METHOD FOR DUPLICATING A PRIMARY LOCAL COMMUNICATION NETWORK ONTO A SECONDARY LOCAL COMMUNICATION NETWORK, DUPLICATION DEVICE AND CORRESPONDING COMPUTER PROGRAM.

Abstract

This document proposes a method for replicating a primary local area network (LAN) managed by a gateway to a remote network and containing at least one user device capable of connecting to the primary LAN, on a secondary LAN. The method comprises: - obtaining a unique identifier from a host access system for the user device and authenticating it, - authenticating a user profile associated with network characteristics of the primary LAN, - and, once the host access system and the user profile are authenticated: sending a message to the host access system containing the network characteristics of the primary LAN and a request to create, on the secondary LAN, a so-called "copied" LAN containing the network characteristics of the primary LAN, to which the user device is capable of connecting. Figure to be published with the abbreviation: Fig. 3

Description

Title of the invention: METHOD FOR DUPLICATING A MAIN LOCAL COMMUNICATION NETWORK ON A SECONDARY LOCAL COMMUNICATIONS NETWORK, CORRESPONDING DUPLICATION DEVICE AND COMPUTER PROGRAM. Technical field

[0001] The present invention relates to the field of telecommunications networks, for example wireless telecommunications networks. In particular, the present invention relates to the duplication, or copying, of a first telecommunications network onto a second telecommunications network. In particular, the present invention relates to the duplication of the network characteristics of a first wireless telecommunications network onto an access system of a second wireless telecommunications network. STATE OF PRIOR ART

[0002] Nowadays, the number of user devices (for example: smartphones, tablets, computers, game consoles, etc.) connecting to a telecommunications network is constantly increasing. All of these user devices are configured to connect in particular to a “domestic” or “professional” Wi-Fi (“Wireless Fidelity” in English) wireless telecommunications network.

[0003] A wireless communication network (hereinafter "network") compliant with one of the IEEE 802.11 standards (for example one or more of amendments b, g, a, n, ac, ax, be, etc., of the IEEE 802.11 standard) typically comprises a plurality of nodes. Each node is an electronic device comprising at least one radiofrequency module allowing the establishment of communications in accordance with one of the IEEE 802.11 standards, or in other words, in accordance with one of the Wi-Fi standards. Such a network typically comprises one or more electronic devices, commonly called access points ("Access Point" in English, or "AP") and a plurality of electronic devices called users (or clients) capable of establishing wireless connections with one of the access points and / or between them. One of these access points can be called "master" insofar as the other access points are dependent on its control.This may be the case in a mesh wireless communication network, in which one of the access points centralizes certain configuration decisions of the other access points providing wireless coverage extension.

[0004] In a residential or professional environment, the master electronic device, or access point, is typically a "box" provided by an Internet operator, i.e. a home gateway or residential gateway, or a professional gateway. The user electronic devices (hereinafter "user equipment") are typically computers, televisions, tablets or so-called "smartphones". It is thus commonly said that the user equipment is associated "in Wi-Fi" with the access point.

[0005] The domestic or professional gateway is connected to the remote network, or WAN (in English "Wide Area Network"), such as for example an Internet network, by ADSL copper link (in English "Asymmetric Digital Subscriber Line"), or similar, by fiber and / or by 3G / 4G / 5G type mobile access, allowing the network user equipment to access the remote network and communicate with each other.

[0006] Thus, a local communication network, or LAN (“Local Area Network” in English) is for example a domestic network or professional network, to which several user devices are connected via the domestic or professional gateway.

[0007] User equipment, thus connected to a local network, can benefit from various services (video on demand, music or online video games, etc.). As soon as the user equipment is no longer connected to the same local network, these services are no longer available. This is the case, in particular, if the user equipment is moved by a user, for example when going on vacation, or during a business trip.

[0008] When moving, it is a pain to have to individually reconfigure each of your user devices so that it can connect to the Wi-Fi network of the temporary residence (co-working space, host company, hotel room, campsite, etc.). Furthermore, this Wi-Fi network of the temporary residence is often controlled by a captive portal that can limit certain types of service. Another problem with this type of network is that the user does not control the security configuration aspects, and is therefore dependent on the choices of the owner of this Wi-Fi network.

[0009] Some operators provide their subscribers with an extended Wi-Fi network broadcast by all of that operator's network equipment. Thus, a user, a subscriber of the operator, can connect to the operator's extended Wi-Fi network via another subscriber's network equipment. However, this network "common" to all of the operator's subscribers includes characteristics that are very different from those of each user's home or professional network. An additional step of configuring user equipment is therefore necessary on each device that the user wants to use on this wide area network.

[0010] According to another solution, in the case of a distributed type main home network, it is possible to use one of the coverage extension devices ("extenders" in English) of the home network to provide Wi-Fi access at the temporary place of residence and to use a configuration procedure. However, this solution requires that the user has a Wi-Fi extender and that he brings it with him when traveling.

