SECURING OF ENCRYPTION KEYS FOR TRANSACTIONS ON A DEVICE LACKING A SECURE MODULE

摘要

The invention concerns the securing of encryption keys used during transactions when the user device lacks a secure module. Steps are carried out on the device of encrypting a message with an encryption key and sending the obtained cryptogram to a remote transaction server. The encryption key has a limited lifetime. When the current encryption key is expired, the device receives, from a secure remote server provided with a secure module, a new encrypted encryption key (310); receives an item of personal data input by a user on an input interface (312); decrypts the new encryption key using the input item of personal data (314); and deletes the item of personal data from the memories (316) of same before using said new encryption key to obtain the cryptogram to be sent to the remote transaction server.