Abstract: The messages established on a communication path between two nodes are increasingly encrypted. However, the devices present on the communication path may intervene to transport the messages and to read, edit or add data in the messages. It may also be desirable that only “authorized” devices can carry out these actions. In order to intervene on these data, it would be necessary that the devices on the communication path have available all the keys used by the nodes to encrypt and decrypt the data of the messages, which is difficult to envisage. A modification method enables a device, capable of intercepting a data message on a communication path between two nodes, to edit the data under the control of the nodes, while ensuring that a device cannot access the data edited by another device on the path.

Abstract: Controlling operations in a network having multiple multi-access edge computing architectures is disclosed. A method for controlling a service application in a multi-access edge computing network, the network including a plurality of interconnected entities, includes controlling, by a platform module comprised in a first entity of the plurality, an execution of a service application installed in a second entity of the plurality, by means of a proxy function comprised in the second entity, the second entity being distinct from the first entity.

Abstract: A solution for controlling the transmission of at least one near-live item of content from a user equipment to an ingest node of a content delivery network. Such a solution comprises the following: measuring a value of at least one actual telemetry datum relating to the transmission of at least one constituent data packet of the item of content; comparing the value of at least one actual telemetry datum with a value of at least one expected telemetry relating to the transmission of the at least one constituent data packet of the item of content; when the value of the actual telemetry datum and the value of the expected telemetry datum correspond, triggering, to the benefit of the content delivery network, a reward relating to the transmission of the content.

Abstract: A method for routing data of a session initialized between a terminal and a server, over a first network slice corresponding to a set of data-processing functions of a communication infrastructure, implemented by the terminal. This method includes receiving from the server at least one routing identifier determined as a function of at least one communication parameter of the session, configuring session information as a function of the at least one identifier received, and emitting to the server subsequent data routed over at least one second slice corresponding to the configured information.

Abstract: A method for routing data of a session initialized between a terminal and a server, over a first network slice corresponding to a set of data-processing functions of a communication infrastructure, implemented by the terminal. This method includes receiving from the server at least one routing identifier determined as a function of at least one communication parameter of the session, configuring session information as a function of the at least one identifier received, and emitting to the server subsequent data routed over at least one second slice corresponding to the configured information.

Abstract: In some existing naming identifier resolution solutions, a resolver obtains network addresses of servers associated with a naming identifier to be resolved and located in a third-party network that is not managed by an Internet service provider for which a user of a terminal has subscribed to a service offering. This impacts the resource management of communication devices managed by the Internet service provider and involved in the resolution of naming identifiers that are not used in an optimum manner. The method allows a third-party company to delegate the naming identifier resolution performed by resolvers of the third-party company to web servers managed by an Internet service provider. Delegating the naming identifier resolution to these web servers makes it possible to reduce costs linked to naming identifier resolution and also exhibits improved performance.

Abstract: A method for routing data of a session initialized between a terminal and a server, over a first network slot corresponding to a set of data-processing functions of a communication infrastructure, implemented by the terminal. This method includes receiving from the server at least one routing identifier determined as a function of at least one communication parameter of the session, configuring session information as a function of the at least one identifier received, and emitting to the server subsequent data of the session routed over at least one second slot corresponding to the configured information.

Abstract: A method for managing licenses for a service application across a plurality of interconnected industrial sectors. The method includes: selecting a delegation policy; deploying a local virtual license manager in one of the two industrial sectors, and sending a license authorizing the local virtual license manager to use the service application, in particular for executing a command of a cyber-physical system.

Abstract: A content distribution network is made up of terminals and servers that are connected as a network and cooperate in order to make content or data available to users. In order to be able to control access to the content via certain terminals, a solution called “URL signing” has been discussed. A “URL signing” solution requires establishing an active connection between a terminal requesting content and an originating server associated with the requested content. The solution relates to a method for accessing content implemented by a cache server, thus dispensing with the need for an active connection between a terminal requesting content and the originating server associated with the requested content.

Abstract: The advent of end-to-end encryption systems has put an end to the use of “caching” methods which consisted of replicating and storing data flows relating to content items in a “cache” which is located on board one or more intermediate devices. However, the disappearance of these “caching” solutions affects the management of the resources of different communication devices, particularly by bringing about an increase in the number of connections between communication devices that is necessary for delivering content items to the user terminals. Unlike known “caching” techniques in which the content itself is stored in at least one cache memory of a cache server, the method relies on storing in a cache server all of the messages exchanged between the original server hosting the content and the cache server, leading to the delivery of the content to the cache server.

