+

WO2006037864A3 - Method for controlling access of an originating terminal to a network using a blocking-mode tunnel, and computer programmes for implementing same - Google Patents

Method for controlling access of an originating terminal to a network using a blocking-mode tunnel, and computer programmes for implementing same Download PDF

Info

Publication number
WO2006037864A3
WO2006037864A3 PCT/FR2005/001881 FR2005001881W WO2006037864A3 WO 2006037864 A3 WO2006037864 A3 WO 2006037864A3 FR 2005001881 W FR2005001881 W FR 2005001881W WO 2006037864 A3 WO2006037864 A3 WO 2006037864A3
Authority
WO
WIPO (PCT)
Prior art keywords
originating terminal
blocking
controlling access
network
tunnel
Prior art date
Application number
PCT/FR2005/001881
Other languages
French (fr)
Other versions
WO2006037864A2 (en
Inventor
Laurent Butti
Olivier Charles
Franck Veysset
Original Assignee
France Telecom
Laurent Butti
Olivier Charles
Franck Veysset
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by France Telecom, Laurent Butti, Olivier Charles, Franck Veysset filed Critical France Telecom
Publication of WO2006037864A2 publication Critical patent/WO2006037864A2/en
Publication of WO2006037864A3 publication Critical patent/WO2006037864A3/en

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • H04L63/164—Implementing security features at a particular protocol layer at the network layer
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • H04L63/166—Implementing security features at a particular protocol layer at the transport layer

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Small-Scale Networks (AREA)

Abstract

The invention concerns in particular a method for controlling access of an originating terminal (T_SOUR) comprising a firewall (PF) and an authentication portal, said portal setting and maintaining the firewall in an access-authorizing state in response to a valid initial access request in basic mode coming from the originating terminal, and to the subsequent periodic supply of a valid authentication token, the originating terminal being further capable of communicating in tunnel mode with a destination terminal of the network via a blocking tunnel (M_BLQ). The invention is characterized in that the periodic supply of the authentication token is performed by transmission on an unblocked port of the level 3 layer of the OSI model, such that the token continues to be supplied during a communication in blocking tunnel mode.
PCT/FR2005/001881 2004-10-01 2005-07-21 Method for controlling access of an originating terminal to a network using a blocking-mode tunnel, and computer programmes for implementing same WO2006037864A2 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
FR0410398 2004-10-01
FR0410398 2004-10-01

Publications (2)

Publication Number Publication Date
WO2006037864A2 WO2006037864A2 (en) 2006-04-13
WO2006037864A3 true WO2006037864A3 (en) 2007-04-05

Family

ID=34952474

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/FR2005/001881 WO2006037864A2 (en) 2004-10-01 2005-07-21 Method for controlling access of an originating terminal to a network using a blocking-mode tunnel, and computer programmes for implementing same

Country Status (1)

Country Link
WO (1) WO2006037864A2 (en)

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6317838B1 (en) * 1998-04-29 2001-11-13 Bull S.A. Method and architecture to provide a secured remote access to private resources
US20030055990A1 (en) * 2001-08-23 2003-03-20 Hughes Electronics Corporation, Single-modem multi-user virtual private network

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6317838B1 (en) * 1998-04-29 2001-11-13 Bull S.A. Method and architecture to provide a secured remote access to private resources
US20030055990A1 (en) * 2001-08-23 2003-03-20 Hughes Electronics Corporation, Single-modem multi-user virtual private network

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
TANEMBAUM A S: "Computer Networks,Fourth Edition, passage", COMPUTER NETWORKS, NORTH HOLLAND, AMSTERDAM,, NL, 2003, XP002325798, ISSN: 0376-5075 *

Also Published As

Publication number Publication date
WO2006037864A2 (en) 2006-04-13

Similar Documents

Publication Publication Date Title
WO2005029215A3 (en) Method of controlling communication between devices in a network and apparatus for the same
DE602004003568D1 (en) Network access control for a terminal connected to a VPN tunnel
WO2001031855A3 (en) Establishing dynamic tunnel access sessions in a communication network
WO2006072240A3 (en) Communications system, method for controlling a communications system, network access device and method for controlling a network access device
WO2005072107A3 (en) System and method of network congestion control by udp source throttling
ATE257605T1 (en) AUTOMATIC FORMATION OF ROLES FOR A ROLE-BASED ACCESS CONTROL SYSTEM
WO2006114701A3 (en) Method, apparatus and software product for combination of ul dpcch gating and enhanced ul dch to improve capacity
WO2007005101A3 (en) System and method for establishing a shared key between network peers
WO2005104425A3 (en) Method and system for verifying and updating the configuration of an access device during authentication
WO2001095562A3 (en) Method for ensuring access to a transmission medium
EP1775903A3 (en) A dynamic tunnel construction method for secure access to a private LAN and apparatus therefor
WO2002073883A3 (en) Method and apparatus for establishing a protocol proxy for a mobile host terminal in a multimedia session
WO2005109802A3 (en) Multimedia access device and system employing the same
HK1082345A1 (en) Apparatus and method for controlling and managing individual directed sessions in a communications system
WO2003093951A3 (en) Improved access point and wireless network controller
WO2007130006A3 (en) System and method for remotely assigning and revoking access credentials using a near field communication equipped mobile phone
HK1087866A1 (en) Wireless/wired mobile communication device, method and computer program medium with option to automatically block wireless communication when connected for wired communication
WO2002031632A3 (en) A method for controlling access to protected content
AU2001233768A1 (en) Method and system for controlling a processing of video data
WO2003026184A3 (en) Method for detecting and regulating identifier overlap on power line communication network, electronic appliance connected to subnet of power line communication network, and communication module used in electronic appliance
JP2006050191A5 (en)
WO2002082282A1 (en) Transmission method and transmitter
WO2008011239A3 (en) System and method for establishing a communication session between endpoints that do not both support secure media
WO2006017756A3 (en) Method and system for controlling access to a wireless client device
EP1773005B8 (en) Method and system for controlling a multi-application channel

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A2

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BW BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE EG ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KM KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NA NG NI NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SM SY TJ TM TN TR TT TZ UA UG US UZ VC VN YU ZA ZM ZW

AL Designated countries for regional patents

Kind code of ref document: A2

Designated state(s): BW GH GM KE LS MW MZ NA SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LT LU LV MC NL PL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase
点击 这是indexloc提供的php浏览器服务，不要输入任何密码和下载