DEVICE AND METHOD FOR AUTHENTICATING A USER OF A FIRST ELECTRONIC DEVICE CONNECTED TO A SECOND ELECTRONIC DEVICE

20230237139 · 2023-07-27

    Inventors

    Cpc classification

    International classification

    Abstract

    Authentication of a user of a first electronic device, such as a communication terminal or a virtual or augmented reality headset. The first electronic device is connected to a second electronic device, the first electronic device and the second electronic device being separately portable by the user. The authentication device includes an analyser capable of checking whether a detected value of a relative characteristic parameter of the second electronic device corresponds to a stored value of this relative characteristic parameter of the second electronic device associated with an identifier of a user requiring an authentication, the relative characteristic parameter corresponding to the characteristic parameter of the second electronic device measured relative to the characteristic parameter of the first electronic device.

    Claims

    1. An authentication device for authenticating a user of a first electronic device connected to a second electronic device, the first electronic device and the second electronic device being separately portable by the user, the authentication device comprising: a processor; and a non-transitory computer readable medium comprising instructions stored thereon which when executed by the processor configure the device to check whether a detected value of a relative characteristic parameter of the second electronic device corresponds to a stored value of this relative characteristic parameter of the second electronic device associated with an identifier of the user requesting an authentication, with the relative characteristic parameter corresponding to the characteristic parameter of the second electronic device measured relative to a characteristic parameter of the first electronic device.

    2. The authentication device as claimed in claim 1, wherein the instructions configure the device to check whether a series of detected values of the relative characteristic parameter of the second electronic device corresponds to a series of stored values of this relative characteristic parameter of the second electronic device associated with an identifier of the user requesting authentication.

    3. The authentication device as claimed in claim 1, wherein the instructions configure the device to check the values of a plurality of relative characteristic parameters of at least one second electronic device.

    4. The authentication device as claimed in claim 1, wherein the authentication device comprises at least one device from among devices for providing the relative characteristic parameter of the second electronic device, consisting of: a detector for detecting the relative characteristic parameter of the second electronic device; a receiver for receiving a detected value of the relative characteristic parameter of the second electronic device originating from a detector for detecting the relative characteristic parameter of the second electronic device implemented in the second electronic device; a receiver for receiving a detected value of the relative characteristic parameter of the second electronic device originating from a detector for detecting the relative characteristic parameter of the second electronic device implemented in the first electronic device; a computer for computing a detected value of the relative characteristic parameter of the second electronic device comprising: a receiver for receiving the detected value of the characteristic parameter of the second electronic device originating from the second electronic device and a detected value of the characteristic parameter of the first electronic device originating from the first electronic device; and a basic computer configured to determine a value of the relative characteristic parameter of the second electronic device as a function of the received detected value of the characteristic parameter of the second electronic device and of the received detected value of the characteristic parameter of the first electronic device.

    5. The authentication device as claimed in claim 4, wherein the authentication device comprises the detector and the detector comprises: a controller configured to command at least one remote sensor for detecting values of the characteristic parameter of a remote device, with the sensor being implemented in the remote device.

    6. The authentication device as claimed in claim 4, wherein the authentication device comprises the detector and the detector comprises: a sensor capable of measuring a value of the relative characteristic parameter of the second electronic device.

    7. The authentication device as claimed in claim 1, wherein the relative characteristic parameter is made up of at least one of the following characteristic parameters: relative position of the second electronic device relative to the first electronic device; relative distance of the second electronic device relative to the first electronic device; relative orientation of the second electronic device relative to the first electronic device; relative speed of the second electronic device relative to the first electronic device; relative acceleration of the second electronic device relative to the first electronic device.

    8. The authentication device as claimed in claim 1, wherein the first electronic device is made up of one from among the following main portable devices: a portable communication terminal; a tablet; a portable console; a virtual reality headset; an augmented reality headset.

    9. The authentication device as claimed in claim 1, wherein the second electronic device is made up of one from among the following secondary portable devices: a portable peripheral; a portable connected object; a virtual reality joystick; an augmented reality joystick.

    10. A first electronic device of a user, with the first electronic device of the user being connectable to a second electronic device, with the first electronic device and the second electronic device being separately portable by the user, the first electronic device comprising: a processor; and a non-transitory computer readable medium comprising instructions stored thereon which when executed by the processor configure the device to authenticate by checking whether a detected value of a relative characteristic parameter of the second electronic device corresponds to a stored value of this relative characteristic parameter of the second electronic device associated with an identifier of the user requesting an authentication, with the relative characteristic parameter corresponding to the characteristic parameter of the second electronic device measured relative to a characteristic parameter of the first electronic device.

    11. A method for authenticating a user of a first electronic device connected to a second electronic device, with the first electronic device and the second electronic device being separately portable by the user, the authentication method being implemented by an authentication device and comprising: checking whether a detected value of a relative characteristic parameter of the second electronic device corresponds to a stored value of this relative characteristic parameter of the second electronic device associated with an identifier of the user requesting an authentication, with the relative characteristic parameter corresponding to the characteristic parameter of the second electronic device measured relative to a characteristic parameter of the first electronic device.

    12. A method for registering a user of a first electronic device connected to a second electronic device, with the first electronic device and the second electronic device being separately portable by the user, the registration method comprising: storing, in combination with an identifier of the user, at least one value of a relative characteristic parameter of the second electronic device, with the relative characteristic parameter corresponding to the characteristic parameter of the second electronic device measured relative to a characteristic parameter of the first electronic device.

    13. The registration method as claimed in claim 12, the registration method comprising: measuring at least one value of the relative characteristic parameter of the second electronic device, with the measured value being stored directly or indirectly.

    14. The registration method as claimed in claim 13, the registration method comprising: computing a statistical value of the relative characteristic parameter of the second electronic device, with the statistical value being stored.

    15. A non-transitory computer readable medium comprising a program stored there comprising program code instructions which when by a processor of an authentication device configure the authentication device to: authenticating a user of a first electronic device connected to a second electronic device, the first electronic device and the second electronic device being separately portable by the user, the authenticating comprising: checking whether a detected value of a relative characteristic parameter of the second electronic device corresponds to a stored value of this relative characteristic parameter of the second electronic device associated with an identifier of the user requesting an authentication, with the relative characteristic parameter corresponding to the characteristic parameter of the second electronic device measured relative to a characteristic parameter of the first electronic device.

