment of the second step 20, the effective transmission duration of each message M is equal to D, D being less than or equal to the transmission period T; Each message M is transmitted at a random time in the time slot with a duration equivalent to the transmission period T allocated to it, the start of transmission beginning randomly between time 0 and time T-D of the time slot of the allocated transmission period T, such that the transmission of message, M ends at the latest at the end of the time slot of the allocated transmission period T.
In a particular embodiment of the second step 20, said sequence SEQ can only be transmitted within a geographical zone of coverage in predetermined transmission. Typically, the geographical zone of coverage in transmission is defined so as to be substantially identical to the zone in which entity 1 must prove its presence and/or availability.
In a particular embodiment of the second step 20, in particular to increase the level of overall security of the method according to the invention, particularly in the case where the security of the underlying transmission means is insufficient against replay, each message M comprises a transmission date and/or sequence number. The messages M thus constituted may then be signed by using a common cryptographic method for authenticating messages, such as a digital signature. This embodiment presents the advantage of, in particular, detecting the possible playback of old messages M by a third party that had recorded them.
The method according to the invention comprises a third step 30 of receiving and storing one or more messages M from the sequence SEQ. Thus, each message M of the sequence SEQ is potentially successively received during the given transmission period T.
In a particular embodiment of the third step 30, said sequence SEQ can only be received within a geographical zone of coverage in predetermined reception. Typically, the geographical zone of coverage in transmission is defined so as to be substantially identical to the zone in which entity 1 must prove its presence and/or availability.
In all embodiments of the second and third step of the method according to the invention, reception during the third step 30 of messages M transmitted during the second step 20 is only possible when entity 1 is present and/or available in the geographical zone in which entity 1 must prove its presence and/or availability. Thus, if entity 1 is not present and/or available in the geographical zone, the reception of messages M is not possible. As soon as entity 1 is again present and/or available in the geographical zone, the reception of messages M becomes possible again.
In a particular embodiment of the second step 20 and third step 30 of the method according to the invention, a method to secure the data link ensured by the underlying transmission means is used, supporting the transmission and reception, of messages M. By way of example, the securing method may be a transmission method secured by a spectrum spread code or by frequency hops, controlled by a pseudorandom sequence generated by a cryptographic algorithm dependent on a secret key. Such methods are generally designated by the acronym “TRANSEC.” It is then difficult or even impossible to intercept the messages M and thus to subsequently replay them. This embodiment thus enables the overall security level of the method according to the invention to be improved by prohibiting a third party from recording and playing back the transmission of messages and a terminal from reconstituting, subsequently and/or outside, the considered zone of monitoring, a false evidence of the presence/availability of entity 1.
During the second step 20 and the third step 30 of the method according to the invention, messages M may be transmitted in unconnected unidirectional mode, i.e., in broadcast mode.
Alternately, during the second step 20 and third step 30 of the method according to the invention, the effective transmission of a message M in unidirectional mode may be dependent on the implementation of a protocol in bidirectional mode of detecting the presence of at least one authorized participant, this protocol being associated with underlying transmission means. The authorized participants may again be identified in an access control list, associated with underlying transmission means.
In another particular embodiment of the second step 20 and third step 30 of the method according to the invention, messages M are transmitted by means of a protocol in bidirectional and connected mode. Thus, messages M are only exchanged after connection and possibly authentication of participants to the communication. It is then possible to verify the presence or even to authenticate the recipient of messages M before they are transmitted. Thus, this embodiment enables, in particular, the overall security level of the method according to the invention to be improved, by prohibiting a third party terminal from receiving messages M necessary to reconstitute proof of the presence/availability of entity 1. This embodiment may, in addition, be combined with the use of the previously described “TRANSEC” type methods.
The method according to the invention comprises a fourth step of generating a secret candidate P′ from messages M received at the third step 30 of the method according to the invention. A method reverse from that employed to generate the sequence SEQ from the secret P during the first step 10 of the method according to the invention is then employed. For example, if messages M have been obtained during the first step 10 by calculating the value of the function of polynomial Q for the argument corresponding to said messages M, the secret candidate P′ will be reconstituted from the messages M received at the third step 30 by utilizing, for example, the Lagrange interpolation to recover a polynomial Q′ and thus ultimately the secret candidate P′. Production of the secret candidate P′ may be carried out by the entity receiving the messages M itself.