[0011] It is then desirable to overcome these drawbacks of the state of the art.

[0012] EXPOSE

[0013] It is desirable to provide a solution that allows each user equipment configured to connect to a main network called "home" or "professional" to connect to a temporary secondary network called "host" without needing to individually reconfigure each user equipment or to provide network equipment to serve as a "bridge" between the host network and the user equipment.

[0014] For these purposes, a method is proposed here for duplicating a main local network managed by a gateway for accessing a remote network and comprising at least one user device capable of connecting to the main local network, on a secondary local network managed by another gateway for accessing the remote network, the method comprising:

[0015] - obtaining from said at least one user device a unique identifier of a system secondary LAN host access system and authenticate the host access system from the unique identifier obtained,

[0016] - authenticate a user profile, the user profile being associated with characteristics network characteristics of the main local network,

[0017] - and, when the host access system and the user profile are authenticated: transmitting a message to the host access system, the message comprising the network characteristics of the primary local network and a request to create, on the secondary local network, a so-called “copied” local network comprising the network characteristics of the primary local network and to which said at least one user device is capable of connecting.

[0018] Thus, it is possible for user equipment of a so-called "main" local network (home or professional network) of a user to connect to a so-called "secondary" local network of a temporary place of residence via a connection to a "copied" local network having network characteristics identical to the main local network. The connection of user equipment to the "copied" local network does not require any additional configuration because the user equipment is already aware of the network characteristics of the main local network. A user in de placement can then connect any of its equipment (for example: computer, smartphone) very simply to this copied local network and access the secondary local network of its temporary place of residence.

[0019] According to a particular embodiment, the method further comprises: setting up a secure tunnel between the so-called “copied” local network comprising the network characteristics of the main local network and the gateway of the main local network.

[0020] Advantageously, the establishment of the secure tunnel between the “copied” local network and the gateway managing the main local network allows the user to securely access his main local network and therefore all of his services, even when he is traveling.

[0021] According to a particular embodiment, the method further comprises a so-called “pre-configuration” step comprising:

[0022] - create the user profile from a user ID and a password pass,

[0023] - record in association with the user profile the network characteristics of the main local network.

[0024] Thus, it is possible to uniquely associate the network characteristics of a user's main local network with his user profile.

[0025] According to a particular embodiment, the pre-configuration step further comprises: maintaining an up-to-date list of host access systems authorized to duplicate on a secondary local network the network characteristics of the main local network, the list comprising for each host access system a unique identifier.

[0026] In order to be authorized to copy the network characteristics of the main local network onto the secondary local network for the creation of a “copied” local network, the host access system of the secondary local network must be on a list of host access systems authorized to retrieve the characteristics of the main local network for copying them. It is thus possible to secure the duplication of the main local network, since it can only be done on a host access system of a secondary local network authorized to carry out the duplication.

[0027] According to a particular embodiment, authenticating the user profile comprises: determining whether said at least one user equipment used to obtain the unique identifier of the host access system of the secondary local network belongs to a list of user equipment authorized to be used to authenticate the user profile.

[0028] Advantageously, in order to increase the security of the duplication method, the authentication of the user profile is done on the basis of a double verification: verification of the identity of the user and verification of the identity of the user equipment used to obtain the unique identifier of the host access system of the secondary local network visited by the user. This makes it possible in particular in the event of usurpation of the identity of the user (for example, theft of the identifier and password allowing authentication of the user profile) to prevent duplication of the main local network if the user equipment does not belong to the list of user equipment authorized to provide the user identifier for authentication of its user profile.

[0029] According to a particular embodiment, transmitting a message to the host access system comprises: determining whether said host access system is authorized, over a predefined period or on a predefined date, to configure said so-called "copied" local network on the secondary local network.

[0030] Thus, prior to his movement, the user can provide information concerning the location (i.e., the localization identity of the visited secondary local network) and the date or period at which his user equipment can connect to the host access system of the visited secondary local network. This makes it possible to secure the duplication of the network characteristics of the user's main local network by only allowing duplication on a host access system of a secondary local network previously declared by the user.

[0031] According to a particular embodiment, the method further comprises,

[0032] - obtain: either a period during which said at least one user equipment is authorized to connect to said “copied” local network, i.e. a date from which said user equipment is no longer authorized to connect to said copied local network,

[0033] - delete said copied local network:

[0034] - either when said period ends,

[0035] - either when said date is reached,

[0036] - either at the user's request.

[0037] Advantageously, it is possible to limit the copy of the main local network in time and to automatically (on the basis of a predetermined period or date) or manually (at the user's request) delete the copy of the main local network.

[0038] Also provided herein is a duplication device comprising electronic circuitry configured to perform the steps of the method described above.

[0039] Also provided here is a server accessible via a remote network comprising a duplication device as described above.

[0040] Also proposed here is a gateway of a main local communication network configured to manage said main local communication network to which at least one user device is connected, said gateway being characterized in that it comprises a duplication device as described above.