    Description

    BRIEF DESCRIPTION OF THE DRAWINGS

    [0058] The features and advantages of the invention will become more clearly apparent from reading the description, which is provided by way of an example, and the corresponding figures, which show:

    [0059] FIG. 1, a simplified diagram of an authentication device according to the invention;

    [0060] FIG. 2a, a simplified diagram of a first implementation mode of the authentication device according to the invention;

    [0061] FIG. 2b, a simplified diagram of a second implementation mode of the authentication device according to the invention;

    [0062] FIG. 2c, a simplified diagram of a third implementation mode of the authentication device according to the invention;

    [0063] FIG. 3a, a simplified diagram of a first example of a characteristic parameter used by the authentication device according to the invention;

    [0064] FIG. 3b, a simplified diagram of a second example of a characteristic parameter used by the authentication device according to the invention;

    [0065] FIG. 3c, a simplified diagram of a third example of a characteristic parameter used by the authentication device according to the invention;

    [0066] FIG. 3d, a simplified diagram of a fourth example of a characteristic parameter used by the authentication device according to the invention;

    [0067] FIG. 4, a simplified diagram of a method for registering a user according to the invention;

    [0068] FIG. 5, a simplified diagram of an authentication method according to the invention.

    DESCRIPTION OF THE EMBODIMENTS

    [0069] FIG. 1 shows a simplified diagram of an authentication device according to the invention.

    [0070] The authentication device 1, 21 is a device capable of authenticating a user U of a first electronic device 2 connected to a second electronic device 3. The first electronic device 2 and the second electronic device 3 are separately portable by the user U. The authentication device 1, 21 comprises: [0071] an analyzer 11 capable of checking whether a detected value prc.sub.3/2_vd of a relative characteristic parameter of the second electronic device corresponds to a stored value prc.sub.3/2_vm of this relative characteristic parameter of the second electronic device associated with an identifier uid of a user U requesting authentication auth_req, with the relative characteristic parameter prc.sub.3/2 corresponding to the characteristic parameter pc.sub.3 of the second electronic device measured relative to the characteristic parameter pc.sub.2 of the first electronic device.

    [0072] In particular, the analyzer 11 is capable of checking whether a series of detected values {pcr.sub.3/2_vd(n)}.sub.n=1 . . . N of a relative characteristic parameter of the second electronic device corresponds to a series of stored values {pcr.sub.3/2_vm(n)}.sub.n=1 . . . N of this relative characteristic parameter of the second electronic device associated with an identifier uid of a user requesting authentication.

    [0073] In particular, the analyzer 11 is capable of checking the values {pcr.sub.3/2.sup.i_vd}.sup.i=1 . . . l, {pcr.sub.3/2.sup.i_vd (n)}.sub.n=1 . . . N.sup.i=1 . . . l of several relative characteristic parameters of at least one second electronic device 3.

    [0074] In particular, the stored value has been stored prior to the implementation of the authentication by the authentication device 1 and/or prior to an access request triggering authentication by the authentication device according to the invention.

    [0075] In particular, the stored value has been stored by a user register when initially accessing a product or service requesting authentication.

    [0076] In particular, the authentication device 1, 21 comprises at least one from among the devices 10 for providing a relative characteristic parameter of the second electronic device 2: [0077] a sensor 100.sub.D for detecting a relative characteristic parameter of the second electronic device; [0078] a receiver 100.sub.R for receiving a detected value prc.sub.3/2_vd of the relative characteristic parameter of the second electronic device, the receiver 100.sub.R receiving a value prc.sub.3/2_vd originating from a sensor 300.sub.D for detecting a relative characteristic parameter of the second electronic device implemented in the second electronic device 3; [0079] a receiver 100.sub.R for receiving a detected value prc.sub.3/2_vd of the relative characteristic parameter of the second electronic device, the receiver 100.sub.R receiving a value originating from a sensor 200.sub.D for detecting the relative characteristic parameter of the second electronic device implemented in the first electronic device 2; [0080] a computer 10.sub.R for computing a detected value prc.sub.3/2_vd of the relative characteristic parameter of the second electronic device comprising: [0081] a receiver 100.sub.R for receiving a detected value pc.sub.3_vd of the characteristic parameter of the second electronic device originating from the second electronic device 3 and a detected value pc.sub.2_vd of the characteristic parameter of the first electronic device originating from the first electronic device 2; and [0082] a basic computer 101.sub.R capable of determining a value pcr.sub.3/2_vd of the relative characteristic parameter of the second electronic device as a function of the received detected value pc.sub.3_vd of the characteristic parameter of the second electronic device and of the received detected value pc.sub.2_vd of the characteristic parameter of the first electronic device.

    [0083] In particular, the detector 10.sub.D comprises: [0084] a controller 102 capable of commanding cpt_cmd at least one remote sensor 200.sub.D, 300.sub.D for detecting values pcr.sub.3/2_vd of the characteristic parameter of a remote device 2, 3, with the sensor 200.sub.D, 300.sub.D being implemented in the remote device 2, 3.

    [0085] In particular, the detector 10.sub.D comprises: [0086] a sensor 100.sub.D capable of measuring a value pcr.sub.3/2_vd of the relative characteristic parameter of the second electronic device.

    [0087] FIG. 1 shows an example of a communication architecture implementing the invention,

    [0088] In this example, the authentication device 21, 1 of the invention is implemented either in a first electronic device 2 worn by a user U, or outside this device, for example, in a separate authentication device 1. The separate authentication device 1 is particularly either co-located with the first electronic device 2, or remote from this first electronic device. In the case of a separate remote authentication device 1, the authentication device 1 is connected to the first electronic device, in particular via a communication network 5.

    [0089] The second electronic device 3, also worn by the user U, is connected to the first electronic device 2 either by a wired route (particularly using a peripheral connection such as a USB or Ethernet connector), or by a local network (Bluetooth, Wi-Fi, etc.). Optionally, in the case of a separate remote authentication device 1, the second electronic device 3 is connected to the authentication device 1 via a communication network 5.

    [0090] The user U uses the first electronic device 2 to access a product or services, in particular to access the first electronic device, a third electronic device (not shown in FIG. 1), for example, a secure hard disk, a home automation management device, a TV decoder, also called Set Top Box, etc., which may or may not be local, or to a service such as a content provision service, a video on demand service, a document management service in a remote server (or cloud), an Internet site, an application, etc.

    [0091] For example, the product or the device implementing the service to which the first electronic device 2 requests access, in particular the first electronic device 2 as shown in FIG. 1, requests authentication auth_req, following an access request by the first electronic device 2, of the user U from the authentication device 1, 21 before access is granted.

    [0092] In particular, the authentication device 1, 21 comprises a controller 12, 102 capable of commanding cpt_cmd a measurement of at least one relative characteristic parameter pcr.sub.3/2. This command triggers cpt_cmd the activation of one or more detector(s), in particular: [0093] a sensor 100.sub.D of the authentication device 1 when it is implemented in the first electronic device 2 (with the sensor 100.sub.D then forming the sensor 200.sub.D of the first electronic device) or is co-located with the first electronic device 2; and/or [0094] a sensor 200.sub.D of the first electronic device 2; and/or [0095] a sensor 300.sub.D of the second electronic device 3.

