Abstract: Method of managing security entities positioned to cut off an information stream within a network. The method includes designating an entity to act as a sponsor for a new ward wishing to join the network, requesting to connect the ward with the sponsor, said sponsor determining whether or not it accepts the connection. If the sponsor accepts the connection, then connecting the sponsor and disconnecting from the plurality of entities forming the network. At least one of the entities and the sponsor checking a security level of said ward. If at least one of the entities decides to trust said ward, then the sponsor transmits to the ward configuration information to enable the ward to enter into communication with the network. If at least one of the entities decides not to trust the ward, then the ward cannot access the network and an alarm is generated.

Abstract: The invention relates to a system for processing data that can be exchanged between at least a first domain having a security level A and a second domain having a security level B, A being different from B, characterized in that it comprises at least one elementary entity EEi including a routing module URi and a device UTi for processing data, the routing module URi including at least one input Ii into the domain having the A security level for the data to be processed, and at least one first output Pi for the data that has not been processed and remains in the domain with the A security level, and a second output Li connected to the processing device UTi for the data processed and transferred into the domain with the B security level via the output Oi.

Abstract: Method of managing security entities positioned to cut off an information stream within a network. The method includes designating an entity to act as a sponsor for a new ward wishing to join the network, requesting to connect the ward with the sponsor, said sponsor determining whether or not it accepts the connection. If the sponsor accepts the connection, then connecting the sponsor and disconnecting from the plurality of entities forming the network. At least one of the entities and the sponsor checking a security level of said ward. If at least one of the entities decides to trust said ward, then the sponsor transmits to the ward configuration information to enable the ward to enter into communication with the network. If at least one of the entities decides not to trust the ward, then the ward cannot access the network and an alarm is generated.

Abstract: The invention relates to a system for processing data that can be exchanged between at least a first domain having a security level A and a second domain having a security level B, A being different from B, characterised in that it comprises at least one elementary entity EEi including a routing module URi and a device UTi for processing data, the routing module URi including at least one input Ii into the domain having the A security level for the data to be processed, and at least one first output Pi for the data that has not been processed and remains in the domain with the A security level, and a second output Li connected to the processing device UTi for the data processed and transferred into the domain with the B security level via the output Oi.

Abstract: Disclosed is a method that uses the routing functions of an internet-type protocol by introducing a mechanism assigning prefixes to the IPv6 addresses of the network routers such that the self-configuration process of said protocol can be used due to a mechanism that utilizes a serializer (E). Said serializer (E) delivers the prefixes according to an operational sequence comprising, for each router, an initialization phase, a configuration phase, and a relay phase in which the router is used as an intermediary between the serializer and other routers that are in the configuration phase.

Abstract: The invention concerns a method for simultaneously operating at least two tunnels on at least a network. It includes, at the intermediate node, a sequence comprising retrieving all the tunnel headers (step E8) and, if required, reassembling the original packet from its fragments (step E7), processing operations corresponding to one or more functions, performed on the original packet (step E3), optionally fragmenting once more the packet which have been processed (step E11) and restoring the headers of the tunnels (step E14).