[0041] Also provided here is a computer program product, comprising instructions causing the execution, by a processor, of the method as described above, when said instructions are executed by the processor.

[0042] Also provided here is a storage medium, storing a computer program comprising instructions causing the execution, by a processor, of the method as described above, when said instructions are read and executed by the processor. Brief description of the drawings

[0043] The characteristics of the embodiments mentioned above, as well as others, will appear more clearly on reading the following description of at least one exemplary embodiment, said description being made in relation to the attached drawings, among which:

[0044] [Fig.l] schematically illustrates an example of an implementation environment of a particular embodiment;

[0045] [Fig.2] schematically illustrates another example of an implementation environment of a particular embodiment;

[0046] [Fig.3] illustrates in diagrammatic form a method of duplicating a primary local area network on a host access system of a secondary local area network according to a particular embodiment;

[0047] [Fig.4] schematically illustrates the exchanges between a duplication device, the user equipment and the host access system of a secondary local network during the implementation of the duplication method according to a particular embodiment.

[0048] [Fig.5] schematically illustrates a particular implementation of a step of the duplication process;

[0049] [Fig.6] schematically illustrates a particular implementation of another step of the duplication process;

[0050] [Fig.7] schematically illustrates the hardware architecture of a duplication device configured to perform all or part of the steps of the method illustrated in Figs. 3 to 6.

[0051] DETAILED DESCRIPTION OF EMBODIMENTS

[0052] The general principle of one or more embodiments concerns the temporary duplication, or copy, of the characteristics of a so-called "main" local network, in particular a domestic or professional local network, at the level of a host access system of a so-called "secondary" host local network remote from the main local network.

[0053] The terms “characteristic(s) of a network”, or “network characteristic(s), designate a set of information necessary to enable the connection of user equipment (for example: a computer, a tablet, a smartphone) to a wireless telecommunications network. This is for example the SSID (“Service Set Identifier”), the password for access to the wireless telecommunications network, the security mode of the wireless telecommunications network (for example: WPA for “WiFi Protected Access” or WPA 2 for “WiFi Protected Access 2”), etc.

[0054] The term "access system" designates an access point or a set of wireless access points connected together to form a mesh-type wireless telecommunications network.

[0055] This copying of the characteristics of the main local network at the level of this host access system of the secondary host local network allows user equipment (for example: tablet, smartphone) belonging to the main local network to connect to it without the need for additional configuration. In other words, each user equipment configured to connect to a “main” network can connect to a “secondary” host network, without the need for reconfiguration, or to provide equipment to serve as a “bridge” between the secondary host network and the user equipment. For this, the user equipment of the main local network connects to a so-called “copied” access point of the host access system as if it were an access point of the main local network.In fact, this “copied” access point includes the network characteristics of the main local network and makes it possible to form a new local network called “copied”, existing in parallel with the secondary host local network.

[0056] The term "primary" local area network refers to a wireless network to which a user's user equipment is initially connected. This may therefore be, for example, a local area network at the user's home, or a local area network at their company.

[0057] The term "secondary" or "host" local network therefore refers, conversely, to a wireless network to which user equipment connects occasionally and for a limited period of time. This is, for example, the wireless network of a holiday resort (hotel, campsite, etc.), or a business trip (conference hall, host company, etc.).

[0058] [Fig.l] schematically illustrates an example of an environment for implementing the invention according to a particular embodiment.

[0059] In this example, the user is at home or in his business. Thus, all of a user's user equipment is connected to a main local telecommunications network denoted LAN1. In other words, the main local network LAN1 is considered to be the one to which the user equipment connects regularly. Consequently, it is the local network whose network characteristics (for example: SSID, password, security mode, etc.) are known to the user equipment.

[0060] The main local network LAN1 is managed by a gateway, noted GW1, providing access to a remote network WAN, for example an Internet network. The GW 1 gateway is connected to the remote network WAN by an ADSL or fiber link. Of course, it can also connect to an operator's cellular network by a 2G to 5G wireless radio link. This main local network LAN1 also includes all user equipment connected to each other via the GW1 gateway, such as a smartphone UE1, a personal computer UE2, a tablet UE3. These user equipment can be connected to the GW 1 gateway by wired connection (for example Ethernet type) directly on the GW1 gateway, or by other types of connection such as USB, wireless connection (for example type: Wi-Fi, Bluetooth, Bluetooth Low Energy, Zwave, Zigbee, DECT-ULE...etc.).These user devices are able to connect to the main local network LAN1 in that they have the authorizations and configurations necessary to access the resources of said local network.

[0061] The environment illustrated in [Fig.l] further comprises a secondary host local telecommunications network denoted LAN2. This secondary host local network LAN2 (or secondary local network LAN2 hereinafter) is for example a local network of a holiday location (for example: hotel, campsite, etc.) or a business travel location (for example: conference location, co-working space, etc.). In other words, it is the local network of the user's travel location. Thus, as described previously, the term "secondary" refers to a local communications network to which the user's equipment (i.e. smartphone UE1, personal computer UE2, tablet UE3) connects temporarily and exceptionally.

