Portable, self-contained device for securing data transfer and corresponding method

Abstract

The invention relates to a portable, self-contained device for securing data transfer, characterised in that it comprises: - means for encrypted communication with at least one terminal such as a telephone, a tablet, a laptop or a dedicated terminal; - a plurality of sensors including at least one camera, a sensor delivering at least one item of biometric information and a smart-card reader; and - means for processing data delivered by said sensors, which means are capable of delivering pre-processed authentication data to the terminal, without requiring a dedicated driver for each sensor in the terminal.

Description

[0001] DESCRIPTION

[0002] TITLE: Portable and autonomous device for securing data transfer and corresponding method.

[0003] 1. Field of the invention

[0004] The field of the invention is that of the authentication of an individual and the securing of data transfer between electronic equipment, in particular for mobile applications. In particular, the invention relates to secure access to data or services, using a standard or undifferentiated terminal, for example of the smart mobile phone type ("smartphone" in English), tablet or laptop.

[0005] 2. Prior art

[0006] It is known to use, associated with terminals such as smartphones, tablets or laptops, sensors to authenticate an individual, to secure a data exchange or to control the identity or presence of this individual. These sensors, for example biometric sensors or cameras, define as many interfaces, which the terminal must control. For this, interface providers must develop drivers, adapted to each type and brand of terminal, and adapt them, and sometimes completely redesign them, with each update of the system software of each terminal.

[0007] In practice, it is therefore not possible to have all types of interfaces on all types of terminals. For example, biometric interfaces or smart card readers can be developed to work with a Windows computer (registered trademark), but will not be usable with an Apple phone (registered trademark). In addition, the proliferation of drivers introduces risks of failures, or even security breaches.

[0008] This is of course not limited to the management of interfaces alone. The same applies to secure applications, i.e. those requiring a high level of security and / or access to private, confidential and secure data (banking data, medical data, personal data, etc.), for example to issue an authentication certificate, which can combine the identity of an individual, their biometric validation and the consideration of a third-party certificate of a secure application. The provision and maintenance of these elements on all available terminals is not feasible in practice. In addition, intrinsically, the security guarantee of the various available terminals may be questionable, and security flaws, known or unknown, are numerous.

[0009] For this reason, in applications where significant security is required, it is generally necessary to use dedicated products, involving additional costs and a multiplication of the necessary hardware.

[0010] For example, for an application intended for a police service, which must read an identity document or a driving licence, and make the link with its holder via biometric means, by calling on one or more remote databases, it is generally necessary to use dedicated and expensive terminals, while each police officer also has a telephone, which is not used.

[0011] The situation is similar for many other secure applications (access to specific services, for example banking, or more generally requiring the authentication of an individual).

[0012] 3. Presentation of the invention

[0013] There is therefore a need for a simple and effective solution, universal or almost universal, which does not require specific secure applications and / or a specific driver for each sensor and for each terminal, and which is also more secure.

[0014] There is also a need for simple and effective ergonomics, which also makes it possible to limit the overall size and the number of devices to be used, while ensuring optimized authentication security. For this purpose in particular, the invention proposes a portable and autonomous device for securing data transfer, comprising: means for encrypted communication with at least one terminal such as a telephone, a tablet, a laptop or a dedicated terminal; a plurality of sensors including at least one camera, a sensor delivering at least one biometric information and a smart card reader; means for processing data delivered by said sensors, capable of delivering pre-processed authentication data to said terminal, not requiring a driver dedicated to each sensor in said terminal.

[0015] Thus, the invention proposes a portable device, independent of the terminal, which can be very small in size, which ensures the entire implementation of the sensors, independently of the type of terminal, and implementing secure communication, via encryption in particular, with the terminal.

[0016] Thus, the terminal can access secure services without having to implement and / or control one or more of said sensors, or interfaces. The terminal of the invention provides an interface server function: it is not necessary for the terminal to include specific applications to control the interfaces, but can instead have various interfaces, embedded and managed by the security device of the invention.

[0017] According to a particular aspect, said encrypted communication means can take into account at least one identifier of said terminal, previously stored in a secure memory.

[0018] For example, this could be an I MEI identifier registered on SDMS / OTA.

[0019] According to another particular aspect, the device of the invention comprises, in a memory, a computer program making it possible to control said sensors and to carry out dedicated applications, transmitting to said terminal only data intended to be displayed on a screen.

