Method for securing a data transmission from a connected object to a server, and connected object configured to implement the method

Abstract

The invention relates to a connected object (OC) comprising a communication module (MC) configured to receive a downlink stream (FD) from a server (S) and / or to transmit an uplink stream (FM) to the server (S), wherein the connected object (OC) comprises a processing module (MT) and a communication module (MC), wherein the processing module (MT) is configured to receive data from at least one data acquisition sensor (C1), and to generate the uplink stream (FM) that comprises at least a portion of the data acquired by the at least one sensor (C1), and to transmit the uplink stream (FM) to the communication module (MC) via an uplink channel (CM), wherein the processing module (MT) is further configured to receive the downlink stream (FD) from the communication module (MC) via a downlink channel (CD), wherein the connected object (OC) comprises a limitation device (DL) for limiting the uplink stream (FM), wherein the limitation device (DL) comprises a control (CDL) configured to be actuated directly by a user in order to activate or inhibit the limitation device (DL), wherein the limitation device comprises a measurement component (CMD) configured to measure a rate of the uplink stream on the uplink channel, wherein the limitation device comprises a limiter (LI) for limiting transmission of the uplink stream via the uplink channel, and wherein the limiter (LI) is activated when the limitation device (DL) is activated, in order to limit transmission of the uplink stream (FM) for a limitation period when the measured rate exceeds a limitation threshold.

Description

[0001] DESCRIPTION

[0002] TITLE: Method for securing data transmission from a connected object to a server, and connected object configured to implement said method.

[0003] The present invention relates to the field of connected objects, and in particular to methods and devices for securing the transmission of data, by a connected object comprising an audio and / or video capture device.

[0004] It is known to limit digital exchanges between a computing unit, for example a microprocessor or a microcontroller, and the internet network. It is known, for example, to disable the communication channel to the internet network by deactivating the power supply to the communication module with the internet network. This is the solution implemented with the "airplane mode" of a smartphone or a tablet. It is also known, for example in an "offline mode", to inhibit exchanges with the internet by software.

[0005] The disadvantage of these solutions is that they completely block all data flows, without discrimination. However, it may be useful, in certain circumstances, to be able to maintain certain data exchanges while prohibiting certain other data exchanges, for example, to prohibit the exchange of multimedia data, particularly audio and / or video.

[0006] It may also be desirable for this limitation of exchanges to apply to the transmission of an upstream flow, from the connected object to the internet network, likely to include audio and / or video multimedia data, without the downstream flow, from the internet network to the connected object, being limited.

[0007] For example, if we consider a connected mirror equipped with a camera that can be used to capture a user's gestures, or configured to offer internet content such as hairstyles or clothing, we can understand that, when said connected mirror is in a bathroom, it is preferable for the video stream to be able to be temporarily cut off in a way that is certain and reassuring for the user.

[0008] The known mechanisms for limiting the outgoing flow, or the upload flow, of a connected object are linked to the overall software operation of the connected object. They are implemented, for example, to slow down the authorized flow of a smartphone in the event of exceeding the subscriber's subscription plan, or to prioritize certain types of flow at the expense of other types of flow.

[0009] These mechanisms, to the extent that they are linked to the software operation of the object in question, are likely to be controlled by a malicious actor who would fraudulently take control of the software of the object in question, and who could thus choose to send video and / or audio streams over the internet that the user would wish, at least temporarily, not to transmit.

[0010] The invention therefore aims to propose a solution to all or part of these problems.

[0011] To this end, the present invention relates to a connected object comprising a communication module configured to receive a downstream stream from a server and / or to transmit to the server an upstream stream, the connected object comprising a processing module and a communication module, the processing module being configured to receive data from at least one data acquisition sensor, and to produce the upstream stream which comprises at least a portion of the data acquired by the at least one sensor, and to transmit to the communication module the upstream stream, via an upstream channel, the processing module being further configured to receive from the communication module via a downstream channel the downstream stream, the connected object comprising a device for limiting the upstream stream, the limiting device comprising a control configured to be actuated directly by a user to activate or to inhibit the limiting device,the limiting device comprising a measuring component configured to measure a flow rate of the upstream flow on the upstream channel, the limiting device comprising a limiter of the transmission of the upstream flow via the upstream channel, the limiter being activated, when the limiting device is activated, to limit the transmission of the upstream flow, for a limitation duration, when the measured flow rate is greater than a limitation threshold.,

[0012] According to these provisions, the user can directly activate a limitation device configured to deactivate the transmission of certain types of data, images or sounds for example, which require a high flow rate, without deactivating the low-flow services associated with the connected object, and without the limitation device being able to be fraudulently deactivated by an individual who has fraudulently connected to the connected object.