[0062] The secondary host local area network LAN2 is managed by a gateway, denoted GW2, for access to a remote network WAN, for example an Internet network. The gateway GW2 is connected to the remote network WAN by an ADSL or fiber link. Of course, it can also connect to a cellular network of an operator by a wireless radio link of type 2G to 5G. This secondary host local area network LAN2 also comprises one or more devices or access points (for example: extenders, wireless repeaters, etc., not shown). In particular, the term "host access system" denotes an access point (for example gateway GW2) or a set of wireless access points (for example: set of wireless repeaters) connected together to form the secondary host local area network LAN2, located at the user's location and compatible with the method, and its variant embodiments, described below in connection with Figs. 3 to [Fig.6].The host access system's access point(s) can be connected to the GW2 gateway either wired or wirelessly.

[0063] In one embodiment, the secondary local area network LAN2 is, for example, a mesh-type Wi-Fi network. For this purpose, this secondary local area network LAN2 comprises, for example, a wireless communication coverage extension system co ordering several access points ("Access Point" in English) integrated into communication nodes denoted NI, N2 and N3. These different access points are interconnected using a routing or backhaul subnetwork and then form the host access system. These access points allow access to the secondary local area network LAN2 to user equipment UE1 to UE3, if applicable.

[0064] [Fig.l] thus illustrates in a simplified and schematic manner a secondary local area network LAN2 comprising such a wireless communication coverage extension system built around a routing subnetwork comprising a set of access points (i.e. host access system) located in the interconnected nodes NI, N2 and N2.

[0065] In general, in the case of a mesh-type wireless network, each communication node NI, N2 and N3 of the routing subnetwork comprises a plurality of radio interfaces:

[0066] - a radio interface called “AP-BH” (for “Access Point Backhaul” in English) corresponding to an access point interface of the routing subnet,

[0067] - a “STA-BH” radio interface (for “Station Backhaul” in English) cor corresponding to a user (or client) interface of the routing subnetwork,

[0068] - an “AP-FH” radio interface (for “Access Point Fronthaul” in English) cor corresponding to an access point interface of the secondary local network LAN2, this interface being dedicated to the association of user equipment UE1 to UE3 to the secondary local network LAN2.

[0069] The communication nodes NI, N2 and N3 of the routing subnetwork are connected to each other by means of a tree-shaped structure, a node then being able to serve as a relay between two other nodes of the routing subnetwork. The communication nodes NI, N2 and N3 are thus interconnected by means of wired links, for example of the Ethernet type, or by means of wireless links. The communication nodes NI, N2 and N3 of the routing subnetwork thus communicate with each other by means of logical links, for example IP communications or encrypted tunnels or communications according to a proprietary communication protocol.

[0070] In one example, the node NI is connected to the node N2 through a wireless link between the access point radio interface AP-BH of the node NI and the client radio interface ST-BH of the node N2. The node NI is also connected to the node N3 through a wireless link between the access point radio interface AP-BH of the node NI and the client radio interface ST-BH of the node N3. The links between two nodes of the routing subnetwork are called routing links or backhaul links and can be wired or wireless.

[0071] Where appropriate, user equipment UE1 to UE3 may connect to the different NI nodes to N3 via their AP-FH radio interface for their access to the secondary LAN2 local network.

[0072] [Fig. 2] schematically illustrates another example of an environment for implementing the invention, according to a particular embodiment. In this example, the user is traveling outside his home or his company. The user therefore wishes to connect his user equipment, such as for example his smartphone UE1 or his tablet UE3 to the secondary local network LAN2 of his place of travel (for example: campsite, co-working space, host company, etc.).

[0073] In this example, the user equipment UE1 (for example smartphone) and UE3 (for example tablet) are connected by a wireless link to the access point of the communication node N3. The user equipment UE1 and UE3 are thus connected to the secondary local area network LAN2 thanks to the node N3 acting as a so-called “fronthaul” access point.

[0074] So that the user equipments UE1 and UE3 do not need to be reconfigured to connect to the access point of the node N3, the network characteristics of the main local area network LAN1 are copied to the node N3 of the secondary local area network LAN2, according to the method described below in connection with [Fig. 3] to [Fig. 6]. In particular, this new access point, having the same network characteristics (for example: SSID, password, security mode, etc.) as the main local area network LAN1, is created at the communication node N3 to allow the user equipments UE1 and UE3 to connect to the node N3 without additional configurations, thus forming a new so-called “copied” local area network denoted LAN3. This new so-called “copied” access point is therefore a copy of an access point of the main local area network LAN1.

[0075] Once connected to this new “copied” access point of the node N3 copying the network characteristics of the main local network LAN1, the user equipments UE1 and UE3 can communicate with each other within the local network LAN3, but also access the secondary local network LAN2. The user equipments can thus communicate with the gateway GW2 of the secondary local network LAN2 via the node N3, for access to the remote network WAN, for example.

