Abstract: The invention relates to a method for controlling access to a first network, comprising receiving, by a first network access device of the first network, an access request from a visiting user device, determining, by the first network access device, if the visiting user device was granted an access to the first network, if the visiting device has not been granted an access to the first network, determining if there is a second network access device that granted the visiting user device an access to a second network and the second network access device is linked to the first network access device, and if the second network access device exists, granting the visiting user device an access to the first network by the first network access device.

Abstract: In an Internet interface device such as a gateway managing a local network, a processor obtains a packet received from a device via a local network interface. The processor can determine whether or not the packet originates from a device in the local network deemed to be part of a particular group. The processor can also determine if the packet is addressed to an internet domain for which it stores identifying information in memory. In this case, the processor inspects the packet in search of a cookie. In case no cookie is found, the packet is output as is; if a cookie is found, the processor modifies cookie information in the packet by inserting a cookie specific to the Internet interface device, which results in a modified packet that then is output through the internet interface. Using the original cookie and the added cookie, it is possible to link cookies sent from different devices in the local network.

Abstract: An access point receives from a client a first nonce and a first cryptographic hash for the first nonce, the first cryptographic hash calculated using a first key derived from a second key, the second key input on the client or derived from a passphrase input on the client, derives first keys from each of a stored primary input and at least one stored secondary input valid at the deriving, the stored primary input and the at least one stored secondary input each being one of a second key and a passphrase, verifies the cryptographic hash using each derived first key to find a derived first key that checks the first cryptographic hash, generates a third key and a second cryptographic hash using the derived first key that checks the first cryptographic hash, and sends the third key and the second cryptographic hash to the client.

Abstract: An access point receives from a client a first nonce and a first cryptographic hash for the first nonce, the first cryptographic hash calculated using a first key derived from a second key, the second key input on the client or derived from a passphrase input on the client, derives first keys from each of a stored primary input and at least one stored secondary input valid at the deriving, the stored primary input and the at least one stored secondary input each being one of a second key and a passphrase, verifies the cryptographic hash using each derived first key to find a derived first key that checks the first cryptographic hash, generates a third key and a second cryptographic hash using the derived first key that checks the first cryptographic hash, and sends the third key and the second cryptographic hash to the client.

Abstract: The invention relates to a method for controlling access to a first network, comprising receiving, by a first network access device of the first network, an access request from a visiting user device, determining, by the first network access device, if the visiting user device was granted an access to the first network, if the visiting device has not been granted an access to the first network, determining if there is a second network access device that granted the visiting user device an access to a second network and the second network access device is linked to the first network access device, and if the second network access device exists, granting the visiting user device an access to the first network by the first network access device.

Abstract: A method for displaying a content from 4D light field data is described. Such method is executed by an electronic device, and is remarkable in that it comprises changing point of view of the content and/or a focus plane associated with the content, according to viewing rights.

Abstract: A TCP handshake is distributed by having an initiator device send, to a server SYN(m) with the IP address of a terminator device as source address. The initiator device can then forget any TCP state for the SYN(m). The server responds with a SYN-ACK(m+1, n) according to the normal TCP handshake, but the response goes to the terminator device that receives the message, reconstructs the TCP handshake as if it had sent the initial SYN message, and sends an ACK(n+1) to the server. The TCP handshake method can be used to avoid allocation of resources in for example device monitoring.

Abstract: A device such as a gateway comprises a communication interface configured to receive an inbound connection via a network, memory configured to store a list of domain names corresponding to web search engines and at least one hardware processor configured to obtain an IP address of a device from the inbound connection, obtain, for example using reverse DNS, a domain name corresponding to the IP address, determine that the device is open to the network if the domain name is on the list of domain names corresponding to web search engines and, in case the device is open to the network, perform a mitigating action.

Abstract: A device (100) and a method for password generation. When password generation is triggered (S20), a processor (110) of the device (100) applies (S21) a function to constant and non-constant parameters in or around the device (100) to obtain a value from which the password is generated (S22). A password authentication value is generated (S23) from the password and stored. In case of an administrator password, the password is encrypted using a public key (S24) and stored; in case of a network password, the password is sent (S25) through a one-way connection to a storage device such as a persistent electronic display (150) on which information rests even without power supply. The processor (110) finally deletes (S26) the generated password so that it is only displayed on the display (150).

Abstract: A method and an apparatus utilize communication devices and systems and/or Internet of Things (IoT) devices and systems to track a person's user interaction events, store them, and process the individual events or the accumulated history of these events for computing and generating an indicator of the level of user isolation for the tracked individual. During the monitoring and processing of the events, when the generated indicator meets or exceeds a predetermined value, an alert can be generated to notify the individual's friends, relatives, associates, or other identified persons to initiate contact with the senior.

