Secure management system for a fleet of IT devices

Abstract

Title: Secure Management System for a Fleet of Computing Devices The invention relates to a management system for a fleet of computing devices, which may be mobile, including said computing devices (A), (B), each of which comprises: - an embedded computing unit (5) including data storage means, - wireless short-range communication means, - long-range communication means, the system also comprising a computing platform (6) capable of communicating with the computing devices and configured to send digital data update information to each computing device, the embedded computing unit (5) of each computing device being configured to execute, at the request of a first computing device, an authentication procedure for the digital update information. Figure for the abstract: Fig. 1

Description

Title of the invention: Secure management system for a fleet of computer objects

[0001] The field of the invention is that of the management of digital data stored by computer objects.

[0002] More specifically, the invention relates to a system for managing a fleet of intelligent and connected objects, which may be mobile, each comprising: - an on-board computer unit including data storage means, - first wireless proximity communication means, capable of communicating with first wireless proximity communication means of another computer object, - second means of long-distance communication.

[0003] Such management systems also conventionally comprise a computer platform including third long-distance communication means capable of communicating with the second long-distance communication means of the computer objects.

[0004] According to an example of application of the invention, such computer objects can take the form of reusable boxes, implemented in a system for transporting products contained in these reusable boxes.

[0005] In this example, as in other conceivable applications, the computer objects, in this case the reusable boxes, are regularly grouped together in warehouses in which they are stored directly near each other. In addition, due to the wireless proximity communication means that they integrate, they can exchange information or digital data between them.

[0006] Of course, these connected and intelligent objects integrate, in their storage means, digital data dedicated to their operation and their computer behavior.

[0007] Thus, it may be necessary, occasionally, to modify and / or update the computer data (for example the embedded software) contained in the storage means of the computer objects. These modifications or updates may then concern sensitive information, capable of protecting the objects against hacking or may also concern the computer configuration of the objects, their updating, encryption keys, temporary data (for routing, for example).

[0008] In this context, the modification or updating of computer data can be carried out via the computer platform to which all the computer objects of the fleet are connected via long-distance communication means.

[0009] A simple and classic solution therefore consists of sending the modifications or updates directly via the IT platform, to each IT object, one by one.

[0010] That being said, such a solution is not really secure: the computer objects receive the data and store them upon receipt, with possibly a simple degree of security consisting of recognizing a key with which the object is configured and authorizing, if the update integrates this key, the storage of the computer data received. However, this degree of security can prove to be easily circumvented, and it is possible, for malicious people, to hack the embedded computer system of the computer objects.

[0011] The invention aims in particular to overcome this drawback of the prior art.

[0012] More specifically, the invention aims to propose a system for remote management of the digital data of a fleet of computer objects which allows better security of the updates of said digital data stored by the computer objects.

[0013] The invention also aims to provide such a system which can be easily integrated into a system for transporting products contained in reusable boxes of a product transport system, in which the boxes are computer objects.

[0014] These objectives, as well as others which will appear subsequently, are achieved thanks to the invention which has as its object a system for managing a fleet of computer objects, including said computer objects which each comprise: - an on-board computer unit including data storage means, - first wireless proximity communication means, capable of communicating with first wireless proximity communication means of another computer object, - second means of long-distance communication, the system also comprising a computer platform including third long-distance communication means capable of communicating with the second long-distance communication means of the computer objects, characterized in that the computer platform is configured to transmit, to each computer object, digital update information data, and in that the on-board computer unit of each computer object is configured to execute, at the request of a first computer object, a procedure for authenticating the digital update information, said authentication procedure being intended to generate an authentication signal for the digital update information intended for the first computer object, the authentication procedure comprising the following steps: - detecting a reception of digital update information from the IT platform including an update code and taking the status of first IT object; - after receiving the digital update information, transmitting, to a second computer object in proximity to the first computer object, a request for authentication of the digital update information, via the first means of communication, - implementing the digital update information after receiving an authentication signal, - erase digital update information in the absence of receipt of an authentication signal.

