SECURITY PROCEDURES FOR ACCESS TO A WRISTWATCH

Description

Technical field

[0001] The present invention relates to a method for securing access to a watch and a system implementing such a method.

[0002] The invention also relates to a watch comprising such a system as well as a computer program. Prior art

[0003] A watch includes a set of functions that can be used by the wearer. Such functions may involve, in addition to setting the time or date, the use of confidential or private data specific to the wearer and useful for accessing personalized services. This data is, for example, keys, certificates, authentication codes, passwords and personal codes that allow a secure connection of the watch to a private network of a company, authentication with secure servers such as a banking server, or secure messaging for sending and receiving signed and / or encrypted emails. Therefore, it is understandable that it is important to be able to secure access to the use of the functions of such a watch.

[0004] To do this, methods are known in the state of the art for securing access to a watch and in particular to the functions of this watch, by strengthening the authentication criteria authorizing this access, for example by implementing additional authentication steps, such as for example in document US 2019 / 095602 A1, which describes a two-step authentication of the wearer of a watch, one of the authentication steps corresponding to the measurement of the texture of the user's skin.

[0005] However, one of the major drawbacks of such processes is linked to the fact that once the wearer of the watch is authenticated, it is then possible for any individual to have access to the functions of the watch, particularly in the case where the latter has been stolen.

[0006] It is understood that there is a need to find an alternative solution, in particular one which does not have the disadvantages of the prior art. Summary of the invention

[0007] An aim of the present invention is therefore to propose a method for securing access to a watch which is reliable and robust.

[0008] Such a process has the advantage of ensuring the identity of the wearer of the watch in an automatic, transparent and non-intrusive manner for the wearer.

[0009] For this purpose, the invention relates to a method of securing access to a watch according to independent claim 1.

[0010] Other preferred embodiments are set forth in the dependent claims.

[0011] The invention also relates to a system for securing access to a watch implementing this method, the system comprising the following elements connected together: a processing unit, a biometric sensor, an input interface and an interface for broadcasting visual information.

[0012] Advantageously, the biometric sensor is a multispectral skin biometric sensor.

[0013] The invention also relates to a watch, in particular a connected mechanical watch, comprising such a system.

[0014] The invention also relates to a computer program comprising program code instructions for executing the steps of the method when said program is executed by a processing unit. Brief description of the figures

[0015] Other features and advantages will become clear from the description given below, for information purposes only and in no way limiting, with reference to the appended figures, in which: there figure 1 is a schematic representation of a watch comprising a system for securing access to a watch, according to one embodiment of the invention, and the figure 2is a flowchart relating to a method of securing access to the watch, according to the embodiment of the invention. Detailed description of the invention

[0016] On the figure 1 a watch 100 is shown comprising a system for securing access to a watch 100 and in particular to the use of functions of this watch 100. Such a system 1 is included in the watch 100 which is preferably a connected mechanical watch 100 with a hybrid display. In this context, this electronic device 100 comprises a body such as the watch case, and a fastening element such as a bracelet making it possible to fix this body for example to the wearer's wrist. This system 1 more precisely comprises in a non-limiting and / or non-exhaustive manner: a processing unit 2 comprising hardware and software resources, in particular at least one processor cooperating with memory elements 6; an interface for broadcasting visual information 3 such as a hybrid display dial provided with a first analog display component and a second digital and / or alphanumeric display component; an interface for broadcasting sound information 4 such as a loudspeaker; a wireless communication interface 5 (for example cellular, WLAN Bluetooth, etc.); an input interface 34 such as a keyboard or a touch interface included for example in the interface for broadcasting visual information 3, and a biometric sensor 35, in particular in this embodiment a multispectral skin sensor, said sensor 35 comprising at least one photographic sensor 36, at least one multispectral lighting source 37 and at least one thermal image sensor 38, the lighting source 37 being able to emit light radiation in wavelengths between 300 and 1100 nm, in addition this lighting source 37 can be of the laser type.

[0017] In this system 1, the processing unit 2 is connected, among other things, to the interfaces for broadcasting visual and sound information 3, 4, to the input interface 34 as well as to the wireless communication interface 5 and to the biometric sensor 35. It will also be noted that the biometric sensor 35 is arranged in the body of the electronic device 100 and / or in the attachment element.

