IDENTIFICATION METHOD AND SYSTEM

Abstract

The present invention is an identification method implementing: - an encrypted database concerning natural or legal persons, - a database concerning algorithms for decrypting this data, - elements called digital identity cards, comprising an identifier of a holder and an identifier of the decryption algorithm to be used, - and an application called an identification application controlling an optical acquisition means. The identification application performs an optical acquisition of said holder or an element in their possession, and sends this acquisition to an official identification server along with the identifiers of the holder and the algorithm so that this server can decrypt the encrypted data, compare the result with the optical acquisition of the holder or an element in their possession, and validate or reject the identity of said holder.In an improved version, the decryption algorithm is designed so that a brute-force decryption attempt results in a plurality of plausible solutions, and the encrypted database therefore cannot be used to reconstruct a decrypted database. The original file and the optical scan sent by the identity holder are known only to the official identification server. See Figure 3 for an abstract.

Description

Title of the invention: IDENTIFICATION METHOD AND SYSTEM Technical field

[0001] The invention is a method for identifying natural and legal persons. Prior art

[0002] Identification of individuals is most commonly done by analyzing their identity documents, either face to face or over the Internet, using methods that are unreliable. There are also biometric analysis machines that are more effective, but reserved for police or customs officials.

[0003] We also know of methods of document authentication open to all, which can be applied to the authentication of identity documents and therefore to remote identification. Technical problem

[0004] Identity theft affects more and more people and organizations, and has serious consequences for the privacy, security, reputation, trust and well-being of victims, as well as for the security and public finances of states.

[0005] Identity cards and passports continue to be transmitted over the Internet and can be resold on the dark web, which is all the more dangerous as these documents can be used by powerful mafia organizations and rogue states.

[0006] States nevertheless have all the identity elements of their nationals and foreigners living on their soil, and could develop public identification services on the Internet, making it possible, for example, to validate the similarity between a person's face and their official identity photo, and therefore to carry out quality identifications for the benefit of all.

[0007] They have generally not opened such services until now because of the risks that this represented. Some were relatively easy to control, such as the identification of non-consenting individuals, the misuse of processing by using biometric data for purposes other than those initially intended, or the sharing of these data with unauthorized third parties, but others did not seem to be able to be controlled, such as the risk of error or technical failure, and especially the exposure of biometric data to unauthorized access or loss.

[0008] The advent of quantum computing and advances in artificial intelligence will make it possible to find all encryption keys in a very short time, using brute force attacks.

[0009] Different solutions are being studied such as the replacement of crypto algorithms tography by quantum-resistant algorithms, by improving key lengths or by post-quantum cryptography, but the transition to these methods may take time.

[0010] Innovative encryption methods must therefore be found to resist brute force file decryption attempts. Brief description of the drawings

[0011] The invention will be well understood, and other aims, advantages and characteristics thereof will appear more clearly on reading the description which follows, which is illustrated by Figures 1 to 4.

[0012] [Fig. 1] is a diagram showing the different stages of commissioning the identification application described below.

[0013] [Fig.2] is a diagram showing the different stages of an identity check in face to face by the police, the gendarmerie or customs

[0014] [Fig.3] is a diagram showing the different stages of an Identification during of an online or face-to-face transaction.

[0015] [Fig.4] is a diagram showing an encryption and decryption procedure innovative of a set of data called original file including the following steps: 1. analysis of the original file to discover its nature and select the information called original information, which is characteristic of the original file, 2. creation of an algorithm called an alteration algorithm which modifies or deletes original information, 3. modification of all or part of said original file, by the alteration algorithm, to obtain the file called altered file, and calculation of an information element called meaningful message containing the inverse algorithm of the alteration algorithm or a means of obtaining it, 4. sending the altered file and the significant message via networks of different natures, 5. decryption of the corrupted file. Statement of the invention

[0016] The invention is an identification method implementing: - data sets hereinafter referred to as altered files, obtained by alteration of a file called the original file by an algorithm called the alteration algorithm, said original file relating to natural or legal persons called holders, - a database of algorithms known as reverse algorithms for decrypting said files altered by said alteration algorithm, - elements known as significant messages, comprising an identifier of one of said holders and a means of decrypting the altered file of said holder in question, for example an identifier of said inverse algorithm, - and software called an identification application controlling a means of acquiring biometric characteristics or any identification element of said holder in question, characterized in that said identification application - carries out an acquisition of biometric characteristics or any identification element of said holder, - sends said acquisition to a computer called an identity server as well as said identifiers of the holder and said inverse algorithm, so that said identity server can decrypt or provide the means to decrypt said altered file in question, and compare the result with said acquisition of biometric characteristics or any identification element of said holder, and validate or not the identity of said holder. Detailed description of the invention

[0017] I - The structure of the identification system

[0018] It is based on meaningful messages, an identity server, identification requests, and an identification application.