The method according to the invention comprises a fifth step 50 of comparing the secret P and the secret candidate P′. Two cases emerge.
In a first case, the secret P and the secret candidate P′ are equal, or at least equivalent: Proof of the receipt of a number of messages M greater than or equal to the threshold k is then acquired. Each message M being transmitted during the transmission period T, proof of the presence and/or availability of entity 1 over a period that is greater than or equal to a period k*T equal to the presence threshold SP is then acquired. Only the knowledge of the secret P and of the secret candidate P′ is necessary for generating proof of the presence and/or availability of entity 1, said secrets P and P′ not necessarily comprising personal or confidential information, such as, for example, the presence or availability times of entity 1.
In a second case, secret P and the different secret candidate P′ or secret candidate P′ cannot be produced: proof of the receipt of a number of messages M greater than or equal to the threshold k is then not produced. This case may in particular be produced if the number of messages M received during the third step 30 is strictly less than the threshold k, due to the fact, for example, of the absence or unavailability of entity 1 in the geographical zone in which entity 1 must prove its presence and/or availability. Another example ending in the impossibility of providing the secret candidate P′ is the case where the data link supporting the transmission and receipt of messages M could not be established, particularly because the unauthorized third party wishing to listen to messages M could not be connected to or could not decode the link. Proof of the presence and/or availability of entity 1 over a period that is greater than or equal to a period k*T equal to the presence threshold SP thus is not produced.
b illustrates by a time chart a case of utilization of the method according to the invention of producing proof of the presence or of operation of an entity. The sequence SEQ, represented in
In a first embodiment, tracking device 101 is a transmitting tracking device adapted to implementing the second step of the method according to the invention for transmitting the sequence SEQ and the detecting equipment 103 is a detecting receiving equipment adapted for implementing the third step of the method according to the invention for receiving and storing messages M of sequence SEQ. By way of example, the tracking device 101 may be a transmitting tracking device that complies with IEEE specification 802.15.4, commonly designated under the term ZigBee. The ZigBee type tracking device 101 may, for example, comprise a non removable pin as the constraint means 102, and comprise a battery and a ZigBee microcontroller. The transmitting tracking device 101 is adapted to transmit the sequence SEQ of m messages M in ZigBee frames in compliance with IEEE specification 802.15.4; each fixed length message is transmitted during a period T. However, other types of tracking devices may be employed, in particular, transmitting tracking devices with radiocommunication technology, that comply with, for example, the “Bluetooth” personal networks (IEEE 802.15.1) or the “UWB” (IEEE 802.15.3) standard, with read-write tags without contact standards (for example, with the RF-id ISO 18000 standard), with the WIFI wireless local network standard (IEEE 802.11) or “WIMAX” wireless local loop standard (IEEE 802.16), with “3GPP” cellular mobile radio systems (3GPP TS 23.041 ‘Cell Broadcast Service’), with the TETRA professional mobile radio communication standard (ETSI EN 300 392), or, in particular, transmitting tracking devices of terrestrial or satellite broadcasting technologies, such as the DVB digital video broadcasting standards (ETSI TS 102 472): the associated site 200 is then determined by the radio coverage ensured by said tracking device; Other types of tracking devices may be employed, in particular satellite tracking devices of a global navigation satellite system (GNSS) such as GPS-III M-Code or GALILEO (ESA-ESNIS GALILEO SIS ICD) when they implement a spot beam, or such as EGNOS (ESA EGNOS SIS ICD) offering a specific regional service, delimiting a geographical zone forming a site 200 equal to the land-based regional footprint of the radio navigation beam, or again in particular wireline networking equipment (e.g. USB, Ethernet, Internet Protocol). The configuration equipment 106 is employed to communicate the m messages M generated during the first step 10 to the transmitting tracking device 101. In a particular embodiment, the configuration equipment 106 is kept in a safe place outside the zone where the tracking device is installed, in order to protect the confidentiality of the secret P by distance. In another particular embodiment, the configuration equipment 106 may be integrated with the transmitting tracking device 101. In a particular embodiment, the configuration equipment 106 and the assessing equipment 105 are included in the same equipment. By way of example, the detector receiver equipment 103 may comprise a receiver in compliance. With IEEE specification 802.15.4. The detector equipment 103 may, for example, be personal assistant type equipment (more generally designated by the acronym “PDA” for “Personal Digital Assistant”) or even an electronic bracelet worn by entity 1. However, other types of detector receiver equipment 103 may be employed, particularly radiocommunication technology receivers (e.g. “Bluetooth,” “UWB,” “RF-1d,” “WIFI,” “WIMAX,” “GSM/3GPP,” “TETRA”), or rather terrestrial or satellite broadcasting technology receivers (e.g. “DVB”), or radiolocation or satellite navigation receivers (e.g. “GNSS”: “GPS,” “EGNOS,” “GALILEO”) or even wireline network equipment (e.g. USB, Ethernet, Internet Protocol). The detector receiver equipment 103 is particularly adapted to store messages M received via the link 104 of complete data, all different and not necessarily Consecutive. Implementation of the fourth step 40 of the method according to the invention for generating a secret candidate P′ from messages M received at the third step 30 of the method according to the invention may be carried out either by the detector receiver equipment 103 that then comprises calculation means for the generation of the secret candidate P′ or by the assessing equipment 105 that then comprises means for reading the messages M stored by the detector receiver equipment 103 and calculation means for generating the secret candidate P′.