[0076] [Fig.l] and [Fig.2] also schematically illustrate a SER server of a service provider for duplicating a main local network, or more simply: service provider. Indeed, in order to be able to create this new access point called "copied" having the network characteristics of the main local network LAN1, at the level of the communication node N3, the user may have previously subscribed to a duplication service of his main local network LAN1. This service is provided by a service provider, such as for example an Internet access provider or a third-party entity. This service provider operates equipment, such as the SER server, located for example in the cloud ("cloud" in French), and accessible via the remote WAN network.

[0077] All or part of the duplication method as described below in connection with [Fig.3] to [Fig.6] is implemented by a duplication device DISP described below in connection with [Fig.7].

[0078] This DISP duplication device is hardware and / or software equipment which can be located for example in the SER server of the service provider or, alternatively, in a remote network access gateway (for example home or professional gateway GW1).

[0079] [Fig.3] illustrates in diagrammatic form a method of duplicating a main local area network LAN1 on a host access system of a secondary local area network LAN2 according to a particular embodiment.

[0080] [Fig.4] schematically illustrates the exchanges between: a duplication device DISP, the user equipment UE1 and UE3 and the host access system (denoted SYS) during the implementation of the duplication method according to a particular embodiment.

[0081] During an optional pre-configuration step 301, the user subscribes to a service for duplicating the characteristics of his main local area network LAN 1 from a service provider. This pre-configuration step 301 only needs to be performed once.

[0082] In one embodiment, this step 301 is implemented by the duplication device DISP. More particularly, during this step 301, the duplication device DISP obtains, via user equipment, such as a smartphone UE1, information such as a user identifier (for example: user name, email address, etc.) and a password for creating a unique user profile with the service provider. The provision of this information to the duplication device DISP and the creation of the user profile are done, for example, via a dedicated mobile application of the service provider on the smartphone UE1 or on a web page dedicated to the duplication service of the service provider.

[0083] Once the user profile has been created, the duplication device DISP obtains the network characteristics (for example: SSID, password, security mode, etc.) of the user's main local area network LAN1. For this, in a first embodiment, the user manually enters, via his smartphone UE1 for example, the network characteristics via an interface (for example: mobile application or web page) offered by the service provider. This is the case, for example, when the service provider is different from the user's Internet access provider.

[0084] In a second embodiment, the user authorizes the service provider to access the user equipment of his local home network (for example: gateway GW1). It is therefore the DISP duplication device which directly recovers and automatically the network characteristics. This is the case, for example, when the service provider is also the user's Internet service provider. Subscribing to the duplication service is then, for example, an option of the user's Internet subscription.

[0085] In a third embodiment, the user configures a user equipment of his main local area network LAN1 (for example: gateway GW1) so that it automatically transmits the network characteristics to the duplication device DISP. In the same way as before, when the service provider is also the user's Internet provider, the user can configure his gateway GW 1 to transmit the network characteristics to the duplication device DISP.

[0086] These network characteristics are then recorded, for example in a memory of the DISP duplication device, in association with the user's user profile. This recording makes it possible to associate the network characteristics with the user in a unique manner.

[0087] In a variant, the network characteristics are recorded in association with a user profile on a memory of the server SER. If necessary, the duplication device DISP can access them to implement all or part of the duplication method described.

[0088] In one embodiment, upon arrival at its temporary place of residence, during a step 302, the duplication device DISP obtains, via for example the smartphone UE1, a unique identifier of an access point, for example of the node N3, of the host access system SYS. This access point, also called hereinafter “access point of interest”, corresponds to the access point to which the user equipment on the move (smartphone UE1, tablet UE3) wishes to connect to access the secondary local area network LAN2.

[0089] In one example, during step 302, the smartphone UE1 scans (sub-step noted 401) (for example: in a shared work room, on a hotel room key, on the screen of the home access point, etc.) a QR Code (“Quick Response Code”) comprising the unique identifier specific to the access point of interest of the node N3 of the host access system SYS. The smartphone UE1 thus retrieves (sub-step noted 402) the unique identifier specific to the access point of interest of the node N3.

[0090] In a variant, the unique identifier of the host access system may be included in a bar code, in an RFID (“Radio Frequency Identification” or radio frequency identification) chip, an alphanumeric code, etc.

[0091] This unique identifier allows the duplication device DISP to identify the access point(s) of interest of the host access system SYS to which one or more user equipment UE1, UE3 wish to connect.

[0092] This unique identifier corresponds for example to the identity of an access point of interest of the host access system SYS. In one embodiment, the unique identifier of an access point of interest of the host access system SYS is the serial number of the main equipment (for example: GW2 gateway or a controller implementing the “EasyMesh” protocol) of the host access system and / or of a secondary equipment (for example: wireless repeater).

[0093] This unique identifier is associated, for example, with the user's temporary place of residence (for example: name, geographical location, etc.), and / or with information concerning the access point of interest, such as its location (for example: room numbers, camping pitches, etc.).