[0019] LA - The meaningful message having the function of digital identity card and the digital certificate

[0020] The significant message is an alphanumeric string composed of two identifiers: that of the holder and that of the inverse algorithm, the identifier of the inverse algorithm being able to include a decryption key or a means of obtaining it. The decryption algorithm, called inverse algorithm, is advantageously provided with an algorithm reference and the significant message includes a means of obtaining it, for example its reference in a database.

[0021] The holder Peter Smith may for example have as an identity card the meaningful message consisting of the alphanumeric string Pe-terSmithlqEK5sO2-SOkLtB4vBriSB6OR in which PeterSmithlqEK5sO2 is the holder's identifier, and SOkLtB4vBriSB6OR that of the inverse algorithm.

[0022] The meaningful message may be in the form of a barcode, a file stored in a smartphone, or an internet link allowing such a file to be downloaded or sent.

[0023] The administrative authorities can send it to the holder by email, by mail, by text message, by traditional post, or even deliver it in person.

[0024] The meaningful message does not need to be secured, and it can be replicated without risk.

[0025] There is a variant of the signifying message which is the digital certificate, which only includes the holder's identifier and a digital signature. This digital certificate allows any person who becomes aware of it to know the identity of the holder (for example, last name, first name, address) and to know of its existence in the identity server database. Like the signifying message, it can be in the form of a barcode, a file stored in a smartphone, or an internet link or an email or a text message allowing such a file to be downloaded or sent. Signing a classified ad or a response to a classified ad with this link allows the reader to certify that the sender exists, and that his identity can be effectively verified by the identification system before signing an agreement with him.

[0026] Legal entities and public services may also have a meaningful message and a digital certificate. The equivalent of the identity details of legal entities are the details of the administrative registration of legal entities. Instead of the identity photograph of natural persons, the biometric information is replaced by the description of a unique optical key (physical unclonable function also called PUF for Physical Unclonable Function).

[0027] LB - The Identity Server

[0028] This server has a very simple function: upon receipt of an identification request defined below, referring to a meaningful message and the designation of an identification means which is a biometric characteristic and / or any identification element of one of said holders, for example a video of the person's face, which can be supplemented or replaced by other elements such as the analysis of his voice, a fingerprint or an iris. In a preferred version, the video of the face and / or the sound of the voice are acquired after asking the holder to pronounce a sentence which is different each time.

[0029] LC - The identification request

[0030] An identification request is a message sent to the identity server. It advantageously includes six parameters: - The alphanumeric string of the message signifying the holder whose identity we want to verify, - The alphanumeric string of the message signifying the identification requester, - the description of the means of identification to be implemented, - the list of official identity elements requested (surname, first name, etc.), - the indication of the processing planned from these elements, - and the identifier of the terminal responsible for acquiring the video or another characteristic element of the holder, which may be that of the holder, that of the verifier or a automaton.

[0031] It can also be presented in the form of a barcode to be presented to an automaton or to a verifier which, with the identification application, can send it to the identity server in order to verify an identity.

[0032] II-D - The identification application

[0033] Anyone can download it and put it into service by sending it the alphanumeric string of their meaningful message.

[0034] Following an identification request received by the identity server designating the terminal responsible for acquiring the means of identification, the application asks the holder to identify himself. It is this which manages the camera and, where appropriate, other sensors useful for the operation.

[0035] The identification application also allows its holder to issue an identification request, provided that he knows the alphanumeric string of the message signifying the person whose identity he wishes to verify.

[0036] While the identity servers may each be specific to a state or organization, the identification application may be common to all countries.