[0013] According to one embodiment, the invention comprises one or more of the following features, alone or in a technically acceptable combination.

[0014] According to one embodiment, the limitation device comprises a first indicator configured to present a first state when the limitation device is activated and a second state when the limitation device is inhibited. These provisions make it possible to directly inform the user about the state of the limitation device, without this state being able to be modified by a fraudulent third party who would not have direct and physical access to the limitation device. And, if a third party were to succeed, via direct and physical access to the limitation device, in inhibiting the limitation device, the user could identify this inhibition.

[0015] According to one embodiment, the limiting device comprises a second indicator configured to present a first state of the second indicator when the limiter of the limiting device is activated and a second state of the second indicator when the limiter of the limiting device is inhibited. These provisions make it possible to directly inform the user about the state of the limiter of the limiting device, without this state being able to be modified by a fraudulent third party who would not have direct and physical access to the limiting device.

[0016] According to one embodiment, the first indicator is a visual indicator whose appearance changes between the first state and the second state of the first indicator. In particular, the first indicator may comprise a light element such as a diode which is lit in the first state of the first indicator and lit in the second state of the first indicator.

[0017] According to one embodiment, the second indicator is a visual indicator whose appearance changes between the first state and the second state of the second indicator. In particular, the second indicator may comprise a light element such as a diode which is lit in the first state and extinguished in the second state of the second indicator.

[0018] According to one embodiment, the first and second indicators can be combined, for example in the form of a three-state indicator, in particular in the form of a diode or another luminous element which can have three distinct lighting modes, in particular with distinct colors or flashing.

[0019] According to one embodiment, the control configured to be operated directly by a user to activate or inhibit the limitation device is a physical control.

[0020] According to one embodiment, the control may comprise a mechanical switch or an inductive or capacitive sensor configured for example to detect a press of a user's finger. According to one embodiment, the limiter is activated to interrupt the transmission of the upstream stream.

[0021] According to one embodiment, the limiting device is configured to be activated during a limitation period when the control is actuated by the user to activate the limiting device, the limiting device being automatically inhibited at the end of the limitation period.

[0022] According to one embodiment, the measured flow rate is an instantaneous flow rate.

[0023] According to one embodiment, the limitation threshold is a maximum instantaneous flow rate.

[0024] According to one embodiment, the limitation duration is determined so that an average leakage flow rate is less than a maximum average flow rate.

[0025] According to one embodiment, the measurement component comprises an operational amplifier, configured to measure on a line of the uplink channel a number of transitions, between a first level and a second level, per unit of time, and the limiter comprises a capacitor, functionally connected to the operational amplifier, and configured to limit the transmission of the uplink flow, for a limitation duration, when a voltage across the capacitor is greater than a limitation voltage.

[0026] According to one embodiment, the first level corresponds to a value of a signal equal to 0, and the second level corresponds to a value of a signal equal to 1.

[0027] The invention also relates to a method for securing a broadcast of data from a connected object to a server, the connected object comprising a communication module configured to receive a downstream stream from a server and / or to transmit to the server an upstream stream, the connected object comprising a processing module and a communication module, the processing module being configured to receive data from at least one data acquisition sensor, and to produce the upstream stream which comprises at least a portion of the data acquired by the at least one sensor, and to transmit to the communication module the upstream stream, via an upstream channel, the processing module being further configured to receive from the communication module via a downstream channel the downstream stream, the connected object comprising a device for limiting the upstream stream,the limiting device comprising a control configured to be actuated directly by a user to activate or to inhibit the limiting device, the limiting device comprising a measuring component configured to measure a flow rate of the upstream flow on the upstream channel, the limiting device comprising a limiter of the transmission of the upstream flow via the upstream channel, the method comprising the following steps:,

[0028] - activation, directly by the user, of the limitation device;

[0029] - measurement, by the measuring component of the limitation device, of a flow rate of the upstream flow on the upstream channel

[0030] - activation of the limiter, by the limitation device, to limit the transmission of the upstream flow, for a limitation period, when the measured flow rate is greater than a limitation threshold.

[0031] For a better understanding, an embodiment and / or implementation of the invention is described with reference to the attached drawings representing, by way of non-limiting example, an embodiment or implementation respectively of a device and / or a method according to the invention. The same references in the drawings designate similar elements or elements whose functions are similar.

