Method for configuring a remote device, management method, remote device and management device

Abstract

Method for configuring a remote device, management method, remote device, and management device. The method for configuring a device is implemented by said device and comprises: - a step of detecting a sequence of connection attempts, originating from a management device, on at least one communication port of said device, said sequence carrying at least one value of at least one configuration parameter of an operating mode of the device; - a step of translating said sequence providing said at least one value of said at least one configuration parameter; and - a step of configuring said operating mode with said at least one value provided during the translation step. Figure for the abbreviation: Figure 1

Description

Title of the invention: Method for configuring a remote device, method for managing a remote device and a management device. Field of the invention

[0001] The invention relates to the general field of telecommunications.

[0002] More specifically, the invention relates to the configuration of a remote device via a communication network, such as, for example, a computer, a connected object, a router, a gateway, or more generally any type of device accessible via a network. Previous art

[0003] A device connected to a network (a server, a PC, a sensor, a mobile terminal, etc.) may have several different operating modes. For example, the device in question may have a "normal" operating mode, a standby operating mode, etc. (this standby state itself can be configured with a standby depth corresponding to light standby, in order to maximize the wake-up time, or to deep standby, to maximize the reduction of its energy consumption when it does not need to be active). In another example, a device may have operating modes involving the execution of different services, or resulting from the application of given configuration parameters.

[0004] To change or configure the operating mode of a device, that is, to modify its configuration, it is necessary to establish communication with that equipment in order to transmit the chosen configuration. In some cases, for example, for putting a device into deep sleep mode, this configuration may be done through physical interaction with the device, for example, via a sleep button provided on the device. In other cases, changing the configuration of a device can be done remotely via a management device (for example, a management server or a maintenance application), by establishing a communication channel with the device in order to transmit configuration data.

[0005] Opening, and a fortiori maintaining, such a communication channel is not neutral and represents a cost in terms of computing resources, energy consumed, etc. Moreover, for security reasons, it is preferable to open a communication channel to the device only when necessary (when communication is expected, for example) and to close it the rest of the time. Object and summary of the invention

[0006] The invention addresses the drawbacks of the prior art by proposing a method for configuring a device, implemented by said device and comprising: - a detection step, of a sequence of connection attempts, from a management device, on at least one communication port of said device, said sequence carrying at least one value of at least one configuration parameter of an operating mode of the device; - a translation step of said sequence providing said at least one value of said at least one configuration parameter, and - a configuration step for said operating mode with said at least one value provided during the translation step.

[0007] In correspondence, the invention also relates to a method for managing a remote device via a network, implemented by a management device, said method comprising: - a step of obtaining at least one value of at least one configuration parameter of an operating mode of a remote device, - a step of determining a sequence of connection attempts on at least one communication port carrying said at least one value, - an execution step, via the network, of said sequence of connection attempts on at least one communication port of the remote device.

[0008] According to the invention, a sequence of connection attempts (more commonly called "pings") corresponds to an ordered series comprising a plurality of connection attempts on one or more communication ports. Hereafter, we use the terms "connection attempt" and "ping" and the terms "sequence of connection attempts" and "ping sequence" interchangeably.

[0009] The translation of the connection attempt sequence consists of decoding the sequence of pings received in order to obtain at least one value of a given configuration parameter of the operating mode of the device, this value typically corresponding to a numeric or alphanumeric value relating to the configuration parameter, for example an argument, or to a variable.

[0010] By way of illustration, in the example where the operating mode consists of a standby mode, a configuration parameter of an operating mode may, for example, designate the intensity of the standby state of the remote device (i.e., its depth level) or the time before the device exits the standby state, etc. A value of such a parameter may then, according to these examples, correspond respectively to "light", "deep", or "120" (minutes), "7" (days), etc.

[0011] The invention advantageously allows the configuration of a remote device whose communication ports can be closed without even having to open a specific communication channel with that remote device. To this end, the invention appropriately adopts and adapts the principle of "Port Knocking," which is commonly used to securely open a communication port on a firewall. Port Knocking, as is known, is a technique that consists of executing a sequence of pings, in a predefined order and on specific communication ports of a firewall, so as to trigger the opening of a predefined firewall port for future communication. This port is only opened if the executed ping sequence corresponds to a sequence expected by the firewall for the port in question.