[0037] II - Operation of the identification system

[0038] ILA - Basic Operation

[0039] An API allows everyone to send identification requests to the identity server to identify third parties who wish to be identified, in all use cases.

[0040] This API can be integrated into all applications of states and all their services, public and private communities, banks and all other companies, and even individuals. The identification application contains this API and allows everyone to issue an identification request.

[0041] In response to an identification request, the identity server sends to the identification application of the designated terminal, for example the holder's smartphone, a notification requesting its opening, and presents it with the six parameters of the identification request as well as optionally the random and therefore unpredictable sentence that it must pronounce while filming itself on video. The holder can accept or not to identify itself, and report a request that seems abusive to it.

[0042] If he agrees to be identified, the holder acquires the biometric characteristics that are requested and that he agrees to provide. He can, for example, pronounce the requested sentence, by filming himself on video. The identity server verifies that these characteristics correspond to those of the person, and for example that this video corresponds to the sentence to be pronounced and to the person's face. It also verifies, if necessary, other requested means of identification. If successful, it sends the identification requester an identification certificate, which may include official identity elements if they are requested (surname, first name, date of birth, address, etc.) but no biometric information, and in particular no passport photograph. The nature of this identification certificate can be chosen by the person whose identity is being verified. It can be a simple certificate that the person exists and is registered in the identity server, but the person can also agree to provide their name, address or other details about themselves.

[0043] ILB - The transmission of multiple significant messages for the same holder

[0044] A holder may have several meaningful messages, each of which has a different appearance; PeterSmithlqEK5sO2-SOkLtB4vBriSB6OR may, for example, also appear as DarkMattvcGx5WC9-Lc46e63xeFY2AE26. Both meaningful messages have exactly the same function, and allow for identification in the same way, but may have different uses. For example, one may be used exclusively for banking, another for a social site, and yet another to respond to advertising offers.

[0045] The interest is to limit the possibilities of analyzing online behavior and collecting personal information which allows the creation of precise user profiles which can then be used to manipulate user behavior, for example by targeting specific advertisements or by modifying the price of products according to the user profile.

[0046] ILC - Sending meaningful messages for pseudonyms

[0047] The cardholder may request that a meaningful message correspond only to one pseudonym, and not provide any details of his identity. He may even request to have several cards corresponding to different pseudonyms.

[0048] These pseudonyms allow him to identify himself on social sites under a pseudonym, and therefore to remain anonymous, but the justice system will be able to obtain his identity if it deems it useful to resolve a legal case.

[0049] ILD - Issuance of other dematerialized documents

[0050] A single altered file can be combined with several different meaningful messages. In combination with a single altered file, different so-called secondary meaningful messages can, for example, produce an identity card or passport, a visa, a driver's license, a social security card, a disability certificate, a work stoppage certificate, an insurance certificate, a power of attorney, a membership card, an invitation, a train ticket, a payment card, etc., or simply the certification that the original file exists and can be decrypted by an authorized person.

[0051] It is advantageous that a so-called primary meaningful message, for example issued by a public authority or a trusted third party, can be used by third parties such as banks, transport companies, event organizers, administrations and private companies and even individuals to generate such secondary meaningful messages.

[0052] To enable the transmission of secondary significant messages, it is advantageous for the so-called primary significant message that enabled their generation to include a part that is easily identified as having to be reproduced in a secondary significant message so that the latter can be combined with the altered file associated with the primary significant message, or that it includes a reference with which to associate the secondary significant message.

[0053] II-D1 - Official documents

[0054] To obtain an official certificate, a holder can go to the website of the administration concerned, identify himself and make the request. He then receives the requested certificate containing the alphanumeric string of his meaningful message completed with the identifier of the administration concerned and additional information specific to this administration.

[0055] The identifiers of the administrations authorized to use the biometric identification system are set by the organization managing the operation and in particular the identity server.

[0056] This certificate may also include, if the administration concerned so wishes, clear information such as details of the holder's identity but not biometric information.

[0057] For example, to request a dematerialized driving license, the holder presents his meaningful message, by sending the corresponding alphanumeric string to the website of the Ministry of the Interior, and receives his driving license in the form of a new alphanumeric string allowing a police officer or a car rental company to verify both the essential elements of his identity (surname, first name and address for example) and the validity of his driving license.

