Orange

France Telecom

Frédéric Fieau

Gaël Fromentoux

Emile Stephan

Nicolas Bihannic

Arnaud Braud

Youssef Chadli

Thang Vu Duong

Jesús Alberto Polo Garcia

Nathalie Omnes

Romuald Corbel

Baptiste Dupont

Adrien Marechal

Taoufik En-Najjary

Gilles Bertrand

Olivier Legrand

Mathilde Cayla

Mohamed-Fouz Menai

Olivier Le Grand

A solution for controlling the transmission of at least one near-live item of content from a user equipment to an ingest node of a content delivery network. Such a solution comprises the following: measuring a value of at least one actual telemetry datum relating to the transmission of at least one constituent data packet of the item of content; comparing the value of at least one actual telemetry datum with a value of at least one expected telemetry relating to the transmission of the at least one constituent data packet of the item of content; when the value of the actual telemetry datum and the value of the expected telemetry datum correspond, triggering, to the benefit of the content delivery network, a reward relating to the transmission of the content.

Controlling the transmission of at least one item of content from a piece of provider equipment to an ingest node

A description is given of a method for securing a multi-access edge computing network, where provision is made for a hardware security device designed to be connected to a host module of the network. The method, implemented by the hardware security device, includes upon reception of a presence request from the host module in the network, verifying whether the presence request comprises data representative of an identifier of the host module, and, if so, sending a presence response to the host module, comprising a signature of the hardware security device.

Methods and devices for securing a multiple-access peripheral network

A method for securing the transmission of at least one data packet along a data path of a telecommunications network is disclosed. According to such a method, a security device performs: obtaining a variance delay representative of a difference between an actual end-to-end transit delay of the at least one data packet along the data path and an expected end-to-end transit delay of the at least one data packet along the data path; and securing the transmission by implementing at least one security action based on the variance delay.

Method for securing the transmission of at least one data packet along a data path of a telecommunications network, corresponding computer program product and device

The advent of end-to-end encryption systems has put an end to the use of 'caching' methods which consisted of replicating and storing data flows relating to content items in a “cache” which is located on board one or more intermediate devices. However, the disappearance of these “caching” solutions affects the management of the resources of different communication devices, particularly by bringing about an increase in the number of connections between communication devices that is necessary for delivering content items to the user terminals. Unlike known “caching” techniques in which the content itself is stored in at least one cache memory of a cache server, the method relies on storing in a cache server all of the messages exchanged between the original server hosting the content and the cache server, leading to the delivery of the content to the cache server.

Method for delegating the delivery of content items to a cache server

A content distribution network is made up of terminals and servers that are connected as a network and cooperate in order to make content or data available to users. In order to be able to control access to the content via certain terminals, a solution called 'URL signing' has been discussed. A “URL signing” solution requires establishing an active connection between a terminal requesting content and an originating server associated with the requested content. The solution relates to a method for accessing content implemented by a cache server, thus dispensing with the need for an active connection between a terminal requesting content and the originating server associated with the requested content.

Method for controlling access to content implemented by a cache server

Method for resolving name identifiers. Existing naming identifier resolution solutions give priority to one aspect, performance of a service or protection of privacy, over the other without it being possible to deviate therefrom. This lack of flexibility is detrimental to the user's quality of experience. This also impacts resource management for various communication equipment involved in the resolution of naming identifiers. The proposed solution makes it possible to give priority to performance or respecting privacy on a case-by-case basis. On the basis of an authorization to share a location of the equipment, the resolver gives priority to transmitting either a network address of a server associated with the naming identifier to be resolved requiring location information of the equipment, giving priority to performance, or a network address of a server associated with the naming identifier to be resolved not requiring location information of the equipment, giving priority to respecting privacy.

Method for resolving naming identifiers

A method for measuring reputation of paths visiting nodes in a communication network and including, for each node visited by a current path of the network: a) assigning a security score for the node; b) estimating a first trust index based on: a cumulative on the current path of the successive scores of the nodes visited by the current path; and a number of nodes visited by the current path, the estimation of the first trust index providing a reputation measurement for the current path.