Abstract: An access point receives from a client a first nonce and a first cryptographic hash for the first nonce, the first cryptographic hash calculated using a first key derived from a second key, the second key input on the client or derived from a passphrase input on the client, derives first keys from each of a stored primary input and at least one stored secondary input valid at the deriving, the stored primary input and the at least one stored secondary input each being one of a second key and a passphrase, verifies the cryptographic hash using each derived first key to find a derived first key that checks the first cryptographic hash, generates a third key and a second cryptographic hash using the derived first key that checks the first cryptographic hash, and sends the third key and the second cryptographic hash to the client.

Abstract: In an Internet interface device such as a gateway managing a local network, a processor obtains a packet received from a device via a local network interface. The processor can determine whether or not the packet originates from a device in the local network deemed to be part of a particular group. The processor can also determine if the packet is addressed to an internet domain for which it stores identifying information in memory. In this case, the processor inspects the packet in search of a cookie. In case no cookie is found, the packet is output as is; if a cookie is found, the processor modifies cookie information in the packet by inserting a cookie specific to the Internet interface device, which results in a modified packet that then is output through the internet interface. Using the original cookie and the added cookie, it is possible to link cookies sent from different devices in the local network.

Abstract: A method for pairing a first device with a second device is disclosed. A salient idea is to generate a discriminant and visually differentiable visual representation from a unique identifier of a device, to make it available for example together with the unique identifier on a printed package of the device, and to regenerate it for display as part of the pairing process. A user checking the displayed visual representation matches the printed visual representation of the package can successfully terminate a pairing process.

Abstract: A method for providing a service comprising at a service provider device that establishes a first secure communications channel with a customer premise equipment and establishes with a user device a second secure communications channel, passing through the customer premise equipment and the first secure communications channel, upon reception of correct credentials for the user. The service provider device receives a request for a service from the user device, verifies that the request was received through the second secure communications channel and provides the service to the user device through the second secure communications channel only in case the customer premise equipment is part of a set of devices through which the second secure communications channel must pass.

Abstract: Rendering second screen information on a second screen device. A user device receives information characterizing the source of a content data stream and the content data stream; generates a watermark payload using a plurality of parameters comprising the information and a time of the user device; and inserts a watermark comprising the watermark payload into the content data stream that is rendered. The second screen device captures the watermark and extracts the watermark payload and then at least one of the plurality of parameters; generates, using the at least one extracted parameter, a request that is sent the request to a server; receives information from the server in response to the request; and displays the received information on a screen of the second screen.

Abstract: A method for displaying a content from 4D light field data is described. Such method is executed by an electronic device, and is remarkable in that it comprises changing point of view of the content and/or a focus plane associated with the content, according to viewing rights.

Abstract: A client has a block of the code to be executed, executes the part and then determines the next block and requests it from a server that returns the block and a list of possible following blocks, and updates a list of blocks executed by the client. The client then executes the next block. To modify the program, it is sufficient to patch the corresponding block or blocks on the server. The transition system, which defines possible following blocks, is modified to integrate the new block in place of the old one. Depending on the modifications, it may be necessary to patch the memory of the client too. In this case, a complement block is added in order to modify the client memory to be compatible with the new block.

Abstract: A method for fingerprinting wireless devices and a method for using a device fingerprint for identifying wireless devices. A monitoring station listens to a channel. For each received frame, the station measures the inter-arrival time from the end of the previously received frame to the end of the present frame, If possible, the station obtains the identity of the sender of the frame. If the sender is known, then the station stores the inter-arrival time in a histogram for the sender; the histogram becomes the fingerprint for the sender. Identification of a device begins by obtaining a number of inter-arrival times for an unknown sender and then matching these to stored fingerprints using a suitable similarity measure. The invention is particularly suitable for IEEE 802.11 and may for example be used to detect so-called MAC spoofing and as an additional layer of an identification protocol.

Abstract: A TCP handshake is distributed by having an initiator device send, to a server SYN(m) with the IP address of a terminator device as source address. The initiator device can then forget any TCP state for the SYN(m). The server responds with a SYN-ACK(m+1, n) according to the normal TCP handshake, but the response goes to the terminator device that receives the message, reconstructs the TCP handshake as if it had sent the initial SYN message, and sends an ACK(n+1) to the server. The TCP handshake method can be used to avoid allocation of resources in for example device monitoring.

Abstract: In one embodiment, it is proposed a method for providing information to determine a graph associated with a data item, said graph being representative of a history of said data item in a network, and said graph comprising a set of vertices and a set of edges, each vertex being associated with an electronic device of said network, and each edge linked at least two vertices being representative of a dataflow between said at least two vertices.