Abstract: A process implemented by an administration entity for configuring an access unit of a communication network in a virtualised environment having an operating software application. The process includes receiving, from a mediating entity of the operating software application, a log message of the operating software application associating an identifier of the operating software application and an identifier of a node supporting the operating software application. Prior to or following receipt of the log message, the administration entity determines an operating software application for hosting the access unit based on a test relating to a placement criterion relating to a data stream conveyed by the access unit. The administration entity then emits, to the mediating entity of the determined operating software application, a message for configuring the access unit in the determined operating software application, the message including an identifier of at least one other access unit of the communication network.

Abstract: In some existing naming identifier resolution solutions, a resolver obtains network addresses of servers associated with a naming identifier to be resolved and located in a third-party network that is not managed by an Internet service provider for which a user of a terminal has subscribed to a service offering. This impacts the resource management of communication devices managed by the Internet service provider and involved in the resolution of naming identifiers that are not used in an optimum manner. The method allows a third-party company to delegate the naming identifier resolution performed by resolvers of the third-party company to web servers managed by an Internet service provider. Delegating the naming identifier resolution to these web servers makes it possible to reduce costs linked to naming identifier resolution and also exhibits improved performance.

Abstract: A solution in which, an item of content to be delivered being split into a plurality of portions, these various portions are transmitted by various nodes of content delivery networks in order to guarantee, in particular, a content delivery rate. Known solutions for shared delivery of an item of content cannot guarantee that the requested content will be delivered at the rate and quality required by the user terminal. The solution conditions a reward to be given to the content delivery network, or its manager, to meeting transmission conditions embodied in expected telemetry data for the delivery of an item of content. Such a solution offers more certainty to the user requesting the content as regards to the quality of the delivery made by a group of nodes since the quality of the transmission is guaranteed.

Abstract: A method allowing improving the cooperation between two items of communication equipment forming the ends of a path including at least one intermediate item of equipment. End-to-end encryption systems are designed to withstand any surveillance or tampering attempt, as no third party can decrypt or alter the data being communicated. This reduction in the cooperation between the items of communication equipment located at the ends of the connection and the intermediate items of equipment negatively impacts the performances of a connection established over the communication path including intermediate items of equipment. The method allows re-establishing the cooperation between items of communication equipment, forming the ends of a connection, with intermediate nodes by calculating an intermediate performance parameter.

Abstract: A method for managing licenses for a service application across a plurality of interconnected industrial sectors. The method includes: selecting a delegation policy; deploying a local virtual license manager in one of the two industrial sectors, and sending a license authorizing the local virtual license manager to use the service application, in particular for executing a command of a cyber-physical system.

Abstract: A method for managing communications implementing a mobile intermediate device generating a radio beam that covers a radio cell, implementing for a data stream of the radio beam: obtaining the number of individual phases each associated with a target rate in the stream for transmissions from the mobile intermediate device to the radio cell: detecting a start of a connection of a user device present in the radio cell to a data server via the mobile intermediate device; if an individual phase is available for the stream: transmitting connection start data from the data server between the mobile intermediate device and the user device at the target rate of the individual phase until a stop criterion; if no individual phase is available for the stream: transmitting connection start data from the data server between the mobile intermediate device and the user device at a rate lower than the target rate.

Abstract: A method implemented by a first aerial or spatial device to transmit data to at least one terminal. The method includes: receiving, from a cooperation entity, information relating to resources of at least one second aerial or spatial device that can be used to transmit data to the at least one terminal; and if a cooperation criterion is verified, triggering a cooperation with the at least one second device as a function of the information to transmit data to the at least one terminal. The cooperation includes: sending, to the at least one second device, second data to be transmitted to the at least one terminal.

Abstract: A method implemented by a network device for monitoring a resource usage to communicate with at least one terminal. The method includes: sending data to the at least one terminal; and sending, to a monitoring entity and/or to the at least one terminal, one or more usage proofs indicating resources used by the network device to communicate the data to the at least one terminal.

Abstract: A method is described for generating, by an electronic device, at least one digital passport relating to an application intended to be deployed in at least one computer entity, the digital passport including at least one entry including information relating to at least one development environment in which the application is developed.

Abstract: A solution for controlling the transmission of at least one near-live item of content from a user equipment to an ingest node of a content delivery network. Such a solution comprises the following: measuring a value of at least one actual telemetry datum relating to the transmission of at least one constituent data packet of the item of content; comparing the value of at least one actual telemetry datum with a value of at least one expected telemetry relating to the transmission of the at least one constituent data packet of the item of content; when the value of the actual telemetry datum and the value of the expected telemetry datum correspond, triggering, to the benefit of the content delivery network, a reward relating to the transmission of the content.

Abstract: A method for counting data relating to an application transmitted by a terminal unit to a data server by a device, using an encrypted session between the terminal unit and the server. The method is implemented by the terminal unit and includes: transmitting a plurality of packets, each including a datum for determining a security key used for encrypting the packet; incrementing a counter of the application-related data; adding the incremented counter to a cooperation packet including the determining datum with a value distinct from a value of the data for determining the security keys of the other packets of the plurality of packets, the value corresponding to a security key used for encrypting packets of the plurality of packets exchanged between the terminal unit and the data server prior to sending the cooperation packet; and sending the cooperation packet including the added counter to the data server.