[0012] More specifically, the invention exploits a similar principle for communicating with a remote device and transmitting configuration parameter values ​​for an operating mode of the remote device. The ping sequence executed according to the invention on the ports of the remote device is therefore not intended to open a new communication port on that remote device, but rather to configure one or more operating modes of the latter, for example, a sleep state of the remote device so that this sleep state is more or less deep. Preferably, the port(s) on which the ping sequence is executed is / are closed so that no connection is established between the management device and the remote device during the implementation of the invention.

[0013] The invention thus makes it possible to transmit a one-time configuration command to the remote device without needing to open a communication channel with it. Advantageously, the value of the configuration parameter conveyed by the ping sequence can be of any type (integer or decimal number, string of characters, array, etc.), which provides great flexibility in the nature and granularity of the configurations that can be performed using the invention at the remote device level. Furthermore, the invention can be applied to any type of remote device and to any type of configuration. It is also possible, thanks to the invention, to convey, via the ping sequence, a plurality of configuration parameter values ​​relating to one or more operating modes of the remote device.

[0014] The step of determining a sequence of connection attempts (and correspondingly, the translation step by the remote device) can be based on the use of a given lookup table, allowing the translation of a series of numbers or letters into series of pings (and vice versa), by associating, for example, with each alphanumeric character of the parameter value that one wishes to encode a given sub-sequence of pings, so that the value of the configuration parameter is thus composed of several given sub-sequences of pings. Thanks In such a table, it is possible to encode any alphanumeric value as a sequence of pings, including when that value is not included as such in the table, by combining associations existing in the table.

[0015] By way of example, if the characters "1" and "0" are associated in such a lookup table with ping sequences "P_1" and "P_2" respectively, the value "100" is executed in the form of a sequence "P_1, P_2, P_2".

[0016] According to another example, if the characters "B" and "O" are associated in a lookup table with the ping sequences "P_1" and "P_2", the value corresponding to the string of characters "BOB" is executed in the form of a sequence "P_1, P_2, P_1".

[0017] Transmitting a configuration parameter value to the device via a ping sequence, rather than simply designating a predefined parameter on the remote device, advantageously expands the possibilities listed in a lookup table that includes all possible operating modes and configuration parameters. This embodiment therefore eliminates the need for a lookup table containing all possible values ​​for the configuration parameter(s), and consequently offers a greater degree of granularity.

[0018] According to one embodiment, said value is a string of alphanumeric characters and in which the sequence determined during the determination step comprises a series of subsequences of connection attempts associated respectively with each of the alphanumeric characters (or a group of several alphanumeric characters) of said value.

[0019] This embodiment advantageously allows the use of smaller corresponding tables and therefore saves memory and storage capacity at the remote device level.

[0020] By way of illustration, for a configuration parameter whose expected value is an 8-digit number, it is possible, thanks to the invention, to consider the use of a lookup table associating sub-sequences of pings with the digits from 0 to 9, instead of providing a table associating a sequence of pings with each of the 100,000,000 values ​​that such a configuration parameter can take.

[0021] This embodiment also allows for the configuration of operating modes by assigning specific values ​​to configuration parameters that are not necessarily expected (i.e., predefined) a priori by the remote device (for example, a precise decimal value for a brightness level or a string of characters corresponding, for example, to the name of a given operating mode). This embodiment therefore provides considerable flexibility regarding the value conveyed by the sequence of connection attempts.

[0022] According to another embodiment, the sequence carries values ​​of a plurality of configuration parameters of said operating mode or of several operating modes.

[0023] This embodiment advantageously allows for the configuration of several operating modes or several parameters of the same operating mode with a single sequence. This limits the exchanges required with the remote device to configure its operation.

[0024] This embodiment also makes it possible to pool, where appropriate, parts of the ping sequence used to delimit the ping sequence or to allow its identification by the remote device, and thus preserve the resources of the network used to execute the ping sequence to the remote device.

[0025] According to another embodiment, the value of said at least one configuration parameter is conveyed in a predetermined part of the sequence.

[0026] This predetermined part can correspond to a sub-part of the sequence framed by given sub-sequences (for example, given sub-sequences marking the beginning and end of sequences of connection attempts).

[0027] For example: <sous-séquences de pings indiquant le début><séquence(s) de pings correspondant à la valeur d’au moins un paramètre ><sous-séquences de pings indiquant la fin> .