[0032] [Fig. 1] is a schematic representation of a connected object according to one embodiment of the invention. [Fig. 2] is a diagram representing a sequence of steps of a method according to one embodiment of the invention.

[0033] [Fig. 3] is a graphical representation of the probability that a transmission service uses a transmission rate.

[0034] [Fig. 4] is a diagram representing a degraded transfer of data on the upstream channel of the connected object, following an exceeding of a threshold limiting the flow rate of the upstream flow on the upstream channel, according to an embodiment of the method according to the invention.

[0035] The invention relates, according to a first aspect illustrated in FIG. 1, to a connected object OC configured to receive a downstream data flow FD from a server S and / or to transmit to the server S an upstream data flow FM. Thus, the connected object OC comprises a processing module MT and a communication module MC; the processing module MT is for example a microprocessor, or a microcomputer, and the communication module MC is for example a radio transmitter / receiver, of the WIFI type for example, configured to establish a wireless or wired data link with a network R, local, or extended, for example of the internet type, to which the server S is connected.

[0036] The processing module MT is configured to receive data from at least one data acquisition sensor C1 and to produce the uplink data stream FM from at least part of the data acquired by the at least one sensor C1; the processing module MT is further configured to transmit the uplink stream FM to the communication module MC via an uplink channel CM; the processing module MT is further configured to receive the downlink stream FD from the communication module MC via a downlink channel CD.

[0037] According to a preferred embodiment, the processing module MT and the communication module MC are two separate components of the connected object. In this case, the uplink channel CM and the downlink channel CD are, for example, strands of an SPI bus such as "System Peripheral Interface", or SMB such as "System Management Bus", connecting the processing module MT to the communication module MC.

[0038] But those skilled in the art will understand that the processing module MT and the communication module MC can be two functional modules integrated on a single component, the upstream and downstream channels CM, CD then being software-type functional entities.

[0039] The connected object OC is thus configured to implement different types of services for transmitting data to the server, and / or receiving data from the server. For example, the connected object can implement a service for transmitting / receiving notifications NO, or a service for exchanging data TW, for example of the Tweet type, with other users of a social network, or a service for transmitting / receiving multimedia signals, for example VO, MU sound signals, of the VO voice or MU music type, or even VI video signals. These different services each generate an uplink and / or downlink stream with an instantaneous flow rate that varies depending on the service and the time in question, which is added to the instantaneous flow rate of the uplink and / or downlink stream generated by the other services.This is illustrated in Figure 3, which graphically represents, for each instantaneous flow rate on the abscissa, the probability that a type of service NO, TW, VO, MU, VI, generates the instantaneous flow rate considered. Also represented in this graph is a threshold, subsequently called the limitation threshold, determined for example by a maximum instantaneous flow rate DIM, such that the flow rate generated by certain services, for example all non-multimedia data exchange services, is statistically almost always lower than this maximum instantaneous flow rate DIM, and such that the flow rate generated by certain other services, for example all multimedia data exchange services, is higher than this maximum instantaneous flow rate DIM when the multimedia data are exchanged. The connected object OC further comprises a device DL for limiting the upstream flow FM.The DL limiting device includes a CDL control configured to be operated directly by a user to activate or inhibit the DL limiting device.

[0040] According to one embodiment, the control configured to be operated directly by a user to activate or inhibit the limitation device is a physical control.

[0041] In particular, the control may comprise a mechanical switch or an inductive or capacitive sensor configured, for example, to detect a press from a user's finger.

[0042] The limiting device further comprises a measurement component CMD configured to measure a flow rate of the FM upstream stream on the CM upstream channel. The limiting device also comprises a limiter L1 of the transmission of the FM upstream stream via the CM upstream channel, the limiter L1 being activated, when the limiting device DL is activated, to limit the transmission of the FM upstream stream, for a limitation duration, when the measured flow rate is greater than a limitation threshold, which is for example a maximum instantaneous flow rate DIM of the FM upstream stream, such that the flow rate of the upstream stream generated instantaneously by the non-multimedia data exchange services is statistically almost always lower than this maximum instantaneous flow rate DIM, and such that the flow rate of the upstream stream generated instantaneously by the multimedia data exchange services is greater than this maximum instantaneous flow rate DIM, when the multimedia data are exchanged.