[0058] This new alphanumeric string can, like the original string, be represented in the form of a barcode, a file stored in a smartphone, an email or a text message, or an internet link allowing the file to be downloaded.

[0059] The method is the same for obtaining a social security card, a hunting license, a disabled person's card, a parking permit, etc.

[0060] In all cases, only the identity server can carry out the verification of the biometric characteristics or any identification element of a holder, without the administration concerned having knowledge of these identification elements. It verifies during the operation that the identification request is indeed issued by the administration concerned.

[0061] ILD2 - Other dematerialized documents

[0062] Any natural or legal person can issue a dematerialized electronic document using the same method, except that the issuing body is in this case a private website. This could be that of a bank or an insurance company, a rental company, or any other business or association, or even an individual.

[0063] These may for example be payment cards, loyalty cards, membership cards, employee cards, student cards, access control cards, loyalty cards, invitations, etc.

[0064] The only difference with a conventional document is that, instead of biometric details such as an identity photo or an identification element, the issued document includes the alphanumeric string of the meaningful message, the identity verification being done by the identity server with the identification application. Upon receipt of an identity confirmation issued by the identity server, the issuing organization can continue its operations.

[0065] III- Security of the identification system

[0066] As regards the limitation of the service to consenting persons, the holder only responds to the identification request after having knowledge of the identity of the requester, the possible verification of this identity, the indication of the planned processing which specifies the reason and the justification of the request. Advantageously, this request can only be sent to him by the identity server on a dedicated application.

[0067] Misuse of processing by using biometric data for purposes other than those initially intended is not possible since the biometric data is not provided, and the video is encrypted during its transfer from the holder to the identity server.

[0068] Sharing biometric data with unauthorized third parties is also impossible, since the recipient of the information does not know the slightest biometric detail of the holder and cannot even have access to his photograph.

[0069] The risk of error or technical failure of the identity server remains, but it is not greater than that of all current or proposed future competing systems.

[0070] The exposure of biometric data to unauthorized access or loss has become zero in the case where the encryption method used is resistant to brute force attacks.

[0071] Without this resistance, it would be impossible to make such servers available to the public on the Internet, without taking the risk that a quantum computer would come and consult it to build biometric databases.

[0072] A very important improvement is that the sentence that the person to be identified is asked to present is different for each attempt, and that it would therefore be necessary to ask the holder to make this video a very large number of successive times to have a chance of discovering which algorithm is used, and it would then remain necessary to discover the nature of this algorithm, which can be very complex.

[0073] Similarly, for meaningful messages delivered to legal entities, the video that is requested to be acquired advantageously includes a list of viewpoints at which to place the camera which is unpredictable by the operator responsible for proving the identity of the legal entity.

[0074] IV- Some examples of application

[0075] IV-A Registration of an application

[0076] The first step, illustrated by [Fig. 1], is the commissioning of the identification application.

[0077] When the holder has received his meaningful message, he must send it to the identity server so that the latter can then send him identification requests.

[0078] This is done with the identification application as soon as it is installed.

[0079] IV-B Face-to-face identity check by the police, gendarmerie or customs

[0080] This method is illustrated by [Fig.2]. The holder presents to the official considered its meaningful message or the barcode representing it on the screen of his Smartphone or on a printed sheet, this official then directly queries the identity server.

[0081] The method is the same for other official dematerialized documents issued using the same method.

[0082] IV-C Identification during an online or face-to-face transaction

[0083] This method is illustrated by [Fig. 3]. It is identical for all types of transactions: Face-to-face identification of a person by an administration or a company such as a bank, or of an individual by another individual, online or face-to-face payment, online or face-to-face voting, electronic signature, placing an order, presenting a transport or show ticket or an invitation, participating in a conference call, access control, etc.

[0084] IV-C1 Face-to-face identification of a person by an administration or a company such as a bank, or of an individual by another individual

[0085] The client presents his meaningful message to identify himself and access a service or more generally to enter into a relationship with a third party.

[0086] This presentation can be made face to face or online by sending the corresponding alphanumeric string in the most suitable form (sending the alphanumeric string via the Internet or NFC link, displaying the barcode on the smartphone screen or presenting a document containing it, etc.).

