Alcatel Lucent

Serge Papillon

Haithem El Abed

Abdullatif Shikfa

Antony Martin

Wael Kanoun

Sylvain L'Haridon

Mathieu Boussard

Benoit Christophe

Vincent Toubiana

Arnaud Ansiaux

Haithem El-Abed

Sylvain Grisouard

Sougandy Ragou

For ensuring a universal serial bus, USB, attack protection between a communication device (CD) and an accessory device (AD), a protection device (PD) being inserted between the communication device (CD) and the accessory device (AD) through a USB link, the communication device (CD): memorizes the highest value (HV) of indexes of string descriptor found in a USB Device Descriptor received from the accessory device (AD), sends a request (Req) for a string descriptor to the accessory device (AD) with a value (Val1) of index higher than said highest value (HV), receives a response (Res) generated and sent from the protection device (PD), the response containing an identifier (Id P) of the protection device validates the presence of the protection device (PD) if the identifier (Id P) is found in a database.

Ensuring USB attack protection

A threat level is evaluated for an ongoing attack detected for a set of resources based on received notifications having low weight in the evaluation of the threat level. If the threat level is smaller than an entrapment threshold, sensors associated with resources of an information system infrastructure that are potential subsequent targets of the ongoing attack are activated, the weight of the notifications sent from the activated sensors are set as average weight in the evaluation of the threat level, and the threat level is further evaluated for the ongoing attack. If the threat level is greater than the entrapment threshold, traps are deployed in the information system infrastructure, the weight of the notifications sent from the deployed traps are set as high weight in the evaluation of the threat level, and the threat level is further evaluated for the ongoing attack.

Advanced persistent threat detection

A system and method for protecting a universal serial bus device from being used in an attack during communication between a communication device and an accessory device is disclosed. A protection device inserted between them through a USB link performs steps of receiving a message from the accessory device, including fields of characteristics of the accessory device; generating a random identifier; sending it to the communication device that creates a registration rule based on the generated random identifier; modifying an intercepted response from the accessory device to a request from the communication device, the request being dedicated to get a value associated with a serial number of the accessory device, by including the generated random identifier; and sending the modified response to the communication device, the modified response triggering a query for registration of the accessory device by means of the modified response and the created registration rule.

USB attack protection

Process for preserving the privacy of a user connected to a network through a terminal that comprises geolocation means adapted to emit geolocation information about the geographical position of said user, said process providing for: analyzing a packet from said terminal to detect the eventual presence of geolocation information into said packet; replacing in said packet said detected geolocation information by virtual geolocation information that have been computed for said user; forwarding through said network said packet with said virtual geolocation information.

Process for preserving the privacy of a user connected to a network

Process for preserving the privacy of a user connected to a network through a terminal that comprises geolocation means adapted to emit geolocation information () about the geographical position of said user, said process providing for: &#x2014;analyzing a packet () from said terminal to detect the eventual presence of geolocation information () into said packet; &#x2014;replacing in said packet said detected geolocation information by virtual geolocation information () that have been computed for said user; &#x2014;forwarding through said network said packet with said virtual geolocation information.

A capability for managing a representation of a smart environment is presented herein. The capability for managing a representation of a smart environment is configured to support augmented reality (AR)-based management of a representation of a smart environment, which may include AR-based generation of a representation of the smart environment, AR-based alignment of the representation of the smart environment with the physical reality of the smart environment, and the like.

Augmented reality based management of a representation of a smart environment

To securely transmit data from a communication terminal (TC) to an application server (SA) over a telecommunications network (RT), the communication terminal (TC) being connected to the application server (SA) via an unsecure access network (RAns) and being able to communicate with the application server (SA) via at least one secure access network (RAs), the communication terminal (TC) switches the connection with the application server (SA) from the unsecure access network (RAns) to a secure access network (RAs), when personal data (DonP) is likely to be entered or is entered by the user, transmits the personal data (DonP) to the application server (SA) via the secure access network (RAs), and switches the connection with the application server (SA) from the secure access network (RAs) to an unsecure access network (RAns).

Secure data transmission

A method and system for providing conditional interaction for a virtual object () accessible with a mobile device (), said mobile device () comprising geolocation means for assessing a real-world geographic location (PI) to said mobile device (), and said virtual object () being assessed a location information (P2) corresponding to a real-world geographic location, In various embodiments at least one interaction is conditioned with said virtual object () through said mobile device (), at least in function of the real-world geographic location (PI) of said mobile device () and the location information (P2) of said virtual object (). In case said conditioning step is satisfied, interacting () with said mobile device () on said virtual object by modifying said location information (P2) of the virtual object ().

Conditional interaction control for a virtual object

This method comprises the steps of: &#x2014;choosing () a security parameter n,&#x2014;segmenting () the file in n chunks S, . . . , Sn, &#x2014;randomly choosing () ncoefficients afor i=1, . . . , n and j=1, . . . , n,&#x2014;verifying () that the vectors a, . . . , a, for i=1, . . . , n, are linearly independent, otherwise generating the coefficients again, &#x2014;computing () n linear combinations Ci=aS+ . . . +aS+ . . . +a&#xb7;S, for i=1, n,&#x2014;choosing () n storage service providers O, . . . , Oamong said plurality of storage service provider, &#x2014;generating () n file identifiers ID', . . . , ID&#x2032;designating said file (F),&#x2014;storing () the combination Ci at the storage service provider Oin association with the file identifier ID&#x2032;, for i=1, . . . , n,&#x2014;storing the file identifier ID&#x2032;and the provider identifier O, for i=1, . . . , n, in a file descriptor corresponding to the file (F), this file descriptor being stored in a local memory (LM),&#x2014;storing the set of coefficients a, . . . , aso that it can be re-associated with the combination C, for i=1, n;&#x2014;randomly choosing n super-coefficients a&#x2032;, . . . , a&#x2032;, . . . , a&#x2032;for j=1, . . . , n,&#x2014;computing a linear over-combination OC&#x2032;=a&#x2032;-C+ . . . +a&#x2032;&#xb7;C+ . . . +a&#x2032;&#xb7;C,&#x2014;and storing the over-combination OC&#x2032; and the coefficients a&#x2032;, . . . , a&#x2032;, . . . , a&#x2032;for j=1, . . . , n.

Method for protecting confidentiality of a file distributed and stored at a plurality of storage service providers

A method and apparatus for personalizing a smart card coupled with a communication device of a user who is a subscriber of a first telecommunication network and wishes to become a subscriber of a second telecommunication network is disclosed. A first authentication key is stored in both the smart card and in an first application server included in the first telecommunication network. A secure session is established with a second application server included in the second telecommunication network via the first telecommunication network by negotiating with the first application server and the second application server in order that the smart card and the second application server agree on an second authentication key. Shared values and shared functions according to a secure multiparty computation protocol are used to compute a second authentication key which replaces the first authentication key in the smart card.

Confidential provisioning of secret keys over the air

A system and method for enabling searchable encryption of encrypted documents stored by a client on one or more storage providers includes a broker server in communication with the client and the one or more storage providers. The broker server is adapted to transfer the encrypted documents between the client and the one or more storage providers and to maintain information indicating where the encrypted documents are transferred. The broker server further stores information for at least one encrypted index for the encrypted documents and a test function for a searchable encryption mechanism used to encrypt the at least one encrypted index.

Growing community of inventors

Nozay, France

Serge Papillon