Abstract: In an Internet interface device such as a gateway managing a local network, a processor obtains a packet received from a device via a local network interface. The processor can determine whether or not the packet originates from a device in the local network deemed to be part of a particular group. The processor can also determine if the packet is addressed to an internet domain for which it stores identifying information in memory. In this case, the processor inspects the packet in search of a cookie. In case no cookie is found, the packet is output as is; if a cookie is found, the processor modifies cookie information in the packet by inserting a cookie specific to the Internet interface device, which results in a modified packet that then is output through the internet interface. Using the original cookie and the added cookie, it is possible to link cookies sent from different devices in the local network.

Abstract: A method adapted to be implemented at a local network equipment configured to be attached to a remote network equipment through a network connection is disclosed. The remote network equipment runs a first network function. The method includes updating second configuration information with first configuration information received from the remote network equipment. When the network connection is interrupted, launching a second network function at the local network equipment based on updated second configuration information and updating second configuration information from the operation of the second network function running at the local network equipment. When the network connection is recovered after interruption sending to the remote network equipment last updated second configuration information, aborting the second network function running at the local network equipment.

Abstract: A method and an apparatus for mobile device roaming are provided. The apparatus includes an information obtaining unit for obtaining information about the network capability at a given location of at least two mobile devices having a first mobile device and a second mobile device, a predicting unit for obtaining a network score of each of the at least two mobile devices at the given location according to the obtained information about the network capabilities, and a roaming unit for switching the traffic of the first mobile device to the second mobile device according to respective obtained network scores of the at least two mobile devices, when the first mobile device reaches the given location.

Abstract: Network equipment for processing a request from a terminal configured to be connected to a network to which the network equipment can be connected is described. The network equipment includes a receiver configured to receive, from the terminal, a message part of the processing request, a relay agent configured to provide a network identification information into the received message, and a load balancer configured to forward the received message to one of a plurality of processing units of the network equipment, depending on workload information associated with the processing units. The processing units are further configured to retrieve, based on the network identification information extracted from the received message, context information from a database unit shared between the processing units and to process the received message according to a state of the processing request, the processing request state being retrieved from the context information.

Abstract: Methods and apparatus for controlling the communication between a first network and a second network. The method comprises: creating a data path between the first network and the second network; building a translation table which translate a local legacy address of a device in the first network to a local virtual address of a device in the second network; and transmitting a flow rule created based on the translation table to the Network Address Translation (NAT) function of the created data path between the first network and the second network.

Abstract: A method for providing a service comprising at a service provider device that establishes a first secure communications channel with a customer premise equipment and establishes with a user device a second secure communications channel, passing through the customer premise equipment and the first secure communications channel, upon reception of correct credentials for the user. The service provider device receives a request for a service from the user device, verifies that the request was received through the second secure communications channel and provides the service to the user device through the second secure communications channel only in case the customer premise equipment is part of a set of devices through which the second secure communications channel must pass.

Abstract: A method and an apparatus for matching corresponding frames in two multimedia streams are suggested. The first multimedia stream is an original multimedia stream for which meta-data are available. The second multimedia stream is broadcasted or multi-casted multimedia stream and has undergone processing steps such that the meta-data of the original video stream are no more available or no longer reliable. The matching of corresponding frames in the two multimedia streams is based on the comparison of audio fingerprints and the detection of shot boundaries. Matching corresponding frames with frame accuracy enables inserting targeted content like advertisements into a sequence of video frames especially in a broadcast or multicast environment where meta-data and time markers cannot be relied upon.

Abstract: An apparatus adaptively connecting devices in a network with gateways coupled to external networks is provided. The apparatus includes a switch for connecting one of the devices with one of the gateways, and a controller for controlling the switch so as to identify the one of the gateways for the one of the devices by using a routing algorithm, the routing algorithm being dynamically determined based on information of the apparatus or received from the devices or the gateways.

Abstract: Isolation of an active participant in a group of participants commences by first capturing images and audio of participants. Thereafter, an active one of the participants in the group of participants (e.g., a participant that is currently speaking) is identified. After identification of the active participant, at least one of participants' images and participants' audio are rendered to isolate the active participant.

Abstract: A method for fingerprinting wireless devices and a method for using a device fingerprint for identifying wireless devices. A monitoring station listens to a channel. For each received frame, the station measures the inter-arrival time from the end of the previously received frame to the end of the present frame, If possible, the station obtains the identity of the sender of the frame. If the sender is known, then the station stores the inter-arrival time in a histogram for the sender; the histogram becomes the fingerprint for the sender. Identification of a device begins by obtaining a number of inter-arrival times for an unknown sender and then matching these to stored fingerprints using a suitable similarity measure. The invention is particularly suitable for IEEE 802.11 and may for example be used to detect so-called MAC spoofing and as an additional layer of an identification protocol.