[0028] Alternatively, the value of said at least one configuration parameter of an operating mode can be conveyed by certain predetermined pings of the sequence.

[0029] For example: the value of at least one parameter is encoded by pings number 5 to 10 of the ping sequence.

[0030] According to another embodiment, the sequence of connection attempts also carries an identifier of said at least one configuration parameter.

[0031] For example, the sequence of connection attempts carries an identifier "prog_sleep_light" or "sleep_light_color", corresponding respectively to an identifier of a parameter defining the programming time of the switch to light sleep and to that of a parameter defining the indicator color of a remote device when it is in sleep mode.

[0032] This embodiment advantageously makes it possible to explicitly define the configuration parameter(s) to which the values ​​transmitted by the sequence of connection attempts refer. It can be particularly useful when several parameters of the remote device can be configured via the invention. This allows the management device to dynamically select the configuration parameters on which it wishes to act at the remote device level.

[0033] According to this embodiment, a first lookup table can, for example, be used to list all the configuration parameters of a device remote access and associate each of these parameters with a ping sequence, while a second lookup table can be used to translate an alphanumeric value of a parameter into a ping sequence (and vice versa). In this way, it is possible to carry one or more configuration parameters within the connection attempt sequence while limiting its size (in terms of the number of connection attempts).

[0034] According to this embodiment, the steps for determining and executing the management process are implemented when an SSL certificate of the remote device is invalid.

[0035] In other words, the implementation of the invention is conditional upon the unavailability of a valid SSL certificate for the remote device.

[0036] Renewing an SSL certificate is a time-consuming operation when implemented for a large fleet of terminals, such as, for example, the network gateways of a telecom operator or the IoT (Internet of Things) terminals of a consumer equipment manufacturer. This embodiment advantageously allows the implementation of the management method according to the invention to be triggered when such a renewal of the remote terminal's SSL certificate is necessary, thus avoiding this renewal operation. Conversely, if the remote terminal's SSL certificate is valid, then the management device can use a communication channel established using this SSL certificate to transmit the configuration parameter in a manner known to a person skilled in the art.

[0037] According to one embodiment, the operating mode is a standby mode of the device.

[0038] In order to reduce the power consumption of equipment even when in standby mode, component manufacturers and terminal manufacturers have introduced so-called "deep" standby states, as opposed to so-called "shallow" or "light" standby states. The deeper the standby state, the lower the power consumption of the terminal to which it is applied. However, conversely, the wake-up time of a terminal is proportional to the depth of its standby state. Therefore, in order to allow for optimal use and energy consumption of their terminals, manufacturers frequently offer several standby modes (each corresponding to more or less light or deep standby states) for their terminals.

[0039] The ability to configure a remote device in an economical way, in particular by avoiding opening a communication channel, is all the more advantageous and consistent in a context of setting up a standby mode where, in principle, the question of energy expenditure is central and predominant.

[0040] For example, a value of a configuration parameter of a sleep mode may relate to the level of sleep state targeted (light, deep, intermediate, etc.), or to the time before switching from one mode to another, etc.

[0041] According to one embodiment, the configuration parameter is one parameter among: - a depth level of a standby state of the device, - a standby duration of the device, - a switchover date to another operating mode, - etc.

[0042] The invention also relates to a device accessible via a network and comprising: - a detection module configured to detect a sequence of connection attempts, originating from a management device, on at least one communication port of said device, said sequence carrying at least one value of at least one configuration parameter of an operating mode of the device; - a translation module configured to translate said sequence, providing said sequence at least one value of said at least one configuration parameter, and - a configuration module configured to configure said operating mode with said at least one value provided by the translation module.

[0043] According to a particular embodiment, the remote device is one of the following: - a footbridge, - a router, - a connected object, - a computer, - an energy management device (such as a connected electricity meter or energy storage device).

[0044] However, the remote device can be any type of terminal or connected object known to the person in the trade.

[0045] In correspondence, the invention also relates to a management device configured to manage at least one remote device via a network, said management device comprising: - a retrieval module configured to obtain at least one value of at least one configuration parameter of an operating mode of a remote device, - a determination module configured to determine a sequence of connection attempts on at least one communication port carrying said at least one value, - an execution module configured to execute, via the network, said sequence of connection attempts on at least one communication port of the remote device.

[0046] The invention finally relates to a computer program, comprising program code instructions for implementing configuration and management processes according to any one of the particular embodiments described above, when these programs are executed by a processor.

