Device for connecting at least one electronic device to the Internet with increased connection speed and security level, associated system and method

Abstract

According to a first aspect, the invention relates to a device (1) for connecting at least one electronic device to the Internet with increased connection speed and security through the combined use of at least two independent communication channels. According to a second aspect, the invention relates to a system for connecting at least one electronic device to the Internet with increased connection speed and security through the combined use of at least two independent communication channels. According to a third aspect, the invention relates to a method implemented by software in a system according to the invention. Figure for the abstract: Fig 1

Description

Title of the invention: Device for connecting at least one electronic device to the Internet with increased connection speed and security level, associated system and method Technical field

[0001] The invention lies in the field of computer networks. Prior art

[0002] With the mass use of teleworking, the widespread use of videoconferencing and the growing share of digital leisure activities such as high-definition video streaming and online games in people's lives, the bandwidth requirements of Internet connections in people's living spaces are increasing sharply.

[0003] In most countries, end-to-end fiber optic connections are still rare. Even in the case of fiber optic connections, it may happen that, given the increasingly high rate of terminal equipment in families and the high bandwidth requirements of each of the connected users, the bandwidth limits of the communication channel are reached. Even in the case where families have high-speed Internet access, it may be desirable to dedicate part of the bandwidth to a priority use such as teleworking by a family member.

[0004] We know of solutions for load balancing or aggregation of Internet lines in the context of specialized routers, that is to say network equipment which only processes the packets encapsulated in the different lower level frames without modifying the layer 3 addressing of the OSI model of the packets. These technical solutions were for the most part designed at the time of data transmissions on analog telephone lines by low speed modems.

[0005] These solutions do not make it possible to meet the new Internet connection needs arising from new uses that consume a lot of bandwidth in a discontinuous manner and do not improve the security and confidentiality of data transmission to the level of user needs, in particular in installations used at least occasionally for professional purposes. Presentation of the invention

[0006] The aim of the present invention is to at least partially remedy the problems mentioned above by proposing a technical solution which optimizes the use of available and possibly heterogeneous communication channels. The invention is particularly advantageous in open contexts involving several distinct telecom operators.

[0007] A first advantage of the invention is to increase the throughput of the resulting composite connection provided by the device to a quasi-addition of the throughputs of the separate communication channels used in implementation variants favoring throughput.

[0008] A second advantage of the invention is to reinforce the security of communications passing through the device because each communication channel contributing to the composite flow aggregated or disaggregated by the device only sees part of the packets exchanged between user equipment connected to the device and the Internet, which makes the data circulating in each elementary channel unintelligible.

[0009] A third advantage of the invention is to allow third parties who hold usable communication channels to share and / or exploit their excess transmission capacities.

[0010] According to a first aspect, the invention relates to a device for connecting at least one electronic device to the Internet with an increased throughput and connection security level by the combined use of at least two independent communication channels. The device according to the invention comprises a low-voltage power supply, at least one information processing subassembly comprising at least one microprocessor, at least one wired or wireless communication channel associated with at least one software component to form at least one standard Internet access point by which the at least one electronic device connects to the Internet via said device, and at least two independent communication channels capable of connecting said device to the Internet, at least one of the at least two independent communication channels being a standard means for wirelessly accessing a remote telecom infrastructure relative to said device.

[0011] At least two independent communication channels for connecting said device to the Internet are understood to mean at least two Internet accesses that can be used separately and each having, where appropriate, distinct connection identifiers and weak or strong authentication methods.

[0012] Standard means for wirelessly accessing a telecom infrastructure means any means that can be used to directly or indirectly connect the device according to the invention to the Internet, said standard means comprising at least one radio link between the device according to the invention and the telecom infrastructure connected to the Internet.

[0013] Remote telecom infrastructure in relation to said device is understood to mean any infrastructure offering an Internet access point located outside the premises where the device according to the invention in question is installed. Said remote telecom infrastructure in relation to said device is distinct from the local infrastructure to which said device could be connected.

[0014] The device according to the invention is further distinguished in that all or part of the at least one information processing subassembly comprises at least one standard electronic subassembly comprising a plurality of electronic components mounted on a printed circuit.

[0015] A standard electronic subassembly is understood to mean an electronic subassembly whose technical characteristics have not been determined specifically based on the technical characteristics of the electronic device in which it is included.

[0016] Furthermore, a standard electronic subassembly is an industrial and commercial product in its own right.

[0017] Such subassemblies are, for example, modules comprising all or part of the standard functions and connectivity of a basic microcomputer and forming all or part of the information processing subassembly comprising at least one microprocessor of the device according to the invention. Another example of advantageous standard modules is that of connectivity subassemblies available on an open market in the format of a “USB key”. For example, a “USB key” implementing the WiFi and / or Bluetooth standard, or an LTE (4G) or 5G “USB key” providing direct connectivity to a cellular telephone network infrastructure while only requiring one or more USB connections at the hardware level on the side of the information processing subassembly of the device according to the invention. Another example of an advantageous standard electronic subassembly is a USB hub.This type of standard electronic subassembly makes it possible, for example, to provide additional connectivity to a standard minimalist information processing module with an insufficient number of USB connectors.

[0018] It is indeed often advantageous from an industrial point of view to use such standard electronic subassemblies rather than implementing the invention from elementary electronic components assembled on a specific printed circuit. The advantages are technical, logistical and economic. For example, to access components such as highly integrated systems on a chip which are only sold to a limited number of manufacturers capable of committing to the manufacture of very large quantities of devices. In addition, certain electronic subassemblies such as radio communication subassemblies require significant technical resources and rare expertise for their development and for their certification by the competent authorities.Therefore, it is simpler and more advantageous to integrate the pre-certified standard functional subassembly into the device according to the invention rather than the elementary electronic components of the standard subassembly on a specific printed circuit.

