Orange

France Telecom

France Telcom

3g Licensing S.a.

Lionel Morand

Julien Bournelle

Frederic Delmond

Jean-Claude Le Rouzic

Antoine Mouquet

José Doree

Bruno Chatras

Estelle Transy

Céline Carpy

Marc Varon

Celine Carpy

A method for mediating a plurality of user applications via an application relating to a Stream Control Transport Protocol, called a generic application. The method is implemented in an agent device, capable of establishing a connection based on the Stream Control Transport Protocol with a terminal device. The method includes: receiving from the terminal device a request packet of the Stream Control Transport Protocol comprising a data fragment containing an identifier of a user application requested by the terminal device and further comprising a header containing a destination port identifier dedicated to the generic application; verifying that the requested user application is an application of the plurality; and in the case where the requested user application is an application of the plurality, transmitting to the terminal device an agreement message.

Method and device for mediating a set of applications

A method for managing a rule for classifying a packet of a control message relating to a communications service designed to be used by a terminal of a user. The rule relates to routing of the packet in a communications infrastructure providing the service. The method is implemented in a control entity of the infrastructure. Also provided is a method implemented in a routing device for routing the control message packet in the communications infrastructure.

Classifying and routing control messages for a communications infrastructure

Authentication problems often occur when a user of a terminal visits a communications network while roaming. A method is therefore provided for authorizing an authenticated user of a communications terminal. The terminal is configured to connect to a packet-switching network via an access gateway over a current network to which the terminal is connected. The method is implemented by a current authentication server over the current network and includes: receipt of a user authorization request from the access gateway, including an identifier of the user; transmission of a user authorization response to the access gateway, including parameters for authorizing the user, and a unique identifier of an authentication server that authenticated the user.

Method and device for identifying visited and home authentication servers

A method for transmitting routing information between first and second nodes of a plurality of nodes capable of exchanging data relative to the management of subscribers to electronic communication services. The first node and the second node are connected and have exchanged the respective management capabilities thereof. The method includes, when the management capabilities supported by both the first node and the second node include a discovery capability: triggered by a predefined event, transmission, by the first node to the second node, of a discovery message including at least one item of routing information included in a routing table of the first node and relative to at least a third node.

Method for transmitting routing information

A method of managing at least one wireless communications interface of a terminal by performing an obtaining step (E) to obtaining information (CId) representative of the geographical location of the terminal; a searching step (E) for searching in a database of the terminal at least one identifier of a wireless communications interface of the terminal that is associated with said information. If such an associated identifier is found, an automatic activation step (E) is performed for activating the wireless communications interface corresponding to the at least one identifier.

Method of managing at least one wireless communications interface of a terminal, and a terminal

A method is provided for putting in place a security association of GBA type for a terminal. The method includes the following steps, executed in a network access server, following the receipt of a request for attachment to the network from the terminal: dispatching a request to a subscriber server, receipt of a response including an indication that the user profile associated with the terminal supports the security association of GBA type.

Putting in place a security association of GBA type for a terminal in a mobile telecommunications network

A method is provided for implementing a security association for a terminal being attached to an access network. The method includes the following steps, carried out by an authentication server of the access network, after receiving a request coming from the terminal for attachment to the network: receiving a first message containing at least one security association parameter from a bootstrapping server function; authenticating the terminal by using at least one first authentication parameter provided by a home subscriber server of the terminal; and sending a security association message containing the at least one security association parameter to the authenticated terminal.

Implementing a security association during the attachment of a terminal to an access network

A method and apparatus are provided for managing authentication of a user of a telecommunications network of an operator. The method includes the following steps: on receipt of a request for access to a service provided by the operator of this network by the user, issuing a request for identification of an authentication server destined for an authentication location server, the request including at least one identifier of the user; and on receipt of a response comprising an identifier of an authentication server associated with the identifier of the user, issuing a request for authentication of the user at the server identified for the requested service.

Method and device for managing authentication of a user

A method and apparatus are provided for managing a terminal of a user of a telecommunications network. The terminal is connected to the telecommunications network via at least one access network. The method includes a step, executed on receiving a registration request including an address of record of the user, an address of contact of the terminal, and an access network type of the terminal, of storing in a database an association between the address of record of the user, the access network type of the terminal, and the address of contact of the terminal.

Method of managing a user terminal in a telecommunications network, and an associated device

The management method of the invention comprises: an obtaining step (E) of obtaining information (CId) representative of the geographical location of the terminal; a searching step (E) of searching in a database of the terminal for at least one identifier of a wireless communications interface of the terminal that is associated with said information; and if such an associated identifier is found, an automatic activation step (E) of activating the wireless communications interface corresponding to said at least one identifier.

The aim of the invention is to localise a terminal () when accessing an IP service (), by means of an access network (). To this end, a method for allocating an IP address to the terminal () is carried out, a database () memorises the IP address allocated to the terminal () in association with a terminal or user identifier and an identifier of an access point wherein the terminal accesses the access network (), the access point being associated with localisation information, and the database transmits the localisation information associated with the identifier of the terminal or the user to the service.

Method and system for localising users for services based on SIP or H.323  protocols with dynamic IP address allocation

In order to control the authorisation of a user during an attempt to access an IP transport network () by means of an access network (), a user terminal () emits an access request to an access supplier (), containing data for authenticating the user to the access supplier, and said request is then transmitted to an access server () of the access network () in view of being addressed to a remote authentication server () of the access supplier. On reception of the access request, the access server () emits a RADIUS request to a proxy server () of the access network () which determines whether the user must be locally authenticated, and if this is the case, the proxy server transmits, to the access server (), a request for authentication data to be addressed to the terminal of the user, and carries out a local procedure to authenticate the user, on the basis of the authentication data supplied by the user.

Method and system for managing access authorization for a user in a local administrative domain when the user connects to an IP network

The method consists in: a user terminal issuing an access request to an access or IP service provider, the request containing user identification and authentication data with the provider and with an access and IP transport network operator, the access request being transmitted via the access network to an authentication server of the access or IP service provider; previously transmitting the access request to an authentication server of the network operator; the authentication server performing a procedure to authenticate the user on the basis of user identification data with the provider; and transmitting a response message to the user terminal, which response message contains the results of the user authentication by the authentication servers.

Growing community of inventors

Malakoff, France

Lionel Morand