公开(公告)号：US12250276B2

公开(公告)日：2025-03-11

申请号：US18457669

申请日：2023-08-29

Applicant: ORANGE

Inventor： Gael Fromentoux ,  Frederic Fieau ,  Emile Stephan

IPC: H04L67/141 ,  H04L69/326 ,  H04W12/02 ,  H04W48/18 ,  H04W76/11

Abstract: A method for routing data of a session initialized between a terminal and a server, over a first network slice corresponding to a set of data-processing functions of a communication infrastructure, implemented by the terminal. This method includes receiving from the server at least one routing identifier determined as a function of at least one communication parameter of the session, configuring session information as a function of the at least one identifier received, and emitting to the server subsequent data routed over at least one second slice corresponding to the configured information.

公开(公告)号：US11528326B2

公开(公告)日：2022-12-13

申请号：US16624617

申请日：2018-06-18

Applicant: ORANGE

Inventor： Frederic Fieau ,  Gael Fromentoux ,  Arnaud Braud

IPC: G06F13/00 ,  H04L67/14 ,  H04L69/164 ,  H04L67/56 ,  H04L67/01

Abstract: A method of activating at least one processing entity from among a plurality of entities situated on the path of a data of a session between a terminal of a user and a server of a services provider. The terminal and the server are attached to a communications network. In the method, the terminal: sends to the server an identification message to receive identifiers of entities of the plurality, which are added to the message by the entities; receive from the server an acknowledgement message including the identifiers included in the identification message; select at least one identifier from among those received from the server; and send to the server a message relating to the activation of entities from among the plurality.

公开(公告)号：US11272027B2

公开(公告)日：2022-03-08

申请号：US16497201

申请日：2018-03-22

Applicant: ORANGE

Inventor： Gael Fromentoux ,  Frederic Fieau ,  Arnaud Braud

IPC: H04L29/08 ,  H04L67/568 ,  H04L65/10 ,  H04L67/563 ,  H04L69/329

Abstract: A method for recommending a communication stack formed of communication protocols, relating to a data session between a terminal and a first server to provide content in a network including a second server responsible for providing the content by delegation from the first server, the first server having detected incompatibility of the stack used by the terminal and having transmitted a redirection message including information relating to a recommendation of the stack to be used to obtain the content to the terminal. In the method, the second server receives, from the terminal, an acquisition request message; selects a stack to be recommended based on data relating to the communication network or to the received acquisition request message; transmits, to the terminal, a recommendation message including the recommended stack; and receives a message transmitted by the terminal, using the recommended stack, relating to the acquisition of the item of content.

公开(公告)号：US20210067962A1

公开(公告)日：2021-03-04

申请号：US16958316

申请日：2018-12-20

Applicant: ORANGE

Inventor： Gael Fromentoux ,  Frederic Fieau

IPC: H04W12/06 ,  H04W24/02 ,  H04W24/06 ,  H04W12/08

Abstract: Devices and methods for accessing and for controlling access of a node, called “challenged node”, that has already been authenticated and is provisionally connected to a network of nodes, the network including at least one node, called “challenging node”. The method for controlling access, implemented by a challenging node, includes: defining a personalized test that must be executed by the challenged node; sending the test to the challenged node; receiving, from the challenged node, at least one result of the execution of the test; and authorizing or refusing the access of the challenged node to the network, at least on the basis of the result.

公开(公告)号：US20160149993A1

公开(公告)日：2016-05-26

申请号：US14899402

申请日：2014-06-23

Applicant: ORANGE

Inventor： Frederic Fieau ,  Gael Fromentoux ,  Nicolas Bihannic

IPC: H04L29/08 ,  H04L12/751

CPC classification number: H04L67/06 ,  H04L45/02 ,  H04L67/322

Abstract: A method for transmitting information relating to a communication network, implemented by a first server of a communication network, the method comprising the following steps: storing a data table matching identifiers of subnetworks of the communication network associated with respective qualities of service, with at least one network address of a user terminal, the network address comprising an IP address of the user terminal; receiving a request from a second server of a service provider, the request requesting information linked to said communication network; transmitting at least a part of the data table to the second server, the part comprising the matches between each subnetwork identifier and the at least one network address of a user terminal.