[0015] Thus, thanks to the invention, the computer object can "ensure" that the received update file is reliable, this beyond the standard verifications also preferably implemented, namely the verifications by a hashing algorithm (conventionally a fingerprint contained in the file sent by the platform, in the form for example of a number stored in hexadecimal format). Indeed, the computer object currently receiving the update of this digital data can address a request to another digital object in the vicinity, this via the wireless proximity communication means of the two computer objects in the vicinity of each other, this request aiming to use the other computer object to authenticate the update currently being received and that it can therefore be accepted and memorized or applied by the computer object having addressed the request.

[0016] As will become apparent later, the second computer object can authenticate the update either indirectly or directly.

[0017] According to a preferred solution, the authentication procedure comprises a step of sending, by the second computer object, a verification request to the computer platform including the update code, via the second communication means, the computer platform being configured to receive the verification request and return, to the second computer object, an authorization code or a rejection code.

[0018] In this way, the second computer object acts as a separate validation intermediary, ensuring with the computer platform that the update data received by the first computer object does indeed come from the computer platform. If this is not the case, the computer platform sends a rejection code to the second object, which is then transmitted to the first computer object, which then rejects the digital update data, being considered unreliable.

[0019] Thus, the on-board computer unit of the second computer object is configured to transmit, to the first computer object, the authorization code or the rejection code.

[0020] In addition, the on-board computer unit of each computer object is then configured to delete the digital data update information after receiving a rejection code.

[0021] According to another conceivable embodiment, the authentication procedure comprises a step of verification, by the on-board computer unit of the second computer object, of the presence of the update code in the data storage means of the second computer object.

[0022] According to this embodiment, the authentication procedure is therefore executed locally, directly via the second computer object. It is thus considered that, in the presence of the update code in the data storage means of the second computer object, the latter has already executed an authentication procedure and recognizes the update proposed to the first computer object.

[0023] In this case, the on-board computer unit of the second computer object is configured to transmit, to the first computer object, an authorization code in the event of the presence of the update code in the data storage means of the second computer object.

[0024] Thus, in general, the on-board computer unit of each computer object is advantageously configured to store the digital data update information after receiving an authorization code.

[0025] Preferably, according to this embodiment, the on-board computer unit of each computer object is configured to transmit, to the computer platform, a signal accepting the digital data update information.

[0026] Thus, the IT platform is informed of the acceptance of the update by the IT object(s) concerned.

[0027] Alternatively or additionally, the on-board computer unit of each computer object is also configured to transmit, to the second computer object, a signal for storing digital data update information.

[0028] In this case, the on-board computer unit of each computer object is configured to transmit, with a status of second computer object, to the computer platform, a signal accepting the digital information for updating the data received from a computer object having a status of first computer object.

[0029] It is understood that the signal for storing the digital data update information is returned to the computer platform, either directly by the first computer object, or by means of the second computer object, or by both.

[0030] If authentication is not performed, the on-board computer unit of each computer object is preferably configured to put the digital data update information on hold until an authorization code is received.

[0031] According to a particular application of the invention, the computer objects take the form of reusable boxes, and the management system is integrated into a system for routing products contained in the reusable boxes.

[0032] Other characteristics and advantages of the invention will appear more clearly on reading the following description of a preferred embodiment of the invention, given as a simple illustrative and non-limiting example, and the appended drawing consisting of: - [Fig.l] which schematically illustrates a system for managing a fleet of computer objects integrated into a product routing system.

[0033] As illustrated by [Fig.l], a system for managing a fleet of computer objects according to the invention comprises, in a manner known per se: - at least two objects A, B (or more generally a fleet of N computer objects), each including on-board intelligence and means of communication described below, each computer object bearing in particular a computer recognition code 1; - a computer platform 6 including at least one database 60 listing the computer recognition codes 1 of all the computer objects.

[0034] The computer recognition code for computer objects allows the computer platform to identify that the computer object is indeed part of the fleet of computer objects that the system manages.

