Method and device for archiving a document

METHOD AND DEVICE FOR FILING OF DOCUMENT

The present invention relates to a method and an encryption device of a document. It applies in particular to the confidential archive or secret documents for retrieval by their rightful owner and confidential transmission of documents to a recipient.

We know many ciphers, symmetric key or asymmetric key pairs (eg in accordance with the PKI public key infrastructure, acronym for "Public Key

Infrastructure "). However, these encryption methods are not adapted to ensure both a high level of document security and an opportunity to retrieve documents if keys are lost (eg in case of death of the owner or decision court to recover).

The present invention aims to remedy these drawbacks. To this end, the present invention discloses a method of archiving a document by a user comprising a step of enciphering the document with a symmetric key and a step of transmitting said encrypted document to an archiving operator, characterized in that it further comprises a step of transmitting the symmetric key encrypting said document to a receiver operator separate from the archiving operator. Advantageously, the method of the invention further comprises a step of encrypting the symmetric key with a key of an asymmetric key key pair.

Advantageously, the method of the invention comprises a step of generating said symmetric key for each document to be encrypted. Advantageously, the symmetric key is different for each document to be encrypted. Advantageously, during the encryption step with the asymmetric key, said asymmetric key is the public key of the user who transmitted the said document.

Advantageously, during the encryption step with the asymmetric key, said asymmetric key is the public key of a recipient user of the document.

Advantageously, the method of the invention further comprises a step of deleting the encrypted document and storage of the symmetric key by the computer system performing the encryption steps. Advantageously, the method of the invention further comprises a step of transmission by the archiving operator to the user of the encrypted document, a step of transmission by said user receiver operator of the symmetric key encryption of the document encrypted and a decryption step of said user of said encrypted document with said symmetric key.

Advantageously, the method of the invention further comprises a step of transmission by the archiving operator to an authorized third party the encrypted document, a step of transmitting by the receiver operator to said authorized third party to the symmetric key encryption encrypted document and a decryption step of said authorized third said encrypted document with said symmetric key.

The invention also discloses a document by a user's archive device comprising a module adapted to encrypt said document with a symmetric key and a module adapted to transmit said encrypted document to an archiving operator, characterized in that further comprising a transmission module of the symmetric key encryption of the document to an operator of receiver separate from the archiving operator.

Advantageously, the device of the invention further comprises an encryption module of the symmetric key with a key of an asymmetric key key pair. Advantageously, the device of the invention further comprises a generation of said symmetric key means for each document to be encrypted.

Advantageously, the symmetric key is different for each document to be encrypted.

Advantageously, the device of the invention further comprises a module adapted to perform the transmission by the archiving operator the user of the encrypted document, a module adapted to perform the transmission by the operator of the receiver of said user symmetric encryption key of the encrypted document and a module capable of performing decryption by said user of said encrypted document with said symmetric key.

Advantageously, the device of the invention further comprises a module adapted to perform transmission by the archiving operator to an authorized third of the encrypted document, a module capable of performing transmission by the operator escrow audit ability of third the symmetric encryption key of the encrypted document and a module capable of performing decryption by the third authority said encrypted document with said symmetric key.

The advantages, specific objects and features of this device are similar to those of the method object of the present invention, as outlined above, they are not repeated here.

Other advantages, objects and features of the present invention will emerge from the following description given in an explanatory and not limiting, with respect to the accompanying drawings, wherein:

- Figure 1 shows schematically a first embodiment of a particular object of the present invention device adapted to the case in which the issuer is also the recipient of the document Treaty

- Figure 2 shows, in the form of a flowchart, a first embodiment of the process object of the present invention adapted to a transmission of a document, adapted to the case in which the transmitter is also the recipient of the treaty document and does not have a personal key pairs,

- Figure 3 shows schematically a second embodiment of an object of the present invention device, adapted to the case wherein the transmitter and the processed document recipient are distinct,

- Figure 4 shows in the form of a flowchart, a second particular embodiment of the process object of the present invention adapted to a personal archive a document adapted to the case wherein neither the transmitter nor the recipient have a personal key pairs,

- Figure 5 shows in the form of a flowchart, a third particular embodiment of the process object of the present invention adapted to a transmission of a document adapted to the case wherein the transmitter is also the recipient and has a personal key and bi-

- Figure 6 shows in the form of a flowchart, a fourth embodiment of the method of the present invention adapted to a personal archive of a document suitable for the case in which the sender and the recipient have a bi- key staff.