[0018] This system 1 implemented in the electronic device 100 is capable of ensuring the control of the identity of the authenticated wearer of the watch in a discreet manner, that is to say without direct intervention / interaction of the wearer with this watch 100, so that he can use the functions of the watch 100 all the time he wears it and this, without having to authenticate himself again. The identification of the wearer is then carried out in a transparent and discreet manner and this, from at least one biometric information element. In the context of the present embodiment, the biometric information element is included in a portion of the wearer's skin and can be a vascular network of the skin or even a texture of this skin.This skin of the wearer which covers his body has a particularity, less obvious to consider by the person skilled in the art because it cannot be naturally visualized by the human eye, linked to the absorption and reflection characteristics at different wavelengths (spectrum) of the components of the skin, located at different depths. In a simplified model, the skin is made up of a layer called "epidermis", semi-transparent and located on the surface then, under the epidermis, of a layer called the "dermis" and comprising, among other things, the blood vessels (or vascular network) in which the hemoglobin is strongly reflective at high wavelengths close to red, being included for example between 760 and 930 nm which makes it possible here to reveal or highlight the vascular network of the wearer's skin.In other words, since the light absorption spectrum of the components of the epidermis and dermis constituting the skin is not uniform across electromagnetic wavelengths, the appearance and color of the skin result from a complex combination of these phenomena. Thus, when it comes to highlighting or revealing an element of biometric information such as the texture of the wearer's skin, a texture essentially formed of crevices or cavities, the lighting of the skin can then be provided by a lighting source restricted to wavelengths around red, which tends to make the phenomenon of shadows at the bottom of the crevices disappear.Indeed, a back-projection effect occurs by reflection on the dermis and through the epidermis of these wavelengths close to red, whereas the illumination of the skin by a colorimetric spectrum source far from red, typically the wavelength band located between violet (400 nm) and up to yellow-orange (600 nm), on the contrary makes it possible to strongly contrast these crevices of the skin by the appearance of shadows at the bottom of these crevices. It will be noted that the identification of a biometric information element included in the skin can be improved by the use of the thermal image sensor 38 preferably without illumination.For example, to highlight the texture of the skin, particularly when the portion of the skin concerned by this wearer is provided with hair, the use of the thermal image sensor 38 makes it possible to reveal the crevices of this texture of the skin which are generally warmer than the surrounding skin and the hairs colder than this surrounding skin. Thus, in this configuration, the hairs can be thermally distinguished from the crevices of the texture of the skin due to this difference between their respective temperatures.

[0019] It should be noted that thermal image capture can be performed under illumination in a given wavelength depending on the biometric information element that needs to be highlighted or revealed.

[0020] It is therefore understood, according to the principle of the invention, that the periodic identification of the wearer is carried out from at least one biometric information element included in images of a portion of skin of this wearer which can be illuminated if necessary according to different wavelengths in order to capture images comprising the sought biometric information element. Thus, this biometric information element, included in these images, can be highlighted by the illumination carried out in different wavelengths or without illumination for example when it is a question of carrying out a capture of thermal images.

[0021] In this system 1, the memory elements 6 of the processing unit 2 comprise data relating to a previously defined / generated reference digital identification element. These memory elements 6 also comprise digital image processing algorithms 39 making it possible to characterize at least one biometric information element relating to the wearer's skin and which is included in the images relating to the wearer's skin portion. These memory elements 6 also comprise generation algorithms 40 of the reference digital identification element but also of the digital identification element which is generated periodically as part of the identity check of the wearer.

[0022] These memory elements 6 of the processing unit 2 also comprise at least one graphic representation 41 intended to participate in the authentication process of the wearer so that the latter has access to the functions of the watch 100. This graphic representation 41 may for example be an image comprising at least one object. For example, this image defines a scene comprising a plurality of objects such as dwellings, vehicles and / or a star such as the moon, etc. It is obviously understood that this image may define other types of scene comprising at least one object. These memory elements 6 also comprise data relating to a reference sequence 42 comprising reference identification portions of this graphic representation 41, said portions having been previously selected by the wearer of the watch during the configuration of an authentication process.

[0023] Such a system 1 of the watch 100 is capable of implementing a method for securing access to the watch 100 and in particular to the use of functions of this watch 100, represented in the figure 2 . Such a method aims to ensure discreetly, that is to say in a non-intrusive and automatic manner, the identity of an authenticated wearer so that he can use the functions of the watch 100 all the time he wears it without having to authenticate himself again. The functions of the watch 100 may concern the setting of the time, the date or even the use of a stopwatch, a navigation system, a pedometer, an activity tracker, a messaging service, access to confidential or private data specific to the wearer and useful for accessing personalized services, etc.