[0019] The device according to the invention is further distinguished in that it is arranged to allow the connection of at least one additional electronic subassembly capable of providing an additional independent communication channel for connecting said device to the Internet. The invention provides for facilitating the addition of additional communication channels to the device. This involves, for example, providing expansion connectors for adding communication channels in number and / or diversity. It also involves providing at least one software component embedded in the device according to the invention to detect the addition or removal of a communication channel in order to reconfigure the operation of the device accordingly. In a more preferred variant of implementation of the invention, the automatic reconfiguration of the device is done during operation and without any particular intervention from the user.The device is advantageously capable of automatically searching the Internet for any driver software specific to the added hardware and, where appropriate, of searching a local or remote memory for connection information of the relevant holders that has been previously recorded. This technical characteristic is mainly intended to make the device according to the invention scalable over time and in terms of connection capabilities, adaptable to the wide variety of Internet connections to which the user may have access and resistant to the obsolescence of technical standards and / or associated telecom services. Indeed, the constant and rapid progress in the telecommunications sector means that new technical standards for connecting to the Internet appear and some disappear in times shorter than the technical lifespan of a properly implemented device according to the invention.

[0020] The device according to the invention is further distinguished in that at least one of the at least two communication channels provides permanent access to the Internet. The invention further provides that the at least one of the at least two communication channels provides the device with a backup Internet connection, the duration or bandwidth usage of which may be variable. The invention provides that a communication channel providing permanent access to the Internet has the status of a main communication channel, due to the more durable or more stable nature of the Internet connection provided to the device relative to the at least one other communication channel which has the status of a backup communication channel.This qualitative differentiation of the communication channels is advantageously used in certain implementation variants of the invention to optimize the distribution of packet flows according to the services or uses in order to increase the performance or resilience of the service offered to the user. The so-called main communication channel is also advantageously used as an ultimate fallback channel when communication via the at least one backup channel is no longer possible. The so-called communication channel. principal is also advantageously used for data exchanges relating to the internal operation of the device or to associated services, for example to allow remote configuration of the device, or to allow updating of its embedded software, or to allow the user to access a user account managed on a remote server.

[0021] The device according to the invention is further distinguished in that said remote telecom infrastructure relative to said device comprises an Internet access point which is associated with at least one electronic device powered by electricity from a power source separate from that from which said device is powered.

[0022] An electronic device is understood to mean any computer or telecom infrastructure device or equipment, for example another device according to the invention, an ADSL or fiber Internet box, a router connectable to a cellular telephone network, a computer running a program configuring it to offer a Wi-Fi access point function to third-party terminals or telecom network infrastructure equipment. Powered by an electrical installation separate from that from which said device is powered, is understood to mean that said device in question and said Internet access point, accessible by radio, are installed for example in houses, in apartments or in any type of neighboring premises, or each of the electronic devices is powered from a separate electrical installation, each having for example its own electricity meter or an autonomous power supply.It is intended that the device according to the invention exchanges data with at least one electronic device or equipment powered by a separate electrical installation or an autonomous energy source if they are within radio link range.

[0023] The device according to the invention is also distinguished in that it further comprises at least one software component for automatically establishing at least one wireless connection to a remote telecom infrastructure. Said at least one software component obtains, where appropriate, from a remote information system authentication information for the holder of the independent communication channel capable of connecting said device to the Internet in question. Only the person holding an independent communication channel capable of connecting said device to the Internet in question needs to know the authentication information associated with this channel. The user of said device, and where appropriate each of the holders of the other independent communication channels capable of connecting said device to the Internet, remains unaware of the authentication information of third parties.The device according to the invention is thus arranged to maintain the confidentiality of information specific to each of the holders of an Internet connection right.

[0024] The device according to the invention is also distinguished in that it further comprises hardware and / or software means for encrypting data stored or transmitted in connection with the authentication of an Internet connection, and / or for encrypting all or part of the data transmitted by the device.

[0025] The invention also provides that at least part of the information elements used for the encryption of the authentication information and / or for the encryption of the data transported in a system according to the invention comprises biometric information of at least one user involved. That is to say of a person using the invention to increase the speed and the security level of his connection to the Internet, and / or of a person using the invention to grant to at least one third party the use of all or part of the bandwidth of an Internet access point of which he is the owner without having to disclose his authentication information to this at least one third party. Said biometric information comes for example from a fingerprint reader, an iris reader, a voice print captured by a microphone, data from facial recognition.The invention provides for example to use a mobile application, an application for connected television or a specific application program to allow the user to use a standard terminal in his possession to acquire said biometric information without requiring additional hardware and without increasing the cost of implementing the device according to the invention. However, it is also provided in certain variants of implementation of the invention, to add at least one sensor related to the acquisition of biometric data in the device as manufactured or as an optional accessory that can be added by the user.

[0026] The device according to the invention is further distinguished in that all or part of the bandwidth of the communication channel resulting from the combined use of the at least two independent communication channels is allocated at least temporarily to a terminal or to a predetermined use. The invention provides for planning in time and / or space of the services and / or uses and / or identified users and / or terminals connected to the device, all or part of the use of the channel resulting from the combined use of the at least two independent communication channels. The invention also provides for planning in time and / or space of the services and / or uses and / or identified users and / or terminals connected to the device, all or part of the use of each independent communication channel. This characteristic of the invention is advantageously combinable with the use or not of a VPN.For example, a VPN is automatically activated for the portion of bandwidth allocated to professional use of the device, particularly in the context of a user's teleworking. Conversely, uses such as video streaming ("video streaming" in . English language) are known to be incompatible with the use of a VPN. The invention provides configuration methods, or automatic detection, of uses to adapt accordingly the bandwidth allocated to them and the activation or deactivation of additional ancillary services such as for example a VPN service.

