METHOD FOR AUTHENTICATING AND INTEGRING USER DEVICES INTO AN INFORMATION SYSTEM, CORRESPONDING DEVICES AND COMPUTER PROGRAMS

Description

[0001] The field of the invention is that of the remote management of user equipment by an operator's information system via a communication network. More specifically, the invention relates to the integration of new user equipment within an operator's information system.

[0002] A remote management service for user equipment, provided by an operator's information system via a communication network, operates in a secure and trusted environment to guarantee the security, confidentiality, and integrity of data transmitted through the communication network and data stored on equipment belonging to that same network. An information system comprises all the user equipment management servers. These user equipment management servers interact with the user equipment through a management solution implemented by the operator.

[0003] Thus, the integration of new user equipment into an information system is carried out by means of communication protocols ensuring the authentication of the user equipment to be integrated and guaranteeing the integrity and confidentiality of the messages exchanged between the user equipment to be integrated and a user equipment management server located in the communication network.

[0004] This solution relies on the fact that the user devices to be integrated are equipped, during their manufacture, with an authentication certificate provided to the manufacturer by the operator managing the information system into which the user devices are intended to be integrated. Thus, during the integration procedure, the user device transmits its certificate to a user device management server that is part of the operator's information system. If such a certificate is not provided, the integration procedure of the user device into the information system is halted.

[0005] A primary drawback of such a solution lies in the fact that it requires cumbersome and inflexible logistics for implementation. Indeed, the operator managing the information system into which the user equipment is to be integrated must provide the certificates to the various user equipment manufacturers via a secure channel.

[0006] Another drawback of such a solution is that a single operator managing the information system into which user devices are to be integrated cannot provide certificates to a large number of connected device manufacturers. This effectively limits users' choices regarding the connected devices they might wish to integrate, even though the development of these connected devices offers an increasingly diverse range of options in terms of the functions they implement, as well as their design. US Document 2016 / 036819 is a relevant document in the field of authentication and integration of new user devices within an information system.

[0007] Therefore, there is a need for a technique for authenticating and integrating new user equipment into an information system that does not present all or some of these disadvantages.

[0008] The invention defined in the independent claims addresses this need by proposing a method for integrating at least one user device from a local network intended to be integrated into an information system, said method being implemented by a server interfacing the local network and the information system and comprising the following steps: transmission, to the user equipment, of instructions relating to at least one test to be carried out by said user equipment in relation to at least one authenticated user equipment belonging to the local network, said instructions being determined according to functions that can be executed by said user equipment and by said authenticated user equipment, when the results of the test are conclusive, transmission to the user equipment of connection parameters to at least one authenticated user equipment management server of the information system.

[0009] Such a solution relies on an ecosystem of user equipment already authenticated with the operator's information system and present in the local network in order to authenticate the user equipment to be integrated into the information system and thus authorize its integration into the information system.

[0010] To ensure the security of the operator's information system, until the user equipment is authenticated, it is only authorized to communicate with a server that interfaces between the local network and the information system. This intermediary server controls all message exchanges with the user equipment to be integrated. It isolates the user equipment from the rest of the information system responsible for the integrated equipment and involved in the user equipment authentication process.

[0011] The user device to be integrated transmits information relating to at least one function it can perform to the intermediate server. For example, when the user device is a connected lamp, it can turn on, turn off, change the color of the light emitted, etc. All this information is transmitted to the intermediate server, which then forwards it to a test server.

[0012] Based on information about the user device transmitted by the intermediate server to the test server, and information about other user devices on the local network that are already authenticated and integrated into the information system, the test server sends instructions for a test to be performed by the user device to be integrated. In the example chosen, where the user device is a connected lamp and a connected light sensor is already authenticated and integrated into the information system, the test server can, for example, instruct the user device to turn on and emit a green light for a specified duration. Simultaneously, the connected light sensor detects the light emitted by the test server.

[0013] The test results are sent to the test server, which determines whether they are successful. If the results are successful—that is, if the light sensor has captured a light emission sequence conforming to the test server's instructions—then the user device is authenticated. It is then authorized to connect to a server managing authenticated user devices located within the operator's information system and is thus integrated into the information system.