[0047] Such instructions can be stored permanently in a non-transient memory medium of terminals implementing the configuration and management processes of a remote device according to the invention.

[0048] This program may use any programming language, and be in the form of source code, object code, or code intermediate between source code and object code, such as in a partially compiled form, or in any other desirable form.

[0049] The invention also relates to an information or recording medium readable by a computer, and more particularly by a remote device or a management device on which computer programs such as those mentioned above are recorded.

[0050] The recording medium can be any entity or device capable of storing the program. For example, the medium can include a storage means, such as a ROM (Read Only Memory), for example a CD ROM (Compact Disc Read-Only Memory) or a microelectronic circuit ROM, or a magnetic recording means, for example a mobile medium, a hard disk or an SSD (Solid State-Drive).

[0051] On the other hand, the recording medium can be a transmissible medium, such as an electrical or optical signal, which can be transmitted via an electrical or optical cable, by radio, or by other means, so that the computer program(s) it contains can be executed remotely. The programs according to the invention can, in particular, be downloaded onto a network, for example, an Internet-type network.

[0052] Alternatively, the recording medium may be an integrated circuit in which one of the programs is incorporated, the circuit being adapted to execute or to be used in the execution of the configuration and management processes of a remote device.

[0053] The invention also relates to a communication system comprising: - a management device according to the invention, - a remote device according to the invention.

[0054] It can also be envisaged, in other embodiments, that the configuration and management processes, the remote device and the management device as well as the communication system according to the invention present in combination all or part of the aforementioned characteristics. Brief description of the drawings

[0055] Other features and advantages will become apparent upon reading particular embodiments of the invention, given by way of illustrative and non-limiting examples, and the accompanying drawings, among which:

[0056] Figure [Fig. 1] represents, in its environment, a system according to the invention, in a particular embodiment,

[0057] Figure [Fig.2] schematically represents the hardware architecture of a remote device according to one embodiment of the invention,

[0058] Figure [Fig.3] schematically represents the hardware architecture of a management device according to one embodiment of the invention, and

[0059] Figure [Fig.4] describes the steps of the management and configuration processes implemented respectively by a management device and by a remote device according to one embodiment.

[0060] Description of an example of an architecture in which the configuration and management processes are implemented

[0061] Figure [Fig.1] presents a SYS communication system within which the configuration and management processes according to the invention can be implemented in a particular embodiment.

[0062] This system comprises: - a DG management device, according to the invention. This may be a computer, a dedicated server, or any other device performing similar management operations (a computer, a DSLAM, a terminal associated with a remote equipment maintenance application, etc.); and - at least one remote device DD, conforming to the invention. This may be a network access gateway (for example a home gateway), a NAS (Network Attached Storage), a router, a connected object, an energy management device or any other remote device capable of being managed by the device DG.

[0063] For example, we consider here, by way of illustration, that the management device DG is a computer and that the remote device DD is a gateway.

[0064] The remote device DD has several operating modes (for example "on" "standby" which can be configured according to at least one value of at least one configuration parameter.

[0065] The management device DG and said at least one remote device DD are connected via a communication network R. In this embodiment, the network R is a fiber network; however, alternatively, it may be an ADSL network, a wireless network (such as Wi-Fi, Bluetooth, ZigBee®), or an LPWAN (Low Power Wide Area Network) network. Wide Area Network, low-consumption extended network in French)) or any type of network known to a person skilled in the art.

[0066] The DG management device is capable of sending pings (i.e. executing connection attempts), that is to say, computer commands allowing the accessibility of the communication ports of the remote device to be tested through a network, and in particular the R network.

[0067] In the example illustrated in [Fig. 1], for the sake of simplicity, a single remote device DD is considered. However, the management device DG can be configured to manage a plurality of remote devices in a similar or identical manner to that described here for the remote device DD.

[0068] The remote device DD is equipped with: - of an MRD detection module, - of an MTD translation module, - of an MDD configuration module.

[0069] It also includes a plurality of communication ports that can be the subject of connection attempts (pings). In the embodiment described here, these ports are closed. However, according to another embodiment, all or some of the communication ports that are the subject of connection attempts can be open.

[0070] In accordance with the invention, the DG management device is equipped with: - of a MOS acquisition module, - of an MDS determination module, - of an MES execution module.