[0027] The device according to the invention is further distinguished in that the at least one wired or wireless communication channel for connecting at least one electronic device to the device, the at least two independent communication channels for connecting the device to the Internet, the at least one standard electronic subassembly, the low voltage power supply, are respectively:

[0028] An Ethernet, or USB, or Bluetooth, or Wi-Fi connection;

[0029] An Ethernet, or USB, or Bluetooth, or Wi-Fi connection with a device intermediary allowing access to the Internet, or a direct connection to the Internet by radio, or by optical fiber or by wired connection;

[0030] A Raspberry Pi module (registered trademark of the Raspberry Pi Foundation), or an Arduino module (registered trademark of Arduino SA), or a Beagle module (registered trademark of the BeagleBoard Foundation), or a USB key acting as a Wi-Fi modem, or a USB key acting as a Bluetooth modem, or a USB key acting as a modem for a cellular telephone network;

[0031] A mains power supply included in the casing of said device, or an external mains power supply unit connectable to said device, or a battery included in the casing of said device, or a USB connection to a terminal providing the energy necessary for the operation of said device, or at least one photovoltaic cell, or a power supply by Ethernet (Power over Ethernet in English), or by a power supply using electrical contacts placed on a suitable surface, or based on near-field induction or on remote wireless energy transmission.

[0032] All variants, developments and functional equivalents of the cited standards are included within the scope of the invention.

[0033] Intermediate equipment enabling access to the Internet is understood to mean any intermediate equipment between the device according to the invention and a network infrastructure enabling access to the Internet.

[0034] Such intermediate equipment is, for example, a modem, a router, a modem-router, a network gateway. These categories of devices include, for example, a telecom box for optical fiber or an ADSL telecom box, a modem for a satellite network, a modem, a repeater or a router for a cellular network, for example a Wi-Fi router connectable to a 2G, 3G, 4G, 5G or next-generation cellular telephone network.

[0035] A standard terminal is understood to mean any electronic device capable of connecting to the Internet via a standardized connection. This includes, for example, personal terminals such as a computer, a smartphone, a digital tablet, a television, a pair of glasses, a watch, connected clothing, home automation, virtual assistants and all objects connected to the Internet (IoT). A terminal is also understood to mean any communication subsystem, or any computer system, or any “client” local automation system capable of being connected to the Internet via a standard connection, and therefore also via the device according to the invention.

[0036] According to a second aspect, the invention also relates to a system for connecting at least one electronic device to the Internet with an increased connection speed and security level through the combined use of at least two independent communication channels. Said system comprises at least one device according to the invention and at least one software component executed in a remote server acting as a hub functionally associated with the at least one device for appropriately aggregating and disaggregating packet streams transmitted by at least two independent communication channels.

[0037] By acting as a concentrator is meant the function of passing a flow of incoming and / or outgoing data packets from a connection port such as for example a standard Wi-Fi access point, through several independent communication channels, and vice versa. Depending on the implementation variants and the protocols used in the device according to the invention, it is intended that the concentrator function is based on the implementation of elementary telecommunications functions of repeater, switch, router, multiplexer and / or demultiplexer, or on the implementation of combinations of all or part of these elementary functions.

[0038] The system according to the invention further comprises a functional sub-assembly comprising at least one software component executed in a remote server and / or in said device to manage at least one user account of the category making available all or part of the bandwidth of an Internet connection of which it is the holder and / or to manage at least one user account of said device.

[0039] The system according to the invention further comprises a functional sub-assembly comprising at least one software component executed in a remote server and / or in said device to manage at least one counter relating to the use of all or part of the at least two independent communication channels, and / or at least one counter relating to the use of said device.

[0040] The at least one counter is implemented by software in the device and / or in at least one remote server. This involves, for example, measuring or counting the time for which a communication channel is made available, a quantity of data or of packets transported, units of account, monetary units, a percentage of transmission capacity in flow rate made available, where appropriate combined with the time of provision of a communication channel or the volume of data transmitted. This is for the production of statistics, for the management of the system or within the framework of an economic valuation or by an offer of reciprocity of services for rights holders.

[0041] In preferred implementation variants, the system according to the invention further comprises at least one software component implementing appropriate metrology functions, for example counting the volumes of data exchanged and / or the duration of use to enable a holder to value the bandwidth made available to third parties. The valuation being for example in monetary units, in points or in units of account, with a view to reciprocity of service, or for any monetary or non-monetary, commercial or non-commercial compensation likely to interest the parties. It is for example provided that users having acquired a sufficient number of points by making all or part of their bandwidth available to third parties for a given time are technically capable of converting their points into physical or digital goods or services, to be selected from at least one catalog of proposals.It is also planned to exchange a predetermined number of points acquired for a unique code allowing the user to switch from a free basic offer accessible online, for example games, services or digital content, to a higher quality offer normally paid for within the framework of an economic model known as "freemium". It is also planned that the valuation by conversion of points will be made for the benefit of a designated third party or "to the bearer" of the unique code obtained.

[0042] According to a third aspect, the invention also relates to a method implemented by software in a system according to the invention. Said method comprises a step of appropriate disaggregation of at least one initial data packet stream entering through the at least one standard Internet access point of a device or through the at least one software component acting as a concentrator associated with said device, a step of transmission of disaggregated packet streams through the at least two independent communication channels of said device, a step of aggregation of the data packet streams having been previously disaggregated to reconstitute all or part of the at least one initial data packet stream respectively at an exit point of said concentrator or at the exit of the at least one standard Internet access point of said device.

[0043] The method according to the invention further comprises a step of confidential acquisition by the system of the authentication information of a holder of the right to use at least one wireless Internet access wishing to share his access and all or part of its bandwidth, and a step of automatic and confidential use of all or part of said authentication information in at least one device included in the system and which is capable of connecting to said access point of said holder.

[0044] It is expected that the system according to the invention ensures confidential processing of said authentication information of each user. This is done for example using cryptography techniques, for example using Blockchain.

[0045] Authentication information of a holder of the right to use at least one wireless Internet access means the information enabling the connection to be established, such as for example an identifier and a password.