[0014] According to a first characteristic of the integration process, information relating to at least one function that can be performed by said user equipment is received in response to a request transmitted to said user equipment.

[0015] This allows us to discover the characteristics and capabilities of the user equipment to be integrated into the information system in order to deduce the tests to be carried out.

[0016] According to a second characteristic of the integration process, the transmission of the request is triggered by the receipt of at least one information of the presence of the user equipment in the local network.

[0017] Thus, if it is determined that the user equipment is not actually located in the local network, the integration procedure is stopped.

[0018] The invention also relates to a method for authenticating at least one user device on a local network intended to be integrated into an information system, said method being implemented by a test server of the information system and comprising the following steps: receiving information relating to at least one function that can be performed by said user equipment, determining instructions relating to at least one test to be performed by said user equipment in relation to at least one authenticated user equipment belonging to said local network based on functions that can be performed by said user equipment and by said authenticated user equipment, transmitting to the user equipment the instructions relating to said at least one test to be performed, transmitting, via an authenticated user equipment management server of the information system, to at least one authenticated user equipment the instructions relating to said at least one test to be performed, authenticating said user equipment on the basis of test results received from said user equipment and said at least one authenticated user equipment.

[0019] Such an authentication process uses already authenticated user equipment located in the local network to authenticate the user equipment to be integrated in a safe and secure manner.

[0020] In an alternative embodiment of the integration process, this includes a step of determining at least one confidence parameter associated with at least one test result.

[0021] This can help limit user equipment access to certain services provided through the information system.

[0022] In a variation of this alternative implementation of the authentication process, the trust parameter depends on the authenticated user equipment in relation to which the test is performed.

[0023] Indeed, depending on whether the user equipment already authenticated was authenticated according to this authentication process or because it was issued with a certificate during its manufacture, the confidence parameter associated with at least one test result is not the same. A confidence parameter value associated with a test result performed on user equipment with a factory certificate reflects a higher level of confidence than a confidence parameter value associated with a test result performed on user equipment authenticated according to this authentication process.

[0024] The invention also relates to a server interfacing a local network and an information system, the server comprising means for: transmit, to at least one user equipment, instructions relating to at least one test to be performed by said user equipment in relation to at least one authenticated user equipment belonging to the local network, said instructions being determined according to functions that can be executed by said user equipment and by said authenticated user equipment, when the results of the test are conclusive, transmit to the user equipment connection parameters to at least one authenticated user equipment management server of the information system.

[0025] The invention further relates to a test server capable of authenticating at least one user device on a local network intended for integration into an information system, said test server comprising means for: receive information relating to at least one function that can be performed by said user equipment, determine instructions relating to at least one test to be performed by said user equipment in relation to at least one authenticated user equipment belonging to said local network based on functions that can be performed by said user equipment and by said authenticated user equipment, transmit to the user equipment instructions relating to said at least one test to be performed, transmit, via an authenticated user equipment management server of the information system, to at least one authenticated user equipment instructions relating to said at least one test to be performed, authenticate said user equipment on the basis of test results received from said user equipment and said at least one authenticated user equipment.

[0026] The invention also relates to a computer-readable recording medium on which computer programs are recorded, including program code instructions for executing the steps of the processes according to the invention as described above.

[0027] Such a recording medium can be any entity or device capable of storing programs. For example, the medium may include a storage means, such as a ROM, for example a CD-ROM or a microelectronic circuit ROM, or a magnetic recording means, for example a USB flash drive or a hard drive.

[0028] On the other hand, such a recording medium can be a transmissible medium such as an electrical or optical signal, which can be transmitted via an electrical or optical cable, by radio, or by other means, so that the computer programs it contains can be executed remotely. The programs according to the invention can, in particular, be downloaded onto a network, for example, the Internet.

[0029] Alternatively, the recording medium may be an integrated circuit in which the programs are incorporated, the circuit being adapted to execute or to be used in the execution of the processes which are the subject of the aforementioned invention.

[0030] Other goals, characteristics, and advantages of the proposed processes will become clearer upon reading the following description, given as a simple illustrative and non-limiting example, in relation to the figures, among which: There figure 1 schematically represents a system in which the proposed processes are implemented. figure 2 represents steps in the integration and authentication processes implemented according to a particular embodiment, The figure 3 represents the intermediate server according to a particular embodiment, The figure 4 represents the test server according to a particular embodiment.