[0024] This method comprises a step 10 of authenticating the wearer of the watch 100 in order to authorize access to the functions of this watch 100 from an interaction between the wearer of the watch and a graphical representation included in said watch 100, more particularly a graphical representation displayed on / in the interface for broadcasting visual information 3 of said watch 100. This step 10 allows the wearer to provide proof of his identity. More precisely, this step 10 comprises a sub-step 11 of presenting a graphical representation 41 on the interface for broadcasting visual information 3 of said watch 100. This sub-step 11 comprises a phase 12 of generating the display, on / in the interface for broadcasting visual information 3, of the graphical representation 41 provided for the implementation of this authentication.This phase 12 may comprise a sub-phase of selection by the wearer from a sample of at least two graphic representations 41 displayed on the interface for broadcasting visual information 3, of the graphic representation 41 provided for the implementation of this authentication. It will be noted that the wearer is the only one to know the graphic representation 41 that he chose during the configuration of the authentication process for access to the functions of the watch 100.

[0025] This presentation sub-step 11 then comprises a triggering phase 13 of a countdown as soon as the generation phase 12 is carried out. In other words, the preconfigurable countdown is triggered once the graphic representation 41 is presented on the broadcast interface 3. Such a phase 13 participates, from a limited time interval defined by this countdown, in counting down the estimated time necessary for entering the sequence of identification portions of the graphic representation 41 displayed on / in the broadcast interface 3.

[0026] Subsequently, the authentication step 10 comprises a sub-step 14 of selecting in the limited time interval a sequence of at least two identification portions of said graphic representation 41 aimed at identifying said wearer, said sequence corresponding to an identification code of the wearer. Such identification portions are not directly visible in the graphic representation 41 presented on / in the broadcast interface 3. Under these conditions, the selection sub-step 14 comprises a phase 15 of viewing at least one of said identification portions of the sequence in said graphic representation 41. This viewing phase 15 comprises a sub-phase of selecting at least one area of ​​interest of the graphic representation 41 capable of comprising said at least one identification portion.During this sub-phase, the wearer selects for example a first area of ​​interest or a second area of ​​interest by enlarging this first area or this second area from the input interface 35. Once this first or second area of ​​interest has been selected, the identification portions then become visible. In this configuration, each identification portion useful for the production / constitution of the sequence can be selected from the input interface 35.

[0027] It should be noted that the sequence comprises an ordered number of identification portions and that the selected area of ​​interest may comprise, for example, three identification portions of which only two are ordered successively one after the other in the sequence. In this context, the remaining identification portion requires, in order to be part of the sequence, the selection of an identification portion included in another area of ​​interest of the graphical representation 41.

[0028] Then, the authentication step 10 comprises a validation sub-step 16 of the selected sequence. This validation sub-step 16 comprises a control phase 17 to ensure that the selection of the sequence of identification portions has been carried out within the limited time interval defined by the countdown. To the extent that this selection has been carried out within this limited time interval, the validation sub-step 16 then comprises a comparison phase 18, implemented by the processing unit 2, between said selected sequence and the reference sequence 42. This comparison phase 18 comprises a sub-phase of prohibiting access to the functions of the watch 100 if said sequence is substantially different or different from the reference sequence 42. Conversely, this comparison phase 18 comprises a sub-phase of authorizing access to the functions of the watch 100 if said sequence is substantially similar or similar to the reference sequence 42.

[0029] To the extent that this selection has not been carried out within the limited time interval, the validation sub-step 16 comprises a phase 19 of renewing the presentation 11 and selection 14 sub-steps. If subsequently, the selection of the sequence has again not been carried out within the limited time interval, the validation sub-step 11 then provides a sub-step of blocking / locking access to the functions of the watch 100. In this context, a particular unlocking / unlocking procedure is then necessary to restore access to said watch.

[0030] This method then comprises a step 20 of periodic control of the identity of the wearer of the watch by verifying the validity of a digital identification element determined from at least one biometric information element of the wearer of said watch in order to retain / delete the authorization to access said functions. Such a step is also called a periodic discreet control step. In the context of the present embodiment, the biometric information element is included in a portion of the wearer's skin. During this step 20, the period attached to the control is regular or irregular and can be configured automatically by the processing unit 2 or defined by the wearer. For example, this period can be a few seconds or a few minutes.Such a control step 20 makes it possible to verify at the end of each period that the wearer of the watch is still the same by checking his “biometric” identity from a digital identification element established as a function of at least one biometric information element included in the skin of this wearer.