[0043] The connected object OC comprises, according to one possibility, a first indicator IN. The first indicator IN is configured to present a first state when the limitation device is activated and a second state when the limitation device is inhibited. By way of example, the first indicator IN is a visual indicator whose appearance changes between the first state and the second state of the first indicator. In particular, the first indicator IN may comprise a luminous element such as a diode which is lit in the first state and extinguished in the second state. According to another possibility, the first indicator may be an audible indicator.

[0044] According to an additional possibility, the limiting device comprises a second indicator configured to present a first state of the second indicator when the limiter of the limiting device is activated and a second state of the second indicator when the limiter of the limiting device is inhibited. Thus the user is directly informed about the state of the limiter of the limiting device, without this state being able to be modified by a fraudulent third party if he does not have direct and physical access to the limiting device.

[0045] According to one embodiment, the first and second indicators can be combined, for example in the form of a three-state indicator, in particular in the form of a diode or another luminous element which can have three distinct lighting modes, in particular with distinct colors or flashing.

[0046] According to an exemplary embodiment, the limitation of the transmission of the FM upstream flow, during the limitation period, when the measured flow rate is greater than said limitation threshold, for example the maximum instantaneous flow rate DIM, corresponds to an interruption, i.e. a cut-off, of the FM upstream flow of the data transmission service, during the limitation period.

[0047] For example, the limitation duration is determined so that an average leak rate is less than a maximum average rate DMM, said average rate being defined as an amount of information sent on average when the channel is successively cut then restored each time the limiter L1 of the limitation device is activated then deactivated during a period of time.According to these provisions, the user can directly activate the DL limitation device configured to deactivate the transmission of certain types of data, images or sounds for example, which require a high flow rate, without deactivating the low-flow services associated with the connected object; in fact, according to these provisions, the downstream flow is not affected, and the upstream data transmission flow is only cut off when the instantaneous flow rate of said upstream flow is higher than the maximum instantaneous flow rate of the predetermined FM upstream flow so that the operation of services which do not require a flow rate higher than this limitation threshold does not result in a cutoff of the upstream flow. Furthermore, the limitation device cannot be fraudulently deactivated by an individual who has fraudulently connected to the connected object, because the control device is activated directly by the user.

[0048] According to an exemplary embodiment of the limitation device DL, the measurement component CMD comprises an operational amplifier, configured to measure on a line of the upstream channel CM a number of transitions per unit of time, between a first level, for example 0, and a second level, for example 1, and the limiter L1 comprises a capacitor, functionally connected to the operational amplifier, and configured to limit the transmission of the upstream flow FM, for a limitation duration, when a voltage across the capacitor is greater than a limitation voltage. According to this example, the number of transitions per unit of time corresponds to an instantaneous data rate of the upstream flow FM on the upstream channel CM.

[0049] The invention relates, according to a first aspect illustrated in FIG. 2, to a method 100 for securing a broadcast of data from a connected object OC to a server S, the method 100 comprising the following steps:

[0050] - activation 101, directly by the user, of the DL limitation device of the connected object OC;

[0051] - measurement 102, by the measurement component CMD of the limitation device DL, of a flow rate of the upstream flow FM on the upstream channel CM of the connected object OC; - activation 103 of the limiter L1, by the limitation device DL, to limit the transmission of the upstream flow FM, for a limitation duration, when the measured flow rate is greater than a limitation threshold.

[0052] Figure 4 is a diagram representing degraded operation of a data transfer on the upstream channel of the connected object, following an exceeding of a threshold limiting the flow rate of the upstream flow on the upstream channel, according to an implementation mode of the method according to the invention.

[0053] The diagram is read with reference to a time axis shown on the left of the figure, with time flowing from the top to the bottom of Figure 4.

[0054] Data frames TD1, TD2, TD3, TD4, TD5, .... are produced regularly and placed, one after the other, on the upstream channel CM to be transmitted by the processing module MT to the communication module MC, thus constituting an upstream data flow FM which is then transmitted to the server S.

[0055] The first data frames TD1, TD2 are transmitted without degradation, until a rate D measured 102 by the measurement component CMD of the limitation device DL, which has previously been activated by the user, exceeds the limitation threshold, for example a maximum instantaneous rate DIM.

[0056] From this moment, the following frames TD3, TD4, TD5, .... the upstream flow is limited by the limiter L1, for example interrupted, and the frames TD3, TD4, TD5, .... are no longer transmitted by the upstream channel CM to the communication module, until a limitation duration FDL has elapsed. During this limitation duration, the server can send an error message ME on the downstream flow. From the end of the limitation duration FDL, the transmission of the frames produced by the processing module MT of the connected object OC resumes normally, until the measured flow rate again exceeds the limitation threshold, so that the upstream channel CM is successively cut off then restored each time the limiter L1 of the limitation device is activated then deactivated, during a determined period of time during which the limitation device is activated.

