Orange

France Telecom

Emile Stephan

Gaël Fromentoux

Frédéric Fieau

Frederic Fieau

Arnaud Braud

Thierry Houdoin

Nathalie Omnes

Romuald Corbel

Nicolas Bihannic

Xavier Marjou

Veronica Karina Quintuna Rodriguez

Joël Penhoat

Imed Allal

Yann Adam

Joel Penhoat

Patrick Truong

Selim Ellouze

Yves Cognet

Baptiste Dupont

Jessie Le Moullac-Jewitt

Mathilde Cayla

Eric Moreau

Jean-Louis Simon

Frederic Boucaud

Dominique Bonjour

Pierre Le Maigat

Jean Francois Peltier

A solution for controlling the transmission of at least one near-live item of content from a user equipment to an ingest node of a content delivery network. Such a solution comprises the following: measuring a value of at least one actual telemetry datum relating to the transmission of at least one constituent data packet of the item of content; comparing the value of at least one actual telemetry datum with a value of at least one expected telemetry relating to the transmission of the at least one constituent data packet of the item of content; when the value of the actual telemetry datum and the value of the expected telemetry datum correspond, triggering, to the benefit of the content delivery network, a reward relating to the transmission of the content.

Controlling the transmission of at least one item of content from a piece of provider equipment to an ingest node

A description is given of a method for securing a multi-access edge computing network, where provision is made for a hardware security device designed to be connected to a host module of the network. The method, implemented by the hardware security device, includes upon reception of a presence request from the host module in the network, verifying whether the presence request comprises data representative of an identifier of the host module, and, if so, sending a presence response to the host module, comprising a signature of the hardware security device.

Methods and devices for securing a multiple-access peripheral network

A method for securing the transmission of at least one data packet along a data path of a telecommunications network is disclosed. According to such a method, a security device performs: obtaining a variance delay representative of a difference between an actual end-to-end transit delay of the at least one data packet along the data path and an expected end-to-end transit delay of the at least one data packet along the data path; and securing the transmission by implementing at least one security action based on the variance delay.

Method for securing the transmission of at least one data packet along a data path of a telecommunications network, corresponding computer program product and device

A method for capturing a packet from an encrypted session established between a terminal unit and a data server. The packet includes a datum for determining a security key used for the encryption of the packet. The method is implemented by a device routing the packet between the terminal unit and the data server and includes: analysis of a plurality of packets transmitted by the terminal unit and destined for the server; identification of a cooperation packet from among the plurality of analyzed packets, the cooperation packet including the determining datum corresponding to a security key used for the encryption of packets transmitted by the terminal unit to the data server prior to the terminal unit sending the cooperation packet; and decryption of the received cooperation packet using a security key corresponding to the determining datum from the identified cooperation packet.

Method for capturing a packet from an encrypted session

The advent of end-to-end encryption systems has put an end to the use of 'caching' methods which consisted of replicating and storing data flows relating to content items in a “cache” which is located on board one or more intermediate devices. However, the disappearance of these “caching” solutions affects the management of the resources of different communication devices, particularly by bringing about an increase in the number of connections between communication devices that is necessary for delivering content items to the user terminals. Unlike known “caching” techniques in which the content itself is stored in at least one cache memory of a cache server, the method relies on storing in a cache server all of the messages exchanged between the original server hosting the content and the cache server, leading to the delivery of the content to the cache server.

Method for delegating the delivery of content items to a cache server

A content distribution network is made up of terminals and servers that are connected as a network and cooperate in order to make content or data available to users. In order to be able to control access to the content via certain terminals, a solution called 'URL signing' has been discussed. A “URL signing” solution requires establishing an active connection between a terminal requesting content and an originating server associated with the requested content. The solution relates to a method for accessing content implemented by a cache server, thus dispensing with the need for an active connection between a terminal requesting content and the originating server associated with the requested content.