Is observed in Figure 1, an agency / scheduling authority and certification 105, an operator of receiver 110, a transmission operator 120 and an archiving operator 145. A first user, also known by the user following "transmitter "implements terminal

125 to interact with the agency 105.

The agency / scheduling and certification authority 105, the operator of receivership in January 10, the transmission operator 120 and the archiving operator

145 put, generally, employ servers (not shown) that communicate between them via computer networks (not shown), for example, the Internet. For each archiving or document transmission, it is, in accordance with the present invention, makes use of a symmetric key. This symmetric key is preferentially allocated to the transmitting user for each document it transmits or archive. As seen in Figure 2, to perform an encrypted archive of a document if the issuer does not have a key pair, the terminal 125 transmits the document unencrypted, to the scheduling and agency certificate 105, in a step 205.

In a step 210, the agency 105 generates a symmetric encryption key. Alternatively, the terminal 125 of the emitter user who provides this symmetric encryption key to the agency 105.

Then, during a step 215, the agency 105 transmits the document and the symmetric key the operator to receiver 1 10. During a step 220, the agency 105 transmits this symmetric key to the private office management "BPG" of the sender user. The private management office is a space made available to a user by a Community Application Provider, here confused with the agency 105, and at least protected by a username and a password known only to the user.

During a step 225, the operator of receiver 1 10 performs encrypting the document with the symmetric key received in step

215. In a step 230, the operator receiver 110 retains the symmetric key and transmits the document encrypted with a symmetric key, the archiving operator who performs a second encryption with its own private key, the already encrypted document with the symmetric key and stores the document doubly encrypted.

In a step 235, the escrow operator returns to the agency 105 the encrypted document with the symmetric key and a checklist of encryption justification, justifying the realization of all the steps required to perform the encryption. In a step 240, the agency 105 controls the encryption justification destroys the unencrypted document and the symmetric key and is destroying the unencrypted document kept by the third receiver 110.

In a step 245, the agency 105 timestamps of the encrypted document and the encryption justification.

In a step 250, the agency 105 transmits an acknowledgment and encryption stamped certification in escrow operator1 10 and the operator of receivership in January 10 retains this acknowledgment and certification as well as the symmetric key of the sender user but destroyed the encrypted document.

In a step 255, the agency 105 transmits the document encrypted transmission operator 120. During a step 260, the transmission operator 120 puts the encrypted document in the correspondence current account of 'transmitter. In a step 265, the transmission operator 120 returns to the agency 105, through the trusted third party on January 15, a checklist of the investment justification of the encrypted document into account correspondence course of the transmitter. This justification is the successful completion of all steps related to the placement of the encrypted document in the user's correspondence current account issuer.

In a step 270, the agency 105 transmits to the transmission operator 120 a time-stamped transmission certificate.

To read the document, during a step 275, the sender accesses the symmetric key and, during a step 280, the sender decrypts the encrypted document. The steps 275 and 280 are optionally made through third receiver with time stamp and transmission to the agency 105 of a summary list decryption justification.

If necessary, for instance for judicial training operations and / or on commission, during a step 285, the symmetric key retained by the escrow operator and the encrypted document kept by the archiving operator are transmitted to a third party decrypts the encrypted document with the symmetric key.

Thus, in the case of personal archiving (the sender and the recipient of the document are merged) in which the issuer has no key pairs, the document is encrypted with a symmetric key exclusively assigned to this document. The symmetric key used to encrypt the document remains in the escrow third and kept by the sender of the document in its private management office.

The document encrypted by the symmetric key at the third receiver is sent to the third archiving (eg Third Operator Trust) that performs a second encryption with its private key for legal archiving.