[0087] IV-C2 Access control, presentation of a transport or show ticket, invitation to a public or private event, access card to an Intranet or to premises

[0088] When he presents himself for inspection, the holder shows his message meaning either to the screen of his smartphone is printed on a support. The person or the machine responsible for the control takes the video of the holder, and the identity server validates or not the identity of the holder. The next step in the sequence is the verification that the holder is indeed one of the authorized persons, and if necessary, the authorization of access to the holder.

[0089] IV-C3 Online or face-to-face payment

[0090] A payment card issued according to the method makes it possible to request one's bank to make a payment to a third party. Unlike what happens in the prior art, it is the identity of the payer that is verified and not knowledge of the secret code or crypto in the case of an online payment, which could be the work of a third party.

[0091] The payment request may be made by an identification request in which the identity of the identification requester is the beneficiary of the payment, and the indication of the intended processing specifies the references and the amount of the payment.

[0092] IV-C4 Online or face-to-face voting

[0093] The meaningful message presented to an assessor makes it possible to ensure the identity of the voter much better than the always too rapid verification of an identity document and the attempt to analyze a resemblance between this person and the photo on the document.

[0094] Online votes can also be organized once the identity of the voter has been verified, exactly as for an online payment except that additional precautions of secrecy may be required.

[0095] IV-C5 Electronic signature, placing an order, registering for an event or a social site

[0096] The method proposed here allows the operator to send an identification request to the identity server which triggers a rigorous biometric identification sequence that respects personal data. This ensures that it is indeed the signatory who gives his signature himself and not a collaborator or a fraudster who simply knows the logins and passwords.

[0097] IV-C6 Participation in a telephone or video conference

[0098] Many operators offer audio or video communication means. The method proposed here allows them to easily send an identification request to the identity server which triggers a rigorous biometric identification sequence that respects personal data. This makes it possible to ensure the identity of all participants in an audio or video conversation.

[0099] IV-C7 Verification by digital certificate of the existence of a natural or legal person in the identity server database

[0100] This may be a preliminary step to entering into a relationship between two natural or legal persons.

[0101] A person presents his digital certificate to the third party with whom he wishes to enter into a relationship, to indicate to him that, in due course, it will allow him to verify his identity.

[0102] As the meaning message, This certificate can be in the form of a barcode, a file stored in a smartphone, a text message, an email or internet links allowing such a file to be downloaded or sent.

[0103] The most frequent application will probably be the signing of classified ads and responses to classified ads.

[0104] V- Private digital identification systems

[0105] With my present invention, private digital identification systems can be created. Any company or community having the right to record identity photos or other biometric characteristics of its customers, employees, members or partners can create an identity server and its own identification application, which can be integrated into its own applications.

[0106] VL Recommended improvements

[0107] It is desirable that the means of decrypting the corrupted file be provided to a person or computer responsible for decryption only after verification that the person or computer in question is authorized to decrypt the corrupted file.

[0108] Strong identification is therefore desirable. On the one hand, it makes it possible to determine which part of the population or computers can decrypt the corrupted file, but also to limit the number of successive attempts to decrypt the corrupted file, which would not be possible without strong identification, since a fraudster could use several different identities, for example several IP addresses, to make a large number of successive attempts in a limited time.

[0109] The meaningful message can advantageously take the form of a character string, a barcode or an internet link.

[0110] It may advantageously include references or links to the altered file, and / or several links to distinct parts of this file which may be deposited at different addresses.

[0111] It may also contain information in addition to that contained in the altered file, for example information that has been removed from the original file by the alteration algorithm.

[0112] One or more so-called complementary files may be recorded and be accessible by the alteration algorithm and / or by the altered file and / or by the significant message or a combination of several of these three elements, and may contain data and / or links to data recorded with trusted third parties (for example a medical file, a diploma, etc.).

[0113] In a more secure version, decryption of the corrupted file cannot be performed only by a secure computer. The algorithms can then remain secret.

[0114] In this more secure mode of implementation, the meaningful message and / or the alteration algorithm and / or the inverse algorithm are advantageously kept confidential by a secure computer, which uses this or these elements to combine them together.

[0115] In an even more secure version, such as those illustrated in Figures 2 and 3, the method involves the reception by a server of a set of data called an attempt file which may, for example, be a video of the holder. The comparison between this attempt file with data obtained by combining the altered file and the significant message then causes the result of this comparison to be sent to a designated third party without sending them either the original file or the attempt file.