    [0096] In particular, the one or more detector(s) 100.sub.D, 200.sub.D, 300.sub.D comprise one or more sensor(s) (not shown) as a function of the number and/or the type of characteristic parameters to be detected. For example, the sensor of the sensor 100.sub.D receives signals s.sub.3, s.sub.3/2 originating from the second electronic device 3, as shown in FIG. 1, and/or from the first electronic device 2 (not shown). These signals s.sub.3, s.sub.3/2 are particularly visual signals detected by a camera of the sensor 100.sub.D or are radio signals detected by a receiver, in particular a Bluetooth receiver, of the sensor 100.sub.D allowing the sensor 100.sub.D to determine, for example, the position pc.sub.3=pos.sub.3 and/or the distance pc.sub.3=d.sub.3 of the second electronic device 3 or even the position pc.sub.3/2=pos.sub.3/2 and/or the distance pc.sub.3/2=d.sub.3/2 of the second electronic device 3 relative to the first electronic device 2.

    [0097] The sensor 100.sub.D, 200.sub.D, 300.sub.D provides the authentication device 1, 21 with the detected value pc.sub.2_vd, pc.sub.3_vd of a characteristic parameter, or even with the detected value pcr.sub.3/2_vd of a relative characteristic parameter.

    [0098] When one of the detectors 200.sub.D, 300.sub.D is not implemented in the authentication device 1, 21, the authentication device 1, 21 comprises at least one receiver 100.sub.R receiving at least the one or more detected value(s) pc.sub.2_vd, pc.sub.3_vd of one or more characteristic parameter(s), or even the one or more detected value(s) pcr.sub.3/2_vd of one or more relative characteristic parameter(s) originating from the first electronic device 2 and/or the second electronic device implementing them.

    [0099] When the characteristic parameter pc.sub.2, pc.sub.3 for which the value pc.sub.2_vd, pc.sub.3_vd is detected is not a relative characteristic parameter pcr.sub.3/2 of the second electronic device, the authentication device 1, 21 comprises at least one basic computer 101.sub.R capable of determining, as a function of the received detected values pc.sub.2_vd, pc.sub.3_vd, the detected value pcr.sub.3/2_vd of the relative characteristic parameter of the second electronic device.

    [0100] In particular, the authentication device 1, 21 comprises a loader 10 for loading values of relative characteristic parameters, also called device for providing relative characteristic parameters of the second device. This loader 10 comprises the detector 10.sub.D and/or one or more receiver(s) 100.sub.R and/or a basic computer 101.sub.R. Optionally, the loader 10 comprises a computer 10.sub.R implementing one or more receiver(s) 100.sub.R and/or the basic computer 101.sub.R.

    [0101] For example, in the case whereby the invention uses only one relative characteristic parameter, the loader 10 comprises: [0102] either only a detector 10.sub.D capable of detecting the value pcr.sub.3/2_vd of a relative characteristic parameter; [0103] or a detector 10.sub.D capable of detecting the value pc.sub.2_vd of a characteristic parameter of the first electronic device and the value pc.sub.3_vd of a characteristic parameter of the second electronic device and a basic computer 101.sub.R; [0104] or one or more receiver(s) 100.sub.R capable of receiving the value pc.sub.2_vd of a characteristic parameter of the first electronic device originating from the first electronic device 2 and the value pc.sub.3_vd of a characteristic parameter of the second electronic device originating from the second electronic device 3 and a basic computer 101.sub.R (the receivers 100.sub.R and the basic computer 101.sub.R optionally being implemented in a computer 10.sub.R); [0105] or only a receiver 100.sub.R capable of receiving the value pcr.sub.3/2_vd of a relative characteristic parameter originating from the first electronic device 2 or the second electronic device 3.

    [0106] In the case whereby the invention uses several relative characteristic parameters, the loader 10 optionally comprises: [0107] either only a detector 10.sub.D capable of detecting the values {pcr.sub.3/2.sup.i_vd}.sup.i=1 . . . l of all the relative characteristic parameters; [0108] or several detectors 10.sub.D, with each detector being capable of detecting a value {pcr.sub.3/2.sup.i_vd}.sup.i of one or more of the relative characteristic parameter(s) from among the set of relative characteristic parameters such that the set of detectors 10.sub.D is capable of detecting the values {pcr.sub.3/2.sup.i_vd}.sup.i=1 . . . l of all the relative characteristic parameters; [0109] or one or more detector(s) 10.sub.D and one or more receiver(s) 10.sub.R, with each detector being capable of detecting a value {pcr.sub.3/2.sup.i_vd}.sup.i of one or more of the relative characteristic parameter(s) from among the set of relative characteristic parameters and each receiver being capable of receiving a value {pcr.sub.3/2.sup.i_vd}.sup.i of one or more of the relative characteristic parameter(s) from among the set of relative characteristic parameters, such that the set of detectors 10.sub.D and receivers 10.sub.R is able to provide the values {pcr.sub.3/2.sup.i_vd}.sup.i=1 . . . l of all the relative characteristic parameters; [0110] or one or more detector(s) 10.sub.D for detecting characteristic parameters or relative characteristic parameters and/or one or more receiver(s) 10.sub.R for receiving characteristic parameters or relative characteristic parameters, and, if applicable, one or more basic computers 101.sub.R, with each detector being capable of detecting a value {pc.sub.3.sup.i_vd}.sup.i, {pc.sub.2.sup.i_vd}.sup.i of one or more of the characteristic parameter(s) and/or a value {pcr.sub.3/2.sup.i_vd}.sup.i of one or more of the relative characteristic parameter(s) from among the set of relative characteristic parameters, with each receiver being capable of receiving a value {pc.sub.3.sup.i_vd}.sup.i, {pc.sub.2.sup.i_vd}.sup.i of one or more of the characteristic parameter(s) and/or a value {pcr.sub.3/2.sup.i_vd}.sup.i of one or more of the relative characteristic parameter(s) from among the set of relative characteristic parameters, and with each basic computer 101.sub.R being capable of determining a value {pcr.sub.3/2.sup.i_vd}.sup.i of one or more of the relative characteristic parameter(s) from among the set of relative characteristic parameters, such that the set of detectors 10.sub.D, receivers 10.sub.R and basic computers 101.sub.R is able to provide the values {pcr.sub.3/2.sup.i_vd}.sup.i=1 . . . l, etc., of all the relative characteristic parameters.

    [0111] The analyzer 11 then receives at least one value {pcr.sub.3/2.sup.i_vd(n)}.sub.n=1 . . . N.sup.i=1 . . . l of at least one relative characteristic parameter particularly provided by the loader 10 and/or the one or more detector(s) 10.sub.D and/or the computer 10.sub.R and/or the one or more receiver(s) 100.sub.R. The analyzer 11 particularly comprises a second search engine (not shown) capable of searching for one or more value(s) {pcr.sub.3/2.sup.i_vm(n)}.sub.n=1 . . . N.sup.i=1 . . . l of one or more stored relative characteristic parameters in combination with a user identifier uid.

    [0112] In particular, the authentication request auth_req received by the authentication device comprises a user identifier uid.