If the issuer wants to decrypt and view clear his paper, he can do her private management office, which is secure. Either he has retained in this private management office, the symmetric key received in step 220 and the encrypted document available in its correspondence current account and decryption is done simply in its private management office, based of these two elements.

Is the third archiving sends the document decrypted with the public key but still encrypted with a symmetric key, the Community Application Provider that manages the private management office of the issuer. Thus, the sender can decrypt the document by performing a decryption with a symmetric key associated with this document, in its private management office.

Alternatively, the third archiving sends the document doubly encrypted Community Application Provider. Thus, the sender can decrypt the document by performing, first decryption with the public key of the operator and trusted third party with the symmetric key held in his office for this item read the document.

If commission or notarial procedure (death, guardianship ...), it is still possible to ask the third receiver to decrypt the document without intervention by the sender of the document. Indeed, as we have seen, the receiver has a third symmetric key dedicated to sufficient document to decipher.

It is observed in Figure 3, an agency / scheduling and certification authority 105, an operator of receiver 110, a transmission operator 120, and an archiving operator 145. A first user, also known by the following user " issuer "is implementing a terminal 125 to interact with the agency 105. a second user, also referred to as" recipient "user, is implementing a terminal 130 to interact with the transmission operator 120. Note that in figures 4 and 6, it was considered that the sender and recipient were related to the same operator of transmission and the same agency. In case they are linked to different operators and agencies, the steps for encrypted documents mentioned in these figures, for the transmission operator and to the agency, would be carried out in parallel and separately by the two operators and two concerned agencies.

As seen in Figure 4, to perform an encrypted document transmission from a sender to a recipient, the terminal 125 transmits the document unencrypted, to the scheduling and certification agency 105, in the course of a step 305.

In a step 310, the agency 105 generates two different symmetric encryption keys for, respectively, the sender and recipient.

Then, during a step 315, the agency 105 transmits the document and the symmetric keys in escrow operator 1 10. During a step 320, the agency 105 transmits the symmetric key of the issuer the private management office "BPG" user transmitter and the symmetric key of the recipient transmitter private office of destination management.

In a step 325, the operator of receivership in January 10 performs the encryption of the document with each of the symmetric key received in step 315. In a step 330, the operator of receivership in January 10 retains the symmetric key and transmits the documents, encrypted with symmetric keys, the archiving operator who performs a second encryption with its own private key, already encrypted documents with the symmetric keys and retains the doubly encrypted documents. In a step 335, the escrow operator returns to the agency 105 documents encrypted with symmetric keys and a checklist of encryption justification, justifying the realization of all the steps required to perform the encryption.

In a step 340, the agency 105 controls the encryption justification destroys the unencrypted document and the symmetric keys and made destroy the unencrypted document kept by the third receiver 110.

In a step 345, the agency 105 timestamps of the encrypted document and the encryption justification.

In a step 350, the agency 105 transmits an acknowledgment and encryption stamped certification the operator receivership Jan. 10 and the operator of receivership in January 10 retains this acknowledgment and certification as well as symmetric keys but destroyed documents encrypted.

During a step 355, the agent 105 transmits the encrypted documents to the transmission operator 120. During a step 360, the transmission operator 120 puts the document encrypted with the symmetric key of the sender in the correspondence current account of the issuer. In step 360, the transmission operator 120 also puts the encrypted document with the recipient's symmetric key in the recipient's correspondence current account. In a step 365, the transmission operator 120 returns to the agency 105, through the trusted third party on January 15, a checklist of the investment justification encrypted documents in current correspondence accounts. This justification is the successful completion of all stages of the offering encrypted documents in current correspondence accounts. In a step 370, the agency 105 transmits to the transmission operator 120 a time-stamped transmission certificate.

To read the document, during a step 375, the sender accesses its symmetric key and decrypts the encrypted document. Step 375 is optionally carried through the third receiver with time stamp and transmission to the agency 105 of a summary list decryption justification.

To read the document, in a step 380, the receiver accesses its symmetric key, through the third receiver, and the encrypted document, and decrypts the encrypted document. At the end of this operation are performed a timestamp and a transmission to the agency 105 of a summary list decryption justification.