[0046] The term "holder of the right to use at least one wireless Internet access" means a holder of the type who provides bandwidth to third parties and / or of the type who uses bandwidth made available to him by third parties.

[0047] The method according to the invention further comprises a step of allocating over time the bandwidth made available to third parties by a holder of the right to use at least one wireless Internet access. This involves allowing the holder to indicate his preferences over time regarding the use of his bandwidth by third parties to take into account his own needs and priorities as a priority.

[0048] The invention provides for managing bandwidth allocations over time slots with daily or weekly recurrence, or within a calendar associated with a user account.

[0049] The method according to the invention further comprises a step of automatically distributing the packets between the available communication channels, as a function of the bandwidth of all or part of said communication channels, and / or as a function of the bandwidth demand, and / or as a function of criteria relating to security, and / or as a function of preferences having been previously expressed by at least one holder of the right to use at least one wireless access to the Internet.

[0050] For example, it is provided to distribute the packets in said communication channels by taking into account the nominal bandwidth and / or the bandwidth used by the connection holder and / or the remaining bandwidth not used by the connection holder relative to the nominal bandwidth or the maximum bandwidth of the communication channel having been previously measured by means of a functional sub-assembly comprising at least one software component executed in a remote server and / or in a device according to the invention.

[0051] It is also planned to dynamically distribute the packets in said communication channels according to the bandwidth demand configured, or measured on the user terminal side and / or on the server side.

[0052] It is also planned to distribute the packets in said communication channels so that the implementation reinforces the security in the data exchanges. For example by passing the source and / or recipient IP addressing information through one channel, and by passing all or part of the data to be transported through one or more other channels. Or by passing the incoming and outgoing flows through separate channels. Or by distributing the transport of the packets of a data flow in the available communication channels according to a distribution key that can be used symmetrically at the other end of the system to reconstitute the initial data flows.The objective being that the observation of the flow of data circulating in a channel, or even in several channels within the plurality of channels used, does not allow or makes very difficult the understanding of the information transported as long as there is no knowledge of the data circulating in at least one communication channel. By using cryptography techniques to encrypt data circulating in all or part of the communication channels used by a device, the level of security of an Internet access point offered by the implementation of the invention is further reinforced.

[0053] It is also planned to distribute the packets in said communication channels according to preferences previously expressed by at least one holder of the right to use at least one wireless Internet access such as for example an allocation over time of the bandwidth made available to third parties.

[0054] The distribution of the packets is for example arranged to optimize the use of the available bandwidth of each unitary communication channel in order to maximize the composite throughput offered by the device according to the invention to the terminals which connect to it. It is also planned to distribute the packets to maximize the use of all or part of the available channels within the framework of a prior allocation of priority in the use of predetermined communication channels.

[0055] The invention also relates to the use of the method according to the invention to increase the throughput and / or the security level of an Internet access point. This involves, for example, meeting bandwidth needs for occasional or permanent uses in places where the local communication infrastructure is not suitable. For example, for teleworking at home, for digital leisure activities or working in temporarily occupied places such as coworking spaces, public transport, second homes, hotel rooms, other forms of temporary accommodation, including lodges, campsites, places of residence rented by individuals or all types of public places such as train stations and airports.The invention, particularly when implemented by means of variants of the device powered by an autonomous electrical power source, is also suitable for uses in mobility, in means of transport such as . trains, boats, caravanning and mobile homes etc., during outdoor missions, on construction sites, in temporary mobile structures etc. The invention aims to meet professional and / or private needs, for example in the field of digital leisure activities which consume a lot of bandwidth such as access to streaming platforms or downloading 2D or 3D videos, or for uses related to video games, the invention allowing access for example to high quality content or services which would not be accessible via a conventional data link.

[0056] The invention also relates to the use of the method according to the invention to provide Internet connectivity capable of enabling professional use through the combined use of a plurality of Internet access means whose throughput and / or connection security is insufficient for such use.

[0057] The invention also relates to the use of the method according to the invention to allow a holder of the right to use an Internet access point to grant to at least one third party the use of all or part of its bandwidth while maintaining the confidentiality of the authentication information of said holder. That is to say without the holder having to disclose his authentication information to the at least one third party user of all or part of his bandwidth. Said authentication information is for example an identifier and a password. Indeed, many users holding a right of access to a connection allowing access to the Internet do not continuously use and / or do not fully exploit the capacities offered by the communication channels of which they are holders.The invention also allows them to use excess capacity that they do not use for their own needs without the risk of loss of control or usurpation of ownership due to automatic confidential management of authentication information in the system, making it possible to avoid having to disclose the authentication information of an owner to other users.

[0058] The invention provides that artificial intelligence techniques such as, for example, machine learning are used to automatically optimize the operation of the device, system or method according to the invention. Brief description of the drawings

[0059] Other advantages and characteristics of the invention will appear on examining the detailed description of non-limiting embodiments, and the appended drawings where:

[0060] [Fig. 1] illustrates the internal structure of said device.

[0061] [Fig.2] illustrates the device according to the invention in its implementation context.

[0062] [Fig.3] illustrates the system according to the invention.

[0063] [Fig.4] illustrates the combination of several devices within a system.

[0064] [Fig.5] illustrates the method according to the invention.

[0065] [Fig.6] illustrates a refinement of the method according to the invention. Detailed description

[0066] [Fig.l] illustrates the internal structure of said device.