    [0113] Alternatively, the authentication device 1 comprises an identification message generator (not shown). The identification message is reproduced for the intention of the user by a reproduction interface of the authentication device and/or of the first electronic device 2 and/or of a third electronic device separate from the first electronic device (for example, loud speakers placed in the room where the user U is located, a television or computer screen when the user is wearing an augmented reality headset 2, or a smartphone 2). The user identifies themselves particularly by providing a vocal identifier. The authentication device 1 then particularly comprises a voice recognition device or a speech-to-text converter providing the user identifier uid.

    [0114] In another alternative, the authentication device comprises a first search engine (not shown) for searching for a user identifier previously stored with a terminal identifier.

    [0115] When the second electronic device transmits a terminal identifier with the authentication request, the first search engine extracts the terminal identifier from the authentication request auth_req and uses it to search for the user identifier uid stored in combination therewith (for example, in a user database 13).

    [0116] In particular, the user identifier was stored by a user register when initially accessing a product or service requesting authentication with the stored value of the relative characteristic parameter.

    [0117] Depending on the result of the check executed by the analyzer 11, the analyzer 11 may or may not provide an authentication message ok_auth. In particular, the authentication message ok_auth is able to trigger the access to the product or service requested by the user U.

    [0118] In particular, the analyzer 11 provides, when the detected and stored values do not match, an authentication failure message n_auth (not shown). The failure message particularly triggers the reproduction of a message intended for the user U: either an access failure message or an authentication failure message able to optionally allow a new authentication attempt.

    [0119] In particular, the authentication device 1 according to the invention is implemented in a device for providing access to a product or service (not shown).

    [0120] FIGS. 2a to 2c show different implementations of the authentication device according to the invention, in particular as shown in FIG. 1.

    [0121] In particular, the first electronic device 2 is made up of one from among the following main portable devices: [0122] a portable communication terminal; [0123] a tablet; [0124] a portable console; [0125] a virtual reality headset; [0126] an augmented reality headset.

    [0127] In particular, the second electronic device 3 is made up of one from among the following secondary portable devices; [0128] a portable peripheral; [0129] a portable connected object; [0130] a virtual reality joystick; [0131] an augmented reality joystick.

    [0132] In particular, the authentication device 1 according to the invention is adapted to the capabilities of the first electronic device of an immersive system (i.e., in particular of a virtual or augmented reality system, of a holographic or three-dimensional interactive system, etc.). Among the capabilities that can be exploited by the authentication device 1, the characteristic parameters are at least one of the following characteristic parameters: [0133] the position and the orientation in space of the user via the headset, and of their hands via the joysticks and/or virtual reality gloves, and/or of their feet via virtual boots; [0134] the accelerations and the speeds of movement of the headset, and of the joysticks and/or gloves and/or boots; [0135] the position of the fingers on the joysticks and/or in the gloves and/or the boots; [0136] the pressure exerted by the fingers on the various buttons of the joysticks and/or in the gloves and/or the boots; [0137] etc.

    [0138] Given the specificity of the capabilities for creating the authentication information made up of one or more value(s) of one or more relative characteristic parameter(s), the authentication model, i.e., the series of one or more value(s) of one or more stored relative characteristic parameter(s), is created with the same first electronic device and second electronic device used for authentication (for example, by the first electronic device and the second electronic device of the immersive system).

    [0139] When they create their account, the user can select their authentication challenge from several possibilities, including: [0140] the behavioral signature: the user must be able to reproduce a signature according to a model that they will have defined in two or three dimensions (with their hand, their foot, etc., depending on the location of the second electronic device). The one or more relative characteristic parameter(s) is/are then the position and/or the distance and/or the speed of movement and/or the acceleration. The higher the number of relative characteristic parameters and/or values used, the more stringent the level of authentication. The signature equally can be a symbol and a written word, in particular the name of the person and/or the drawing of a figure; [0141] the body signature: the user must know how to reproduce a gesture or a series of precise gestures. The one or more relative characteristic parameter(s) are then the position and/or the distance. Optionally, the authentication can be made more stringent using an additional characteristic parameter, such as pressing a specific key of the joystick. An example of a body signature is: left arm up, right arm down (when using two joysticks or virtual reality gloves), pressing button A on the joystick or an area A of the virtual environment, and head to the right (with all these gestures being carried out simultaneously or successively depending on the recorded signature); [0142] etc.

    [0143] FIG. 2a shows a simplified diagram of a first implementation mode of the authentication device according to the invention.

    [0144] In this first implementation mode, the authentication device 61 is implemented in a third electronic device 6, optionally remote from the first electronic device 2. If the third electronic device 6 is remote, it is connected to the first electronic device 2 via a communication network 5.

    [0145] The third electronic device 6 is a personal electronic device in particular, placed in the home of the user, or a professional electronic device, placed in the office of the user while the user with the first electronic device D′ is in a remote location, in particular in a second home, a rental accommodation, a hotel or on the premises of a partner, etc., or a service provider server, such as a website, an application, a content provider (video on demand, cloud, etc.).

    [0146] In the example of FIG. 2a, the first electronic device 2 is an autonomous virtual reality headset and the second electronic device 3 is a joystick or virtual reality glove.

    [0147] In particular, the third electronic device 6 comprises an access granting device 62.

    [0148] The user U uses the first electronic device 2 and the second electronic device 3 to request access to a service or a product from an access granting device, for example, the device 62. The access granting device 62 requires the authentication auth_req of the user U from the authentication device 61 according to the invention.

    [0149] The authentication device 61 receives and/or detects at least one value pc.sub.2_vd, pc.sub.3_vd of at least one characteristic parameter or at least one value pcr.sub.3/2_vd of at least one relative characteristic parameter, and, if applicable, computes at least one detected value pcr.sub.3/2_vd of at least one relative characteristic parameter. Then, the authentication device 61 checks whether the at least one detected value pcr.sub.3/2_vd of at least one relative characteristic parameter corresponds to the at least one stored value pcr.sub.3/2_vm of at least one relative characteristic parameter.

    [0150] In particular, if ok_auth is the case, then the authentication device 61 activates the access granting device 62.

    [0151] The access granting device 62 then grants the first electronic device 2 access to the product or service. For example, the access granting device 62 sends a reproduction signal sr to the first electronic device 2, which reproduces the accessed service and/or an interaction menu with the accessed product or service. Thus, the second electronic device 3 allows an interaction signal si to be transmitted to the access granting device 62 as a function of the reproduction signal sr reproduced by the first electronic device 2.

    [0152] FIG. 2b shows a simplified diagram of a second implementation mode of the authentication device according to the invention.