[0035] In addition to the computer recognition code, each computer object integrates: - an on-board computer unit 5, including data storage means 4; - first wireless proximity communication means 2, typically a Bluetooth antenna, or even BLE (“Bluetooth Low Energy”, i.e. low consumption Bluetooth), capable of communicating with first wireless proximity communication means 2 of another computer object; - second means of long-distance communication 3.

[0036] Furthermore, each computer object of course integrates means of electrical supply 7 of the computer unit and means of communication in particular.

[0037] The computer platform 6 includes third long-distance communication means 61, capable of communicating with the second long-distance communication means 3 of the objects.

[0038] According to the principle of the invention, the computer platform 6 is configured to transmit, to each computer object (A, B as well as to any other computer object in the fleet), digital update information, for example, data contained in the storage means of the on-board computer unit of each object.

[0039] In addition, the embedded computer unit 5 of each computer object is configured to execute, at the request of a first computer object, for example the computer object A according to the example illustrated by [Fig.l], a procedure for authenticating the digital data update information. This authentication procedure is intended to generate an authentication signal for the digital update information intended for the first computer object, according to the following steps: - a step according to which the reception of the digital update information from the computer platform 6 is detected by the computer object A which then takes on the status of first computer object, the digital update information including an update code; - then, transmit to a second computer object, in this case computer object B in proximity to computer object A, a request for authentication of the digital update information, this request being transmitted by computer object A and received by computer object B via the first means of communication 2 of each computer object.

[0040] Then, the authentication procedure according to the invention is configured in such a way that: - the digital update information is applied by the computer object A, as the first computer object, after receiving the authentication signal; - the digital update information is erased by the computer object A, in the absence of the authentication signal.

[0041] According to a first embodiment, the authentication procedure comprises a step of transmission, by the computer object B, as a second computer object, of a verification request to the computer platform 6. According to this embodiment, the computer platform is then configured to receive the verification request and return, to the computer object B, an authorization code or a rejection code.

[0042] Once received, the authorization code or the rejection code is transmitted to the computer object A by the computer object B, the on-board computer unit of the computer object B being configured to do this.

[0043] It should be noted that the system according to the invention can provide several authentication procedures: - the authentication procedure described above can be reproduced with several B objects having a second object status (with respect to the first computer object), each object then validating the implementation of the digital update information; the second objects communicate in parallel with each other with the first object; - the authentication procedure described above can be reproduced in cascade with several B objects having a second object status (with respect to the first computer object), the authentication being returned to the first object after a predetermined number of second objects have participated in the authentication procedure.

[0044] Furthermore, it is possible to configure the computing units of the objects so that the authentication procedure is executed by an object (having the status of first object) after a predetermined delay, in particular if the processing of the update information is not urgent.

[0045] According to a particularly advantageous implementation of the system according to the invention, the execution of the authentication procedure by a first computer object can be conditioned by the presence of the latter in a specific predetermined location. The computer unit of the object is then configured with the GPS coordinates of the location, these coordinates being compared with those captured by the object (if applicable). If a “secure” location is detected, the authentication procedure is executed.

[0046] Of course, the on-board computer unit of computer object A (or any other computer object in the fleet) is configured to delete information digital data update after receipt of a rejection code issued from the computer object B.

[0047] According to a second embodiment, the authentication procedure comprises a step of verification, by the computer unit 5 embedded in the computer object B, as a second computer object, of a presence of the update code in its own data storage means 4.

[0048] According to this embodiment, the computer unit 5 of the computer object B, as a second computer object, is configured to transmit, to the computer object A, as a first computer object, an authorization code in the event of the presence of the update code in the data storage means 4 of the computer object B.

[0049] Whether in the first embodiment or the second embodiment which have just been described, the computer unit 5 of each computer object is configured to store the digital information for updating the data after receiving an authorization code.

[0050] Furthermore, after storing the digital data update information, the on-board computer unit 5 of each computer object is configured to transmit, to the platform 6, a signal for storing the digital data update information.