Abstract: In one embodiment, it is proposed a method for providing information to determine a graph associated with a data item, said graph being representative of a history of said data item in a network, and said graph comprising a set of vertices and a set of edges, each vertex being associated with an electronic device of said network, and each edge linked at least two vertices being representative of a dataflow between said at least two vertices.

Abstract: Video is provided in chunks to a player. Some chunks need to be computed because they are targeted to a particular user. Computing of targeted chunks is done by cloud computing instances that pop jobs from associated queues. Targeted chunks may be required sooner or later than initially expected due to the player using trick modes. In order to have targeted chunks delivered to the player at the right time, a play time tracker regularly inserts overloaded chunk requests in the manifest file. The overloaded requests comprise references to future needed targeted chunks as well as expected play out time of these chunks. Overloaded requests are verified and if it is determined that the future needed targeted chunk has not already been computed, a message for verification is transmitted to a scheduler. The scheduler verifies if measures need to be taken to ensure timely delivery of the targeted video chunks.

Abstract: Method for providing targeted content in image frames of a video and corresponding device A scalable and flexible solution for targeting a video through overlaying image frame zones with content that is targeted to individual users according to user preferences is provided. A video sequence is processed to determine sequences of image frames that comprise overlayable zones for overlay with targeted content. Features that describe these frames and these zones for a content overlay operation are stored in metadata that is associated to the unmodified video sequence. When the video is transmitted to a user, the metadata is used to overlay content in the overlayable zones, whereby the content is chosen according to the preferences of the user.

Abstract: A controlled system performs internal taint tracking of data items. When a data item is created, the controlled system computes a name and a taint for the data item and performs an initialization function, thus informing a tracking entity that of the name and data of the data item. The taint is propagated to further data items, while the name may change, and when a data item is exported to or imported from a further device, the controlled system informs the tracking entity of the name and taint of the exported or imported data item as well as its source and destination. A controlled system may request a propagation history from the tracking entity. As the tracking entity is shared by more than one controlled system, it is possible to perform taint tracking across controlled systems even if these do not use the same taint tracking framework.

Abstract: A method and a fingerprinting device for countering fingerprint forgery in a communication system. The fingerprinting device obtains and stores a reference fingerprint for a client device, generates and transmits decoy traffic that appears to originate from the client device, the decoy traffic having different fingerprinting properties than real traffic from the client device, generates a fingerprint for non-decoy traffic purportedly from the client device, and compares the generated fingerprint with a reference fingerprint. A forged fingerprint is detected if there is a mismatch. The decoy traffic preferably comprises frames to which no response is needed. The invention is particularly suited for 802.11 using fingerprints based on duration fields of received frames and the decoy traffic is then preferably probe request frames and null data frames.

Abstract: A method for registering a client to a server connected through a network is disclosed wherein the client being assigned with a determined network address. The method comprises sending by the client to the server, a request comprising a first network address among a sequence of at least one network address; denying by the server the request comprising the first network address among the sequence of at least one network address; sending by the client to the server, a request comprising a second network address; a granting by the server the request comprising the second network address when the second network address is derived from the determined network address and when the first network address among the sequence of at least one network address is derived from a first function using a shared secret between the client and the server and said determined network address of the client. A client device and a server device implementing the registration method are further disclosed.

Abstract: It is provided a method for providing content for a video.

Abstract: A method and an apparatus for matching corresponding frames in two multimedia streams are suggested. The first multimedia stream is an original multimedia stream for which meta-data are available. The second multimedia stream is broadcasted or multi-casted multimedia stream and has undergone processing steps such that the meta-data of the original video stream are no more available or no longer reliable. The matching of corresponding frames in the two multimedia streams is based on the comparison of audio fingerprints and the detection of shot boundaries. Matching corresponding frames with frame accuracy enables inserting targeted content like advertisements into a sequence of video frames especially in a broadcast or multicast environment where meta-data and time markers cannot be relied upon.

Abstract: A method of processing content according to a workflow, where a digital content is processed on one of a plurality of processing devices according to process definition associated to the content, includes the steps, iterated at the processing device, of: a) receiving from a server a signed workflow information, a workflow information comprising a status of the content processing, a signature of the process definition and a hash of the content; b) verifying the workflow information; c) when the workflow information is verified, processing the content according to the process definition and according to status of the content processing; d) updating and signing the workflow information; e) sending to the server the signed workflow information; and the steps iterated at the server of: f) receiving from a processing device a signed workflow information; g) publishing the signed workflow information received from the processing device. A system for performing the method is also provided.

Abstract: Enforcing a global access policy, comprising a global access rule for a user's devices, for consumption of a content item. The user's devices advantageously comprise a set-top box, a tablet and a gateway. The gateway is configured to split the global access rule into local access rules for the set-top box and the tablet so that independent consumption of the content item by the set-top box and the tablet according to the respective local access rules does not violate the global access rule; and to send the local access rules to a first and a second enforcement point, which are configured to receive a request to access the content item from a user device; and allow or inhibit access to the content item depending on whether or not access to the content item is authorized by the local access rule for the user device from which the request was received.