Abstract: A solution for providing a certification token for an instantiation of a node cluster to an item of equipment requesting it in an “edge computing” environment. Existing authentication solutions are not well suited to the context of edge computing, as they cannot guarantee that the various parties involved in providing the requested service have instantiated all the nodes and/or servers in accordance with the technical and/or contractual constraints relating to the requested service. The present solution makes it possible to establish, and therefore be able to provide upon request, an instantiation certificate of a node cluster contributing to implementing a service. Such a certificate makes it possible to guarantee that the various items of equipment and parties involved in the execution and provision of a given service comply with the terms of a service provision contract.

Abstract: A description is given of a method for securing a multi-access edge computing network, where provision is made for a hardware security device designed to be connected to a host module of the network. The method, implemented by the hardware security device, includes upon reception of a presence request from the host module in the network, verifying whether the presence request comprises data representative of an identifier of the host module, and, if so, sending a presence response to the host module, comprising a signature of the hardware security device.

Abstract: A method for securing the transmission of at least one data packet along a data path of a telecommunications network is disclosed. According to such a method, a security device performs: obtaining a variance delay representative of a difference between an actual end-to-end transit delay of the at least one data packet along the data path and an expected end-to-end transit delay of the at least one data packet along the data path; and securing the transmission by implementing at least one security action based on the variance delay.

Abstract: A method for capturing a packet from an encrypted session established between a terminal unit and a data server. The packet includes a datum for determining a security key used for the encryption of the packet. The method is implemented by a device routing the packet between the terminal unit and the data server and includes: analysis of a plurality of packets transmitted by the terminal unit and destined for the server; identification of a cooperation packet from among the plurality of analyzed packets, the cooperation packet including the determining datum corresponding to a security key used for the encryption of packets transmitted by the terminal unit to the data server prior to the terminal unit sending the cooperation packet; and decryption of the received cooperation packet using a security key corresponding to the determining datum from the identified cooperation packet.

Abstract: The advent of end-to-end encryption systems has put an end to the use of “caching” methods which consisted of replicating and storing data flows relating to content items in a “cache” which is located on board one or more intermediate devices. However, the disappearance of these “caching” solutions affects the management of the resources of different communication devices, particularly by bringing about an increase in the number of connections between communication devices that is necessary for delivering content items to the user terminals. Unlike known “caching” techniques in which the content itself is stored in at least one cache memory of a cache server, the method relies on storing in a cache server all of the messages exchanged between the original server hosting the content and the cache server, leading to the delivery of the content to the cache server.

Abstract: A method for improving the cooperation between two communication equipments constituting the ends of a path having at least one intermediate equipment. End-to-end encryption systems are designed to be resistant to any attempts of surveillance or tampering, as no third party can decrypt or alter the data being communicated. This reduction in cooperation between the communication equipments located at the ends of the connection and the intermediate equipments negatively impacts the performance of a connection established on the communication path comprising intermediate equipments. The method for improving cooperation makes it possible to re-establish cooperation between communication equipments that constitute the ends of a connection with intermediate nodes by calculating an intermediate performance parameter.

Abstract: Method for resolving name identifiers. Existing naming identifier resolution solutions give priority to one aspect, performance of a service or protection of privacy, over the other without it being possible to deviate therefrom. This lack of flexibility is detrimental to the user's quality of experience. This also impacts resource management for various communication equipment involved in the resolution of naming identifiers. The proposed solution makes it possible to give priority to performance or respecting privacy on a case-by-case basis. On the basis of an authorization to share a location of the equipment, the resolver gives priority to transmitting either a network address of a server associated with the naming identifier to be resolved requiring location information of the equipment, giving priority to performance, or a network address of a server associated with the naming identifier to be resolved not requiring location information of the equipment, giving priority to respecting privacy.

Abstract: A content distribution network is made up of terminals and servers that are connected as a network and cooperate in order to make content or data available to users. In order to be able to control access to the content via certain terminals, a solution called “URL signing” has been discussed. A “URL signing” solution requires establishing an active connection between a terminal requesting content and an originating server associated with the requested content. The solution relates to a method for accessing content implemented by a cache server, thus dispensing with the need for an active connection between a terminal requesting content and the originating server associated with the requested content.

Abstract: The field of the system and method is that of updating, within a first telecommunication network, access policies to a second telecommunication network. Edge computing thus minimises bandwidth requirements between devices and data processing centres. Generally, the access policy depends on the access rights negotiated between the operator of a communication network MNO and the operator of the communication network MEC (edge computing). However, these policies are most often static and do not allow for flexible management of the changing needs of the parties concerned. By establishing direct communication between a device in a communication network MEC and a device in a communication network MNO, the system and method enables the implementation of a more flexible and dynamic procedure for updating the access policy to the communication network MEC.