Abstract: The invention concerns the detecting of a double attachment of an equipment communicating both with a wireless network and with a wired network, in particular when the connections with said networks are established by sending a connection configuration request comprising an identifier of the equipment, such as DHCP Host Name. The invention is characterized in that it consists: a) in detecting, at least on the wireless network, connection configuration requests emitted by the equipments (E10), b) analyzing the contents of the requests and extracting the equipment identifiers (E11), c) from one equipment identifier extracted at step b), determining whether said equipment has additionally sent a connection configuration request at least to the wired network with the same identifier (E13), and d) triggering an alarm if the result at step c) is positive (E16).

Abstract: The invention relates to a method in particular enabling the computer terminal (T_L) of a local network (RES_L), connected to a gateway (PASS_D) of a remote network (RES_D) by an IPsec tunnel in blocking mode, to launch a print job on a printer (E_L) belonging to the local network. To do this, the gateway (PASS_D) stores the correspondence between the public address (AD_1) of the local router (ROUT_L) providing the connection of the terminal to the Internet, and the private address (ad_3) assigned to the terminal (T_L) in the addressing plan of the remote network (RES_D) during the establishment of the tunnel, and sends the print flow to the local router (ROUT_L), which directs it to the local printer (E_L) by a port translation technique.

Abstract: Disclosed is a method and system for controlling access of a source terminal to a network that includes, in particular, a firewall and an authentication portal that maintains the firewall during an access request originating from the source terminal and which permits access when periodically and subsequently provided with a valid authentication token. The source terminal can also communicate in tunnel mode with the destination terminal of the network via a block mode tunnel. Authentication tokens are periodically supplied on the OSI Layer 2 level so that the tokens continue to be provided during a block tunnel mode communication. A network operator can maintain access control using a captive portal paradigm even when a user chooses to use a block mode tunnel.

Abstract: The invention concerns the detecting of a double attachment of an equipment communicating both with a wireless network and with a wired network, in particular when the connections with said networks are established by sending a connection configuration request comprising an identifier of the equipment, such as DHCP Host Name. The invention is characterized in that it consists: a) in detecting, at least on the wireless network, connection configuration requests emitted by the equipments (E10), b) analyzing the contents of the requests and extracting the equipment identifiers (E11), c) from one equipment identifier extracted at step b), determining whether said equipment has additionally sent a connection configuration request at least to the wired network with the same identifier (E13), and d) triggering an alarm if the result at step c) is positive (E16).

Abstract: This method of detecting address spoofing in a wireless network, comprising the steps of obtaining frames comprising an address of a device having sent the frame and a timestamp representative of the time of sending of the frame by said device; of analyzing the timestamps included in the frames having one and the same sending device address; and of detecting a spoofing of said address according to the analysis of said timestamps.

Abstract: A method is provided whereby management frames, transmitted over the wireless network and comprising each an address of a frame transmitter and a frame body containing a plurality of information fields are obtained. Some of the information fields contained in the frame body of several management frames obtained successively and having the same transmitter address are analyzed so as to trigger an alarm in case of detected variation in said information fields.

Abstract: A method of detecting that a unit communicating with a communications network is sending a large number of frames over that network, said method including a step of analyzing a distribution of the time shifts between frames sent over the network in order to determine if said distribution corresponds to a distribution with memory.

Abstract: A method of preventing illegitimate use of a network protocol consisting of a stream of data packets, wherein the method comprises steps of calculating a delay that is an increasing function of the bit rate of a stream coming from a machine, and forwarding packets of the stream after said delay.

Abstract: The invention relates to a method in particular enabling the computer terminal (T_L) of a local network (RES_L), connected to a gateway (PASS_D) of a remote network (RES_D) by an IPsec tunnel in blocking mode, to launch a print job on a printer (E_L) belonging to the local network. To do this, the gateway (PASS_D) stores the correspondence between the public address (AD_1) of the local router (ROUT_L) providing the connection of the terminal to the Internet, and the private address (ad_3) assigned to the terminal (T_L) in the addressing plan of the remote network (RES_D) during the establishment of the tunnel, and sends the print flow to the local router (ROUT_L), which directs it to the local printer (E_L) by a port translation technique.

Abstract: The invention relates, in particular, to a procedure for controlling access of a source terminal (T_SOUR) to a network that includes, in particular, a firewall (PF) and an authentification portal; this portal places and maintains the firewall in an access authorisation status in response to a valid access request in basic mode originating from the source terminal when periodically and subsequently provided with a valid authentification token. The source terminal can also communicate in tunnel mode with the destination terminal of the network via a block tunnel (M_BLQ.) According to the invention, the periodic supply of the authentification token is performed by the transmission on the ISO model Level 2 layer (L2) so that the token continues to be provided during a block tunnel mode communication.

Abstract: A method of securing requests for access to services from a terminal (1) able to communicate with a plurality of service operators (A; B) delivering respective services, comprising the following steps: furnishing the terminal with at least one software component (6; 7) provided by an operator delivering at least one service with a particular access condition, upon a request for access to the said service from the terminal by way of a communications network, executing the software component provided by the operator locally in the terminal, the execution of the software component comprising at least the presentation to a user of the terminal of an indication defined by the operator in the component in relation to the particular access condition of the service.