[0020] According to another particular aspect, the device of the invention does not transmit any sensitive data to the terminal. By sensitive data is meant, for example, biometric data and / or data directly resulting from the reading of a smart card. The device according to the invention transmits, in this example, to the terminal only data of the type confirming authentication, or confirming the validity of a smart card, without transmitting to the terminal the data (biometric or resulting from the reading of a smart card) having served as a basis for such validity.

[0021] Thus, the terminal, for example a mobile phone, is used only as a human-machine interface, avoiding any risk to the security of the data processed, even if this phone is corrupted. The terminal also does not need to be equipped with applications dedicated to processing this sensitive data. The invention thus makes it possible to avoid the development and periodic updating of applications for a plurality of terminals.

[0022] According to another particular aspect, said encrypted communication means can create a VPN with said terminal, from a unique temporary code.

[0023] This unique code can, for example, be displayed on the screen of said terminal and read with the camera of said portable and autonomous data transfer security device.

[0024] According to a particular aspect, said processing means comprise: means for analyzing at least one image of a face and / or an iris, delivered by said camera; means for analyzing at least one image of an official document, such as a passport or an identity card, delivered by said camera; means for analyzing at least one biometric fingerprint delivered by said biometric sensor; means for analyzing identification data read on a smart card by said smart card reader.

[0025] In a particular embodiment, the camera can also be used to take fingerprints. For example, in a particular implementation, the device of the invention can comprise, in a housing without a human-machine interface such as a keyboard or a screen: a camera, at least one sensor delivering at least one biometric information and a smart card reader; means for secure connection to a remote authentication server, providing identification control information; internal means for processing: at least one official document read using said camera and / or said smart card reader; at least one biometric information delivered by said sensor(s);and at least one control information provided by said remote authentication server, so as to produce positive or negative authentication data based on said at least one official document, said at least one biometric information and said identification control data; means of communication with at least one terminal such as a telephone, a tablet, a laptop or a dedicated terminal; a server allowing said terminal to access, via said means of communication, said authentication information, using a secure application, so that said terminal provides human-machine interface functions delivering said authentication information, without accessing said official documents or said remote authentication server.;

[0026] The portable and autonomous device may also include means for secure connection to a remote server, based on said pre-processed authentication data.

[0027] Thus, the device ensures two independent secure connections, one with the terminal and the other with the remote server. In this case, said processing means may comprise means for confirming to said terminal the authentication of said individual, taking into account the pre-processed authentication data and data delivered by said remote server.

[0028] In a particular embodiment, the device comprises means for creating secure audio and / or video communication between said terminal and at least one other remote terminal.

[0029] In another particular embodiment, the security device comprises means for providing an authentication certificate combining: an identity, obtained by reading at least one official document, using said camera or said smart card reader, a biometric validation of this identity, obtained using said camera or a fingerprint reader, and a certificate previously recorded in a memory of said security device by a corresponding authority.

[0030] It is of course possible to combine these different methods of implementation.

[0031] The invention also relates to a method for securing data transfer, implementing at least one portable and autonomous device for securing data transfer as described above and comprising, in said device, the following steps: establishing an encrypted communication with at least one terminal such as a telephone, a tablet, a laptop or a dedicated terminal; obtaining signals delivered by at least one of the sensors belonging to the group comprising a camera, a sensor delivering at least one biometric information and a smart card reader; processing data delivered by said sensors, delivering pre-processed authentication data to said terminal, not requiring a driver dedicated to each sensor in said terminal.In an exemplary implementation, suitable for the collection and processing of identification data of an individual, implementing a device as described above, the method may comprise in particular the following steps, implemented by said portable device: processing at least one document read using said camera and at least one biometric information delivered by said sensor(s), so as to produce authentication data based on said at least one document and said at least one biometric information; implementing an offline web service, allowing a terminal, such as a telephone, a tablet, a laptop or a dedicated terminal, to access, via communication means, said authentication information, using a secure web application.