[0031] La figure 1 schematically represents a system 1 in which integration and authentication processes are implemented.

[0032] System 1 consists of at least one Local Area Network (LAN) and an operator information system (IS) located in a Wide Area Network (WAN).

[0033] The local area network (LAN) includes a gateway (GW) that allows user devices on the LAN to exchange data with remote devices on the communication network. Several user devices, 10, 11, and 12, are located on the LAN. User devices 11 and 12 have already been authenticated and are integrated into the information system (IS). User device 11 was authenticated using the proposed methods, while user device 12 has a factory certificate. User device 10 does not have a factory certificate, and a LAN user wishes to integrate it into the information system (IS) to enable remote management.

[0034] User equipment 10, 11, 12 can be, for example, connected objects such as sensors, lamps, switches, or even mobile phones, tablets, TV decoders or set-top boxes, connected speakers, connected household appliances, etc.

[0035] A server 13, called an intermediate server, interfaces the local LAN network with the WAN communication network.

[0036] The operator's information system (IS) includes, among other things, a test server 14 and at least one management server 15 for authenticated user devices 11, 12. Communication between the management server 15 and an authenticated user device is based on a protocol that describes the methods implemented by both the management server and the user device, a software component implemented on the device, both of which conform to the protocol's specifications. An example of such a protocol is CWMP – for CPE WAN Management Protocol - defined in technical report TR-069, specified by the Broadband Forum. Furthermore, user equipment features are discoverable using this protocol, for example, through the data model defined in technical report TR-181 for CWMP, specified by the Broadband Forum. The management server 15 performs a set of administration and maintenance functions for user equipment, such as firmware updates or reconfigurations.

[0037] In one embodiment, the intermediate server 13 and the test server 14 are functional components embedded in the same equipment of the information system IS.

[0038] La figure 2 represents steps in the integration and authentication processes in particular embodiments in order to authenticate a user device 10 and then integrate it into the operator's information system.

[0039] In step E1, user equipment 10 sends an MSG1 message to the gateway GW to initiate an integration process into the information system (IS). Such an MSG1 message is, for example, a DHCP message. (Dynamic Host Configuration Protocol or in French, dynamic host configuration protocol) of the DHCPDiscovery type.

[0040] In an E2 step, the GW gateway determines that the user equipment 10 is not authenticated and transmits an MSG2 message to the user equipment containing connection information to a boot server (not shown in the figures) located in the WAN communication network.

[0041] Thus, the MSG2 message, for example, is a DHCPOffer type message with a specific option. For example, this option could be DHCPv6 Vendor Class Option 16 (if the user equipment supports IPv6), DHCP Vendor Class Identifier Option 60, or even DHCPv6 Vendor Class Option 124.

[0042] In one particular embodiment, the user equipment 10 is configured to store connection information to a bootstrap server by means of a local interface (as defined in technical report TR-064 for the CWMP protocol, specified by the Broadband Forum).

[0043] In a step E3, the user equipment 10 transmits in a new message MSG1', intended for the boot server, a request to initiate an integration into the information system SI.

[0044] In a step E4, the boot server transmits an MSG3 message to the user equipment 10 containing connection information to the intermediate server 13, connection information to a first control module MC1 (not shown in the figures) located in the local area network LAN and connection information to a second control module MC2 (not shown in the figures) located in the WAN communication network.

[0045] In one particular embodiment, the MSG3 message does not include connection information. In this case, the intermediate server 13 and the management server 15 share the same IP address, and the redirection is performed by a component in the information system. This component checks whether the user device 10 is authenticated to redirect the communication to the management server 15, and if not, to the intermediate server 13.

[0046] During step E5, user equipment 10 transmits a first connection request to the first control module MC1. Simultaneously, user equipment 10 transmits a second connection request to the second control module MC2.

[0047] In step E6, the first control module MC1 and the second control module MC2 determine whether user device 10 is actually located within the local area network (LAN). This determination involves, for example, verifying that user device 10 is connected to a Wi-Fi access point embedded in the gateway GW.