Abstract translation: 一种用于发送与由通信网络的第一服务器实现的通信网络有关的信息的方法，所述方法包括以下步骤：至少存储与各种服务质量相关联的通信网络的子网的标识符的数据表 用户终端的一个网络地址，所述网络地址包括所述用户终端的IP地址; 接收来自服务提供商的第二服务器的请求，所述请求请求链接到所述通信网络的信息; 将所述数据表的至少一部分发送到所述第二服务器，所述部分包括每个子网标识符与用户终端的至少一个网络地址之间的匹配。

公开(公告)号：US12166671B2

公开(公告)日：2024-12-10

申请号：US17254553

申请日：2019-06-07

Applicant: ORANGE

Inventor： Emile Stephan ,  Frederic Fieau ,  Gael Fromentoux

IPC: H04L29/06 ,  H04L45/02 ,  H04L45/302

Abstract: A method allowing execution of transmission functions hosted in intermediate pieces of equipment of a path established between two pieces of communication equipment. End-to-end encryption systems are designed to resist any surveillance or tampering attempt, as no third party can decrypt or modify the communicated data. There is a solution which, depending on the connection opening requests of the applications, allows to select and assemble the transport protocols necessary for the operation of the application. However, this method is local: this protocol stack is only assembled at the pieces of communication equipment constituting the ends of the connections. Consequently, the requests emitted by these applications are not transmitted to the intermediate pieces of equipment which host the desired functions. The method allowing execution of transmission functions allows to re-establish cooperation between pieces of communication equipment, constituting the ends of a connection, with intermediate nodes hosting transmission functions.

公开(公告)号：US11258770B2

公开(公告)日：2022-02-22

申请号：US16478350

申请日：2018-01-16

Applicant: ORANGE

Inventor： Emile Stephan ,  Frederic Fieau

IPC: H04L29/06 ,  H04L9/32 ,  H04L67/01 ,  H04L69/326

Abstract: A method for requesting proof of delegation for delivery of content to a client terminal via an encrypted connection. The content is referenced on a content server, to which the client terminal emitted a request to obtain the content. The content server has delegated the delivery of the content to a primary delivery server. The method is implemented by a secondary delivery server, to which the primary delivery server has delegated the delivery of the content. The method includes: receiving a request to establish an encrypted connection, from the client terminal, including an identifier of the content server; emitting a request for proof of delegation of delivery, addressed to the content server; receiving of a message from the content server, including an encryption key; emitting a response for establishing an encrypted connection, addressed to the client terminal; and establishing the encrypted connection with the client terminal using the encryption key.

公开(公告)号：US10812511B2

公开(公告)日：2020-10-20

申请号：US16067496

申请日：2016-12-22

Applicant: Orange

Inventor： Nicolas Bihannic ,  Gael Fromentoux ,  Frederic Fieau

IPC: H04L29/06

Abstract: A method for processing a network service supported by a network infrastructure allowing virtualization of network functions. The network service is made up of a sequence, called an initial sequence, of at least one virtualized network function processing an incoming stream. The method includes: detecting an anomaly relating to the at least one virtualized network function; on the basis of the anomaly, detecting and identifying a network attack targeting the network service; identifying, in the initial sequence, at least one virtualized network function impacted by the attack; modifying the initial sequence so as to circumscribe the attack in such a way that the incoming stream is routed towards at least one virtualized network function, called the curative function, carrying out a processing of the incoming stream, called the malicious stream, as well as of functions implemented by the at least one virtualized network function impacted by the attack.

公开(公告)号：US20190334926A1

公开(公告)日：2019-10-31

申请号：US16471987

申请日：2017-12-14

Applicant: ORANGE

Inventor： Frederic Fieau ,  Emile Stephan

IPC: H04L29/06

Abstract: Methods for validating delivery of content and verifying a delegation of delivery of a content, and corresponding devices and computer program products. A method is proposed for validating a delivery of a content to a client terminal. Such a method includes receiving, by the client terminal, an address, referred to as the received address, in response to a request sent to an address server in order to obtain an address of a delivery server of the content. The request includes a piece of information relating to the delivery server. Such a method further includes receiving, by the client terminal, a piece of information relating to an authentic address associated with the delivery server, the information being sent by a server of the content supplier, and determining the validity of the received address with respect to the authentic address on the basis of the information relating to the authentic address.

公开(公告)号：US10389836B2

公开(公告)日：2019-08-20

申请号：US15765143

申请日：2016-09-29

Applicant: Orange

Inventor： Arnaud Braud ,  Gael Fromentoux ,  Frederic Fieau

IPC: H04L29/08 ,  H04L12/46 ,  H04L29/06 ,  H04W80/06

Abstract: A method for controlling, in a communications network, recommendation messages exchanged during a session between a first endpoint, referred to as a source entity, and a second endpoint, referred to as a receiving entity. The messages are exchanged via a tube grouping data packets of a communication protocol with no guarantee of the delivery of the data packets. The method includes: obtaining recommendations contained in the recommendation messages via a control entity located on a network path of the tube, the control entity being authorized by an operator of the communications network; calculating a new recommendation message, on the basis of the recommendations obtained and of at least one information item relating to conditions of the network provided by the control entity; and sending the new recommendation message to at least one network entity located at one end of the tube.