Method for the automatic selection of a security configuration for terminals of nomad users

• US 20060095548A1
• Filed: 09/30/2005
• Published: 05/04/2006
• Est. Priority Date: 10/01/2004
• Status: Abandoned Application

• Current Assignee: Orange S.A.
• Original Assignee: Orange S.A.
• Inventors: Lovric, Ivan, Cazenave, Pierre, Rabot, Wilfrid
• Application Number:
  US11/241,017
• Publication Number:
  US 20060095548A1
• Time in Patent Office: Days
• US Class Current: 709/220
• CPC Class Codes: H04L 12/5692 Selection among different networks
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware

Abstract

Method for selecting a security configuration of a user'"'"'s terminal (10) able to be connected to at least one network (1, 2) via several network interfaces, comprising steps during which the terminal (10): detects any change in the terminal'"'"'s physical connection to a network; verifies that the terminal is connected to a network by a unique physical link; disconnects all physical links with a network so as to maintain only one physical link; determines the characteristics of the maintained physical link; and configures the terminal in relation to the characteristics of the maintained physical link.

Claims

1. Method of selecting a security configuration for a user'"'"'s terminal able to be connected to at least one network by several network interfaces,

characterized in that it comprises steps during which the terminal;

verifies whether the terminal is connected to a network by a unique physical link,

if uniqueness of connection is not verified, disconnects all physical links with a network so as to maintain only one physical link,

determines the characteristics of the maintained physical link, and

configures the terminal in relation to the characteristics of the maintained physical link.

2. Method as in claim 1,

characterized in that an order of priority is allocated to each of the possible physical links of the terminal with a network, the maintained physical link having highest priority.

3. Method as in claim 1,

characterized in that if a physical link with a network cannot be disconnected, the terminal emits an alert message to the user and configures the terminal taking the active physical links into account.

4. Method as in claim 1,

characterized in that determination of the characteristics of a physical link with a network comprises an identification step of a possible local network to which the active network interface is connected, by attempting connection to a secure server known to the terminal and supposedly visible solely to the local network.

5. Method as in claim 1,

characterized in that the configuration of the terminal consists of selecting a set of parameter values corresponding to the maintained network link.

6. Method as in claim 1 wherein the step consisting of verifying whether the terminal is connected to the network via a unique link is preceded by a detection step to detect a change in physical connection of the terminal to a network.

7. Method as in claim 6, wherein the detection step is triggered periodically.

8. Method as in claim 1, wherein the detection step is triggered on receipt of a system event.

9. Automatic configuration program of the security of a terminal able to be connected to at least one network via several network interfaces characterized in that it comprises program code instructions to carry out the method as in claim 1 when the program is executed on a terminal.

10. Terminal comprising the program as in claim 9.

11. Nomad user'"'"'s terminal comprising at least two network interfaces to connect to at least one network, a firewall and navigational software,

characterized in that it comprises processing means programmed to:

verify whether the terminal is connected to a network by a single physical link,

if uniqueness of connection is not verified, disconnect all physical links with a network so as to maintain only one physical link,

determine the characteristics of the maintained physical link, and

configure the terminal in relation to the characteristics of the maintained physical link.

12. Terminal as in claim 11,

characterized in that the processing means are programmed to allocate an order of priority to each of the possible network links of the terminal, the maintained network link having highest priority.