[0048] If at least one of the first MC1 or second MC2 control modules determines that user device 10 is not located on the local area network (LAN), integration is stopped because user device 10 could potentially compromise the security of the LAN and the information system (IS). In such a case, the LAN user is notified of the situation.

[0049] If it is determined, by the first or second control module, that the user equipment 10 is located in the local network LAN, the intermediate server 13 is informed in a step E7, for example by receiving at least one information of the presence of the user equipment 10 in the local network LAN.

[0050] In step E8, the intermediate server 13 transmits a request RQ1 to the user device 10, transmitting information about at least one function that can be performed by the user device 10. For example, if the user device 10 is a connected lamp, it can turn on, turn off, change the color of the light emitted, etc. Thus, the functions that can be performed by the user device 10 are: emit light, turn off the light, change the color of the light. In another example, if the user device 10 is a connected speaker, it can play music, turn off, change the volume, etc. Thus, the functions that can be performed by the user device 10 are: emit sound, mute the sound, change the volume, etc.

[0051] In a step E9, the user equipment 10 transmits an MSG4 message to the intermediate server 13 containing a list of the functions it can perform.

[0052] In step E10, the intermediate server 13 transmits to the test server 14 the list of functions that the user equipment 10 can perform.

[0053] In a step E11, the test server 14 determines instructions relating to at least one test to be performed by the user equipment 10 in relation to at least one authenticated user equipment 11 or 12 based on functions that can be performed by the three user equipment 10, 11, 12.

[0054] Knowing the identifier of the local area network (LAN) in which user device 10 is located, the test server 14 identifies the authenticated user devices 11 and 12 present on the LAN. Based on the functions that can be performed by user device 10 and the functions that can be performed by authenticated user devices 11 and 12, which are stored in the memory of the test server 14, the test server 14 selects at least one authenticated user device 11 or 12 with which user device 10 performs the test. A test is always performed by a pair of user devices, one member of which is user device 10 and the other is an authenticated user device.

[0055] In a step E12, the test server 14 transmits, via the intermediate server 13, an MSG5 message to the user equipment 10 containing instructions relating to the test to be performed.

[0056] In a step E13, the test server 14 transmits, via the management server 15, an MSG6 message to the authenticated user equipment 11 containing instructions relating to the test to be performed.

[0057] In the chosen example, when user device 10 is a connected lamp and authenticated user device 11 is a light sensor, the test server 14 can, for example, instruct user device 10 to turn on and emit a green light for a given duration. Simultaneously, authenticated user device 11 receives instructions to detect the emission of a green light for a given duration.

[0058] In a step E14, the test server 14 receives, via the intermediate server 13, the results of the test performed by the user equipment 10. These results may consist of a message indicating that the user equipment 10 has executed the instructions received.

[0059] In a step E15, the test server 14 receives, via the management server 15, the results of the test carried out by the authenticated user equipment 11. These results are, for example, a message including information describing the phenomena captured by the authenticated user equipment 11 during the test, in the chosen example the given period.

[0060] In one embodiment of the invention, the test server 14 associates a confidence parameter with the result of the test performed according to the authenticated user equipment 11 or 12 in relation to which the test was performed.

[0061] Indeed, depending on whether the user equipment already authenticated was authenticated according to this authentication procedure for user equipment 11, or because it was issued with a certificate during its manufacture, the confidence parameter associated with the test result for user equipment 12 is not the same. A confidence parameter value associated with the test result for user equipment 12 issued with a factory certificate reflects a higher level of confidence than a confidence parameter value associated with the test result for user equipment 11 authenticated according to this authentication procedure.

[0062] In step E16, the test server 14 authenticates the user device 10 based on the received test results. Thus, when the results from the user device 10 indicate that it has executed the received instructions, and the results from the user device 11 indicate that the phenomena detected by the authenticated user device 11 correspond to the transmitted instructions, the test server 14 authenticates the user device 10. Otherwise, the user device 10 is not authenticated, and the local area network (LAN) user is notified.

[0063] In step E17, the test server 14 transmits to the user equipment 10 and via the intermediate server 13 an MSG7 message containing connection parameters to the management server 15.