[0071] The various functional modules of the remote device DD and the management device DG are described in more detail later.

[0072] In the illustrative example considered here, a user wishes, for example, to configure a sleep mode for the gateway (the remote device DD) from their computer (the management device DG). Such a configuration might involve, for example, setting a time or a countdown for waking from sleep, setting a brightness parameter for a display screen when the gateway is in sleep mode, switching the gateway from a deep sleep state to a light sleep state, etc.

[0073] Figure 2 shows the simplified structure of the remote device DD, configured to implement the configuration method according to the invention, in a particular embodiment.

[0074] In the particular embodiment of the invention described herein, the steps executed by the remote device DD and described subsequently with reference to Figure [Fig. 4] are implemented by means of instructions in a computer program PG1. For this purpose, in the embodiment described herein, the remote device DD has the architecture classic of a computer and includes in particular an ER1 transmit / receive module, a MEM1 memory, a UTR1 processing unit, equipped for example with a PROC1 processor, and controlled by the PG1 computer program stored in MEM1 memory. The MEM1 memory is a recording medium within the meaning of the invention.

[0075] The computer program PG1 defines functional modules of the remote device DD which include: - the MOS acquisition module configured to obtain at least one value of at least one configuration parameter of an operating mode of the remote device DD, - the MDS determination module configured to determine a sequence of connection attempts on at least one communication port of the remote device DD carrying said at least one value, - the MES execution module configured to execute, via the R network, said sequence of connection attempts on at least one communication port of the remote device DD.

[0076] Figure 3 presents the simplified structure of the DG management device configured to implement the management process according to the invention in a particular embodiment.

[0077] In the particular embodiment of the invention described herein, the steps executed by the DG management device and described subsequently with reference to Figure [Fig. 4] are implemented by means of instructions in a computer program PG2. For this purpose, the DG management device has the classic architecture of a computer and includes, in particular, a transmit / receive module ER2, a memory MEM2, a processing unit UT2, equipped, for example, with a PROC2 processor, and controlled by the computer program PG2 stored in memory MEM2. The memory MEM2 is a storage medium within the meaning of the invention.

[0078] The PG2 computer program defines functional modules of the DG management device which include in particular: - the MOS acquisition module configured to obtain at least one value of at least one configuration parameter of an operating mode of a remote device, namely the DD device here, - the MDS determination module configured to determine a sequence of connection attempts on at least one communication port carrying said at least one value, - the MES execution module configured to execute, via the R network, said sequence of connection attempts on at least one communication port of the remote device DD.

[0079] Description of the main steps of the management and configuration processes.

[0080] Figure [Fig.4] describes the steps of the configuration and management processes according to the invention in a particular embodiment in which the processes are implemented respectively by the remote device DD and the management device DG.

[0081] E400, the DG management device obtains a VA value of at least one parameter intended to configure an operating mode of the remote device DD.

[0082] In the example considered here, this mode of operation corresponds to a standby mode of the remote device DD.

[0083] Obtaining this value can result from receiving information through a given application or from data and / or commands entered by a technician or any other user via a human-machine interface.

[0084] The VA value may consist of alphanumeric data, such as a string of characters, an integer or decimal number, or an array or any type of information format known to a person skilled in the art.

[0085] By way of example, a value of at least one configuration parameter may correspond to a string of characters describing a depth level of a sleep state to be applied to the remote device (for example "light", "deep", etc.), to a numeric value corresponding to the countdown to be applied to the remote device before triggering the switch to another operating mode such as, for example, exiting its sleep state, to a sleep duration of the device, to arrays of strings corresponding to information relating to user data to be completed or updated (authorized usernames for example, a password associated with a user account), to the color or brightness of a screen of the remote device according to the sleep levels, etc.

[0086] According to another embodiment not detailed here, the management device obtains a multitude of VA values, corresponding to several configuration parameters. For example, a sequence of SQ connection attempts can convey both a standby time of the remote device DD and a color of a standby indicator associated with a depth level of a given standby state.

[0087] In E401, the management device determines a sequence of SQ connection attempts carrying the VA value of a configuration parameter, to be transmitted, via the R network, to the remote device by means of a sequence of SQ pings.