[0067] The device 1 comprises a low voltage power supply 2, at least one information processing subassembly 3 comprising at least one microprocessor 4, at least one wired or wireless communication channel 5 associated with at least one software component to form at least one standard Internet access point by which the at least one electronic device connects to the Internet via said device, and at least two independent communication channels 6 for connecting said device to the Internet, at least one of the at least two independent communication channels being a standard means for wirelessly accessing a remote telecom infrastructure relative to said device.Said low voltage power supply 2 is for example a mains power supply entirely enclosed in the casing of said device 1 which is connectable to a 230V or 110V AC electrical network, or an external mains power supply unit connectable to the device on the side of its low voltage output of for example 5V DC. According to the implementation variants of the invention, additional hardware means are also provided within the framework of the low voltage power supply 2 to power certain electronic components at the lower voltages that they require such as for example 3.3V and / or 1.8V from a voltage of 5V DC coming from an internal or external AC-DC converter, or from a power supply by Ethernet (Power over Ethernet in English), or from a power supply by electrical contacts placed on a suitable surface, or by near-field induction or by remote wireless energy transmission.Also provided are autonomous versions of the device 1 based on the use in the low voltage power supply 2 of an autonomous energy source internal or external to the device such as a battery, a photovoltaic source, a mini fuel cell operating for example with hydrogen, or sodium borohydride, or an alcohol.

[0068] A non-limiting example of implementation of the device according to the invention is advantageously produced from a standard electronic subassembly which comprises a plurality of electronic components mounted on a printed circuit of the Raspberry Pi type (registered trademark of Raspberry Pi Foundation). A standard Raspberry Pi module such as for example one of the series 3 model B or one of the series 4, offers the advantage of bringing together on a compact printed circuit, the components secondary regulation electronics forming part of the low voltage power supply 2 to power the components of the module at the very low voltages required from a simple primary power supply of 5V DC, an information processing subassembly 3 comprising at least one microprocessor 4 and its direct environment necessary for its operation such as a clock reference, volatile memory, non-volatile memory capable of storing at least one software component. In the case of a Raspberry Pi module of the 3 or 4 series, the at least one microprocessor 4 is included in a system on a chip BCM2837 or BCM2711 from Broadcom Inc. (registered trademark) comprising 4 microprocessor cores of the 64-bit Cortex type (registered trademark of ARM Limited). Such a standard module also comprises at least one wired and / or wireless communication channel 5 associated with at least one software component forming a standard Internet access point.In this case, it is an Ethernet port associated with an appropriate software component and a Wi-Fi access point. It should be noted that it is always possible in such standard electronic subassemblies to add a wired or wireless access point by means of appropriate USB adapters such as for example a USB-Ethernet adapter or a USB-Wi-Fi adapter capable of operation in Wi-Fi access point mode.

[0069] The at least two independent communication channels 6 for connecting said device to the Internet is based for example on the use of hardware and software components provided to provide Wi-Fi connectivity, and / or Ethernet connectivity, and / or USB connectivity to a standard electronic subassembly. This is when these hardware and software means are not already used as a wired or wireless communication channel 5 associated with at least one software component forming a standard Internet access point.A preferred implementation variant of the invention consists in using a first standard electronic subassembly which comprises a plurality of electronic components mounted on a printed circuit board such as the Raspberry Pi, a second standard electronic subassembly acting as a multi-port USB hub with separate power supply, to connect a plurality of communication adapters to the first standard subassembly by powering said adapters by a suitable external power source which is not limited by the maximum current that can be supplied by a USB connection of said first standard electronic subassembly. Indeed, most standard electronic subassemblies such as Raspberry Pi comprise PTC type components mounted in series in the power supply circuit of the expansion connectors to protect the module from excess consumption of the connected external devices.The power supply capacities of most standard modules are insufficient to simultaneously power several external loads with significant consumption. such as USB-Wi-Fi adapters, also called USB-Wi-Fi keys (“USB Wi-Fi Adapter” or “USB Wi-Fi dongle” in English).

[0070] In this preferred variant of implementation of the invention, all or part of the at least two independent communication channels 6 is advantageously also constituted by at least one standard electronic subassembly such as a communication device connectable to a USB port of said first or second electronic subassemblies.

[0071] Each of the independent communication channels 6 within the meaning of the invention, at least those that it is intended to be possible to add beyond the first two, comprise the hardware and software components as well as the computing resources necessary to support the transmission of data via the channel and the execution of the communication protocols concerned, including where appropriate cryptography functions such as for example the SSL protocol. Thus, the addition of additional communication channels does not significantly burden the at least one information processing subassembly 3 comprising at least one microprocessor 4 in terms of computing power. This characteristic of the device according to the invention makes the latter adaptable to a wide variety in type and number of available communication channels while maintaining a compact information processing subassembly 3 having reduced complexity and cost.

[0072] Furthermore, the use of at least one standard electronic subassembly providing excess connectivity beyond the connectivity required for the at least one wired or wireless communication channel 5 forming a standard Internet access point, and for the at least two independent communication channels 6, for example at least one unused USB or Ethernet port, easily allows the user to increase the capabilities and performance of the device 1. Excess connectivity also allows the device 1 to be opened up to the use of new communication channels, for example based on new satellite constellations, by adding additional independent communication channels 6 as needed by connecting adapters, modems or other appropriate electronic subassemblies to available communication ports.

[0073] [Fig. 2] illustrates the device according to the invention in its implementation context. The device 1 is installed in a room 7 such as a home, a professional room, a place of mobile or temporary use or even a place of temporary accommodation. One or more electronic devices 8, for example standard terminals or electronic equipment such as smartphones, tablets, computers, televisions, connectable to the Internet are connected to the device 1 by one or more wired 9 or wireless 10 links within the framework of the at least one communication channel 5 wired or wireless associated with at least one software component forming a standard Internet access point.

[0074] [Fig.2] also illustrates examples of usable communication channels within the framework of the at least two independent communication channels 6 for connecting said device to the Internet 11 of which at least one of these at least two communication channels is a standard means for wirelessly accessing a remote telecom infrastructure relative to said device.

[0075] A first communication channel 12 of the exemplary implementation of the invention illustrated in [Fig.2] is a smartphone configured to be used as a USB modem. The connection to the device 1 is provided by an appropriate wired link.

[0076] A second communication channel 13 is a smartphone configured to be used as a Wi-Fi mobile access point or as a Bluetooth modem. The connection to the device 1 is provided by a suitable wireless link.