[0064] Upon receiving the MSG7 message, the user equipment 10 transmits a connection request to the management server 15 based on the connection parameters included in the MSG7 message, in a step E18. When the user equipment 10 is actually connected to the management server 15, it is integrated into the information system.

[0065] La figure 3 represents the intermediate server 13 according to one embodiment. Such an intermediate server 13 is configured to implement the different embodiments of the proposed processes described with reference to the figure 2 .

[0066] An intermediate server 13 may include at least one hardware processor 301, a storage unit 302, an interface 303, and at least one network interface 304 which are connected together through a bus 305. Of course, the constituent elements of the intermediate server 13 may be connected by means of a connection other than a bus.

[0067] The processor 301 controls the operations of the intermediate server 13. The storage unit 302 stores at least one program for implementing the method according to an embodiment to be executed by the processor 301, and various data, such as parameters used for calculations performed by the processor 301, intermediate data from calculations performed by the processor 301, etc. The processor 301 can be formed by any known and suitable hardware or software, or by a combination of hardware and software. For example, the processor 301 can be formed by dedicated hardware such as a processing circuit, or by a programmable processing unit such as a central processing unit. (Central Processing Unit) which executes a program stored in its memory.

[0068] The 302 storage unit can be formed by any suitable means capable of storing the program or programs and data in a computer-readable manner. Examples of 302 storage units include computer-readable non-transient storage media such as semiconductor memory devices, and magnetic, optical, or magneto-optical recording media loaded into a read / write unit.

[0069] Interface 303 provides an interface between the intermediate server 13 and the user equipment 10 to be integrated.

[0070] At least one network interface 304 provides a connection between the intermediate server 13 and the first control module MC1, the second control module MC2, the test server 14 and the management server 15.

[0071] La figure 4 represents the test server 14 according to one embodiment. Such a test server 14 is capable of implementing the different embodiments of the method described with reference to the figure 2 .

[0072] A test server 14 may include at least one hardware processor 401, a storage unit 402, an interface 403, and at least one network interface 404 which are connected together through a bus 405. Of course, the constituent elements of the test server 14 may be connected by means of a connection other than a bus.

[0073] Processor 401 controls the operations of test server 14. Storage unit 402 stores at least one program for implementing the method according to an embodiment to be executed by processor 401, and various data, such as parameters used for calculations performed by processor 401, intermediate data from calculations performed by processor 401, etc. Processor 401 can be formed by any known and suitable hardware or software, or by a combination of hardware and software. For example, processor 401 can be formed by dedicated hardware such as a processing circuit, or by a programmable processing unit such as a central processing unit. (Central Processing Unit) which executes a program stored in its memory.

[0074] A 402 storage unit can be formed by any suitable means capable of storing the program or programs and data in a computer-readable manner. Examples of 402 storage units include computer-readable non-transient storage media such as semiconductor memory devices, and magnetic, optical, or magneto-optical recording media loaded into a read / write unit.

[0075] Interface 403 provides an interface between the test server 14 and the management server 15.

[0076] At least one 404 network interface provides a connection between the test server 14 and the intermediate server 13.

Claims

1. Method for integrating at least one user equipment (10) of a local area network (LAN) intended to be integrated into an information system (SI), said method being implemented by a server (13) interfacing the local area network (LAN) and the information system (SI) and comprising the following steps: - transmitting (E10), to a test server (14) of the information system (SI), items of information relating to at least one function which may be executed by said user equipment, received from said user equipment; - receiving, from said test server, instructions associated with said at least one function and relating to at least one test to be performed by said user equipment (10) in relation to at least one authenticated user equipment (11, 12) belonging to the local area network (LAN); - transmitting (E12), to the user equipment (10), said instructions relating to at least one test to be performed by said user equipment (10); - receiving, from the user equipment (10), at least one result of said at least one test performed by said user equipment (10); - transmitting said at least one result to said test server; - receiving, from said test server, parameters for connecting to at least one server (15) for managing authenticated user equipments of the information system (SI); - transmitting (E17), to the user equipment (10), said connection parameters.

2. Integration method according to Claim 1, wherein said items of information relating to at least one function which may be executed by said user equipment are received (E9) in response to a request (RQ1) transmitted to said user equipment.