In a second embodiment, tracking device 101 is a receiving tracking device adapted to implementing the third step of the method according to the invention for receiving and storing messages M of the sequence SEQ and the detecting equipment 103 is a transmitting equipment adapted for implementing the second step of the method according to the invention for transmitting sequence SEQ. By way of example, tracking device 101 may be a receiving tracking device in compliance with IEEE specification 802.15.4. The ZigBee type tracking device 101 may, for example, comprise a non removable pin as the constraint means 102, and comprise a battery and a ZigBee microcontroller. The receiving tracking device 101 is adapted to receive and store messages from the sequence SEQ of m messages M. However, other types of tracking devices may be employed, in particular, receiving tracking devices of radiocommunication technologies (e.g. Bluetooth, UWB, RF-1d, WIFI, WIMAX, GSM/3GPP, TETRA), or rather receivers of terrestrial or satellite broadcasting technologies (e.g. DVB), or even wireline network equipment (e.g. USB, Ethernet, Internet Protocol) . . . . The receiver tracking device 101 is particularly adapted to store messages M received via the link 104 of complete data, all different and not necessarily consecutive. Implementation of the fourth step 40 of the method according to the invention for generating a secret candidate P′ from messages M received at the third step 30 of the method according to the invention may be carried out either by the receiver tracking device 101 that then comprises calculation means for the generation of the secret candidate P′ or by the assessing equipment 105 that then comprises means for reading the messages M stored by the receiver tracking device 101 and calculation means for generating the secret candidate P′. By way of example, the detector transmitter equipment 103 may comprise a transmitter in compliance with IEEE specification 802.15.4 adapted for transmitting messages M in ZigBee frames in compliance with IEEE specification 802.15.4. The detector transmitter equipment 103 may, for example, be personal assistant type equipment (more generally designated by the acronym “PDA” for “Personal Digital Assistant”) or even an electronic bracelet worn by entity 1. However, other types of detector transmitter equipment 103 may be employed, particularly radiocommunication technology receivers (e.g. “Bluetooth,” “UWB,” “RF-1d,” “WIFI,” “WIMAX,” “GSM/3GPP,” “TETRA”), or rather terrestrial or satellite broadcasting technology transmitter tracking devices (e.g. “DVB”), or even wireline networking equipment (e.g., USB, Ethernet, Internet Protocol). The configuration equipment 106 is employed to communicate the m messages M generated during the first step 10 to the detector transmitter equipment 103.
The means to generate the secret candidate P′ during the fourth step 40 is an entity adapted to store the messages M received, such as the detector equipment 103 according to the first embodiment or such as the tracking device 101 according to the second embodiment, and/or such as the assessing equipment 105 according to the applicable scenario for generating P′.
| Number | Date | Country | Kind |
|---|---|---|---|
| 0709066 | Dec 2007 | FR | national |
| Filing Document | Filing Date | Country | Kind | 371c Date |
|---|---|---|---|---|
| PCT/FR08/01785 | 12/18/2008 | WO | 00 | 8/10/2010 |