[0032] 4. Presentation of figures

[0033] Other characteristics and advantages of the invention will appear more clearly on reading the following description of a particular embodiment, given as a simple illustrative and non-limiting example, and the appended drawings, among which:

[0034] [Fig IA], [Fig IB] and [Fig IC]: Figures IA to IC illustrate an example of a security device according to the invention, respectively from the front, from the side and from behind; [Fig 2]: Figure 2 schematically illustrates the steps for creating a VPN between the security device of Figure 1 and a terminal, such as a telephone;

[0035] [Fig 3A], [Fig 3B], [Fig 3C] and [Fig 3D]: I Figures 3A to 3D illustrate four examples of use of the sensors of the security device of Figure 1, respectively for iris or face recognition, for reading an official paper document, for reading a smart card or reading a fingerprint;

[0036] [Fig 4]: Figure 4 presents a first example of implementation of the device of the invention for recognition of an individual ("KYC" or "know your customer" in English); [Fig 5]: Figure 5 presents a second example of implementation of the device of the invention for recognition of an individual.

[0037] 5. description of an embodiment

[0038] An example of a security device according to the invention is illustrated in Figures 1A to 1C. This device, which is small in size, for example 140 x 42 x 16 mm, is easily transportable, for example in a pocket or bag, and has a low weight, for example of the order of 180 g.

[0039] It has a series of sensors C, comprising at least: a fingerprint reader Cl, for example of the FAP30 type; a smart card reader C2, for example in ID1 - 7816 format; a camera, here a dual camera C3 (infrared and standard), mounted so that it can be used on one side or the other of the device and adapted for at least the recognition of a face, an iris and an MRZ band ("Machine Readable Zone" in English, for "automatic reading zone") present on an identity card or another official document.

[0040] It also includes a battery, for example 3000 mAh, Li-polymer, powering the various components, including a microprocessor, for example of the octoccer type operating at 2GHz.

[0041] It is equipped with several means of connection with the terminal and with a separate server, for example according to the standards Wifi®, Bluetooth®, 4G and / or 5G, and where appropriate NFC.

[0042] It includes several connectors, including USB type C, Micro SD, PSAM.

[0043] Of course, it has software protection measures, including a firewall. It is also designed to be hardware-secure, for example, in accordance with the IP67 standard.

[0044] It has a reduced human-machine interface, comprising for example an electronic ink screen 11 ("e-ink" in English), two function buttons 12A, 12B and a 12-key keyboard 13. Such a screen allows in particular to reduce consumption. A standard screen, and / or simple light-emitting diodes, can also be implemented.

[0045] A mirror can also be provided to facilitate centering the face in relation to the camera.

[0046] A sliding or hinged hatch can protect the camera, fingerprint sensor and buttons when the device is not in use.

[0047] A clip can be provided on the back of the device, to be able to hold the device for example in a pocket.

[0048] These different characteristics are of course indicative, and can be adapted, supplemented or replaced according to needs.

[0049] The implementation of the device of the invention makes it possible to use the HMI interface of a terminal in the context of authentication and / or a secure connection, without this terminal having to manage the various peripherals, and in particular the sensors allowing authentication and reading of documents. Indeed, these operations are ensured by the device itself, which is highly secure, and in particular does not allow access to its data, from the terminal.

[0050] The implementation of this security system therefore begins with a secure connection between the terminal and the device.

[0051] According to one approach, illustrated by Figure 2, the terminal 21 issues a request

[0052] 211, for example via Wi-Fi, to the security device 22. The terminal 21 presents a pseudo-random code, for example in the form of a QR code

[0053] 212, using pseudo-random data 222 transmitted by the device 22, which the camera of the security device reads (221). Based on this code, a secure and encrypted communication, in the form of a VPN 23, with firewall 24, is implemented between the terminal 21 and the security device 22.

[0054] Thus, it is not necessary to secure the terminal 21 itself, which is only used as a remote screen of the security device 22, by displaying a window of a Web-type browser, not requiring a dedicated application.

[0055] The security device 22 provides all security functions. It knows the terminal 21 to which it must connect to implement each session, of a predetermined limited duration and with a single-use key. This identification is done for example using a terminal identifier, previously recorded on SDMS / OTA, for example the terminal's IMEI identifier.

[0056] Other approaches for implementing a secure connection can be used. In particular, in a simplified version, pairing via Bluetooth® can be implemented, for example using a static QR code on the back of the security device, read by the terminal. In this case, however, the terminal must have an application for control operations, and uses the security device in "slave" mode, calling the latter's functions via SDK.

