Abstract: A system for securing the access to a destination of a virtual private network (VPNA) connected to a nominal access router (PE3) includes at least one core router (P2) adapted to: detect a failure affecting communication with the nominal access router (PE3); and switch the traffic to a protector access router (PE6) in a back-up tunnel bypassing the nominal access router (PE3). The protector access router (PE6) is adapted: to replace, in an MPLS packet, a nominal VPN label specific to the nominal access router (PE3) by a back-up VPN label specific to a back-up access router (PE4) connected to that destination; and to redirect said packet to the back-up access router (PE4) in a tunnel bypassing the nominal access router (PE3).

Abstract: A system for securing the access to a destination of a virtual private network (VPNA) connected to a nominal access router (PE3) includes at least one core router (P2) adapted to: detect a failure affecting communication with the nominal access router (PE3); and switch the traffic to a protector access router (PE6) in a back-up tunnel bypassing the nominal access router (PE3). The protector access router (PE6) is adapted: to replace, in an MPLS packet, a nominal VPN label specific to the nominal access router (PE3) by a back-up VPN label specific to a back-up access router (PE4) connected to that destination; and to redirect said packet to the back-up access router (PE4) in a tunnel bypassing the nominal access router (PE3).

Abstract: The method consists in: a user terminal issuing an access request to an access or IP service provider, the request containing user identification and authentication data with the provider and with an access and IP transport network operator, the access request being transmitted via the access network to an authentication server of the access or IP service provider; previously transmitting the access request to an authentication server of the network operator; the authentication server performing a procedure to authenticate the user on the basis of user identification data with the provider; and transmitting a response message to the user terminal, which response message contains the results of the user authentication by the authentication servers.

Abstract: The invention relates to a method for authentication of a user during access to services provided by a data transmission network (5) consisting in transmitting a random number to a user terminal (11), cryptographically calculating authentication data of a user with two actuators (6, 7, 8) of the network (5) with the aid of secret keys proposed by the user, introducing identification data and calculated authentication data into the access request and in transmitting said access request by the terminal (11) to an access controller (10) which transmits a respective authentication request containing the identification and authentication data of the user to each actuator, carrying out an identification procedure (28, 29) by each actuator on the basis of the user identification and authentication data containing in the authentication requests and emitting authentication reports containing authentication results to the terminal (11).

Abstract: The method consists in: a user terminal issuing an access request to an access or IP service provider, the request containing user identification and authentication data with the provider and with an access and IP transport network operator, the access request being transmitted via the access network to an authentication server of the access or IP service provider; previously transmitting the access request to an authentication server of the network operator; the authentication server performing a procedure to authenticate the user on the basis of user identification data with the operator; the authentication server performing a procedure to authenticate the user on the basis of the user identification data with the provider; and transmitting a response message to the user terminal, which response message contains the results of the user authentication by the authentication servers.