[0088] In a particular embodiment, the determination of an SQ ping sequence is preceded by a step of analyzing the communication ports and communication channels of the remote device by the management device (based on management information known to it or available from elsewhere), and an SQ ping sequence is then determined only under certain conditions (for example, if some or all of the communication ports of the remote device are closed or if the SSL certificate of the remote device has expired).

[0089] In the embodiment described here, the SQ ping sequence consists of a pVA ping subsequence formed by at least two pings (i.e., connection attempts on at least one communication port) corresponding to (i.e., intended to convey) the VA value and a pPA ping subsequence corresponding to (i.e., intended to convey) the PA reference of the configuration parameter to which said VA value is associated (the determination of these subsequences is detailed later).

[0090] In other embodiments, the SQ sequence of pings does not specifically include pings linked to an identifier of a given configuration parameter associated with said VA value. The configuration parameter reference may also be inferred from the format of the VA parameter value or deduced, for example, if the DD device can only receive a VA value for a single parameter, etc.

[0091] In the embodiment described here, this PA configuration parameter identifier may have been obtained along with the VA value during step E400, for example, after receiving information via a given application or after a user has entered information through a human-machine interface. Alternatively, the PA configuration parameter may be deduced from the VA value by the management device (if, for example, the VA value has been entered in a form field associated with a given PA configuration parameter).

[0092] In the embodiment described here, the determination of the SQ sequence carrying the VA value and, where applicable, the PA parameter, is carried out by encoding these two elements into two distinct ping subsequences, respectively pVA and pPA. This encoding can result from the use by the management device DG of a lookup table (fixed or dynamic) or any other algorithm known to those skilled in the art, and shared between the management device DG and the remote device DD.

[0093] In the case of a fixed lookup table, these associations do not evolve over time.

[0094] In the case of a dynamic lookup table, these associations are likely to evolve over time according to an agreed-upon pattern known to the management device DG and the remote device DD, so that the decoding, i.e., the translation, of the ping sequence into a value of a configuration parameter is possible. The evolution of the dynamic lookup table can be based on a clock common to the management device and the remote device or on any other solution known to a person skilled in the art.

[0095] A lookup table typically refers to a table or database in which (which) elements, such as characters alphanumeric characters are associated with sequences or (subsequences) of connection attempts.

[0096] Such a table may, for example, take the following form: Alphanumeric character Subsequence of connection attempts D P1, P3, P5 E P3, P2, P5 P P1, P2, P3 In this table, "Pj" with j=1, 2, 3, 5, etc. designate the specific ports of the remote device DD on which connection attempts are made from the management device DG during the implementation of the invention.

[0097] According to this example, a VA value corresponding to the word "DEEP" (for example, to specify a parameter defining a depth level of a standby state of an operating mode to be configured) will be translated into a pVA subsequence composed of each subsequence corresponding to each of the alphanumeric characters composing the character string of the VA value, in other words to D, then E, then E, then P), namely: - a subsequence "PI, P3, P5" associated with the character D - a subsequence "P3, P2, P5" associated with the character E; - a second subsequence "P3, P2, P5" associated with the second character E; and - a subsequence "PI, P2, P3" associated with the character P.

[0098] This results in the pVA subsequence of pings "PI, P3, P5, P3, P2, P5, P3, P2, P5, PI, P2, P3" obtained by combining (concatening) the subsequences identified above.

[0099] Where appropriate, pings on specific ports or sequences of pings can be used to mark spaces, separations between words or between alphanumeric characters.

[0100] According to another example, separate lookup tables are used to determine pVA subsequences of distinct configuration parameter values. Thus, a sequence of pings corresponding to the same configuration parameter value may differ depending on whether it corresponds to one configuration parameter or another.

[0101] For example, a first sequence composed of pings PI, P2, P3 can correspond to a value "100", 100 being the number of seconds to be associated with a countdown before a wake-up of the remote device, while a sequence composed of pings P3, P4, P4 can also correspond to a value "100", but 100 being this time the value to be associated with the brightness of the display screen of the remote device.

[0102] Encoding the identifier of a PA configuration parameter into a subsequence of pPA pings included in the SQ sequence may involve an encoding similar to that of the VA value or refer to lookup tables, or algorithms, specific to parameter encoding.

[0103] Indeed, unlike the VA value, the identifiers of the configuration parameters of the remote device DD are generally known by the management device and their number is finite. Therefore, it may be advantageous to use a lookup table here associating ping subsequences with each of the references to the device's configuration parameters rather than (without excluding it) translating each character composing the configuration parameter references into a ping subsequence.