[0057] Once this connection between the terminal and the security device has been made, the security device can be used for numerous applications, for example: Figure 3A: facial and / or iris recognition: one or more shots 31 of the face 32 are taken by the security device 22, which then ensures the processing of the data (coding and extraction of useful data) and the exchange of control with a remote database. The result provided according to the return from the database, as well as, where appropriate, a view of the information obtained (face and information on the individual) is transmitted (33) to the terminal 21. Thus, the sensitive data are processed only by the security device, and not the terminal, which only receives validation or non-validation information; Figure 3B: the same approach can be implemented to read an official document, such as a passport 34 using the camera.Again, the security device extracts, by appropriate recognition and processing, the data useful for the control, and returns to the terminal only validation or non-validation information; figure 3C: the reading of an official document in the form of a smart card 35 is also possible, using the smart card reader. Validation is carried out in the same way; figure 3D: recognition of the fingerprint of a finger 36 is also possible, using the fingerprint reader 37.

[0058] Enhanced security can be implemented by combining several of these approaches.

[0059] The security device therefore incorporates a set of sensors or physical interfaces useful for controls, and the specific secure programs allowing their use. Thus, it is not necessary to equip the different types of terminals with such interfacing and security programs, which should be developed and updated regularly, depending on the products.

[0060] The same applies to secure applications embedded in the device, for example to provide the terminal with an authentication certificate, without the terminal being involved in obtaining and controlling this certificate.

[0061] In an exemplary embodiment, the security device never transmits “sensitive” information to the terminal. Sensitive information means information whose security is critical, such as biometric fingerprints or data resulting from the reading of a smart card such as in an identity document. The security device, in this case, only transmits identity confirmation data or the validity of a smart card to the terminal.

[0062] This provides a universal device, and what is more, a secure one, since access to its data and programs is made difficult, if not impossible, due to the closed and dedicated nature of this device. Only one version of the programs installed in the device is necessary, and therefore easy to update if necessary. This is particularly the case in the first approach described, where the terminal only provides a screen and touch interface function, over a secure Wi-Fi connection, in a Web browser: no interfacing or security software is installed on the terminal (only a Web-type application is implemented, to manage the initial and final exchanges), which is therefore completely interchangeable.

[0063] Figure 4 schematically illustrates an example of implementation, within the framework of an identity check.

[0064] In this figure 4, the terminal 41, the security device 42 of the invention and a server 43 are schematically represented, for example a government server allowing the control of individuals by an authorized person, for example a police officer, in particular via their identity document.

[0065] Terminal 41 is "empty", meaning that it does not contain any element related to the security of the secure processing that will be implemented, for example an identity check. Only its standard web browser 411 will be used, after a secure connection, for example via Wi-Fi, has been set up (as described in connection with Figure 2).

[0066] For this, and as described in more detail in the patent document WO2020221938, the terminal 41 issues a connection request 412, and the security device 42 returns to it a unique, randomly generated QR code 421. The terminal 41 displays the QR code via the browser 411, which the user reads (422) using the camera 425 of the security device 42. This allows the creation of a secure temporary connection, of the VPN type, between the terminal 41 and the device 42 (figure 2C). The device 42 of course knows an identification of the terminal 41, previously recorded in a memory 4213 (for example on

[0067] SDMS / OTA by IMEl).

[0068] It is then the latter which ensures all sensitive operations (manipulating and / or accessing sensitive data). The terminal 41 only ensures, via its browser 411, a human-machine interface function, in particular by allowing a display of the useful data 423 delivered by the device 42 on its screen (allowing in particular that the device 42 itself is small, inexpensive and low-power).

[0069] It is therefore this security device 42 which carries out the operations, and in particular, in the illustrated embodiment, an identification of an individual, using a dedicated "KYC" application 424. As illustrated in FIGS. 3A to 3D, it implements its various sensors and interfaces, to read identity documents (via the camera 425 or the smart card reader 426), biometric information (via the camera 425 or the fingerprint reader 427).

[0070] These operations are controlled by an internal application 428, stored in a memory 429 executed on a microprocessor 4210. This application 428 establishes a secure connection, in particular encrypted, for example using post-quantum encryption in accordance with the recommendations of the ANSSI, or any other suitable means, with the server 43, for example in 4G or 5G. This connection is independent of the terminal 41, and security is thus optimized.

[0071] If necessary (in addition to its own screen and buttons), the device 42 uses the 1 HM of the terminal 41 (423).