3. Integration method according to Claim 2, wherein the transmission (E9) of the request (RQ1) is triggered by the receipt (E7) of at least one item of information about the presence of the user equipment (10) in the local area network (LAN).

4. Method for authenticating at least one user equipment (10) of a local area network (LAN) intended to be integrated into an information system (SI), said method being implemented by a test server (14) of the information system (SI) and comprising the following steps: - receiving (E10), from a server (13) interfacing the local area network (LAN) and the information system (SI), items of information relating to at least one function which may be executed by said user equipment (10), - determining (E11) instructions associated with said at least one function and relating to at least one test to be performed by said user equipment (10) in relation to at least one authenticated user equipment (11, 12) belonging to said local area network (LAN) depending on functions which may be executed by said user equipment (10) and by said authenticated user equipment (11, 12), - transmitting (E12), via said server (13) interfacing the local area network (LAN) and the information system (SI), to the user equipment (10), the instructions relating to said at least one test to be performed, - transmitting (E13), via a server (15) for managing authenticated user equipments of the information system (SI), to at least one authenticated user equipment (11, 12), the instructions relating to said at least one test to be performed, - authenticating (E16) said user equipment (10) on the basis of test results received from said user equipment (10) via said server (13) interfacing the local area network (LAN) and the information system (SI) and of test results received from said at least one authenticated user equipment (11, 12) via said management server (15), comprising, when the results of the test are conclusive, transmitting, via said server (13) interfacing the local area network (LAN) and the information system (SI), to the user equipment (10), parameters for connecting to said at least one server (15) for managing authenticated user equipments of the information system (SI).

5. Authentication method according to Claim 4, comprising a step of determining at least one confidence parameter associated with at least one test result.

6. Authentication method according to Claim 5, wherein the confidence parameter depends on the authenticated user equipment in relation to which the test is performed.

7. Server (13) interfacing a local area network (LAN) and an information system (SI), the server (13) comprising means for: - transmitting, to a test server (14) of the information system (SI), items of information relating to at least one function which may be executed by a user equipment, received from said user equipment; - receiving, from said test server, instructions associated with said at least one function and relating to at least one test to be performed by said user equipment (10) in relation to at least one authenticated user equipment (11, 12) belonging to the local area network (LAN); - transmitting, to said at least one user equipment (10), said instructions relating to at least one test to be performed by said user equipment (10); - receiving, from the user equipment (10), at least one result of said at least one test performed by said user equipment (10); - transmitting said at least one result to said test server; - receiving, from said test server, parameters for connecting to at least one server (15) for managing authenticated user equipments of the information system (SI); - transmitting, to the user equipment (10), said connection parameters.

8. Test server (14) which is capable of authenticating at least one user equipment (10) of a local area network (LAN) intended to be integrated into an information system (SI), said test server (14) belonging to the information system (SI) and comprising means for: - receiving, from a server (13) interfacing the local area network (LAN) and the information system (SI), items of information relating to at least one function which may be executed by said user equipment (10), - determining instructions associated with said at least one function and relating to at least one test to be performed by said user equipment (10) in relation to at least one authenticated user equipment (11, 12) belonging to said local area network (LAN) depending on functions which may be executed by said user equipment (10) and by said authenticated user equipment (11, 12), - transmitting, via said server (13) interfacing the local area network (LAN) and the information system (SI), to the user equipment (10), instructions relating to said at least one test to be performed, - transmitting, via a server (15) for managing authenticated user equipments of the information system (SI), to at least one authenticated user equipment (11, 12), instructions relating to said at least one test to be performed, - authenticating said user equipment (10) on the basis of test results received from said user equipment (10) via said server (13) interfacing the local area network (LAN) and the information system (SI) and of test results received from said at least one authenticated user equipment (11, 12), comprising, when the results of the test are conclusive, transmitting, via said server (13) interfacing the local area network (LAN) and the information system (SI), to the user equipment (10), parameters for connecting to said at least one server (15) for managing authenticated user equipments of the information system (SI).

9. Computer program product comprising program code instructions for implementing a method according to Claim 1 when it is executed by a processor.

10. Computer program product comprising program code instructions for implementing a method according to Claim 4 when it is executed by a processor.