Abstract: A device and a method for the anonymous transmission of information, the transmission being a point-to-multipoint communication or a multipoint-to-multipoint communication between members of one and the same trusted network, a trusted network being predefined by a plurality of members and a plurality of independent proxies, the communication within a trusted network taking place on an anonymization network platform that masks the IP addresses of the members of the trusted network, the method being computer-implemented and comprising steps of: a member of a trusted network, comprising N? members and N proxies, generating a plurality N of complementary data fragments, from an initial data packet, such that recombining the N complementary fragments makes it possible to reconstruct the initial data packet; the sending member transmitting, via the anonymization network platform, each generated complementary fragment to an independent proxy from among the N proxies, respectively; each independent proxy retransmitti

Abstract: The present invention relates to a method for synchronising a node in a deterministic mesh network, in particular a network of sensors using a channel hopping (TSCH) transmission medium access mode. Each node measures the successive synchronisation offsets of its local clock in relation to those of neighbour nodes with which it enters into communication, the measurement being carried out by detecting a reception event of a packet transmitted by the neighbour node or an acknowledgement of a packet transmitted by said node to the neighbour node. The node estimates from these synchronisation offsets, a synchronisation offset for the timeslot and corrects its local clock by a fraction of the synchronisation offset thus estimated. Said fraction may be determined by means of multi-agent reinforcement learning (MARL), each agent being associated with a node of the network.

Abstract: A device and a method implemented by computer for authorizing, to a user having access rights granted by a first operator, a completely anonymous and secure access, with no trusted third-party, to a collaborative anonymization platform and/or to a service requiring privacy properties based on such a platform operated by various operators.

Abstract: An enhanced device and method for anonymization also offering improved security properties of data exchanged bidirectionally between a client and a server in a communication network. A protocol in respect of data exchange between client and server which relies on a two-level third-party servers architecture as well as on a system for bidirectional communication between the client and the server through these two levels of third-party servers.

Abstract: A device and a method implemented by computer for authorizing, to a user having access rights granted by a first operator, a completely anonymous and secure access, with no trusted third-party, to a collaborative anonymization platform and/or to a service requiring privacy properties based on such a platform operated by various operators.

Abstract: The present invention relates to a method for synchronising a node in a deterministic mesh network, in particular a network of sensors using a channel hopping (TSCH) transmission medium access mode. Each node measures the successive synchronisation offsets of its local clock in relation to those of neighbour nodes with which it enters into communication, the measurement being carried out by detecting a reception event of a packet transmitted by the neighbour node or an acknowledgement of a packet transmitted by said node to the neighbour node. The node estimates from these synchronisation offsets, a synchronisation offset for the timeslot and corrects its local clock by a fraction of the synchronisation offset thus estimated. Said fraction may be determined by means of multi-agent reinforcement learning (MARL), each agent being associated with a node of the network.

Abstract: An enhanced device and method for anonymization also offering improved security properties of data exchanged bidirectionally between a client and a server in a communication network. A protocol in respect of data exchange between client and server which relies on a two-level third-party servers architecture as well as on a system for bidirectional communication between the client and the server through these two levels of third-party servers.

Abstract: A device and method are provided for establishing a session key between two entities of a communication network that may be highly heterogeneous in terms of resources. The method, based on the Diffie-Hellman (DH) algorithm, provides for the delegation to assistant nodes of the network of the cryptographic operations required for the computations of the DH public value and of the DH session key for the node which is constrained in terms of resources.

Abstract: A method and a device for setting up a session key between a source entity and a target entity in a communication network comprises a plurality of communicating entities. The method, which relies on the use of symmetrical cryptographic primitives, provides each entity in the session with protection against denial of service attacks by setting up a session in four or five message exchanges.

Abstract: A method and a device for forming a secure wireless network for nodes with limited resources, between which no previous trust relationship exists is provided. The method can be used to generate a list of neighboring nodes for a requesting node and subsequently establish a secure channel between the requesting node and an authentication entity. A security association is established with each neighboring node on the basis of a master session key received via the secure channel.