[0094] In one embodiment, during a step 303, the duplication device DISP obtains from the user equipment (smartphone UE1) the unique identifier of the access point of interest of the host access system SYS. Thus, in a sub-step 403, the duplication device DISP can then authenticate from this unique identifier the access point of interest of the access system SYS to which the user equipments UE1 and UE3 wish to connect (for example: access point of the node N3).

[0095] In order for the DISP duplication device to be able to authenticate this access point of interest of the host access system SYS from its unique identifier, it is necessary for this unique identifier to be known to the DISP duplication device. Thus, it is necessary for this unique identifier to be previously recorded, for example in a memory of the DISP duplication device or in a memory of the SER server accessible to the DISP duplication device. In other words, the user's secondary residence must be referenced with the duplication service of the service provider, for example via the subscription of a subscription. The unique identifier is then recorded in association with location or identity information of the temporary residence, as presented above.

[0096] In one embodiment, the duplication device DISP stores in a memory a list of unique identifiers of the access point(s) of the host access system SYS that can benefit from the duplication service of the service provider.

[0097] This list is updated for example with each new subscription to the service (for example: addition of a unique identifier of a new host access system), with each termination of the service (for example: deletion of a unique identifier of a host access system) or with each modification of the architecture of the secondary local area network LAN2 (for example: addition or deletion of access points).

[0098] In one embodiment, after authenticating the access point of interest of the host access system SYS, the duplication device DISP authenticates the profile used lizer. To do this, the duplication device DISP asks the user to identify himself. In one example, the duplication device DISP then sends the user equipment UE1 to an interface offered by the service provider (for example: mobile application or web page) so that the user can identify himself. The user equipment UE1 therefore transmits, during a sub-step 404, to the duplication device DISP an identifier and a password associated with the profile of the user known to the latter.

[0099] In one embodiment, to identify himself, the user manually transmits, via his user equipment, his identifier and his password known to the duplication device DISP. In other words, the duplication device DISP receives the identifier and the password of the user via the user equipment for authentication of the user profile.

[0100] In another embodiment, this sub-step 404 of authenticating the user profile can be automatic if the user uses an application in which he has already identified himself. For example, the user is already identified in a mobile application on his smartphone UE1.

[0101] Alternatively or additionally, the sub-step 404 of authenticating the user profile can be performed by implementing specific security, for example using a user equipment “certified” by the user of the main local area network LAN1 (for example his smartphone UE1). In other words, the duplication device DISP authenticates on the one hand the “certified” user equipment used for the authentication of the user profile and obtaining the unique identifier of the access point of interest of the host system, and on the other hand the user himself. The use of the “certified” user equipment is therefore required to transmit the unique identifier of the access point of interest of the host access system SYS to the duplication device DISP and authenticate the user profile, thus acting as a two-factor authentication method.In order for the DISP duplication device to be able to authenticate the “certified” equipment, a unique identifier of the “certified” user equipment (for example: MSISDN) is for example recorded on a list of user equipment authorized to be used for the authentication of the user profile in a memory of the DISP duplication device in association with the user profile during the pre-configuration step 301. This double verification makes it possible to ensure a higher level of security than simple authentication of the user.

[0102] Alternatively or additionally, the sub-step 404 of authentication of the user profile can be implemented only if the user has previously reported his movement to the DISP duplication device, for example via an interface offered by the service provider (mobile application or web page). In one example, prior to moving, the user transmits, via user equipment, to the duplication device DISP the date, or the period, and possibly the destination of his move. This embodiment makes it possible to preventatively limit the creation of a copy of the characteristics of the main local area network LAN1 in time and space.

[0103] In one embodiment, during step 303 or prior to the move, it is also possible to define a duration or an end date for this “copying” of the characteristics of the main local area network LAN1, so that it is automatically erased (for example during step 307 described below) at the end of the defined period or date. This configuration can also be done in an interface offered by the service provider (mobile application or web page for example). The user, via the user equipment, therefore transmits information on the duration or date of the move to the duplication device DISP. This makes it possible, among other things, to limit the copying of the characteristics of the main local area network LAN1 over time.

[0104] At the end of step 303, the duplication device DISP then has:

[0105] - information required to identify an access point of interest of the system SYS host access (i.e. the unique identifier, contained for example in a QR Code, associated with information concerning the place of secondary residence or the location of the access point of interest),

[0106] - network characteristics to be copied (i.e. those of the main local network LAN1 of the user) via user authentication.

[0107] The duplication device DISP then triggers in a step 304, the creation of a new wireless local network, noted LAN3 in [Fig.l] and [Fig.2]. This new local network LAN3, broadcast by the communication node N3, includes the same network characteristics as the main local network LAN1. The local network LAN3 is therefore a “copy” of the main local network.

[0108] More particularly, according to one embodiment, the duplication device DISP transmits during a sub-step noted 405, to the host access system SYS, the characteristics of the main local area network LAN1. This new local area network LAN3 called “copied” can coexist with other wireless networks configured on the same host access system.