[0116] This prevents the original file from being distributed. The user simply has to send the tentative file, or what they think is the original file, or what this data set represents, so that the secure computer, for example the identity server, can respond yes or no to whether what they sent is authentic or not.

[0117] Except when it is only a matter of issuing original data sets to reconstruct a low-secret file such as an identity photo, the main purpose of which is to prevent it from being used to create databases allowing unauthorized persons to produce counterfeit documents or to identify persons without their consent, this more secure implementation is especially recommended for the protection of other biometric characteristics such as fingerprints or DNA signatures, or for highly confidential documents.

[0118] The means for decrypting said altered file advantageously comprises carrying out a prior operation which takes more than 10 seconds or at least 1 second.

[0119] This prior operation is advantageously unpredictable so that a fraudster cannot produce a recording of a prior operation carried out previously, and for example captured on a communications network.

[0120] The altered file must not contain any information allowing it to be linked to a meaningful message, so that hacking the server containing the altered files does not allow the meaningful message to be found which makes the altered file intelligible.

[0121] In communications between a transmitter and a receiver of a protected data set according to the present invention, whether these communications are direct or pass through an intermediate server, the altered file and the significant message are advantageously transmitted by networks of different natures. The main com The components of the meaningful message, i.e. the holder's identifier and the algorithm's identifier, are also advantageously transmitted by networks of different natures. One element can, for example, be transmitted via the web and the other by text message or postal mail.

[0122] It is recommended to send the holder of a digital identity the altered file containing data rendered unintelligible from his biometric characteristics either by an Internet link allowing it to be downloaded, or by email, and to send the meaningful message by text message or by post or by hand delivery.

[0123] This has the advantage of preventing a third party from bringing together the altered file and the meaningful message to obtain the original file, and of bringing together the main components of the meaningful message.

[0124] All or part of the significant message and / or the altered file are advantageously provided with a means of controlling their own integrity, such as a hash, a checksum for example, and / or a digital signature making it possible to guarantee their non-repudiation and, where appropriate, to authenticate their author.

[0125] VII- Recommended encryption method

[0126] Advantageously, the method of encrypting a set of data called the original file which is used comprises the following steps: 1. design of an algorithm called an alteration algorithm which modifies or deletes one or more selected parts of the information of said original file, hereinafter called original information, to obtain a set of data called an altered file containing information called altered information, said alteration algorithm being reversible in the sense that there is an algorithm called an inverse algorithm making it possible to replace in said altered file said altered information with said original information, 2. modification of all or part of said original file, by said alteration algorithm, to obtain said altered file, 3. calculation of an information element called a meaningful message containing said inverse algorithm or a means of obtaining it, characterized in that the choice of said original information is such that their replacement by other data different from said original information results in a plausible data set different from said original file.

[0127] Decrypting an encrypted file by the brute force method consists of imagining a very large number of decryption keys and trying to decrypt the file in question by numerous successive attempts made with each of these imagined decryption keys.

[0128] Decryption is considered successful when a solution is obtained plausible, the word plausible meaning above and below something that can be held to be true, or acceptable, or admissible, or credible, or believable, or imaginable, or possible, or probable, or admissible, or valid, or likely. This could for example be an identity photograph if the encrypted file is an encrypted photo, or the text of a contract if it is a contract.

[0129] If the decryption results in an implausible solution, it is considered a failure.

[0130] If it results in a plurality of plausible solutions, the best quantum artificial intelligence cannot determine which is the correct solution.

[0131] This recommended encryption method is based on the principle of making a prior modification of the encrypted information such that a decryption attempt results in an incorrect or simply different solution, or that several decryption attempts result in plausible solutions between which the decryption method cannot choose which is the correct one.

[0132] The alteration algorithm modifies or deletes one or more selected parts of the information in said original file, to reduce its significant value. The person skilled in the art knows very well what the important information in an image or text, and in general in any file containing information, is and can select it. He can then either modify it or simply delete it.

[0133] In the case where a modification is a deletion of information, the attempt at decryption consists of trying to replace the deleted parts with imagined information allowing plausible solutions to be reached, and we find ourselves in the same case as in that of a modification which is not a deletion of information, in the sense that brute force seeks numerous solutions allowing the original file to be found.