If necessary, for instance for judicial training operations and / or on commission, during a step 385, one of the symmetric key retained by the escrow operator and the corresponding encrypted document kept by the 'archiving operator are transmitted to a third party decrypts the encrypted document with the symmetric key.

In a variant of embodiment illustrated in Figure 4, the two symmetric keys are identical. As seen in Figure 5, to perform an encrypted archive of a document where the issuer has a key pair, the terminal 125 transmits the document unencrypted, to the scheduling and certification agency 105 , in a step 405.

In a step 410, the agency 105 generates a symmetric encryption key. Alternatively, the terminal 125 of the emitter user who provides this symmetric encryption key to the agency 105.

Then, during a step 415, the agency 105 transmits the document, the symmetric key and the public key of the transmitter to the receiver operator 1 10. In a step 420, the agency 105 transmits this symmetric key to the private management office "BPG" of the sender user. During a step 425, the operator of receiver 1 10 performs encrypting the document with the symmetric key received in step

415 and encrypting the symmetric key with the public key of the issuer.

In a step 430, the operator of receivership in January 10 retains the symmetric key and transmits the document encrypted using the symmetric key and the symmetric key encrypted with the public key of the issuer, archiving operator which performs a third encryption, with its own private key, the document already encrypted with a symmetric key and the symmetric key encrypted with the public key of the issuer retains the document doubly encrypted and doubly encrypted key.

In a step 435, the escrow operator returns to the agency 105 document encrypted with a symmetric key, the symmetric key encrypted with the public key of the issuer and a checklist of justification encryption, which justifies the realization of all the steps required to perform the encryption.

In a step 440, the agency 105 controls the encryption justification destroys the unencrypted document and the symmetric key and is destroying the unencrypted document kept by the third receiver 110.

In a step 445, the agency 105 timestamps of the encrypted document and the encryption justification.

In a step 450, the agency 105 transmits an acknowledgment and encryption stamped certification in escrow operator1 10 and the operator of receivership in January 10 retains this acknowledgment and certification as well as the symmetric key of the encrypted transmitter user but destroyed the document encrypted and non-encrypted symmetric key.

During a step 455, the agent 105 transmits the encrypted document and the encrypted symmetric key to the transmission operator 120. During a step 460, the transmission operator 120 puts the encrypted document and the key symmetric encrypted in the correspondence current account of the issuer. During a step 465, the transmission operator 120 returns to the branch 105, through the third Confidence 1 15, a checklist justification for placing the encrypted document and the symmetric key encrypted behalf of the issuer correspondence current. This justification is the successful completion of all steps related to the placement of the encrypted document and the symmetric encrypted key in the correspondence current account of the issuer user.

In a step 470, the agency 105 transmits to the transmission operator 120 a time-stamped transmission certificate.

To read the document, during a step 475, the sender accesses the encrypted symmetric key, decrypts it with its private key and, during a step 480, the sender decrypts the encrypted document. The steps 475 and 480 are optionally made through third receiver with time stamp and transmission to the agency 105 of a summary list decryption justification.

If necessary, for instance for judicial training operations and / or on commission, during a step 485, the encrypted symmetric key retained by the escrow operator, the encrypted document kept by the operator archiving and private key held by a trusted third party (not shown) are transmitted to a third party decrypts the encrypted document with the symmetric key after deciphering the symmetric key with the private key of the issuer.

Alternatively, in step 450, the encrypted symmetric key is not retained by the escrow operator and, in step 485, the receiver operator transmits the unencrypted symmetric key third charge of decryption . Note that the sender can view the document in two ways.

