METHOD OF TRACING AND OF RESURGENCE OF PSEUDONYMIZED STREAMS ON COMMUNICATION NETWORKS, AND METHOD OF SENDING INFORMATIVE STREAMS ABLE TO SECURE THE DATA TRAFFIC AND ITS ADDRESSEES

• US 20110307691A1
• Filed: 06/03/2009
• Published: 12/15/2011
• Est. Priority Date: 06/03/2008
• Status: Active Grant

• Current Assignee: Institut Telecom-Telecom Paris Tech
• Original Assignee: Institut Telecom-Telecom Paris Tech
• Inventors: Riguidel, Michel, Laurier, Philippe, Ladouari, Laurent
• Granted Patent: US 9,225,618 B2
• Time in Patent Office: Days
• US Class Current: 713/150
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/026 using flow identification
• CPC Class Codes: H04M 2203/6027 Fraud preventions

Abstract

A network includes communication media transmitting streams to addressees, and a method includes: step of allocation of a cryptonymic identity to communication media by a first instance, the streams transmitted by a medium bearing a mark, as a function of its cryptonym, the cryptonymic identity of a medium being distinct from its real identity; step of reading and of analyzing the streams by a second instance, the analysis including a phase of identifying streams to their communication media by searching for similarity between the mark of the streams and the cryptonymic identity of the media, with the aid of a table listing the cryptonyms, and a phase of logging observable characteristics of the streams through the network. A behavior defined by a set of characteristics is declared typical or atypical by comparison with a given set of criteria, the table of cryptonymic identities having no link with the real identities. The invention is applied notably for combating illegal downloads, the sending of material that is unsolicited or likely to cover up identifiable malicious intentions.

Claims

1. A method for identifying streams capable to being sought in a communication network comprising communication media transmitting streams to addressees, sa method comprising at least:

a step of allocation of a cryptonymic identity to communication media by a first instance, the streams transmitted by a medium bearing a graft masking, as a function of its cryptonymic identity, the cryptonym of a medium being distinct from its real identity;

a step of reading and of analyzing the streams by a second instance, said analysis comprising a phase of identifying streams to their communication media by searching for similarity between the possible graft of the streams and the possible cryptonymic identity of the media with the aid of a table listing the cryptonyms, and a phase of logging observable characteristics of the streams through the network; and

a behavior, defined by a set of characteristics, being declared typical or atypical by comparison with a given set of criteria, the table of cryptonymic identities having no link with the real identities.

2. The method as claimed in claim 1, wherein the analysis of behavior is carried out as a priority on the streams having no graft relating to a communication medium provided with a cryptonym.

3. The method as claimed in claim 1, further comprising a third step of reception of the signaling of typical or atypical behaviors by a third instance, said instance being capable of verifying the legality of the corresponding streams.

4. The method as claimed in claim 3, wherein the third instance is capable of verifying the content of the corresponding streams.

5. The method as claimed in claim 3, wherein the third instance is not informed of the result of the comparison that has led to declaring a stream typical or atypical.

6. The method as claimed in claim 1, wherein the instances are compartmentalized with no mutual access to their respective data other than via requests transmitted according to a degree of authorization that is capable of being predefined.

7. The method as claimed in claim 1, wherein the second instance reads streams at a point of the network.

8. The method as claimed in claim 1, wherein the cryptonymic identity supplied to a communication medium is a secret element, the secret determining the cryptonym of the medium, the flows transmitted by this medium comprising a graft containing this secret element.

9. The method as claimed in claim 8, wherein the secret element can be stored on the medium or be the subject of a dynamic write based on data drawn each time from the outside, while resulting in a graft of the stream by the sending equipment.

10. The method as claimed in claim 8, wherein the secret element can be held by an external third party, capable of placing it after the output of the stream, relating to a previously homologated identity.

11. The method as claimed in claim 1, wherein the secret element can be modified periodically by the first instance.

12. The method as claimed in claim 1, wherein the graft masking the streams is established automatically in or at the output of the transmitting communication medium on the occasion of each transmittal.

13. The method as claimed in claim 1, wherein the masking graft of a stream is carried out at a checkpoint of the network by marking means.

14. The method as claimed in claim 1, wherein an informative mark is placed by marking means at the request of a signal originating from the second instance or from the third instance.

15. The method as claimed in claim 1, wherein an informative mark is placed by marking means at the request of a signal originating from an independent authority that is able to assess the appropriateness thereof.

16. The method as claimed in claim 1, wherein the informative marking of a stream is carried out at a checkpoint of the network by marking means.

17. The method as claimed in claim 1, wherein the information contained in the informative mark can be read by receiving communication media or sending communication media of the stream.

18. The method as claimed in claim 1, wherein a communication medium cannot dispense definitively with a masking graft without an authorization signal from the first instance.

19. The method as claimed in claim 1, wherein a communication medium can provisionally or selectively dispense with a masking graft without an authorization signal from the first instance.

20. The method as claimed in claim 1, wherein a communication medium can provisionally or selectively dispense with a masking graft via an authorization signal from the first instance.

21. The method as claimed in claim 1, wherein the analysis of the streams is carried out on their communication protocols.

22. The method as claimed in claim 21, wherein the graft is inserted in the format of the communication protocol used, while complying with the standard of the protocol, without interfering with the data of a user.

23. The method as claimed in claim 22, wherein the graft is inserted in the protocol header.

24. The method as claimed in claim 1, wherein a real identity of a sender of a stream is associated separately on the one hand with an invariant pseudonym, on the other hand with a variant cryptonym, functionally dissimulating the true identity, these two attributes having possible gateways between them, but neither of them nor their addition making it possible for an external third party to work back, through knowing them or holding them, to this real identity.

25. The method as claimed in claim 24, wherein the identities are personal and inaccessible to third parties.

26. The method as claimed in claim 24, wherein the pseudonym is explicitly disclosed to a third party by its holder, the cryptonym not being so disclosed.

27. The method as claimed in claim 24, wherein, in the matter of identity management, three partially mutally compartmentalized entities are deployed:

an instance A, an instance Z and an anonymization authority,

the instance A explicitly knowing the link between the real identity and the graft, the instance Z explicitly knowing the link between the real identity and the pseudonym, and the anonymization authority explicitly knowing the link between pseudonym and graft.

28. The method as claimed in claim 1, wherein an invariant pseudonym of a given identity and a variant cryptonym of this same identity are in constant bijection, within the instance responsible for this bijection, without intercession of this real identity at any time.

29. A method for transmitting a stream by a communication medium through a telecommunication or television broadcasting network capable of securing the data traffic, said method comprising a graft representing a cryptonym independent of the real identity of its transmission communication medium and of the content that it carries, said cryptonym being referenced in a first instance, the listing indicating the link with the corresponding real identity and said cryptonym being able to be found by a second instance not having access to the corresponding real identity.

30. The method as claimed in claim 29, wherein the cryptonym takes the form of a secret element.

31. The method as claimed in claim 29, wherein the graft is inserted in the format of the communication protocol used, while complying with the standard of the protocol, without interfering with the data of the user.

32. The method as claimed in claim 31, wherein the graft is inserted in the protocol header.