[0109] [Fig.5] schematically illustrates a particular implementation of a step of the duplication method. In particular, [Fig.5] schematically illustrates a particular implementation of step 304 of creating a copy of the main local area network LAN1 on the host access system of the secondary local area network LAN2.

[0110] In one embodiment, the secondary local area network LAN2 is a wireless mesh network that can implement the “EasyMesh” protocol. Thus, the device of the DISP duplication device transmits, during substep 405, to a main device of the secondary local network LAN2, such as a CONT “EasyMesh” controller, the characteristics of the main network LAN1. For this, the DISP duplication device uses, for example, the TR-69 protocol or the USP protocol.

[0111] This CONT controller is, for example, included in the GW2 gateway.

[0112] The characteristics of the main local network LAN1 are then added to the configuration of the CONT controller of the secondary local network LAN2.

[0113] The CONT controller then transmits these characteristics to the “EasyMesh” agents of the secondary local network LAN2. These agents are for example included in the communication nodes NI, N2 (not shown), N3. To do this, the CONT controller can, for example, send an “AP_Autoconfiguration_Renew” message to the agents, which triggers the sending of “AP_Autoconfiguration_WSC_Ml” messages by each agent to the CONT controller. The CONT controller responds to these Ml messages and transmits “AP_Autoconfiguration_WSC_M2” messages to the agents, including an additional M2 TLV containing the characteristics of the main network LAN1 to indicate to each agent to configure an additional BSS (“Basic Service Set”) with these characteristics on each of its radio interfaces.

[0114] Thus, at the end of step 304, a new access point called “copied” reproducing the characteristics of the main local area network LAN1 is created at a communication node (for example, the node N3) initially comprising only the access point of interest. User equipment such as the smartphone UE1 and the tablet UE3 can then connect to this new access point called “copied” without requiring additional configuration.

[0115] Thus, during a step 306, the user equipment, such as for example the smartphone UE1 and the tablet UE3, connect, in sub-step 406, to the “copied” access point as on an access point of the main local network LAN1 to use the “copied” local network LAN3.

[0116] In one embodiment, during a step noted 305 in Figs. 4 and 5, a secure network tunnel can then be set up between the host access system SYS and the gateway GW1 of the user's main local area network LAN1 to allow him to access his main local area network LAN1 securely, even when moving.

[0117] In an example illustrated in [Fig.5], the host access system (for example via the communication node N3) transmits a request denoted "DE_TUNNEL" to set up a tunnel to the duplication device DISP. In return, the duplication device DISP transmits the request "DE_TUNNEL" to set up a tunnel to the gateway GW1 of the main local network LAN1. A tunnel (denoted TUNNEL) is then established between the "copied" access point of the node N3 of the host access system and the gateway GW1 of the main local network LAN1. The term "tunnel" is used to mean: reference to a tunnel in a communications network context, in which encapsulation of the data transmitted / to be transmitted is carried out in order to isolate said data.

[0118] When the move to the temporary residence location is completed, the copy of the main local area network is deleted during a step 307. In particular, the duplication device DISP requests (substep 407) that the network characteristics of the main local area network LAN1 be deleted from the host access system SYS. In one embodiment, this implies that the “copied” access point comprising the characteristics of the main local area network LAN1 is deleted from the communication node.

[0119] According to one embodiment, the copy of the main local network (i.e. the “copied” local network LAN3) is deleted at the end of a given period or date, which are predefined during step 303.

[0120] In another embodiment, the copy of the main local network (i.e. the “copied” local network LAN3) is deleted upon request from the user.

[0121] [Fig.6] schematically illustrates a particular implementation of a step of the duplication method. In particular, [Fig.6] schematically illustrates a particular implementation of step 307 of deleting the network characteristics of the main local area network LAN1 of the host access system SYS.

[0122] In an embodiment in which the secondary local area network LAN2 is a mesh wireless network using the “EasyMesh” protocol, the duplication device DISP may request to remove the characteristics of the primary local area network LAN 1 from the configuration of the controller CONT.

[0123] For this, the duplication device DISP sends a message to delete the characteristics of the home network LAN1 to the controller CONT, for example a message based on the TR-069 protocol.

[0124] The CONT controller then sends a message noted "AP_AutoConfiguration_Renew" to each agent, which triggers the sending of messages noted "AP_AutoConfiguration_WSC_Ml" by the agents to the controller CONT. The controller CONT responds to these messages Ml by sending to the agents messages noted "AP_AutoConfiguration_WSC_M2" not containing an M2 TLV with the characteristics of the main local network LAN 1 (contrary to what is done in substep 405). The absence of this TLV including the characteristics of the main local network LAN1 indicates to the agents that they must stop broadcasting the "copied" local network LAN3.

[0125] [Fig.7] schematically illustrates the hardware architecture of a duplication device configured to perform all or part of the steps of the method illustrated in Figs. 4 and 5.

