Method of tracing and of resurgence of pseudonymized streams on communication networks, and method of sending informative streams able to secure the data traffic and its addressees

• US 9,225,618 B2
• Filed: 06/03/2009
• Issued: 12/29/2015
• Est. Priority Date: 06/03/2008
• Status: Expired due to Fees

• Current Assignee: Institut Telecom-Telecom Paris Tech
• Original Assignee: Institut Telecom-Telecom Paris Tech
• Inventors: Riguidel, Michel, Laurier, Philippe, Ladouari, Laurent
• Primary Examiner(s): GOLDBERG, ANDREW C
• Application Number:
  US12/995,620
• Publication Number:
  US 20110307691A1
• Time in Patent Office: 2,400 Days
• Field of Search: 713/150
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/026 using flow identification
• CPC Class Codes: H04M 2203/6027 Fraud preventions

Abstract

A network includes communication media transmitting streams to addressees, and a method includes: step of allocation of a cryptonymic identity to communication media by a first instance, the streams transmitted by a medium bearing a mark, as a function of its cryptonym, the cryptonymic identity of a medium being distinct from its real identity; step of reading and of analyzing the streams by a second instance, the analysis including a phase of identifying streams to their communication media by searching for similarity between the mark of the streams and the cryptonymic identity of the media, with the aid of a table listing the cryptonyms, and a phase of logging observable characteristics of the streams through the network. A behavior defined by a set of characteristics is declared typical or atypical by comparison with a given set of criteria, the table of cryptonymic identities having no link with the real identities. The invention is applied notably for combating illegal downloads, the sending of material that is unsolicited or likely to cover up identifiable malicious intentions.

Claims

1. A method for identifying streams requested in a communication network, the communication network comprising communication media transmitting the streams to addressees, the method comprising:

allocating, using one or more hardware processors, a cryptonymic identity to a communication medium by a first instance, the cryptonymic identity being different from the real identity of the communication medium;

applying, using one or more hardware processors, a graft mask corresponding to the allocated cryptonymic identity to one or more streams transmitted by the communication medium;

analyzing, using one or more hardware processors and by a second instance following the first instance, the one or more streams transmitted by the communication medium by;

reading the one or more streams transmitted by the communication medium,

correlating the graft mask applied to the one or more streams to cryptonymic identities in a table of cryptonymic identities and to the cryptonymic identity allocated to the communication medium, the cryptonymic identities in the table of cryptonymic identities being different from the real identities of the communication media, and the table of cryptonymic identities not including the real identities of the communication media,

associating the one or more streams with the communication medium transmitting the streams based on a similarity determined in the correlation of the graft mask, and

recording observable characteristics of the one or more associated streams through the communication network without access to the content of the one or more associated streams;

comparing, using one or more hardware processors, a behavior defined by a set of one or more of the recorded observable characteristics with a predetermined set of observable characteristics to determine whether the behavior is typical or atypical;

receiving, using one or more hardware processors and by a third instance, a signal indicating whether the behavior is typical or atypical;

verifying, based on the signal indicating whether the behavior is typical or atypical and by the third instance, the content of the one or more associated streams; and

verifying, based on the content of the one or more associated streams and by the third instance, lawfulness, according to the current laws of a jurisdiction, of transmitting intellectual work to the addressees via the one or more associated streams,

wherein the recorded observable characteristics are linked only to the cryptonymic identity, and

wherein the second instance has no access to the content of the one or more associated streams.

2. The method as claimed in claim 1, further comprising comparing, using one or more hardware processors, a second behavior defined by a set of one or more recorded observable characteristics of streams not including a graft mask relating to a communication medium allocated a cryptonymic identity with the predetermined set of observable characteristics to determine whether the second behavior is typical or atypical, wherein the comparison of the second behavior defined by the set of one or more recorded observable characteristics of streams not including a graft mask is performed by the one or more hardware processors with priority over the comparison of the behavior defined by the set of one or more recorded observable characteristics of streams including the graft mask.

3. The method as claimed in claim 1, wherein the signal indicating whether the behavior is typical or atypical does not transmit, to the third instance, information containing the result of the comparison of the behavior defined by the set of one or more of the recorded observable characteristics with the predetermined set of observable characteristics.

4. The method as claimed in claim 1, wherein processing by the first, second and third instances are compartmentalized with no mutual access to data from the other except from requests transmitted according to a predetermined degree of authorization.

5. The method as claimed in claim 1, wherein the second instance reads the one or more streams at a point within the communication network.