Either he asks the third party archiving repatriate her private management office only document encrypted with a symmetric key which it holds twice in the same office. With the second symmetric key, he can read the encrypted document in its private management office. The transmitter can also ask the third party archiving to transfer his work station throughout the document encrypted by the symmetric key, and the symmetric key encrypted by the public key. A lot of reception of both costed, it first decrypt the symmetric key with its own private key. Then it uses the decrypted symmetric key to decrypt the encrypted document. There are also, for the Safe Citizen, another possibility is to retain the operator receiver and not by the private management office of the issuer, the symmetric key. However, in this case, the issuer may not use its private management office to decrypt the document because it does not have the symmetric key needed. By cons, it may request the transfer of the encrypted document and the encrypted symmetric key on the workstation to read the whole first using its private key to decrypt the symmetric key used to decrypt the document.

This is preferentially retained in the event that the participant has a national identity card digital operating with a safe electronic citizen.

As seen in Figure 6, to perform an encrypted transmission of a document to a recipient where the sender and the recipient have key pairs, the terminal 125 transmits the unencrypted document to the agency of scheduling and certification 105, in a step 505.

In a step 510, the agency 105 generates two symmetric encryption keys for, respectively, the sender and recipient. Alternatively, the terminal 125 of the emitter user who provides this symmetrical encryption keys to the agency 105. Then, during a step 515, the agency 105 transmits the document, symmetric keys and public key of the sender and receiver to receiver operator 1 10. in a step 520, the agency 105 transmits these symmetric keys to private management offices "BPG", respectively of transmitter and recipient. In a step 525, the operator of receivership in January 10 performs encryption of the document with each symmetric key received during step 515 and encryption symmetric key with the public keys of the sender and recipient respectively. In a step 530, the operator of receivership in January 10 retains the symmetric key and transmits the encrypted documents with the symmetric key and the symmetric key encrypted with the public key of the sender and recipient, the operator of archiving that performs a third encryption, with its own private key, already encrypted documents with the symmetric keys and symmetric keys encrypted with the public key and keeps the records doubly encrypted and doubly encrypted keys. In a step 535, the escrow operator returns to the agency 105 documents encrypted with symmetric keys, symmetric keys encrypted with the public keys of the users and a checklist of encryption justification, justifying the realization of all the steps required to perform the encryption. In a step 540, the agency 105 controls the encryption justification destroys the unencrypted document and the symmetric keys.

In a step 545, the agency 105 timestamps encrypted documents and encryption justification.

In a step 550, the agency 105 transmits an acknowledgment and encryption stamped certification in escrow operator1 10 and the operator of receivership in January 10 retains this acknowledgment and certification but destroyed Encryption and unencrypted symmetric keys.

In a step 555, the agency 105 transmits the encrypted documents and symmetric keys encrypted transmission operator 120. During a step 560, the transmission operator 120 puts the encrypted documents and keys symmetrical figures in the correspondence current accounts respectively of the sender and the recipient. During a step 565, the transmission operator 120 returns to the branch 105, through the third Confidence 1 15, a justification a checklist of the investment encrypted documents and symmetric keys encrypted streams of correspondence accounts.

In a step 570, the agency 105 transmits to the transmission operator 120 a time-stamped transmission certificate. To read the document, during a step 575, the sender accesses the encrypted symmetric key, decrypts it with its private key and decrypts the encrypted document available in its account of correspondence. Step 575 is optionally carried through the third receiver with time stamp and transmission to the agency 105 of a summary list decryption justification.

To read the document, during a step 580, the sender accesses the encrypted symmetric key, decrypts it with its private key and decrypts the encrypted document available in its account of correspondence. Step 580 is optionally performed via the third receiver with time and transmission to the agent 105 of a summary list decryption justification.

If necessary, for instance for judicial training operations and / or on commission, during a step 585, an encrypted symmetric key retained by the escrow operator, the corresponding encrypted document, kept by the archiving operator and the corresponding private key, stored by a trusted third party (not shown) are transmitted to a third party decrypts the encrypted document with the symmetric key after deciphering the symmetric key with the private key of a user . Alternatively, in step 550, the unencrypted symmetric keys are kept by the escrow operator and, in step 485, the receiver operator transmits these symmetric keys unencrypted third charge decryption.

It is observed that the present invention creates a safe personal documents including the private key can be stored in an electronic identity card. and The user can save copies of its identity papers, its degrees, its insurance, its payroll, its tax and social security returns, for example.