[0051] In the case of the second embodiment, the on-board computer unit of each computer object is configured to transmit, to the second computer object, a signal for storing the digital information for updating the data. In this case, the on-board computer unit of each computer object is configured to transmit, with a status of second computer object, to the computer platform 6, a signal for storing the digital information for updating the data received from a computer object having a status of first computer object.

[0052] Generally speaking, it is therefore possible that a computer object that has launched an authentication procedure does not receive an authorization code. The absence of receipt of an authorization code does not necessarily mean the receipt of a rejection code. For this reason, the on-board computer unit of each computer object is configured to put the digital data update information on hold until an authorization code is received.

[0053] As illustrated by [Fig. 1], the computer objects can take the form of reusable, connected and intelligent boxes, which can be mobile. In this case, the system for managing the fleet of computer objects, with regard to updating the data contained in the storage means of the computer unit

[0054] on-board objects, is integrated into a system for transporting products contained and transported in reusable boxes.

Claims

1. Claims System for managing a fleet of computer objects (A), (B), which may be mobile, including said computer objects which each comprise: - an on-board computer unit 5 including data storage means (4), - first wireless proximity communication means (2), capable of communicating with first wireless proximity communication means (2) of another computer object, - second long-distance communication means (3), the system also comprising a computer platform (6) including third long-distance communication means (61) capable of communicating with the second long-distance communication means (3) of the computer objects, characterized in that the computer platform (6) is configured to transmit, to each computer object, digital data update information, and in that the computer unit (5) embedded in each computer object is configured to execute, at the request of a first computer object (A), a procedure for authenticating the digital update information, said authentication procedure being intended to generate a signal for authenticating the digital update information to the first computer object (A), the authentication procedure comprising the following steps: - detecting a reception of digital update information from the computer platform (6) including an update code and taking a status of first computer object; - after receiving the digital update information, transmitting, to a second computer object (B) near the first computer object (A), a request for authentication of the digital update information, via the first means of communication (2), - apply the digital update information after receiving an authentication signal, - erase digital update information in the absence of receipt of an authentication signal.

2. System for managing a fleet of computer objects according to claim 1, characterized in that the authentication procedure comprises a step of sending, by the second computer object (B), a verification request to the computer platform (6) including the update code, via the second communication means (3), and in that the computer platform (6) is configured to receive the verification request and return, to the second computer object (B), an authorization code or a rejection code.

3. System for managing a fleet of computer objects according to claim 2, characterized in that the computer unit (5) on board the second computer object (B) is configured to transmit, to the first computer object (A), the authorization code or the rejection code.

4. System for managing a fleet of computer objects according to claim 3, characterized in that the computer unit (5) embedded in each computer object is configured to delete the digital data update information after receiving a rejection code.

5. System for managing a fleet of computer objects according to claim 1, characterized in that the authentication procedure comprises a step of verification, by the computer unit (5) embedded in the second computer object (B), of the presence of the update code in the data storage means of the second computer object (B).

6. System for managing a fleet of computer objects according to claim 1, characterized in that the computer unit (5) embedded in the second computer object (B) is configured to transmit, to the first computer object (A), an authorization code in the event of the presence of the update code in the data storage means (4) of the second computer object.

7. System for managing a fleet of computer objects according to claim 3 or according to claim 6, characterized in that the computer unit (5) on board each computer object is set to store digital data update information after receiving an authorization code.

8. System for managing a fleet of computer objects according to claim 7, characterized in that the computer unit (5) embedded in each computer object is configured to transmit, to the computer platform (6), a signal for storing digital data update information.

9. System for managing a fleet of computer objects according to claim 7, characterized in that the computer unit (5) embedded in each computer object is configured to transmit, to the second computer object (B), a signal for storing digital data update information, and in that the computer unit (5) embedded in each computer object is configured to transmit, with a status of second computer object (B), to the computer platform (6), a signal for storing digital data update information received from a computer object having a status of first computer object (A).

10. System for managing a fleet of computer objects according to any one of claims 1 to 9, characterized in that the computer objects take the form of reusable boxes and in that the management system is integrated into a system for routing products contained in the reusable boxes.