[0031] This control step 20 then comprises a sub-step 21 of acquisition by the sensor 35 of a plurality of images of a portion of the wearer's skin, said skin being arranged adjacent to said sensor, said images comprising said at least one biometric information element included in this portion of skin. This sub-step 21 comprises a phase 22 of illumination of the portion of skin according to different wavelengths. More precisely, during this phase 22, the processing unit 2 controls the multispectral biometric sensor 35 and in particular the lighting source 37 so that the latter emits light radiation towards the portion of skin according to a precise wavelength adapted to highlighting or revealing said at least one specific biometric information element of the skin, here sought in the context of checking the identity of the wearer, and which is included in this portion of the wearer's skin.Once the lighting has been configured, the acquisition sub-step 21 comprises a phase 23 of capturing images of this portion of skin illuminated at at least one wavelength capable of highlighting or revealing said at least one element of biometric information. During this phase 23, the processing unit 2 controls the multispectral biometric skin sensor 35 and in particular the photographic sensor 36 synchronously with the activation / deactivation of the lighting source 37, in order to capture at least one image relating to the portion of skin illuminated for at least one wavelength.

[0032] This acquisition sub-step 21 may also comprise a phase 24 of capturing at least one thermal image of the portion of skin. Such a phase 24 is preferably carried out without illumination but in other alternatives illumination of the portion may be carried out in at least one given wavelength, this obviously depending on the biometric information element that is to be highlighted or revealed. This phase 24 may be carried out before or after the illumination 22 and image capture 23 phases.

[0033] The control step 20 then comprises a sub-step 25 of generating the digital identification element from said at least one biometric information element included in the acquired images of the portion of skin. Such a sub-step 25 comprises a characterization phase 26 of said biometric information element included in the images relating to said portion of skin. During this phase 26, the processing unit 2 implements algorithms 39 for processing the acquired images aimed at identifying / detecting in each of them said at least one biometric information element that they comprise. As already mentioned previously, these may be information elements relating for example to the texture of the skin or to the vascular network included in this portion of the wearer's skin. The implementation of these algorithms 39, 40 by the processing unit 2 may, for example, provide a process of cutting these images into segments.It is understood here that each acquired image gives an overall view of the portion of the wearer's skin, and then comprises zones of variable relevance for the identification of said at least one biometric information element. Such a cutting process helps to extract the segments to be processed and to eliminate the parts not to be processed in these images. These algorithms 39 can then provide an indexing of these image segments comprising characteristics relating to said at least one particular biometric information element to be identified, by location zones in the portion of skin and this, in order to be able to assign to each zone the appropriate processing with respect to the morphological typology of the characteristic of this geographical zone of the portion.In this context, these algorithms 39 process each segment of these images by highlighting the information carried by the pixels of each of these images by performing image analysis operations of the processing, transformation and detection type. Subsequently, these algorithms 39 carry out filtering and feature extraction or vectorization operations, in order to convert the image data relating to said at least one identified and extracted biometric information element, into parametric data, typically relative numerical values ​​expressed for example as an index or as a percentage.

[0034] We understand here that the acquisition of several images representing the same portion of skin helps to improve the precision and efficiency of this characterization phase 26.

[0035] Subsequently, the generation sub-step 25 comprises a design phase 27 of the digital identification element from the characterization of said at least one biometric information element. During this phase 27, the processing unit 2 implements generation algorithms 40 of such a digital identification element specifically provided for the processing of the parametric data obtained during the characterization phase 26, which parametric data relate to the biometric information element.

[0036] Then, the control step 20 comprises a validation sub-step 20 of the generated digital identification element in anticipation of a check of the identity of the bearer. This validation sub-step 28 comprises a comparison phase 29, implemented by the processing unit 2, between the generated digital identification element and the reference digital identification element. In this method, the reference digital identification element can be created, as soon as the bearer has been duly authenticated and his identity is certain, and this, during a definition step 11 of this reference digital identification element providing sub-steps similar to the acquisition 21 and generation 25 sub-steps implemented during the control step 20.In this method, once the wearer of the watch 100 is authenticated, the processing unit 2 implements this definition step 11 and then performs archiving of the obtained reference digital identification element in the memory elements 6 of the processing unit 2. This reference digital identification element can therefore be determined automatically by the processing unit 2 or configured by the wearer during a setting process aimed at guiding the wearer in defining this reference digital identification element.