    [0153] In this second implementation mode, the authentication device 21 is implemented in the first electronic device 2. The first electronic device 2 of the user U is connected to a second electronic device 3. The first electronic device 2 and the second electronic device 3 are separately portable by the user U. The first electronic device 2 therefore comprises: [0154] a device 21 for authenticating the user of the first electronic device 2 that is capable of checking whether a detected value pcr.sub.3/2_vd of a relative characteristic parameter of the second electronic device corresponds to a stored value pcr.sub.3/2_vm of this relative characteristic parameter of the second electronic device associated with an identifier uid of a user requesting an authentication auth_req, with the relative characteristic parameter corresponding to the characteristic parameter of the second electronic device measured relative to the characteristic parameter of the first electronic device.

    [0155] In the example of FIG. 2a, the first electronic device 2 is a smartphone and the second electronic device 3 is a smartwatch. The first electronic device 2 and the second electronic device 3 are particularly connected by a wireless local area network, such as Bluetooth.

    [0156] The user U uses the first electronic device 2 and the second electronic device 3 to request access to a service or a product from an access granting device. For example, the user U wishes to access their smartphone or an application on their smartphone 2. In this case, the access granting device 22, 62 is respectively implemented in the smartphone 2 or in a third device 6 (not shown in FIG. 2b).

    [0157] The access granting device 22, 62 requires the authentication auth_req of the user U from the authentication device 21 according to the invention (in particular, as shown in FIG. 1).

    [0158] The authentication device 21 receives and/or detects at least one value pc.sub.2_vd, pc.sub.3_vd (not shown) of at least one characteristic parameter, and, in this example of FIG. 2b, computes at least one detected value pcr.sub.3/2_vd of at least one relative characteristic parameter. Then, the authentication device 21 checks whether the at least one detected value pcr.sub.3/2_vd of at least one relative characteristic parameter matches the at least one stored value pcr.sub.3/2_vm of at least one relative characteristic parameter.

    [0159] In particular, if ok_auth is the case, the authentication device 21 activates the access granting device 22, 62.

    [0160] The access granting device 22, 62 then grants the first electronic device 2 access to the smartphone 2 or to the product or service.

    [0161] Thus, the user U of the smartphone 2 placed in a public environment is authenticated while reducing the risks of hacking their access and improving access reliability. Indeed, with the user U not entering a password, the risk of a third party retrieving the password by looking over their shoulder is reduced or even eliminated, especially when the authentication according to the invention is conducted over distances between the first electronic device and the second electronic device that depend on the morphology of the user. With these measures being simpler than fingerprint or facial recognition, not only are they more reliable, but the computation cost by the authentication device is also reduced.

    [0162] FIG. 2c shows a simplified diagram of a third implementation mode of the authentication device according to the invention.

    [0163] In this third implementation mode, the authentication device 21 is implemented either in a third electronic device 24, the first electronic device 25c of which is a peripheral, or directly in the first electronic device 25c comprising a peripheral 25c, such as a virtual or augmented reality headset. The first electronic device 2, 25c of the user U is connected to a second electronic device 3. The first electronic or peripheral device 25c of the first electronic device 2 and the second electronic device 3 are separately portable by the user U.

    [0164] Either the first electronic device 2 or the third electronic device 24 comprises: [0165] a device 21 for authenticating the user of the first electronic device 25c, 2 capable of checking whether a detected value pcr.sub.3/2_vd of a relative characteristic parameter of the second electronic device corresponds to a stored value pcr.sub.3/2_vm of this relative characteristic parameter of the second electronic device associated with an identifier uid of a user requesting an authentication auth_req, with the relative characteristic parameter corresponding to the characteristic parameter of the second electronic device measured relative to the characteristic parameter of the first electronic device.

    [0166] The third electronic device 24 is a personal computer or a tablet, etc., in particular, provided with one or more peripheral(s): reproduction interface(s), such as a screen 25.sub.e and, if applicable, a headset 25.sub.c; input interface(s), such as a keyboard 23.sub.c, a mouse 23.sub.s, etc. In the example of FIG. 2c, the second electronic device 3 is a smartwatch.

    [0167] The user U uses the headset 25.sub.c and the second electronic device 3 to request access to a service or a product from an access granting device. The access granting device requests the authentication auth_req of the user U from the authentication device 21 according to the invention.

    [0168] The authentication device 21 receives and/or detects at least one value pc.sub.2_vd, pc.sub.3_vd (not shown) of at least one characteristic parameter or at least one value pcr.sub.3/2_vd of at least one relative characteristic parameter, and, if applicable, computes at least one detected value pcr.sub.3/2_vd of at least one relative characteristic parameter. Then, the authentication device 21 checks whether the at least one detected value pcr.sub.3/2_vd of at least one relative characteristic parameter corresponds to the at least one stored value pcr.sub.3/2_vd of at least one relative characteristic parameter.

    [0169] In particular, if ok_auth is the case, the authentication device 21 activates the access granting device.

    [0170] The access granting device then grants the first electronic device 2 access to the product or service, with said electronic device reproducing the granting of access using at least the headset 25.sub.c.

    [0171] FIGS. 3a to 3d show the implementation of the authentication device according to the invention, in particular as shown in FIG. 1, for various characteristic parameters.

    [0172] In particular, the relative characteristic parameter pcr.sub.3/2 is made up of at least one of the following characteristic parameters pc: [0173] relative position posr.sub.3/2 of the second electronic device relative to the first electronic device; [0174] relative distance dr.sub.3/2 of the second electronic device relative to the first electronic device; [0175] relative orientation or.sub.3/2, θr.sub.3/2 of the second electronic device relative to the first electronic device; [0176] relative speed vr.sub.3/2 of the second electronic device relative to the first electronic device; [0177] relative acceleration ar.sub.3/2 of the second electronic device relative to the first electronic device.

    [0178] FIG. 3a shows a simplified diagram of a first example of a characteristic parameter used by the authentication device 1 according to the invention.

    [0179] A user U of a first electronic device 2, for example, an autonomous virtual reality headset, and of a second electronic device 3, for example, a peripheral of the first electronic device 2, such as an interaction joystick or virtual reality garments: gloves, mitts, boots, etc., worn by the user U receives an authentication request message mssg.

    [0180] In particular, the authentication request message mssg is reproduced by the first electronic device 2, for example, displayed on a screen 25 of the first electronic device 2. FIG. 3a shows an authentication request message mssg with a text “blabla” and optionally content: image or video. The authentication request message mssg particularly comprises indications of posture and/or behavior of the user for authentication. In this example, the authentication request message mssg indicates that the user must place their arm holding the joystick 3 outstretched in front of them.

    [0181] In the example of FIG. 3a, the first authentication device 1 then uses a distance parameter as a characteristic parameter for comparing the detected value of the relative characteristic parameter made up of the relative distance of the second electronic device, i.e., the distance between the first electronic device 2 and the second electronic device 3, in the posture requested by the authentication request message mssg: pcr.sub.3/2=posr.sub.3/2(mssg), with a value stored prior to the authentication request.

    [0182] FIG. 3b shows a simplified diagram of a second example of a characteristic parameter used by the authentication device according to the invention.