Methods and devices for measuring reputation in a communication network

A method for allocating resources of a network infrastructure in order to provide a telecommunication service is disclosed. The method includes receiving, by a resource orchestrator, a request to instantiate virtualized functions on servers; determining servers to be allocated and resources of the network infrastructure enabling connectivity between the servers, based on the instantiation request; sending, to the determined resources, a configuration request enabling connectivity between the determined servers; and sending, to the determined servers, a request to allocate computing means on the determined servers.

Method for allocating resources of a network infrastructure

A method for determining a hosting device of a network infrastructure of an operator for the installation of a virtualized function. The virtualized function contributes to transmission and processing of at least one item of information relating to a service. The method is implemented by a management entity of the infrastructure and includes: transmitting to a virtualization entity a compatibility request including at least one datum relating to a test of a resource of the hosting device; receiving from the virtualization entity at least one first variable derived from the test, relating to the transmitted datum, executed on the resource; and determining an aptitude of the hosting device to accommodate the virtualized function as a function of the at least one first variable received.

Evaluating a hosting device for installation of a virtualized function within a network infrastructure

The messages established on a communication path between two nodes are increasingly encrypted. However, the devices present on the communication path may intervene to transport the messages and to read, edit or add data in the messages. It may also be desirable that only 'authorized' devices can carry out these actions. In order to intervene on these data, it would be necessary that the devices on the communication path have available all the keys used by the nodes to encrypt and decrypt the data of the messages, which is difficult to envisage. A modification method enables a device, capable of intercepting a data message on a communication path between two nodes, to edit the data under the control of the nodes, while ensuring that a device cannot access the data edited by another device on the path.

Method for editing messages by a device on a communication path established between two nodes

Controlling operations in a network having multiple multi-access edge computing architectures is disclosed. A method for controlling a service application in a multi-access edge computing network, the network including a plurality of interconnected entities, includes controlling, by a platform module comprised in a first entity of the plurality, an execution of a service application installed in a second entity of the plurality, by means of a proxy function comprised in the second entity, the second entity being distinct from the first entity.

Methods for controlling a multi-access edge computing network

A redirection device and method, relating to identification of a data server capable of delivering content to a terminal, initiated by the transfer to a second name server of a second domain of a message for obtaining an identifier of the data server in the second domain received from the terminal. Following this transfer, the second name server sends a redirection message to a first domain, including a delegation chain including first data for redirection from the second domain to the first domain. The chain is updated recursively with the redirections between domains added by respective name servers until a name server is able to provide an identifier of the data server.

Method for determining a delegation chain associated with a domain name resolution in a communication network

A method and a device for acquiring an identifier of a data server able to deliver content to a terminal. The method is executed by the terminal, which transmits, to a resolution server of a communication architecture, a message requesting to obtain an identifier of the data server in the second domain. This request message triggers reception, from the resolution server, of an information message includes the identifier of the data server in a first domain. This message furthermore includes a delegation chain, which includes a sequence of redirections from the second domain to the first domain.

Method for acquiring a delegation chain relating to resolving a domain name identifier in a communication network

A method is described for optimizing the refresh rate of at least one part of a registration, the registration including an association between a first identifier of a resource on a network and a second identifier of the resource, and a time to live for said association. The method is performed by a resolver server having obtained the registration from an authorization server. The method includes transmitting a message comprising at least the association to an application server referencing the first identifier.

Optimization of the refresh rate of a DNS registration

One embodiment relates to a device for resource orchestration configured to receive the following from a device for management of a digital content delivery service: a request for allocating content delivery resources and a characteristic representative of a level of service that is allocated to a provider of the content and concerning delivery of content. The device is configured to verify whether resources capable of delivering the content in compliance with the level of service characteristic are available from a determined set of resources comprising physical resources already deployed in a physical content delivery network and virtual resources already instantiated for the provider, and if it is detected that the available resources are insufficient, request the allocation of new physical resources in the physical content delivery network and/or the instantiation of new virtual resources for delivering the content.

Growing community of inventors

Paris, France

Frédéric Fieau