[0134] The alteration algorithm must be reversible, in the sense that there must be an algorithm called an inverse algorithm allowing the altered information to be replaced in the altered file by the original information, but this is the case for all encryption algorithms which must allow decryption.

[0135] This inverse algorithm can be described in clear text in an information element called a meaningful message, but it can also be recorded on a computer or in a memory, and in this case the meaningful message can only contain the reference or the address at which this algorithm can be obtained. This inverse algorithm can obviously also be a decryption key.

[0136] For maximum efficiency, the modification of the original file made by the alteration algorithm concerns essential data 1- to make it more difficult to understand or more difficult to use for the use case for which it is intended, that is to say on data without which the file altered no longer has any use for the desired objective, 2- and so that the replacement of this selected information by other data produces a plausible file.

[0137] The alteration algorithm is therefore advantageously established after an analysis of the original file to discover its nature and select the original information to be deleted or modified.

[0138] Such an operation is accessible to those skilled in the art, but can advantageously be entrusted to an artificial intelligence specially trained for this.

[0139] The meaningful message may also contain information deleted or modified from said original file by the alteration algorithm. This deleted or modified information may also be integrated into a data set to which said meaningful message provides access.

[0140] This information may be the title of the protected information or some of its essential characteristics. For example, it may be all the variable information inserted in a form. This makes it possible, for example, to sign and communicate identities or certificates to third parties, who may, if necessary, obtain additional information, such as an identity photo or a certified copy of a contract, by submitting the meaningful message to the competent server.

[0141] In the case where the original file is the description of a security marking characterized by a series of pixels characteristic of color, and / or brightness, and / or light reflection varying or not depending on the point of view and / or the lighting conditions, the alteration algorithm can be very simple since any modification or deletion of data is essential, and any solution can be plausible.

[0142] In the case where the original file is a descriptive file of an object or a person, the alteration algorithm advantageously includes the modification or deletion of dimensional values ​​of the object or person considered.

[0143] In the case where the original file includes an image such as a drawing, a photograph or a video of an object or a person, the alteration algorithm advantageously includes one or more deformations of the image considered and / or a combination between said image and another image.

[0144] In the case where the original file includes words and / or digital data, for example a text such as the description of a method or a device, a contract, a prescription, a report, a press article, the alteration algorithm advantageously includes the replacement of certain of said words and / or said digital data by other different words and / or digital data, advantageously mentions essential to the interpretation or understanding of the text considered.

[0145] In the case where the original file is a key controlling access to a domain Whether physical or digital, a solution can be considered plausible as long as it provides access, even if the domain is not the correct one. It is advantageous if the physical or digital domains to which access can be given by a brute-force decryption attempt resemble those to which the original file provides access so that the corresponding solutions are considered plausible.

[0146] Advantageously, the alteration algorithm successively comprises one or more alterations according to at least two of those described above in paragraphs 141 to 145.

[0147] Advantageously, more than a hundred decryption attempts should result in different plausible solutions, but an improved version of the present method can also be such that several thousand decryption attempts result in different plausible solutions.

[0148] The present invention is also a data set protected by an encryption method according to one of the recommended methods described above.

[0149] It is also an algorithm for altering an original file consisting of modifying all or part of this original file, according to any one of the methods described above, and a decryption method such as those described above.

[0150] VII CONCLUSION

[0151] The invention is also an identification system comprising: - data sets hereinafter referred to as altered files, relating to natural or legal persons known as holders, - a database of algorithms known as reverse algorithms for decrypting said altered files, - elements known as significant messages, comprising an identifier of one of said holders and a means of decrypting the altered file of said holder in question, for example an identifier of said inverse algorithm, - and software called an identification application controlling a means of acquiring biometric characteristics or any identification element of said holder in question, characterized in that it implements one of the identification methods set out above.

[0152] The present invention makes it possible to generalize the digital identity of natural and legal persons and to offer a secure, universal and privacy-friendly solution.