    [0183] In the example of FIG. 3b, the first authentication device 1 then uses an orientation parameter as a characteristic parameter for comparing the detected value pcr.sub.3/2_vd=h of the relative characteristic parameter made up of the relative orientation of the second electronic device, i.e., a relative orientation between the first electronic device 2 and the second electronic device 3, as a function of the authentication request message mssg: pcr.sub.3/2=or.sub.3/2(mssg), with a value stored prior to the authentication request. In this case, the detected value pcr.sub.3/2_vd is a horizontal orientation h of the second electronic device 3, with it being understood that the reference is the orientation of the wearer of the headset 2. This orientation of the second electronic device 3 is obtained by an action of the user, who particularly changes the position of their arm Ua and of the joystick 3 as a function of the received authentication request message mssg.

    [0184] In particular, the authentication device 1 checks that the successive detected values of the relative characteristic parameter match the successive stored values. In this case, the authentication request message mssg can tell the user to assume the nth posture of the series of authentication postures, either in the stored order or in a random order.

    [0185] FIG. 3c shows a simplified diagram of a third example of a characteristic parameter used by the authentication device according to the invention.

    [0186] In the example of FIG. 3c, the first authentication device 1 then uses a position parameter as a characteristic parameter for comparing the detected value pcr.sub.3/2_vd=h of the relative characteristic parameter made up of the relative position of the second electronic device, i.e., a relative position between the first electronic device 2 and the second electronic device 3, as a function of the authentication request message mssg: pcr.sub.3/2=zr.sub.3/2(mssg), with a value stored prior to the authentication request. In this case, the detected value pcr.sub.3/2_vd corresponds to a frontal area fh of the second electronic device 3, with it being understood that the reference is the position of the wearer of the headset 2. This position of the second electronic device 3 is obtained by an action of the user, who particularly changes the position of the joystick 3 as a function of the received authentication request message mssg.

    [0187] In particular, the position is defined by four predefined areas around the user in a two-dimensional space: frontal area zf, rear area zb, right lateral area zr and left lateral area zi, as shown in FIG. 3c, or by 6 areas in a three-dimensional space: in addition to the areas seen for the two-dimensional space zf, zb, zr, zl, the upper area za and the lower area zi.

    [0188] In particular, the position is defined by several coded areas using the four cardinal points: north, south, west and east. For example, by defining a sphere around the first electronic device worn by the user, the upper hemisphere forms the northern area, the lower hemisphere forms the southern area underneath, the right hemisphere forms the eastern area, and the left hemisphere forms the western area (not shown). Thus, the position of the second electronic device can be indicated by NE type codes for north-east if it is placed in the upper right-hand quarter of the sphere, or even NNE for north-north-east, if it is placed in an upper section of the upper right-hand quarter of the sphere.

    [0189] In particular, the authentication device 1 checks that the successive detected values of the relative characteristic parameter match the successive stored values. In this case, the authentication request message mssg can tell the user to assume the nth posture of the series of authentication positions, either in the stored order or in a random order.

    [0190] FIG. 3d shows a simplified diagram of a fourth example of a characteristic parameter used by the authentication device according to the invention.

    [0191] In the example of FIG. 3d, the first authentication device 1 then uses an orientation parameter as a characteristic parameter for comparing the detected value pcr.sub.3/2_vd=θr.sub.3/2_vd of the relative characteristic parameter made up of the relative orientation of the second electronic device, i.e,, a relative orientation between the first electronic device 2 and the second electronic device 3, as a function of the authentication request message mssg: pcr.sub.3/2=θr.sub.3/2(mssg), with a value stored prior to the authentication request. In this case, the detected value pcr.sub.3/2_vd is an orientation with a determined angle θr.sub.3/2 of the second electronic device 3, with it being understood that the reference is the orientation of the wearer of the headset 2. This orientation of the second electronic device 3 is obtained by an action of the user, who particularly changes the position of their arm Ua and of the joystick 3 as a function of the received authentication request message mssg.

    [0192] The reference can be in a two-dimensional or three-dimensional space, as shown in FIG. 3D. In this case, with the first electronic device 2 being a headset, the angle of the second device 2 is detected relative to a horizontal viewing plane rx.sub.2 that yields a first angle, called longitudinal angle θ.sup.xr.sub.3/2, and/or relative to a vertical plane rz.sub.2 corresponding to the user that yields a second angle, called longitudinal angle θ.sup.zr.sub.3/2. Then, the relative characteristic parameter is a pair of angles pcr.sub.3/2=(θ.sup.xr.sub.3/2, θ.sup.zr.sub.3/2).

    [0193] In particular, the authentication device 1 checks that the successive detected values of the relative characteristic parameter match the successive stored values. In this case, the authentication request message mssg can tell the user to assume the nth posture of the series of authentication postures, either in the stored order or in a random order.

    [0194] In particular, the various postures are linked with a rate, a speed and/or accelerations that also can be detected and made up of characteristic parameters.

    [0195] FIG. 4 shows a simplified diagram of a method for registering a user according to the invention,

    [0196] The method U_REG for registering a user U of a first electronic device D′ connected to a second electronic device D″ allows a user account to be registered in connection with secure access to a product or a service. The first electronic device D′ and the second electronic device D″ are separately portable by the user U. The registration method U_REG comprises: [0197] storing in a memory MEM, in combination with an identifier uid of the user, at least one value pcr_vm of a relative characteristic parameter of the second electronic device, with the relative characteristic parameter pcr corresponding to the characteristic parameter pc″ of the second electronic device measured relative to the characteristic parameter pc′ of the first electronic device.

    [0198] In particular, the registration method U_REG comprises: [0199] measuring PCR_MST at least one value pcr_vm of the relative characteristic parameter of the second electronic device, with the measured value pcr_vm being stored in a memory MEM directly or indirectly.

    [0200] In particular, the registration method U_REG comprises: [0201] computing PCR_DT a statistical value of the relative characteristic parameter of the second electronic device, with the statistical value pcr_vm being stored in a memory MEM.

    [0202] In particular, a method for accessing a service or a device receives a first access request or a request nw_req to generate an access account. In particular, the access method (not shown) comprises an access creation step ACC_CREA that triggers reg_trg the registration U_REG of the user.

    [0203] In particular, the user registration method U_REG comprises the access creation step ACC_CREA, in particular when the access method implements the steps of the registration method U_REG.

    [0204] In particular, the registration method comprises a request UID_REQ for a user identifier that sends an identification message uid_mssg to the user U. The identification message uid_mssg is particularly able to be reproduced by a reproduction interface.

    [0205] Following the reproduction of the identification message uid_mssg, the user provides an input interface, such as an entry interface: keyboard, mouse, stylus, touch screen, etc., or a sensor: camera, microphone, etc., with a user identifier uid. The user identifier uid is particularly a name, a pseudonym, an email address, a terminal identifier of the user, such as a telephone number, etc.