[0037] This comparison phase 29 includes a sub-phase 30 of deleting the authorization to access said functions of the watch 100 if the generated digital identification element is substantially different or different from the reference digital identification element. In this case, access to the functions of the watch 100 is then deleted because the wearer and owner of the watch 100 may no longer be in possession of it. Therefore, in this context, to use the functions of the watch 100 again, it is necessary to authenticate.

[0038] The comparison phase 29 also comprises a sub-phase 31 of conservation of the authorization of access to said functions of the watch 100 if the generated digital identification element is substantially similar or similar to the reference digital identification element. In this case, the control unit 2 executes again, according to the determined period, the sub-steps of acquisition 21 and generation 25 of the control step 20 in order to carry out the comparison phase 29 again.

[0039] Thus, the invention makes it possible to continuously check the identity of the wearer of the watch in an automatic and non-intrusive manner, particularly as soon as they are authenticated.

[0040] The invention also relates to a computer program comprising program code instructions for executing steps 10 to 31 of this method when said program is executed by the processing unit 2 of the watch 100.

Claims

1. Method for securing access to a watch (100) including the following steps: - authentication (10) of the wearer of the watch (100) with a view to authorising access to the functions of this watch (100) based on an interaction between the wearer of the watch and a graphic representation comprised in said watch (100), and - periodic checking (20) of the identity of the wearer of the watch through a verification of the validity of a digital data item determined based on at least one biometric data item of the wearer of said watch with a view to retaining / removing the authorisation for access to said functions, said biometric data item being a skin texture of this wearer, a texture essentially formed of cracks and cavities, said checking step (20) using a thermal image sensor (38) for the detection of the skin texture when the portion of this wearer's skin concerned is endowed with hairs in order to reveal the cracks of this skin texture, said checking step (20) comprising an acquisition sub-step (21) by at least one multispectral biometric skin sensor (35) comprised in the watch (100), of a plurality of images of a portion of the wearer's skin adjacent to said sensor (35), said images comprising said at least one biometric data item comprised in this skin portion.

2. Method according to the preceding claim, characterised in that the authentication step (10) comprises a presentation sub-step (11) of a graphic representation (41) on a visual data broadcasting interface (3) of said watch (100).

3. Method according to the preceding claim characterised in that, the authentication step (10) comprises a selection sub-step (14) within a limited time interval of a sequence of at least two identification portions of said graphic representation (41) aiming to identify said wearer, said sequence corresponding to an identification code of the wearer.

4. Method according to the preceding claim characterised in that the authentication step (10) comprises a validation sub-step (16) of the selected sequence.

5. Method according to any one of the preceding claims, characterised in that the checking step (20) comprises a generation sub-step (25) of a digital identification item based on said at least one biometric data item.

6. Method according to any one of the preceding claims, characterised in that the checking step (20) comprises a validation sub-step (28) of the digital identification item generated in anticipation of the wearer identity check.

7. Method according to the preceding claims, characterised in that the validation sub-step (28) comprises a comparison phase (29) including an access authorisation retention sub-phase (30) to said functions of the watch if the digital identification item is substantially similar or similar to a reference digital identification item.

8. Method according to any one of claims 1 to 7, characterised in that the acquisition sub-step (21) comprises an illumination phase (22) of the skin portion along different wavelengths.

9. Method according to any one of claims 1 to 8, characterised in that the acquisition sub-step (21) comprises a capture phase (23) of images of the skin portion illuminated at different wavelengths.

10. Method according to any one of claims 5 to 9, characterised in that the generation sub-step (25) comprises a characterisation phase (26) of said at least one biometric data item comprised in the acquired images relative to said skin portion.

11. Method according to any one of the claims 5 to 10, characterised in that the generation step (25) comprises a design sub-step (27) of the digital identification item based on the characterisation of said biometric data item.

12. Method according to any one of claims 1 to 11, characterised in that the biometric data item relates to a vascular network or to a texture of this skin.

13. System for securing access to a watch (100) implementing the method according to any one of the preceding claims, the system (1) comprising the following interconnected elements: a processing unit (2), a biometric sensor (35), a thermal image sensor (38), an input interface (34) and a visual data broadcasting interface (3).

14. System according to the preceding claim, characterised in that the biometric sensor (34) is a multispectral biometric skin sensor.

15. Watch (100), particularly a connected mechanical watch (100), including a system (1) according to any one of claims 13 and 14.

16. Computer program comprising program code instructions for executing the steps (10 to 31) of the method according to any one of claims 1 to 12 when said program is executed by the processing unit (2) according to claim 13.