[0077] A third communication channel 14 is an Internet box, i.e. an electronic device offering at least the functions of a modem adapted to a given wired or wireless transmission medium and of an Internet router. In this example, the box is connected to the telecommunications infrastructure by an ADSL or VDSL link or by optical fiber. The connection to the device 1 is provided by an appropriate wired link, for example an Ethernet or USB link.

[0078] A fourth communication channel 15 is a mobile Internet box connected to the telecommunications infrastructure by a cellular radio link, for example according to a so-called 2G, 3G, 4G or 5G standard. The connection to the device 1 is ensured by an appropriate wireless link, for example Wi-Fi or Bluetooth.

[0079] A fifth communication channel 16 is a modem-router connected to the telecommunications infrastructure by a satellite radio link, for example as part of the offer from the operator Starlink (registered trademark of Space Exploration Technologies Corp.). The connection to the device 1 is ensured by an appropriate link, for example by a USB link, which can advantageously also allow the modem to be powered by the device 1, or by Wi-Fi.

[0080] It is advantageously provided in the invention that one of the communication channels usable within the framework of the at least two independent communication channels 6 has the status of main communication channel, due to the more durable or more stable nature of the Internet connection provided to the device relative to the at least one other communication channel which has the status of auxiliary communication channel. In the example of [Fig.2], the so-called main communication channel is naturally channel 14 of the Internet box because it is the one which potentially offers the connection the most stable and durable due to the use of network equipment and lines designed for continuous long-term operation.

[0081] [Fig.3] illustrates the system according to the invention.

[0082] A device 1 is installed in a room 7a in a context close to that described previously in the context of [Fig.2]. In addition to the local independent communication channels based on the means 12, 13 14a and 15 which are physically associated with the room 7a, or with a user linked to the room 7a, and which are capable of connecting said device to the Internet 11, the device 1 also comprises an independent communication channel based on the means 14b which is physically associated with the room 7b, or with a user linked to the room 7b. The means 14b is also capable of connecting said device 1 to the Internet 11. This is, seen from the device 1 of the room 7a, a standard means for wirelessly accessing a remote telecom infrastructure which is functionally equivalent to the others.In this case, it is a Wi-Fi connection whose access point is an ADSL or VDSL or fiber Internet box located in a remote room 7b, a box which is supplied with energy by another electrical installation located behind a different electric meter than that of the electrical installation which supplies the device 1 of the room 7a. The device 1 according to the invention located in the room 7a and the Internet box located in the room 7b are distant but nevertheless close enough to be within Wi-Fi communication range. The device 1 disaggregates the packet flows from the terminals 8a which are connected to it and distributes the resulting traffic in the at least two independent communication channels available.The user who administers the device 1 has created a user account 17a prior to its use to at least provide the authentication information for the Internet connections necessary, where applicable, to open the corresponding communication channels. Depending on the implementation variants, this information is stored locally in the device and / or in a remote server. Since this is sensitive information, encryption techniques are advantageously used during the implementation of the invention to avoid transmitting this information in clear text and / or to store it securely. The user interface allowing the administration of the device, including its configuration, is advantageously implemented in the form of a website embedded in the device or hosted on a remote server. This user interface is advantageously accessible using one or more standard terminals 8a.In addition to the authentication information that may be associated with each of the independent communication channels to the Internet, such as identifiers and passwords, the configuration of the device includes, for example, the designation of a main channel, for example a box offering a robust and permanent connection to the Internet, preferences or priorities concerning the use of the at least . a possible secondary channel, preferences regarding the use of bandwidth, relating to types of use such as professional uses or leisure uses such as video streaming or online games, relating to the terminals or users who connect to the device, relating to time or calendar slots.

[0083] In a preferred implementation variant of the invention, the encryption of all or part of the information related to the administration of a device, or related to the data streams of external origin transmitted via it, comprises biometric data of at least one user associated with this device. The initial recording of the biometric data of the user concerned, and their verification where appropriate, preferably using at least one sensor included in a standard terminal 8a.

[0084] At least one software component 18a acting as a concentrator is executed in a remote server to aggregate packet flows distributed in at least two independent communication channels in the direction from the access point for electronic device to the IP address of the recipient 19, and to disaggregate packet flows distributed in at least two independent communication channels in the direction from the IP address of the recipient 19 to the access point 5.

[0085] In this example of implementation, the holder of the communication channel of the box 14b who wishes to make all or part of his bandwidth available to at least one remote device 1 according to the invention, creates and manages a user account 17b via a website hosted in a remote server accessible by a standard terminal connected to the Internet 11 running a standard web browser or an application specific to the implementation of the technical solutions of the invention, for example a terminal 8b.

[0086] A user like the one in room 7b wishing to make available all or part of the bandwidth of an Internet connection of which he is the holder by using the solutions of the invention does not need to know the other user(s), such as for example the one(s) of the device 1 in room 7a, nor to transmit to them his connection identifiers. It is provided that a device 1 which detects possible connections in its environment, for example by detecting the Wi-Fi access point of the box 14b, queries a remote database included in the system according to the invention, for example from the SSID or another information element characteristic of an access point, and automatically receives in return the corresponding authentication information to allow the device 1 to automatically establish the connection in the case where the detected access point is known to the system and authorizes the connection.Refinements are planned when querying the database of participating access points for the service. solve potential problems of non-uniqueness of the access point identifier over a large territory. For example, the query to the database further includes geolocation information elements of the device 1 concerned, which is within short radio range of the detected access point and therefore physically close to the detected access point. For example, the postal address of the user of the device 1, i.e. of the premises 7a, which is also known due to the user's subscription to a service related to the solutions according to the invention. In certain variants of the invention, an approximate physical address of the premises 7a containing the device 1 is obtained by services available from third-party operators, for example due to the existence of at least one connection of the device 1 to the Internet already established.