[0104] It should be noted that the SQ ping sequence may contain additional pings or sub-sequences of pings used, for example, to delimit the beginning and / or end of the SQ ping sequence, or to authenticate the informational content (corresponding to the "useful data"), i.e. the VA values ​​and the PA reference conveyed by the SQ connection attempt sequence, etc.

[0105] According to such an example, an SQ sequence can then comprise a subsequence of pVA pings (for example pVAl, pVAm) corresponding to the VA value of a configuration parameter, framed by predefined subsequences of pings (for example p_start_l, p_start_N, and, p_end_l, p_end_O marking the start and end of the SQ sequence so that the SQ sequence takes the following form: p_start_l, ..., p_start_N, pVAl, pVAm, p_end_l, p_end_O).

[0106] Alternatively, the SQ sequence can take a particular predetermined form (length, redundancy of the pings that form it) in order to make it more easily identifiable by the remote device.

[0107] Similarly, the VA value can be conveyed in a predetermined part of the SQ sequence, for example between the 5th and 10th pings of the sequence or the 2nd and 20th, etc.

[0108] According to another example, the SQ ping sequence can be determined so as to contain several times the pVA pings corresponding to the VA value of a configuration parameter.

[0109] According to another example, illustrating the embodiment described here, where the SQ sequence includes both a VA value of a configuration parameter and a reference to a PA configuration parameter, the subsequence of pVA pings (p VA 1, p VAm) corresponding to the VA value of the configuration parameter can be delimited by the subsequences (or series) of pPA pings (p jjaram_veille_l, pjjaram_veille_n) corresponding to the PA parameter to which said value relates, so that the SQ sequence takes the following form: pjjaram_veille_l, pjjaram_veille_n, pVAl, pVAm pjjaram_veille_l, pjjaram_veille_n n).

[0110] In E402, the management device executes, via the R network, the sequence of connection attempts SQ on at least one communication port of the remote device DD (those corresponding to the SQ sequence in question).

[0111] In E403, the remote device DD detects the sequence of connection attempts SQ, originating from the management device DG, on its communication ports.

[0112] To achieve this, the remote device DD uses, for example, a background service (also called a daemon), configured to continuously analyze connection attempts to the device's communication ports. The implementation of such a daemon is known to those skilled in the art, for example, when Port Knocking is considered. These pings may correspond to SQ sequences executed by the management device DG, but also potentially to connection attempts by other entities.

[0113] The remote device DD periodically determines whether analyzed connection attempts correspond to an SQ sequence.

[0114] The identification of the SQ sequence can be limited to the analysis of connection attempts to specific ports dedicated to the implementation of the invention; it can also result from the search for a given sub-sequence of pings previously known by the remote device as marking the beginning and / or end of the SQ ping sequence.

[0115] The identification of the SQ sequence can also result from the search for a subsequence of pings of a given length corresponding to a specific predefined length known by the management device and the remote device.

[0116] If, according to the detailed example above illustrating the described embodiment, the pVA ping subsequence is framed within the SQ ping sequence by the pPA ping sequences identifying the parameter to which the VA value relates, a lookup table, similar to that used to encode the reference of the PA parameter in the pPA sequence, is used to search in the set of pings received by the remote device for each ping subsequence corresponding to a configuration parameter listed in such a table.

[0117] This is an illustrative and non-limiting example of this embodiment; other methods of identifying the SQ sequence can be implemented independently of the presence in the SQ sequence of a pPA subsequence corresponding to the reference of a configuration parameter.

[0118] Furthermore, the remote device DD can implement different filtering solutions to separate pings corresponding to the SQ sequence from "non-meaningful" pings resulting from intrusion attempts or any other process distinct from that of the invention.

[0119] This filtering can, for example, exclude pings concerning ports not intended to receive the SQ sequence.

[0120] According to another illustrative example, such a filtering and identification module can be configured to recognize and identify a sequence limited in duration to a given maximum number of pings or transmitted over a given maximum time. Implementing such a method makes it possible, in this example, to avoid interpreting a sequence within an excessively large set of pings, and also, where appropriate, to identify several different successive SQ ping sequences that may correspond to values ​​of at least one parameter.

[0121] The remote device DD can implement any other filtering solution known to the person skilled in the art to identify the SQ sequence among the different pings received on its communication ports, according to techniques applied in particular for Port Knocking.