Method for controlling access to content implemented by a cache server

Method for resolving name identifiers. Existing naming identifier resolution solutions give priority to one aspect, performance of a service or protection of privacy, over the other without it being possible to deviate therefrom. This lack of flexibility is detrimental to the user's quality of experience. This also impacts resource management for various communication equipment involved in the resolution of naming identifiers. The proposed solution makes it possible to give priority to performance or respecting privacy on a case-by-case basis. On the basis of an authorization to share a location of the equipment, the resolver gives priority to transmitting either a network address of a server associated with the naming identifier to be resolved requiring location information of the equipment, giving priority to performance, or a network address of a server associated with the naming identifier to be resolved not requiring location information of the equipment, giving priority to respecting privacy.

Method for resolving naming identifiers

A method for routing data of a session initialized between a terminal and a server, over a first network slice corresponding to a set of data-processing functions of a communication infrastructure, implemented by the terminal. This method includes receiving from the server at least one routing identifier determined as a function of at least one communication parameter of the session, configuring session information as a function of the at least one identifier received, and emitting to the server subsequent data routed over at least one second slice corresponding to the configured information.

Method for routing data of a session initialized between a terminal and a server

A method for measuring reputation of paths visiting nodes in a communication network and including, for each node visited by a current path of the network: a) assigning a security score for the node; b) estimating a first trust index based on: a cumulative on the current path of the successive scores of the nodes visited by the current path; and a number of nodes visited by the current path, the estimation of the first trust index providing a reputation measurement for the current path.

Methods and devices for measuring reputation in a communication network

A method allowing execution of transmission functions hosted in intermediate pieces of equipment of a path established between two pieces of communication equipment. End-to-end encryption systems are designed to resist any surveillance or tampering attempt, as no third party can decrypt or modify the communicated data. There is a solution which, depending on the connection opening requests of the applications, allows to select and assemble the transport protocols necessary for the operation of the application. However, this method is local: this protocol stack is only assembled at the pieces of communication equipment constituting the ends of the connections. Consequently, the requests emitted by these applications are not transmitted to the intermediate pieces of equipment which host the desired functions. The method allowing execution of transmission functions allows to re-establish cooperation between pieces of communication equipment, constituting the ends of a connection, with intermediate nodes hosting transmission functions.

Method for discovering intermediate functions and for selecting a path between two pieces of communication equipment

A method for allocating resources of a network infrastructure in order to provide a telecommunication service is disclosed. The method includes receiving, by a resource orchestrator, a request to instantiate virtualized functions on servers; determining servers to be allocated and resources of the network infrastructure enabling connectivity between the servers, based on the instantiation request; sending, to the determined resources, a configuration request enabling connectivity between the determined servers; and sending, to the determined servers, a request to allocate computing means on the determined servers.

Method for allocating resources of a network infrastructure

A method for allocating at least one transmission resource from among a plurality of resources, intended for routing a first item of data relating to a first application in a communication infrastructure. The method is implemented in a distributed management entity for managing the plurality of resources and includes: receiving, from a centralized management entity, an allocation message for allocating a plurality of resources having a set of transmission features for a second item of data relating to a second application; and assigning at least one resource of the plurality to the transmission of the first item of data. The method furthermore includes selecting a feature of the set for the transmission of the second item of data on the resources of the plurality that are not assigned to the transmission of the first item of data.

Method for pre-empting transmission resources for real-time data routing

A method for determining a hosting device of a network infrastructure of an operator for the installation of a virtualized function. The virtualized function contributes to transmission and processing of at least one item of information relating to a service. The method is implemented by a management entity of the infrastructure and includes: transmitting to a virtualization entity a compatibility request including at least one datum relating to a test of a resource of the hosting device; receiving from the virtualization entity at least one first variable derived from the test, relating to the transmitted datum, executed on the resource; and determining an aptitude of the hosting device to accommodate the virtualized function as a function of the at least one first variable received.

Evaluating a hosting device for installation of a virtualized function within a network infrastructure

A method is proposed for monitoring a connection between end devices via a communications network. A set of modes having at least two monitoring modes and a ranking order associated with the set of modes, are agreed upon between the end devices and a network device present on a path between the end devices. The method includes an activation of the set of modes, corresponding to an activation of the first mode according to the ranking order; then an activation, according to the ranking order, of each other mode of the set of modes. Each monitoring mode includes at least one mechanism implemented by at least one of the end devices and enabling the network device to perform at least one function of monitoring the connection.

Growing community of inventors

Pleumeur Bodou, France

Emile Stephan