6. The method as claimed in claim 1, wherein the cryptonymic identity allocated to the communication medium is a secret element, the secret element determining the cryptonymic identity of the communication medium, and the one or more streams transmitted by the communication medium comprising a graft mask containing the secret element.

7. The method as claimed in claim 6, wherein the secret element is stored on the communication medium or is dynamically written based on data drawn from outside of the communication medium.

8. The method as claimed in claim 6, wherein the secret element is stored by an external third-party system, the third-party system being configured to allocate the secret element following transmission of the one or more streams, and the secret element relating to a previously homologated identity.

9. The method as claimed in claim 6, wherein the secret element is periodically modified by the first instance.

10. The method as claimed in claim 1, wherein the application of the graft mask to the one or more streams is automatically performed in or at an output of the transmitting communication medium for each transmittal.

11. The method as claimed in claim 1, wherein the application of the graft mask to the one or more streams is performed at a checkpoint of the communication network by a marker.

12. The method as claimed in claim 1, wherein an informative mark is placed by a marker in response to a signal originating from the second instance or from the third instance.

13. The method as claimed in claim 12, wherein an informative mark is placed by the marker in response to a signal originating from an independent authority configured to assess the appropriateness of the informative mark.

14. The method as claimed in claim 12, wherein the informative mark is placed by a marker in the one or more streams at a checkpoint of the communication network.

15. The method as claimed in claim 14, wherein information contained in the informative mark is configured to be read by receiving communication media or sending communication media of the one or more streams.

16. The method as claimed in claim 1, wherein the analysis of the one or more streams is based on communication protocols of the one or more streams.

17. The method as claimed in claim 16, wherein the graft mask is applied in the format of the communication protocol of the one or more streams while complying with the standard of the communication protocol, without interfering with the data within the one or more streams.

18. The method as claimed in claim 17, wherein the graft mask is applied in a protocol header according to the communication protocol of the one or more streams.

19. The method as claimed in claim 1, wherein a real identity of a sender of a stream is associated separately with a pseudonym and with a cryptonym, management of the real identity being compartmentalized in three entities:

an instance A, an instance Z, and an anonymization authority, wherein;

the instance A stores a link between the real identity and the graft mask;

the instance Z stores a link between the real identity and the pseudonym; and

the anonymization authority stores a link between the pseudonym and the graft mask.

20. The method as claimed in claim 1, further comprising comparing, using one or more hardware processors, a second behavior defined by a set of one or more recorded observable characteristics of streams including a graft mask relating to a communication medium allocated a cryptonymic identity with the predetermined set of observable characteristics to determine whether the second behavior is typical or atypical.

21. A method for transmitting a stream using a communication medium through a telecommunication or television broadcasting network configured to secure data traffic, said method comprising:

referencing, using one or more hardware processors by a first instance, a graft mask representing a cryptonymic identity, the cryptonymic identity being different from the real identity of the communication medium used to transmit the stream and different from the content within the stream; and

analyzing, using one or more hardware processors by a second instance, the one or more streams transmitted by the communication medium by;

reading the one or more streams transmitted by the communication medium,

correlating the graft mask applied to the one or more streams to cryptonymic identities in a table of cryptonymic identities and to the cryptonymic identity allocated to the communication medium, the cryptonymic identities in the table of cryptonymic identities being different from the real identities of the communication media, and the table of cryptonymic identities not including the real identities of the communication media,

associating the one or more streams with the communication medium transmitting the streams based on a similarity determined in the correlation of the graft mask, and

recording observable characteristics of the one or more associated streams through the communication network without access to the content of the one or more associated streams;

comparing, using one or more hardware processors, a behavior defined by a set of one or more of the recorded observable characteristics with a predetermined set of observable characteristics to determine whether the behavior is typical or atypical;

receiving, using one or more hardware processors and by a third instance, a signal indicating whether the behavior is typical or atypical;

verifying, based on the signal indicating whether the behavior is typical or atypical and by the third instance, the content of the one or more associated streams; and

verifying, based on the content of the one or more associated streams and by the third instance, lawfulness, according to the current laws of a jurisdiction, of transmitting intellectual work to the addressees via the one or more associated streams,

wherein the recorded observable characteristics are linked only to the cryptonymic identity, and

wherein the second instance has no access to the content of the one or more associated streams.

22. The method as claimed in claim 21, wherein the cryptonymic identity is a secret element.

23. The method as claimed in claim 21, further comprising inserting the graft mask in the format of the communication protocol of the communication medium while complying with the standard of the communication protocol, without interfering with the content within the stream.

24. The method as claimed in claim 23, wherein the graft mask is inserted in a protocol header.