[0122] Once the SQ sequence is identified, in E404, the remote device DD translates the SQ sequence in order to extract a value of at least one configuration parameter.

[0123] This translation step involves decoding the ping sequence according to a reverse (reciprocal) procedure to that implemented by the management device to encode said value into a ping sequence, for example by using the same lookup table(s) or any other algorithm known to the person skilled in the art.

[0124] In E405, the remote device configures a remote device operating mode by applying to this configuration parameter the corresponding VA value received in the SQ ping sequence.

[0125] By way of illustration, this step consists, according to the examples presented above, of programming a countdown before a sleep exit or of adjusting the brightness of a display screen of the remote device in a given sleep depth level according to the VA value received and then translated by the remote device.

[0126] According to a particular embodiment, if several configuration parameter values ​​have been transmitted by the DG management device and conveyed within the SQ sequence, the remote device applies all of these configuration parameters.

[0127] For example, following the configuration step, when the DD device (here a gateway) switches to a given operating mode (for example, a standby mode), it applies the new values ​​of the configuration parameters transmitted by the DG management device via the implementation of the invention (for example, a given depth of a standby state, etc.).

[0128] Thanks to this invention, it is therefore possible, from a management device, to configure the operation of a remote device by transmitting to it one (or more) value(s) of configuration parameter(s), even though no communication channel is created between the management device and the remote device.

[0129] In the embodiment described herein, the sequence carries at least the value of a configuration parameter of an operating mode of the remote device DD. In another embodiment, the sequence SQ may carry a value identifying an operating mode to be applied by the remote device (for example, a given standby mode).

Claims

Demands

1. A device configuration method (DD), implemented by said device and comprising: - a detection step (E403) of a sequence of connection attempts, from a management device, on at least one communication port of said device, said sequence carrying at least one value of at least one configuration parameter of an operating mode of the device; - a translation step (E404) of said sequence providing said at least one value of said at least one configuration parameter, and - a configuration step (E405) of said operating mode with said at least one value provided during the translation step.

2. A method of configuring a device according to claim 1 wherein the sequence of connection attempts also carries an identifier of said at least one configuration parameter.

3. A method of configuring a device according to claim 1 or 2 wherein the value of said at least one configuration parameter is conveyed in a predetermined part of the sequence.

4. A configuration method according to any one of the preceding claims wherein said operating mode is a standby mode of the device.

5. A configuration method according to any one of the preceding claims wherein the configuration parameter is a parameter among: - a depth level of a device standby state, - a device standby duration, - a switchover date to another operating mode.

6. A configuration method according to any one of the preceding claims in which the sequence carries values ​​of a plurality of configuration parameters of said operating mode or of several operating modes.

7. A method for managing a remote device (RD) via a network (R), implemented by a management device (MD), said method comprising: - a step of obtaining (E400) at least one value of at least one configuration parameter of an operating mode of a remote device, - a step of determining (E401) a sequence of connection attempts on at least one communication port carrying said at least one value, - a step of executing (E402), via the network (R), said sequence of connection attempts on at least one communication port of the remote device.

8. Management method according to claim 7 wherein the determination and execution steps are implemented when an SSL certificate of the remote device is invalid.

9. Device (DD) accessible via a network and comprising: - a detection module (MRD) configured to detect a sequence of connection attempts, from a management device, on at least one communication port of said device, said sequence carrying at least one value of at least one configuration parameter of an operating mode of the device; - a translation module (MTD) configured to translate said sequence providing said at least one value of said at least one configuration parameter, and - a configuration module (MDD) configured to configure said operating mode with said at least one value provided by the translation module.

10. Device according to claim 9 wherein the remote device is one of the following: - a gateway, - a router, - a connected object, - a computer, - an energy management device.

11. Management device (MD) configured to manage at least one remote device (RD) via a network R, said management device comprising: - a retrieval module (RM) configured to obtain at least one value of at least one configuration parameter of an operating mode of a remote device,

12. - a determination module (MDS) configured to determine a sequence of connection attempts (SQ) on at least one communication port carrying said at least one value, - an execution module (MES) configured to execute, via the network (R), said sequence of connection attempts on at least one communication port of the remote device. Communication system (SYS) comprising: - a management device according to claim 11, - a remote device according to claim 9.

Images