Claims

CLAIMS 1. Connected object (OC) comprising a communication module (MC) configured to receive a downstream stream (FD) from a server (S) and / or to transmit to the server (S) an upstream stream (FM), the connected object (OC) comprising a processing module (MT) and a communication module (MC), the processing module (MT) being configured to receive data from at least one data acquisition sensor (C1), and to produce the upstream stream (FM) which comprises at least a portion of the data acquired by the at least one sensor (C1), and to transmit to the communication module (MC) the upstream stream (FM), via an upstream channel (CM), the processing module (MT) being further configured to receive from the communication module (MC) via a downstream channel (CD) the downstream stream (FD), the connected object (OC) comprising a device (DL) for limiting the upstream stream (FM),the limiting device (DL) comprising a control (CDL) configured to be actuated directly by a user to activate or to inhibit the limiting device (DL), the limiting device comprising a measuring component (CMD) configured to measure a flow rate of the upstream flow on the upstream channel, the limiting device comprising a limiter (Ll) of the transmission of the upstream flow via the upstream channel, the limiter (Ll) being activated, when the limiting device (DL) is activated, to limit the transmission of the upstream flow (FM), for a limitation duration, when the measured flow rate is greater than a limitation threshold., 2. Connected object (OC) according to claim 1 wherein the limitation device (DL) comprises a first indicator (IN) configured to present a first state when the limitation device (DL) is activated and a second state when the limitation device (DL) is inhibited.

3. Connected object (OC) according to claim 1 or 2, in which the limitation device (DL) comprises a second indicator configured to present a first state of the second indicator when the limiter of the limiting device is activated and a second state of the second indicator when the limiter of the limiting device is inhibited.

4. Connected object (OC) according to one of claims 1 to 3, in which the limitation device (DL) is configured to be activated during a limitation period when the command (CMD) is actuated by the user to activate the limitation device (DL), the limitation device (DL) being automatically inhibited at the end of the limitation period.

5. Connected object (OC) according to one of the preceding claims, in which the measured flow rate is an instantaneous flow rate.

6. Connected object (OC) according to one of the preceding claims, in which the limitation threshold is a maximum instantaneous flow rate (DIM).

7. Connected object (OC) according to claim 5, in which the limitation duration is determined so that an average leak rate is lower than a maximum average rate (MMR).

8. Connected object (OC) according to one of claims 1 to 6, in which the measurement component (CMD) comprises an operational amplifier, configured to measure on a line of the uplink channel (CM) a number of transitions, between a first level and a second level, per unit of time, and in which the limiter (Ll) comprises a capacitor, functionally connected to the operational amplifier, and configured to limit the transmission of the uplink flow (FM), for a limitation duration, when a voltage across the capacitor is greater than a limitation voltage.

9. Method (100) for securing a data broadcast from a connected object (OC) to a server (S), the connected object (OC) comprising a communication module (MC) configured to receive a downlink stream (FD) from a server (S) and / or to transmit to the server (S) an uplink stream (FM), the connected object (OC) comprising a processing module (MT) and a communication module, the processing module (MT) being configured to receive data from at least one data acquisition sensor (C1), and to produce the uplink stream (FM) which comprises at least a portion of the data acquired by the at least one sensor (C1), and to transmit to the communication module (MC) the uplink stream (FM), via an uplink channel (CM), the processing module (MT) being further configured to receive from the communication module (MC) via a downlink channel (CD) the downlink stream (FD), the connected object (OC) comprising a device (DL) for limiting the uplink stream (FM),the limiting device (DL) comprising a control (CDL) configured to be actuated directly by a user to activate or to inhibit the limiting device (DL), the limiting device comprising a measuring component (CMD) configured to measure a flow rate of the upstream flow (FM) on the upstream channel (CM), the limiting device comprising a limiter (Ll) of the transmission of the upstream flow via the upstream channel, the method (100) comprising the following steps:, - activation (101), directly by the user, of the limitation device (DL); - measurement (102), by the measurement component (CMD) of the limitation device (DL), of a flow rate of the upstream flow (FM) on the upstream channel (CM) - activation (103) of the limiter (Ll), by the limitation device (DL), to limit the transmission of the upstream flow (FM), for a limitation duration, when the measured flow rate is greater than a limitation threshold.

Images