[0087] It is provided in certain variants of implementation of the invention that users wishing to make available all or part of the bandwidth of an Internet connection of which they are the holders, specify to the system according to the invention by an appropriate interface the conditions of this provision. This is done, for example, by specifying what percentage of their total bandwidth they make available to third parties depending on the time of day, or the day of the week, or the calendar date. For example, a holder of a particular type in a dwelling can make available to third parties up to 100% of his bandwidth at times when he knows that there is no one in the dwelling, for example during the working hours of people outside, late at night, during holidays, etc.

[0088] For example, a professional type holder in a dedicated room can make up to 100% of his bandwidth available to third parties outside the working hours of the people in this room.

[0089] It is provided in certain variants of implementation of the invention that the concentrator 17a routes all or part of the aggregated packet flows which are exchanged with the associated device 1, towards a VPN service to reinforce the security of the system. This for example concerns the packet flows linked to a professional use of the device 1 in the premises 7a.

[0090] [Fig.4] illustrates the combination of several devices within the framework of a system according to the invention.

[0091] The example of implementation of the invention of [Fig.4] is distinguished from that of [Fig.3] by the addition of a room 7c in which a second device according to the invention 1c is installed. In this non-limiting example, it turns out that the device according to the invention 1a is within radio range of the Wi-Fi access point of the box 14b installed in the room 7b and also within radio range of the Wi-Fi access point of the box 14c installed in the room 7c. The users of the devices 1a and 1c are both users of a device according to the invention for connecting at least one electronic device to the Internet 11 with an increased connection speed and security level, and users wishing to make available all or part of the bandwidth of an Internet connection 11 of which they are the owners.

[0092] It should be noted that in this example, the user of the device could add to his device an independent communication channel capable of connecting it to the Internet. For example, a Wi-Fi USB key, to also be able to access the Wi-Fi access point of the box 14b. Refinements are provided in the preferred variants of implementation of the device. For example, a software component acting as a radio network analyzer to detect and make it possible to signal to the user the radio Internet connection capabilities available in his environment. Where appropriate, subject to the addition of an additional independent communication channel of an appropriate type, for example compliant with the Wi-Fi or Bluetooth standard in one of its long-range variants.The most sophisticated implementation variants are able to specify which version of the standard is the most advantageous in terms of range and / or bandwidth, for example “Wi-Fi 4” (standard referenced IEEE 802.lin), “Wi-Fi 5” (standard referenced IEEE 802.1 lac) or “Wi-Fi 6” (standard referenced IEEE 802.11ax), “Bluetooth 5 long range”. These variants are also able to check whether the physically usable channels detected by the device in its environment make bandwidth available to third parties or not according to the invention by automatically consulting the appropriate database(s) of the system.

[0093] [Fig.5] illustrates the method according to the invention.

[0094] After step 20 of appropriate initialization of the method according to the invention, taking into account the bidirectional nature of the information exchanges between the terminal equipment and the Internet, the method comprises differentiated processing depending on the direction of circulation of the data packets.

[0095] Step 21, in the direction of circulation of the data packets going from the device according to the invention to the Internet, appropriately disaggregates at least one flow of data packets coming from at least one standard Internet access point to form at least two separate packet flows capable of being transmitted by at least two separate communication channels.

[0096] Step 21, in the direction of circulation of the data packets going from a standard Internet data source to the device according to the invention, aggregates the packets coming from at least two distinct communication channels to form a stream of packets capable of being used by at least one standard Internet access point of a given device according to the invention.

[0097] Step 22 which follows step 21 is that of the bidirectional transmission of the packets by at least two distinct communication channels.

[0098] Step 23 which follows step 22 mainly comprises reciprocal processing of those carried out within the framework of step 21.

[0099] Step 23, in the direction of circulation of the data packets going from the device according to the invention to the Internet, aggregates the packets coming from at least two separate communication channels to restore the flow of packets coming from the at least one standard access point included in the device according to the invention considered.

[0100] Step 23, in the direction of circulation of the data packets going from the Internet to the device according to the invention, appropriately disaggregates at least one flow of data packets originating from at least one standard Internet data source to form at least two separate packet flows capable of being transmitted to a predetermined device according to the invention by at least two separate communication channels.

[0101] The invention provides for implementing the method by software. The software components involved are executed partly in a device according to the invention and partly in at least one remote server.

[0102] [Fig.6] illustrates a refinement of the method according to the invention. It is a question of making it continuously automatically adaptable according to the availability of independent communication channels in the environment of a device according to the invention, and where appropriate, according to the shares of bandwidth usable within the framework of the invention for each of the available channels.

[0103] After step 24 of appropriate initialization of this part of the method according to the invention, step 25 consists for the device to explore the surrounding radio connectivity potential. For example by scanning all or part of the radio spectrum and connectivity standards likely to offer the device an additional independent Internet communication channel. In the most common implementation variants of the invention, this scanning step can be limited to the exploration of possible Wi-Fi connections in the 2.4 GHz band and in the 5 GHz band. However, it is planned to propose updates to the software embedded in the device according to the invention to explore other Internet connection capabilities within radio range, and if necessary to add additional hardware means that would be necessary for this exploration.

[0104] The following step 26 is a test for the presence of the connection identifiers of a connection found during the scanning step in at least one memory of the system according to the invention. This is most often a query in at least one remote database but it can also be a memory embedded in the device. This is for example in the case where the latter has already seen this connection previously and kept in memory the corresponding identifiers that it has previously acquired from a database remote from the system.

[0105] In the case of a negative result to the test of step 26, we return to step 25 to ensure a loop execution as long as the conditions for a detection of a communication channel for which the system knows the connection identifiers.

[0106] In the case of a positive result to the test of step 26, step 27 is executed. It aims to obtain by the device according to the invention the connection elements allowing the opening and use of the detected communication channel, this in a local memory or in a remote memory.

[0107] The next step, step 28, is that of the device opening the communication channel detected from the connection information previously obtained in a memory of the system.