Abstract: A system and a method is provided for establishing a session key in a context of communications between entities, the identifiers of which are generated cryptographically and for which one of the entities is highly resource-constrained. It includes assigning to assistant entities of the resource-constrained entity, the highest-consuming asymmetric cryptography operations.

Abstract: A method and a device for forming a secure wireless network for nodes with limited resources, between which no previous trust relationship exists is provided. The method can be used to generate a list of neighboring nodes for a requesting node and subsequently establish a secure channel between the requesting node and an authentication entity. A security association is established with each neighboring node on the basis of a master session key received via the secure channel.

Abstract: A method and a device for setting up a session key between a source entity and a target entity in a communication network comprises a plurality of communicating entities. The method, which relies on the use of symmetrical cryptographic primitives, provides each entity in the session with protection against denial of service attacks by setting up a session in four or five message exchanges.

Abstract: A device and method are provided for establishing a session key between two entities of a communication network that may be highly heterogeneous in terms of resources. The method, based on the Diffie-Hellman (DH) algorithm, provides for the delegation to assistant nodes of the network of the cryptographic operations required for the computations of the DH public value and of the DH session key for the node which is constrained in terms of resources.

Abstract: A system and a method are provided for authenticating the nodes of a communication network in order to access the services of a service provider, and includes a collective authentication of the nodes, performed in a single exchange between the nodes of the network declared in a group and an authentication server. Depending on the result of the authentication, the service provider is provided with cryptographic material in order to implement individualized controlled access to the resources or to the services offered for each node.

Abstract: A system and a method is provided for establishing a session key in a context of communications between entities, the identifiers of which are generated cryptographically and for which one of the entities is highly resource-constrained. It includes assigning to assistant entities of the resource-constrained entity, the highest-consuming asymmetric cryptography operations.

Abstract: A method of communicating traffic from a source to a group (G) of nodes including a Network Node (MNN) in a network using one or more multicast protocols. The network also comprises a Router (MR) for forwarding traffic between the network and the Internet and a Multicast Signalling Gateway (MSG) co-located with the Router (MR) and translating on an interface signalling messages of a multicast routing protocol (MRP) into messages of a group membership protocol (GMP). In the case of mobile networks, the interface is preferably an egress interface of the Mobile Router (MR). The Multicast Signalling Gateway (MSG) preferably translates multicast packets together with unicast source addresses and multicast destination addresses of multicast packets between IPv4 and IPv6 protocols.

Abstract: A mobile communication network comprises a home agent supporting mobility of a mobile entity by generating bindings between a home address of the mobile entity and a care of address of the mobile entity. A mapping processor provides at least one set of mappings between a potential future care of address for a mobile entity and a real time characteristic criterion. The mappings may for example be determined in response to previous movements of the mobile entity in the communication network. A processor determines a real time characteristic and the home agent is arranged to change a binding between the home address and a current care of address in response to the at least one set of mappings and the real time characteristic, and without receiving binding updates from the mobile entity. The approach may allow support for mobility of a mobile entity while reducing signalling in support of mobility.

Abstract: The invention provides a method and apparatus for building a linked binding cache. The method includes storing mobile router entries in a binding cache. The mobile router entries include a first mobile router entry having a prefix and an indication of the prefix's length along with an associated intermediate address. The method also includes linking a second mobile router entry to the first mobile router entry for delivering at least one data packet via the first mobile router. The method further includes adding a pointer in the binding cache from the entry of the second mobile router to the first mobile router entry when the intermediate address of the second mobile router matches the first mobile router's prefix in order to create a linked binding cache.

Abstract: A method of communicating traffic from a source to a group (G) of nodes including a Network Node (MNN) in a network using one or more multicast protocols. The network also comprises a Router (MR) for forwarding traffic between the network and the Internet and a Multicast Signalling Gateway (MSG) co-located with the Router (MR) and translating on an interface signalling messages of a multicast routing protocol (MRP) into messages of a group membership protocol (GMP). In the case of mobile networks, the interface is preferably an egress interface of the Mobile Router (MR). The Multicast Signalling Gateway (MSG) preferably translates multicast packets together with unicast source addresses and multicast destination addresses of multicast packets between IPv4 and IPv6 protocols.