    [0206] In particular, the registration method U_REG comprises an input UID_ENT of the user identifier receiving a signal uid_cpt from the input interface comprising a user identifier uid.

    [0207] In particular, measuring PCR_MST at least one value of the relative characteristic parameter of the second electronic device comprises a request PCR/CD_REQ to provide the access code, also called authentication code, that sends a message pcr_mssg to the user U for registering an authentication code. The message pcr_mssg for registering an authentication code is particularly able to be reproduced by a reproduction interface.

    [0208] In particular, the registration method U_REG comprises receiving PCR_REC at least one relative characteristic parameter. In particular, the measurement PCR_MST comprises receiving PCR_REC at least one relative characteristic parameter.

    [0209] In particular, the registration method U_REG comprises detecting PCR_DTC at least one relative characteristic parameter particularly triggered dtct_trg by the request PCR/CD_REQ to provide the authentication code. In particular, the measurement PCR_MST comprises detecting PCR_DTC at least one relative characteristic parameter.

    [0210] In particular, detecting PCR_DTC at least one relative characteristic parameter comprises capturing CPT a relative characteristic parameter. Detecting PCR_DTC at least one relative characteristic parameter particularly comprises a capture control step CPT_CNT commanding cpt_cmd the capturing CPT and/or one or more capturing step(s) implemented by the first electronic device D′ and/or the second electronic device D″.

    [0211] In particular, the registration method U_REG comprises computing PCR_CLC at least one relative characteristic parameter. In particular, the measurement PCR_MST comprises computing PCR_CLC at least one relative characteristic parameter.

    [0212] In particular, computing PCR_CLC at least one relative characteristic parameter comprises receiving PC′_REC a first characteristic parameter PC′ originating from the first electronic device D′, receiving PC″_REC a second characteristic parameter PC″ originating from the second electronic device D″, and determining PCR_DT the relative characteristic parameter as a function of the received detected values pc′_vm and pc″_vm.

    [0213] In particular, the registration method U_REG comprises registering ACC_REG the access code included in the memory MEM. In particular, the registration method U_REG, in particular, the registration ACC_REG of the access code, comprises, before being stored in the memory MEM, associating ASS one or more measured value(s) {pcr.sup.i_vm(n)}.sub.n=1 . . . N.sup.i=1 . . . l of one or more relative characteristic parameter(s) with the entered user identifier uid.

    [0214] In particular, the registration ACC_REG of the access code checks whether the access code requires a value nw_vl? of the relative characteristic parameter in addition to the measured value pcr_vm. If yes [Y], a new measurement pcr_vm(n) of the relative characteristic parameter is triggered nwv_trg by iterating n=n+1 as the relative characteristic parameter.

    [0215] In particular, the registration ACC_REG of the access code checks whether the access code requires a value nw_pcr? of another relative characteristic parameter in addition to the measured value pcr_vm. If yes [Y], a measurement pcr.sup.i_vm of a new relative characteristic parameter is triggered nwp_trg by iterating i=i+1 as the type of relative characteristic parameter. Otherwise, all the measured values {pcr.sup.i_vm(n)}.sub.n=1 . . . N.sup.i=1 . . . l are directly made available to the memory MEM in order to be stored in combination with the user identifier uid.

    [0216] In the case whereby several values of several characteristic parameters are used for the access code, if the access code does not [N] require a value nw_vl?of the relative characteristic parameter in addition to the measured value pcr_vm, then checking nw_pcr? the iteration of the type of characteristic parameter type is implemented.

    [0217] In particular, the measured values {pcr.sup.i_vm(n)}.sub.n=1 . . . N.sup.i=1 . . . l of the relative characteristic parameters are stored in a user database BDU.

    [0218] In particular, the authentication device 1 according to the invention and/or an access granting device 62 implements the steps of the registration method U_REG.

    [0219] One embodiment of the registration method U_REG is a program comprising program code instructions for executing the steps of the registration method when said program is executed by a processor.

    [0220] FIG. 5 shows a simplified diagram of an authentication method according to the invention.

    [0221] The method U_AUTH for authenticating a user of a first electronic device D′ connected to a second electronic device D″ allows the user U to be authenticated, particularly when accessing a device or a service. The first electronic device D′ and the second electronic device D″ are separately portable by the user U. The authentication method U_AUTH comprises: [0222] checking PCRV_CMP if a detected value pcr_vd of a relative characteristic parameter of the second electronic device corresponds to a stored value pcr_vm of this relative characteristic parameter of the second electronic device associated with an identifier uid of a user requesting authentication auth_req, with the relative characteristic parameter pcr corresponding to the characteristic parameter pc″ of the second electronic device measured relative to the characteristic parameter pc′ of the first electronic device.

    [0223] In particular, the authentication method U_AUTH comprises: [0224] retrieving PCR_LD at least one detected value pcr_vd of the relative characteristic parameter of the second electronic device, with the detected value pcr_vd being checked PCR_CMP.

    [0225] In particular, the authentication method U_AUTH comprises: [0226] computing PCR_DT a detected value pcr_vd of the relative characteristic parameter of the second electronic device on the basis of a detected value pc′_vd of the characteristic parameter of the first electronic device and of a detected value pc″_vd of the characteristic parameter of the first electronic device, with the statistical value pcr_vd being stored and checked PCR_CMP.

    [0227] In particular, a method for accessing a service or a device receives an access request acc_req (not shown). In particular, the access request triggers an authentication request auth_req before the access method grants access.

    [0228] In particular, the authentication method U_AUTH comprises receiving AUTH_REC an authentication request (not shown).

    [0229] In particular, the authentication method U_AUTH comprises a request UID_REQ for a user identifier that sends an identification message uid_mssg to the user U. The identification message uid_mssg is particularly able to be reproduced by a reproduction interface. The user identifier request UID_REQ is particularly triggered by the authentication request auth_req.

    [0230] Following the reproduction of the identification message uid_mssg the user provides an input interface, such as an entry interface: keyboard, mouse, stylus, touch screen, etc., or a sensor: camera, microphone, etc., with a user identifier uid. The user identifier uid is particularly a name, a pseudonym, an email address, a terminal identifier of the user, such as a telephone number, etc.

    [0231] In particular, the authentication method U_AUTH comprises an input UID_ENT of the user identifier receiving a signal uid_cpt from the input interface comprising a user identifier uid.

    [0232] In particular, retrieving PCR_LD at least one value of the relative characteristic parameter of the second electronic device comprises a request PCR/CD_REQ to provide the access code, also called authentication code, that sends a guidance message gui_mssg to the user U. The guidance message gui_mssg is particularly able to be reproduced by a reproduction interface.

    [0233] In particular, retrieving PCR_LD comprises reading PCR_RD stored values pcr_vm of relative characteristic parameters associated with the entered user identifier uid. In particular, reading PCR_RD is triggered vm_trg by entering UID_ENT the user identifier.