Abstract: A redirection device and method, relating to identification of a data server capable of delivering content to a terminal, initiated by the transfer to a second name server of a second domain of a message for obtaining an identifier of the data server in the second domain received from the terminal. Following this transfer, the second name server sends a redirection message to a first domain, including a delegation chain including first data for redirection from the second domain to the first domain. The chain is updated recursively with the redirections between domains added by respective name servers until a name server is able to provide an identifier of the data server.

Abstract: Method for resolving name identifiers. Existing naming identifier resolution solutions give priority to one aspect, performance of a service or protection of privacy, over the other without it being possible to deviate therefrom. This lack of flexibility is detrimental to the user's quality of experience. This also impacts resource management for various communication equipment involved in the resolution of naming identifiers. The proposed solution makes it possible to give priority to performance or respecting privacy on a case-by-case basis. On the basis of an authorization to share a location of the equipment, the resolver gives priority to transmitting either a network address of a server associated with the naming identifier to be resolved requiring location information of the equipment, giving priority to performance, or a network address of a server associated with the naming identifier to be resolved not requiring location information of the equipment, giving priority to respecting privacy.

Abstract: A method and a device for acquiring an identifier of a data server able to deliver content to a terminal. The method is executed by the terminal, which transmits, to a resolution server of a communication architecture, a message requesting to obtain an identifier of the data server in the second domain. This request message triggers reception, from the resolution server, of an information message includes the identifier of the data server in a first domain. This message furthermore includes a delegation chain, which includes a sequence of redirections from the second domain to the first domain.

Abstract: Controlling operations in a network having multiple multi-access edge computing architectures is disclosed. A method for controlling a service application in a multi-access edge computing network, the network including a plurality of interconnected entities, includes controlling, by a platform module comprised in a first entity of the plurality, an execution of a service application installed in a second entity of the plurality, by means of a proxy function comprised in the second entity, the second entity being distinct from the first entity.

Abstract: A method of activating at least one processing entity from among a plurality of entities situated on the path of a data of a session between a terminal of a user and a server of a services provider. The terminal and the server are attached to a communications network. In the method, the terminal: sends to the server an identification message to receive identifiers of entities of the plurality, which are added to the message by the entities; receive from the server an acknowledgement message including the identifiers included in the identification message; select at least one identifier from among those received from the server; and send to the server a message relating to the activation of entities from among the plurality.

Abstract: A description is given of a method for securing a multi-access edge computing network, where provision is made for a hardware security device designed to be connected to a host module of the network. The method, implemented by the hardware security device, includes upon reception of a presence request from the host module in the network, verifying whether the presence request comprises data representative of an identifier of the host module, and, if so, sending a presence response to the host module, comprising a signature of the hardware security device.

Abstract: A method for routing data of a session initialized between a terminal and a server, over a first network slot corresponding to a set of data-processing functions of a communication infrastructure, implemented by the terminal. This method includes receiving from the server at least one routing identifier determined as a function of at least one communication parameter of the session, configuring session information as a function of the at least one identifier received, and emitting to the server subsequent data of the session routed over at least one second slot corresponding to the configured information.

Abstract: A method for allocating resources of a network infrastructure in order to provide a telecommunication service is disclosed. The method includes receiving, by a resource orchestrator, a request to instantiate virtualized functions on servers; determining servers to be allocated and resources of the network infrastructure enabling connectivity between the servers, based on the instantiation request; sending, to the determined resources, a configuration request enabling connectivity between the determined servers; and sending, to the determined servers, a request to allocate computing means on the determined servers.

Abstract: Methods for validating delivery of content and verifying a delegation of delivery of a content, and corresponding devices and computer program products. A method is proposed for validating a delivery of a content to a client terminal. Such a method includes receiving, by the client terminal, an address, referred to as the received address, in response to a request sent to an address server in order to obtain an address of a delivery server of the content. The request includes a piece of information relating to the delivery server. Such a method further includes receiving, by the client terminal, a piece of information relating to an authentic address associated with the delivery server, the information being sent by a server of the content supplier, and determining the validity of the received address with respect to the authentic address on the basis of the information relating to the authentic address.

Abstract: A method for routing data of a session initialized between a terminal and a server, over a first network slot corresponding to a set of data-processing functions of a communication infrastructure, implemented by the terminal. This method includes receiving from the server at least one routing identifier determined as a function of at least one communication parameter of the session, configuring session information as a function of the at least one identifier received, and emitting to the server subsequent data of the session routed over at least one second slot corresponding to the configured information.