[0108] The next step, step 29, is that of the device using the new open communication channel. For example, the device takes into account the opening of the new communication channel to update the distribution of packet flows in the at least two open communication channels in order to optimize its operation. If necessary, the device rearranges the entire packet distribution logic taking into account the characteristics of the new open communication channel and transmits the data for updating the packet distribution logic in the open communication channels to the at least one software component acting as a concentrator associated with the device which is executed in a remote server.

[0109] The invention also provides a reciprocal method for enabling self-adaptation of the operation of the device according to the invention in the event of the disappearance of one of the communication channels which was previously active. It is also provided that the device adapts its operation in the event of a reduction or increase in the bandwidth available in the at least two open communication channels.

[0110] Of course, the invention is not limited to the examples which have just been described and numerous adjustments can be made thereto without departing from the scope of the invention, in particular by combining several variants in the same implementation or by combining elements taken from several examples differently or by using other technical standards functionally equivalent to those which are cited as examples.

Claims

Claims

1. Device (1), for connecting at least one electronic device to the Internet with an increased connection speed and security level by the combined use of at least two independent communication channels, comprising a low voltage power supply (2), at least one information processing subassembly (3) comprising at least one microprocessor (4), at least one wired or wireless communication channel (5) associated with at least one software component to form at least one standard Internet access point by which the at least one electronic device connects to the Internet via said device, and at least two independent communication channels (6) capable of connecting said device to the Internet, at least one of the at least two independent communication channels being a standard means for wirelessly accessing a remote telecom infrastructure relative to said device,said device being characterized in that it further comprises at least one software component for automatically using all or part of the authentication information associated with at least one independent communication channel, said authentication information being previously acquired by said device from a remote information system.,

2. Device according to claim 1 characterized in that all or part of the at least one information processing subassembly comprises at least one standard electronic subassembly comprising a plurality of electronic components mounted on a printed circuit.

3. Device according to any one of claims 1 or 2 characterized in that it is arranged to allow the connection of at least one additional electronic sub-assembly capable of providing an additional independent communication channel for connecting said device to the Internet.

4. Device according to any one of claims 1 to 3 characterized in that it further comprises at least one software component for automatically establishing at least one wireless connection to a remote telecom infrastructure.

5. Device according to any one of claims 1 to 4, characterized in that it further comprises hardware and / or software means to encrypt stored or transmitted data in connection with the authentication of an Internet connection, and / or to encrypt all or part of the data transmitted by the device.

6. Device according to any one of claims 1 to 5 characterized in that all or part of the bandwidth of the communication channel resulting from the aggregation of the at least two independent communication channels is allocated at least temporarily to a terminal or to a predetermined use.

7. Device according to any one of claims 1 to 6 characterized in that the at least one wired or wireless communication channel for connecting at least one electronic device to the device, the at least two independent communication channels for connecting the device to the Internet, the low voltage power supply, are respectively: An Ethernet, or USB, or Bluetooth, or Wi-Fi connection; An Ethernet, or USB, or Bluetooth, or Wi-Fi connection with intermediate equipment allowing access to the Internet, or a direct connection to the Internet by radio, or by optical fiber or by wired connection;A mains power supply included in the casing of said device, or an external mains power supply unit connectable to said device, or a battery included in the casing of said device, or a USB connection to a terminal providing the energy necessary for the operation of said device, or at least one photovoltaic cell, or a power supply by Ethernet, or by a power supply using electrical contacts placed on a suitable surface, or based on near-field induction or on remote wireless energy transmission.;

8. System for connecting at least one electronic device to the Internet with increased throughput and connection security level by the combined use of at least two independent communication channels, characterized in that it comprises at least one device according to any one of claims 1 to 7 and at least one software component executed in a remote server acting as a hub functionally associated with the at least one device for appropriately aggregating and disaggregating packet streams transmitted by at least two independent communication channels.

9. System according to claim 8 characterized in that it further comprises a functional sub-assembly comprising at least one software component executed in a remote server and / or in said device to manage at least one user account of the category making available all or part of the bandwidth of an Internet connection of which it is the holder and / or to manage at least one user account of said device.

10. System according to any one of claims 8 or 9 characterized in that it further comprises a functional sub-assembly comprising at least one software component executed in a remote server and / or in said device to manage at least one counter relating to the use of all or part of the at least two independent communication channels, and / or at least one counter relating to the use of said device.

11. Method implemented by software in a system according to any one of claims 8 to 10, characterized in that it comprises at least one step of appropriate disaggregation of at least one initial data packet stream entering through the at least one standard Internet access point of a device or through the at least one software component acting as a concentrator associated with said device, a step of transmission of disaggregated packet streams through the at least two independent communication channels of said device, a step of aggregation of the data packet streams having been previously disaggregated to reconstitute all or part of the at least one initial data packet stream respectively at an exit point of said concentrator or at the exit of the at least one standard Internet access point of said device.

12. Method according to claim 11 characterized in that it further comprises a step of confidential acquisition by the system of the authentication information of a holder of the right to use at least one wireless Internet access wishing to share his access and all or part of his bandwidth, and a step of automatic and confidential use of all or part of said authentication information in the at least one device included in the system and which is capable of connecting to said access point of said holder.

13. Method according to any one of claims 11 or 12 characterized in that it further comprises a distribution step automatic packet switching between available communication channels, based on the bandwidth of all or part of said communication channels, and / or based on a bandwidth demand, and / or based on the direction of packet transmission, and / or based on security-related criteria, and / or based on preferences previously expressed by at least one holder of the right to use at least one wireless Internet access.

14. Use of the device according to any one of claims 1 to 7 to provide Internet connectivity capable of enabling professional use by the combined use of a plurality of Internet access means whose speed and / or connection security is insufficient for such use.

15. Use of the device according to any one of claims 1 to 7 to allow a holder of the right to use an Internet access point to grant to at least one third party the use of all or part of its bandwidth while maintaining the confidentiality of the authentication information of said holder.

Images