[0072] The device 42 transmits to the server 43 the collected identity and biometric data 4212, after having processed, formatted and encrypted them in the required manner, and the server 43 returns the result 432 of the check 431 that it has carried out. The security device 42 transmits to the terminal 41 the information 423 to be displayed accordingly (result of the identification, as well as, where appropriate, useful information (identity in particular) on the individual, taken from official documents).

[0073] Thus, according to this implementation of the invention, it is the device 42 which carries out all the sensitive operations.

[0074] According to a second approach illustrated in Figure 1, simplified with regard to the use of the security device 52, but requiring a specific application 511 in the terminal 51, it can be provided that the device 42 is used essentially to implement the interfaces and sensors, for example, to read identity documents (via the camera 425 or the smart card reader 426), biometric information (via the camera 425 or the fingerprint reader 427) and establish a secure connection with the remote server 53. In this case, the identification application 511 (KYC) is installed and implemented in the terminal 51, which connects to the security device 52 (which then operates in "slave" mode), for example by reading a static QR code present on the back of this device, or displayed on its screen. The device 42 knows an identification of the terminal 41, previously recorded (for example on

[0075] SDMS / OTA by IMEl).

[0076] The terminal 51 then sends an identity check request 512 to the security device 52. The latter, as in the previous embodiment, establishes a secure connection with the server 53, then transmits the collected data 522 to it and receives in response the result 531 of the identification. The security device 52 returns (523) to the terminal 51 this result, as well as, where appropriate, useful information (identity in particular) on the individual, taken from official documents.

[0077] The security device thus acts as an interface server for the terminal, and incorporates server software that makes its interfaces available to the terminal via a relatively simple SDK ("software development kit"). It thus makes it possible to have a KYC-type application, particularly at a reduced cost.

[0078] In both approaches, a "Secure Device Management System" is implemented in the security device, in order to control an OTA ("Over the Air") installation of applications and rights.

[0079] It is understood that this second simplified approach is less expensive to implement, but also less secure. The first approach allows for taking into account the fact that the terminal is presumed to be corruptible, and should not be used for security aspects, but only as an HMI screen, in the form of a web-type browser window, requiring no specific application. Only the data displayed on the screen is potentially exposed, but none of the confidential and protected data processed internally by the device 42.

[0080] This first approach therefore appears preferable for many secure applications, such as identity control, biometric control, electronic signature, crypto-telephony, etc.

[0081] The pairing, for example via Wi-Fi, between the terminal and the security device is a limited-duration session using a single-use key. Thus, in addition to the previously described application of an identity check, the invention can, for example, be used to provide an authentication certificate combining identity, biometric validation and a third-party certificate of a secure application on the mobile.

[0082] An example of the application of this approach is the regulation of cryptocurrencies in the fight against money laundering / corruption. In particular, within a national regulatory framework, it is possible to provide for the requirement of a "signature" type certificate for each transaction. A cryptocurrency application, to be active in the country concerned, will have to "sign" the transactions to authenticate users. This is easy using the security device of the invention: an authority (bank, office, etc.) is responsible for "signing" the applications, which is done by reading, with the security device, the identity and biometric proof, then transmitting them to a State server. This proof will then be compiled with, in particular, a timestamp, an identifier (ID), an identity document number and the original signature of the cryptocurrency application, in the form of an encrypted certificate and retransmitted by NFC (for example) to the user's terminal.This key thus becomes the signature key for transactions.

[0083] A similar process can be implemented "online", with the certificate then being sent back to the cryptocurrency application server, which will sign the client application on the terminal.

[0084] This process can also be transposed into other applications, for example to "sign" access control to a vehicle, or access to sensitive equipment locked with this key. Some examples of possible implementations of the invention are listed below:

[0085] 1) police control: on a dedicated terminal, for example an officer's mobile phone, an application for reading a driving license and / or an identity document on a smart card associated with a biometric control is implemented. The officer works on his terminal and, when the software asks him to read a smart card or a fingerprint or to take a picture of an iris or a face, he turns on the security device which returns to the terminal the control information provided by a remote identity server and / or the public content of the card read;

[0086] 2) KYC or direct bank transfer applications (“door to door” in English), vertical application on mobile and secure function;

[0087] 3) payment terminal application associated with immediate identity check. In addition to “mobile” in-store payment, applications in the field of home banking, for example for opening credits or delivering bank notes to the home;

[0088] 4) use as an identity entry terminal for taking bets or similar;

[0089] 5) clearing and transaction of electronic currencies (cryptocurrencies, electronic banking ("e-bank" in English), etc.) vis-à-vis a user...

