Technique for obtaining a policy for routing requests emitted by a software module running on a client device

• US 10,305,857 B2
• Filed: 05/26/2015
• Issued: 05/28/2019
• Est. Priority Date: 05/28/2014
• Status: Active Grant

• Current Assignee: Orange S.A.
• Original Assignee: Orange S.A.
• Inventors: Omnes, Nathalie, Stephan, Emile, Corbel, Romuald
• Primary Examiner(s): Pearson, David J
• Application Number:
  US15/313,929
• Publication Number:
  US 20170195290A1
• Time in Patent Office: 1,463 Days
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 45/306 Route determination based on the nature of the carried application
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

One embodiment relates to a method for obtaining, in a communication network, a routing policy indicating rules for routing requests emitted by a software module running on a client device. The method comprises sending, by the client device, a connection request to an authentication server of the communication network in order to attach the client device to the communications network- and receiving, by the client device, a connection context response from the authentication server. The context comprises an identifier of a system for managing routing rules. The software module obtains the routing policy in accordance with at least one first rule for routing to a proxy system certified by the operator of the communications network obtained by means of the identifier.

Claims

1. A method for obtaining, in a communication network, a routing policy indicating rules for routing requests transmitted by a software module running on a client device, said method comprising the following processes, implemented during attachment of the client device to the communication network:

sending, by the client device, to an authentication server of the communication network, a connection context request in order to attach the client device to the communication network;

receiving, by the client device, from the authentication server, a connection context response, said connection context response comprising an identifier of a routing rule management apparatus storing a routing rule managed by the communication network; and

obtaining, by the software module, the routing policy, from at least one first rule for routing to a proxy apparatus certified by the operator of the communication network, said rule being obtained using the identifier.

2. The method of claim 1, further comprising the following processes implemented by the software module, prior to obtaining said routing policy:

setting up a secure connection to the routing rule management apparatus; and

using the secure connection to receive at least one certificate associated with the routing rule management apparatus;

wherein said first routing rule is determined from at least one resource identifier included in the received certificate.

3. The method of claim 1, further comprising obtaining a second rule for routing to a third-party proxy apparatus, the routing policy being obtained by combining the first and second routing rules.

4. The method of claim 3, wherein the processes of obtaining the second routing rule and combining the first and second routing rules are implemented by the software module running on the client device.

5. The method of claim 4, further comprising, when the first and second routing rules are in conflict, sending a piece of information relating to said conflict to the routing rule management apparatus.

6. The method of claim 3, wherein the processes of obtaining the second routing rule and combining the first and second routing rules are implemented by the routing rule management apparatus.

7. A method for assisting in obtaining a routing policy indicating rules for routing requests transmitted by a software module running on a client device, said method being implemented in a communication network and comprising the following processes, implemented during attachment of the client device to said communication network:

receiving, by an authentication server, from the client device, a connection context request in order to attach the client device to the communication network; and

sending, by an authentication server, to the client device, a connection context response, said connection context response comprising an identifier of a routing rule management apparatus storing a routing rule managed by the communication network.

8. A client device configured to obtain an identifier of a routing rule management apparatus, said client device comprising a processor and a memory, the processor configured to:

send a connection context request to an authentication server in order to attach the client device to a communication network;

receive a connection context response, said connection context response comprising an identifier of a routing rule management apparatus storing a routing rule managed by the communication network; and

obtain a routing policy intended to be used by the client device, using the identifier of the routing rule management apparatus.

9. An authentication server in a communication network, said authentication server being configured to assist a client device in obtaining a routing policy, wherein said authentication server comprises a processor and a memory, the processor configured to:

receive a connection context request in order to attach the client device to the communication network;

send a connection context response, said connection context response comprising an identifier of a routing rule management apparatus storing a routing rule managed by the communication network; and

insert the identifier of the apparatus into a connection context response intended for a client device, following reception of a connection context request from this client device.

10. A system for a routing policy indicating rules for routing requests transmitted by a software module running on a client device, designed to provide said routing policy for the software module, said system comprising:

a client device configured to obtain an identifier of a routing rule management apparatus said client device comprising a processor and a memory, the processor configured to;

send a connection context request to an authentication server in order to attach the client device to a communication network;

receive a connection context response, said connection context response comprising an identifier of a routing rule management apparatus storing a routing rule managed by the communication network; and

obtain a routing policy intended to be used by the client device, using the identifier of the routing rule management apparatus;

said system further comprising the authentication server of claim 9.

11. The system of claim 10, further comprising a routing rule management apparatus designed to manage routing rules, said rule management apparatus comprising a processor and a memory, the processor configured to:

receive a request for a policy for routing requests transmitted by a software module running on a client device;

send the routing policy; and

generate a routing policy intended to be used by a client device.

12. A non-transitory computer readable medium having stored thereon instructions, which when executed by a client device cause said client device to perform a method for obtaining, in a communication network, a routing policy indicating rules for routing requests transmitted by a software module running on said client device, said method comprising the following processes, implemented during attachment of said client device to the communication network:

sending, by the client device, to an authentication server of the communication network, a connection context request in order to attach the client connection context request in order to attach the client device to the communication network;

receiving, by the client device, from the authentication server, a connection context response, said connection context response comprising an identifier of a routing rule management apparatus storing a routing rule managed by the communication network; and

obtaining, by the software module, the routing policy, from at least one first rule for routing to a proxy apparatus certified by the operator of the communication network, said rule being obtained by means of the identifier.

14. A client device comprising a processor and the non-transitory computer readable medium of claim 12.

13. A non-transitory computer readable medium having stored thereon instructions, which when executed by an authentication server cause said authentication server to perform a method of controlling the execution of a method for assisting in obtaining a routing policy indicating rules for routing requests transmitted by a software module running on a client device, said method being implemented in a communication network and comprising the following processes, implemented during attachment of the client device to said communication network:

receiving, by an authentication server, from the client device, a connection context request in order to attach the client device to the communication network; and

sending, by an authentication server, to the client device, a connection context response, said connection context response comprising an identifier of a routing rule management apparatus storing a routing rule managed by the communication network.