[0126] The duplication device DISP 700 comprises, connected by a communication bus 710: a processor or CPU (Central Processing Unit) 701; a RAM (Random Access Memory) 702; a ROM (Read Only Memory) 703, for example a Flash memory; a data storage device, such as a hard disk drive (HDD), or a storage media reader, such as an SD card reader (Secure Digital) 704; at least one communication interface 705 allowing the duplication device DISP 700 to interact with the user equipment, such as the smartphone UE1, the laptop UE2, the tablet UE3, the gateways GW1 and GW2, the nodes NI, N2, N3 of the host access system SYS.

[0127] The processor 701 is capable of executing instructions loaded into the RAM 702 from the ROM 703, from an external memory (not shown), from the data storage device 704, such as an SD card, or from a communication network (not shown). When the duplication device DISP 700 is powered on, the processor 701 is capable of reading instructions from the RAM 702 and executing them. These instructions form a computer program causing the processor 701 to implement the behaviors, steps and algorithms described herein, in particular in combination with all or part of the steps of FIGS. 4 and / or 5.

[0128] All or part of the behaviors, steps and algorithm described herein may thus be implemented in software form by executing a set of instructions by a programmable machine, such as a DSP (Digital Signal Processor) or a microcontroller, or be implemented in hardware form by a machine or a dedicated component (chip) or a set of components (chipset), such as an FPGA (Field-Programmable Gate Array) or an ASIC (Application-Specific Integrated Circuit). Generally speaking, the duplication device DISP 700 comprises electronic circuitry arranged and configured to implement the behaviors, steps and algorithms described herein.

Claims

Claims

1. Method for duplicating a main local area network (LAN1) managed by a gateway (GW1) for access to a remote network (WAN) and comprising at least one user equipment (UE1, UE2, UE3) capable of connecting to the main local area network (LAN1), on a secondary local area network (LAN2) managed by another gateway (GW2) for access to the remote network (WAN), said method comprising: - obtaining from said at least one user equipment (UE1, UE2, UE3) a unique identifier of a host access system (SYS) of the secondary local area network (LAN2) and authenticating said host access system (SYS) from said unique identifier obtained, - authenticating a user profile, said user profile being associated with network characteristics of the main local area network (LAN1), - and, when said host access system (SYS) and said user profile are authenticated: transmitting a message to said host access system (SYS),said message comprising the network characteristics of said main local network (LAN1) and a request for creation, on the secondary local network (LAN2), of a so-called “copied” local network (LAN3) comprising the network characteristics of said main local network (LAN1) and to which said at least one user equipment (UE1, UE2, UE3) is able to connect.,

2. Duplication method according to claim 1, characterized in that it further comprises: setting up a secure tunnel between said so-called “copied” local network comprising the network characteristics of said main local network (LAN1) and said gateway (GW 1) of said main local network (LAN1).

3. Duplication method according to any one of claims 1 and 2, characterized in that it further comprises a so-called "preconfiguration" step comprising: - creating the user profile from a user identifier and a password, - recording in association with the user profile the network characteristics of the main local network (LAN1).

4. A duplication method according to claim 3, characterized in that said pre-configuration step further comprises: maintaining up-to-date a list of host access systems authorized to duplicate on a secondary local network the network characteristics of the primary local network (LAN1), said list comprising for each host access system a unique identifier.

5. Duplication method according to any one of claims 1 to 4, characterized in that authenticating said user profile comprises: determining whether said at least one user equipment (UE1, UE2, UE3) used to obtain the unique identifier of the host access system (SYS) of the secondary local area network (LAN2), belongs to a list of user equipment authorized to be used to authenticate the user profile.

6. Duplication method according to any one of claims 1 to 5, characterized in that transmitting a message to said host access system (SYS) comprises: determining whether said host access system (SYS) is authorized, over a predefined period or on a predefined date, to configure said so-called "copied" local network on the secondary local network (LAN2).

7. Duplication method according to any one of claims 1 to 6, characterized in that it further comprises, - obtaining: either a period during which said at least one user equipment is authorized to connect to said “copied” local network, or a date from which said user equipment is no longer authorized to connect to said copied local network, - deleting said copied local network: - either when said period ends, - or when said date is reached, - or at the request of the user.

8. A duplicating device (DISP) comprising electronic circuitry configured to perform the steps of the method according to any one of claims 1 to 7.

9. Server (SER) accessible via a remote network (WAN) comprising a duplication device (DISP) according to claim 8.

10. Gateway (GW1) of a main local communication network (LAN1) configured to manage said main local communication network (LAN1) to which at least one user equipment (UE1, UE2, UE3) is connected, said gateway being characterized in that it comprises a duplication device (DISP) according to claim 8.

11. Computer program product, comprising instructions causing the execution, by a processor, of the method according to any one of claims 1 to 7, when said instructions are executed by the processor.

12. Storage medium, storing a computer program comprising instructions causing a processor to execute the method according to any one of claims 1 to 7, when said instructions are read and executed by the processor.

Images