[0153] This approach guarantees individuals control over their biometric information, significantly reduces the risks of identity theft or unauthorized use, and significantly reduces any risks incurred by third parties by fraudsters who have usurped the identity of a natural or legal person. Applications

[0154] The main applications are digital identity, the holder of which can keep only a string of characters, presented in any form such as a barcode, in printed or electronic form to identify himself, as well as to guarantee the origin of any document or internet page.

[0155] The methods described above apply to

[0156] The main applications of the methods set out above are mainly the conservation or transmission of all data requiring confidentiality. They can be applied to all forms of files representing images, music, videos, software, graphics, engineering plans, texts such as medical prescriptions, medical examination reports, expert reports, contracts, purchase orders, invoices, payment orders, certificates and attestations of all kinds, etc. which become easily authenticated by their recipients,

[0157] They also apply to the protection of software, music or video on demand services, newspapers and magazines, video games, means of controlling connected objects, and generally to the security of all types of large or sensitive data.

Claims

Claims

1. Identification method implementing: - data sets hereinafter referred to as altered files, obtained by alteration of a file called the original file by an algorithm called the alteration algorithm, said original file relating to natural or legal persons called holders, - a database of algorithms called reverse algorithms making it possible to decrypt said files altered by said alteration algorithm, - elements called significant messages, comprising an identifier of one of said holders and a means making it possible to decrypt the altered file of said holder in question, for example an identifier of said reverse algorithm, - and software called an identification application controlling a means of acquiring biometric characteristics or any identification element of said holder in question,characterized in that said identification application - carries out an acquisition of biometric characteristics or any identification element of said holder, - sends said acquisition to a computer called an identity server as well as said identifiers of the holder and said inverse algorithm, so that said identity server can decrypt or provide the means to decrypt said altered file in question, and compare the result with said acquisition of biometric characteristics or any identification element of said holder, and validate or not the identity of said holder.,

2. Identification method according to claim 1 characterized in that the means for decrypting said altered file is only provided to a person or computer responsible for decryption after verification that said person or computer is indeed authorized to decrypt said altered file.

3. Identification method according to any one of the preceding claims, characterized in that one or more so-called complementary files can be recorded and be accessible by the alteration algorithm and / or by the altered file and / or by the significant message or a combination of several of these three elements.

4. An identification method according to any one of the preceding claims. characterized in that the decryption of said altered file can only be carried out by a secure computer which confidentially keeps said altered file and / or said alteration algorithm and / or said reverse algorithm.

5. Identification method according to any one of the preceding claims, characterized in that it comprises the reception by a server of a set of data called the attempt file and the comparison between said attempt file with data obtained by combining said altered file and said significant message, and the sending to a designated third party of the result of this comparison without sending them either said original file or said attempt file.

6. Identification method according to any one of the preceding claims, characterized in that information deleted or modified from said original file by said alteration algorithm is integrated into said significant message or into a data set to which said significant message allows access.

7. Identification method comprising a method for encrypting a set of data called the original file comprising the following steps:

1. designing an algorithm called the alteration algorithm which modifies or deletes one or more selected parts of the information of said original file, hereinafter called original information, to obtain a set of data called the altered file containing information called altered information, said alteration algorithm being reversible in the sense that there is an algorithm called the reverse algorithm making it possible to replace in said altered file said altered information with said original information, 2. modification of all or part of said original file, by said alteration algorithm, to obtain said altered file, 3.calculation of an information element called a meaningful message containing said inverse algorithm or a means of obtaining it, characterized in that the choice of said original information is such that their replacement by other data different from said original information results in a plausible data set different from said original file.

8. Identification method according to claim 7 characterized in that said alteration algorithm is established after an analysis of said original file to discover its nature and select said information originals.

9. Encryption method according to any one of claims 7 or 8, said original file comprising an image, characterized in that said alteration algorithm comprises one or more deformations of said image, and / or a combination between said image and another image.

10. Identification system comprising: - sets of data hereinafter referred to as altered files, relating to natural or legal persons referred to as holders, - a database of algorithms referred to as reverse algorithms making it possible to decrypt said altered files, - elements referred to as significant messages or digital identity cards, comprising an identifier of one of said holders and an identifier of said reverse algorithm making it possible to decrypt the altered file of said holder in question, - and software referred to as an identification application controlling a means of acquiring biometric characteristics or any identification element of said holder in question, characterized in that it implements one of the identification methods according to any one of the preceding claims.

Images