    [0234] In particular, reading PCR_REQ involves sending a request pcr_req(uid) for associated relative characteristic parameters to a memory device, such as a user database BDU, in which values have been previously stored. In response, reading PCR_REQ involves receiving associated relative characteristic parameter values pcr_vm from the user database BDU.

    [0235] In particular, reading PCR_REQ involves sending read associated relative characteristic parameter values pcr_vm to the request PCR/CD_REQ for providing the access code. In particular, the request PCR/CD_REQ for providing the access code generates a guidance message gui_mssg as a function of the one or more characteristic parameter(s) pcr for which the values pcr_vm have been read.

    [0236] Thus, the user U can be guided by the guidance message gui_mssg to obtain the relative characteristic parameters forming the access code.

    [0237] In particular, the authentication method U_AUTH comprises receiving PCR_REC at least one relative characteristic parameter. In particular, retrieving PCR_LD comprises receiving PCR_REC at least one relative characteristic parameter.

    [0238] In particular, the authentication method U_AUTH comprises detecting PCR_DTC at least one relative characteristic parameter that is particularly triggered dtct_trg by the request PCR/CD_REQ for providing the authentication code. In particular, retrieving PCR_LD comprises detecting PCR_DTC at least one relative characteristic parameter.

    [0239] In particular, detecting PCR_DTC at least one relative characteristic parameter comprises capturing CPT a relative characteristic parameter. Detecting PCR_DTC at least one relative characteristic parameter particularly comprises a capture control step CPT_CNT commanding cpt_cmd capturing CPT and/or one or more capturing step(s) implemented by the first electronic device D′ and/or the second electronic device D″.

    [0240] In particular, the authentication method U_AUTH comprises computing PCR_CLC at least one relative characteristic parameter. In particular, retrieving PCR_LD comprises computing PCR_CLC at least one relative characteristic parameter.

    [0241] In particular, computing PCR_CLC at least one relative characteristic parameter comprises receiving PC′_REC a first characteristic parameter PC′ originating from the first electronic device D′, receiving PC″_REC a second characteristic parameter PC″ originating from the second electronic device D″, and determining PCR_DT the relative characteristic parameter as a function of the received detected values pc′_vd and pc″_vd.

    [0242] In particular, the authentication method U_AUTH comprises checking PCR/CD_VF the access code that comprises checking PCRV_CMP values.

    [0243] In particular, checking PCR/CD_VF the access code involves checking whether all the values of the code have been detected n.sub.i=N.sub.i?. If not [N], the retrieval PCR_LD of a new value of the relative characteristic parameter is triggered nwv_trg by iterating n.sub.i=n.sub.i+1 as the value pcr_vm(n.sub.i) of the relative characteristic parameter.

    [0244] In particular, checking PCR/CD_VF the access code involves checking whether the values of all the relative characteristic parameters have been detected i=I?. If not [N], the retrieval PCR_LD of a value pcr.sup.i_vm of a new relative characteristic parameter is triggered nwp_trg by iterating i=i+1 as the type of relative characteristic parameter. Otherwise [Y], checking PCR/CD_VF the access code indicates that the authentication is successful ok_auth.

    [0245] In the case whereby several values of several characteristic parameters are used for the access code, if the access code requires [Y] a value of the relative characteristic parameter in addition n.sub.i=N.sub.i? to the measured value pcr_vm(n.sub.i), then checking the iteration of the type of characteristic parameter i=I? is implemented.

    [0246] In particular, if checking PCRV_COMP the value is positive [Y], i.e., if a detected value of a relative characteristic parameter corresponds to the stored value of the relative characteristic parameter: pcr.sup.i_vd(n.sub.i)=pcr.sub.vm(n.sub.i.sub.).sup.i, then checking the number of detected values of the relative characteristic parameter n.sub.i=N.sub.i? is carried out.

    [0247] Otherwise, i.e., if checking PCRV_COMP a value is negative [N], if at least one detected value of at least one relative characteristic parameter does not correspond to the stored value of the relative characteristic parameter of the access code: pcr.sup.i_vd(n.sub.i)≠pcr.sub.vm(n.sub.i.sub.).sup.i, then checking PCRV_COMP the value indicates an authentication failure nauth.

    [0248] In particular, checking PCRV_COMP the value involves reading a stored value pcr_vm as a function of the detected value pcr_vd of the relative characteristic parameter in a user database BDU. Alternatively, checking PCRV_COMP a value involves receiving a stored value pcr_vm from the reading step PCR_RD.

    [0249] In particular, the authentication failure nauth closes CLT_AUTH the authentication method U_AUTH. Optionally, the authentication closure STP_AUTH sends a failure message reproduced by the first electronic device D′ to the user.

    [0250] In particular, the authentication closure STP_AUTH resets the authentication method U_AUTH, which then restarts with the user identifier request UID_REQ and/or the retrieval PCR_LD of the access code and/or the request PCR/CD_REQ to provide the authentication code.

    [0251] In particular, the successful authentication indication ok_auth is made available to an access method AXP (not shown), in particular an access method AXP that sent the authentication request auth_req to the authentication method U_AUTH.

    [0252] In particular, the successful authentication indication ok_auth triggers a validation of an access AX_VLD to a service or a device. In particular, an access method AXP (not shown), such as an access method AXP that sent the authentication request auth_req to the authentication method U_AUTH, comprises the access validation step AX_VLD. The access validation step AX_VDL commands ax_cmd the access AXP by the device requesting access, in this invention the first electronic device D′, to a device or service.

    [0253] In particular, the authentication device 1 according to the invention and/or an access granting device 62 implements the steps of the authentication method U_AUTH.

    [0254] One embodiment of the authentication method U_AUTH is a program comprising program code instructions for executing the steps of the authentication method U_AUTH when said program is executed by a processor.

    [0255] The invention also relates to a medium. The information medium can be any entity or device capable of storing the program. For example, the medium can comprise a storage means, such as a ROM, for example, a CD-ROM or a microelectronic circuit ROM or even a magnetic recording means, for example, a floppy disk or a hard disk.

    [0256] Moreover, the information medium can be a transmissible medium, such as an electrical or optical signal that can be routed via an electrical or optical cable, by radio or by other means. The program according to the invention particularly can be downloaded over a network, in particular of the Internet type.

    [0257] Alternatively, the information medium can be an integrated circuit, in which the program is incorporated, with the circuit being capable of executing or being used for executing the method in question.

    [0258] In another implementation, the invention is implemented by means of software and/or hardware components. In this respect, the term module can equally correspond to a software component or to a hardware component. A software component corresponds to one or more computer program(s), one or more sub-program(s) of a program, or more generally to any element of a program or software capable of implementing a function or a set of functions according to the above description. A hardware component corresponds to any element of a hardware assembly (or hardware) capable of implementing a function or a set of functions.

    [0259] Although the present disclosure has been described with reference to one or more examples, workers skilled in the art will recognize that changes may be made in form and detail without departing from the scope of the disclosure and/or the appended claims.