[0090] 6) self-identity control for personal uses, such as: shareholder or political votes with strong biometric identity control and secure connection: remote voting on an easy-to-carry tool: the security device. In a particular implementation, the latter can be a stand-alone voting station for elections; special access control by NFC (or others) after activation of a key (on control of an identity card or passport and biometric information), opening of a safe or door, triggering of a process, for example home automation, etc. 7) strong electronic signature of official documents or bank transfers: distribution of PKI signature after strong identification.

[0091] More generally, the invention finds an effective and inexpensive application in any secure point-to-point process requiring strong identification of a carrier, or individual.

[0092] These different applications can be installed on the terminal or, more effectively, on the security device so that the terminal only provides a visualization of data on its screen, transmitted by the security device via Wi-Fi. All these applications are then on a secure device that does not use any resources of the phone directly, limiting the risks on a compromised phone.

[0093] The security device of the invention is thus universal in its compatibility with customers: it can, for example, be used in the morning in connection with a Windows® computer, later on an iPhone® for an action by a salesperson on the move, and finally on an Android® tablet of another salesperson at the end of the day. The user is no longer confined to an operating system or a screen size.

Claims

DEMANDS

1. A portable and autonomous device for securing data transfer, characterized in that it comprises: means of encrypted communication with at least one terminal such as a telephone, a tablet, a laptop or a dedicated terminal; a plurality of sensors including at least one camera, one sensor delivering at least one biometric information and a smart card reader; means of processing data delivered by said sensors, capable of delivering pre-processed authentication data to said terminal, not requiring in said terminal a driver dedicated to each sensor.

2. Portable and autonomous device for securing data transfer according to claim 1, characterized in that said encrypted communication means take into account at least one identifier of said terminal, previously stored in a secure memory.

3. A portable and autonomous device for securing data transfer according to any one of claims 1 and 2, characterized in that it includes, in a memory, a computer program enabling the control of said sensors and the execution of dedicated applications, transmitting to said terminal only data intended to be displayed on a screen.

4. Portable and autonomous device for securing data transfer according to any one of claims 1 and 3, characterized in that said encrypted communication means create a VPN with said terminal, from a unique temporary code.

5. Portable and autonomous data transfer security device according to claim 4, characterized in that said unique code is displayed on the screen of said terminal and read with the camera of said portable and autonomous data transfer security device.

6. A portable and autonomous device for securing data transfer according to any one of claims 1 to 5, characterized in that said processing means comprise: means for analyzing at least one image of a face and / or an iris, delivered by said camera; means for analyzing at least one image of an official document, such as a passport or an identity card, delivered by said camera; means for analyzing at least one biometric fingerprint delivered by said biometric sensor; means for analyzing identification data read on a smart card by said smart card reader.

7. Portable and autonomous device for securing data transfer according to any one of claims 1 to 6, characterized in that it includes means for secure connection to a remote server, based on said pre-processed authentication data.

8. Portable and autonomous device for securing data transfer according to claim 7, characterized in that said processing means include means for confirming said terminal the authentication of said individual, taking into account pre-processed authentication data and data delivered by said remote server.

9. A portable and self-contained device for securing data transfer according to any one of claims 1 to 8, characterized in that it includes means for creating secure audio and / or video communication between said terminal and at least one other remote terminal.

10. A portable and autonomous device for securing data transfer according to any one of claims 1 to 8, characterized in that it comprises means for providing an authentication certificate combining: an identity, obtained by reading at least one official document, using said camera or said smart card reader, a biometric validation of this identity, obtained using said camera or a fingerprint reader, and a certificate previously recorded in a memory of said security device by a corresponding authority.

11. . A method for securing data transfer, implementing at least one portable and autonomous data transfer security device according to any one of claims 1 to 9, characterized in that it comprises, in said device, the following steps: establishing encrypted communication with at least one terminal such as a telephone, a tablet, a laptop computer or a dedicated terminal; obtaining signals delivered by at least one of the sensors belonging to the group comprising a camera, a sensor delivering at least one biometric information and a smart card reader; processing data delivered by said sensors, delivering pre-processed authentication data to said terminal, not requiring in said terminal a driver dedicated to each sensor.

Images