# US 11,310,076 B2 · High-availability secure communication system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,310,076 B2 - Document ID: US11310076B2 - Status: Granted - Kind: B2 - Application number: 16/958,215 - Filed: 2018-12-21 - Published: 2021-03-11 - Granted: 2022-04-19 - Earliest claimed: 2017-12-27 - Assignees: Bull SAS - Applicants: Atos Integration - Inventors: Denis Olier - Web page: https://patentgrep.com/patent/US11310076B2 ## CPC - H04L 12/4633: {Interconnection of networks using encapsulation techniques, e.g. tunneling} - H04L 63/0272: {Virtual private networks} - H04W 4/90: Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS] - H04W 12/00: Security arrangements; Authentication; Protecting privacy or anonymity - H04W 12/06: Authentication - H04W 40/248: {Connectivity information update} - H04W 48/18: Selecting a network or a communication service - H04W 88/06: adapted for operation in multiple networks {or having at least two operational modes}, e.g. multi-mode terminals - H04W 88/16: Gateway arrangements - H04L 41/0654: using network fault recovery (ring fault isolation or reconfiguration in loop networks without recovery actions by a network management system H04L12/437) - H04L 43/50: Testing arrangements - H04W 12/45: using multiple identity modules - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A system for high-availability secure communication between a mobile terminal and an application server. The terminal is connected to a communication box having at least three physical communication interfaces, a first interface used for communicating with the terminal. The communication box connected to an access server by first and second links through corresponding first and second physical remote communication interfaces. The application server connected to the access server. The terminal and the application server communicating through the communication box and the access server using one of two previously established links. The communication box is the network gateway of the terminal. The communication box: maintains a local routing table based on the routing performance of at least one physical remote communication interface; maintains a remote routing table on the access server so that the communication box and the access server use the same link at the same time. ## Claims ### Claim 1 A very high-availability secure communication system for a mobile terminal for establishing local and remote communications, comprising: a mobile terminal connected to a communication box, said communication box comprising at least four physical communication interfaces comprising a first physical communication interface, a second physical communication interface, a third physical communication interface, a fourth physical communication interface, wherein the first physical communication interface serves to establish communications via Narrowband Asynchronous Transfer Mode (NATM) with the mobile terminal, the second physical communication interface is a first physical remote communication interface and the third physical communication interface is a second physical remote communication interface, wherein the first physical remote communication interface and the second physical remote communication interface serve to establish remote communications via mobile networks, the fourth physical communication interface serves to establish local communications with another box by direct communication and according to an IP protocol according to a predetermined addressing plan; wherein the communication box uses the fourth physical communication interface when the first physical remote communication interface and the second physical remote communication interface are defective; wherein the mobile terminal communicates with an application server as follows: the communication box is connected to an access server by a first link of a Virtual Private Network (VPN0) established through the first physical remote communication interface and by a second link of a Virtual Private Network (VPN1) established through the second physical remote communication interface; the application server is connected to the access server, the mobile terminal and the application server communicate through the communication box and the access server using one of the first link (VPN0) and the second link (VPN1); the communication box is a network gateway of the mobile terminal; the communication box: maintains a local routing table based on a routing performance of at least one physical remote communication interface; maintains a remote routing table on the access server so that the communication box and the access server are using a same link at a same time. ### Claim 2 (depends on 1) The very high-availability secure communication system according to claim 1, wherein the fourth physical communication interface operates in a frequency band centered on 900 MHz. ### Claim 3 (depends on 1) The very high-availability secure communication system according to claim 1, wherein one or more of the at least four physical communication interfaces of the communication box is a wired serial interface. ### Claim 4 (depends on 3) The very high-availability secure communication system according to claim 3, wherein one or more of the at least four physical communication interfaces of the communication box is a wireless communication interface. ### Claim 5 (depends on 1) The very high-availability secure communication system according to claim 1, wherein the routing performance of the at least one physical remote communication interface is a measure of a power of a signal received on the at least one physical remote communication interface, the routing performance of which is to be evaluated. ### Claim 6 (depends on 1) The very high-availability secure communication system according to claim 1, wherein the routing performance of the at least one physical remote communication interface is measured by a response time to a predetermined message transmitted via the at least one physical remote communication interface, the routing performance of which is to be evaluated. ### Claim 7 (depends on 6) The very high-availability secure communication system according to claim 6, wherein the predetermined message is transmitted at a period within a range of 2 seconds to 5 seconds. ### Claim 8 (depends on 6) The very high-availability secure communication system according to claim 6, wherein the routing performance of the at least one physical remote communication interface is considered to be defective if the response time to the predetermined message is greater than 1 second. ### Claim 9 (depends on 1) The very high-availability secure communication system according to claim 1, wherein the first link and the second link are virtual private tunnels. ### Claim 10 (depends on 1) The very high-availability secure communication system according to claim 1, wherein the communication box further comprises a provisional memory in which a unique identifier of a terminal is stored, wherein only the terminal comprising the unique identifier is authorized to communicate with the communication box by a wireless local communication interface, wherein the communication box filters communications made by the wireless local communication interface, and wherein the unique identifier is a MAC address of the wireless local communication interface of the terminal. ### Claim 11 (depends on 10) The very high-availability secure communication system according to claim 10, wherein the provisional memory is written at a moment when a connection is detected on a wired physical communication interface between the mobile terminal and the communication box, the terminal serving as a peripheral device for the communication box. ### Claim 12 A very high-availability secure communication system for a mobile terminal for establishing local and remote communications, comprising: a mobile terminal connected to a communication box, said communication box comprising at least four physical communication interfaces comprising a first physical communication interface, a second physical communication interface, a third physical communication interface, a fourth physical communication interface, wherein the first physical communication interface serves to establish communications via Narrowband Asynchronous Transfer Mode (NATM) with the mobile terminal, the second physical communication interface is a first physical remote communication interface and the third physical communication interface is a second physical remote communication interface, wherein the first physical remote communication interface and the second physical remote communication interface serve to establish remote communications via mobile networks, the fourth physical communication interface serves to establish local communications with another box by direct communication and according to an IP protocol according to a predetermined addressing plan; wherein the communication box uses the fourth physical communication interface when the first physical remote communication interface and the second physical remote communication interface are defective; wherein the communication box further comprises a provisional memory in which a unique identifier of a terminal is stored, wherein only the terminal comprising the unique identifier is authorized to communicate with the communication box by a wireless local communication interface, wherein the communication box filters communications made by the wireless local communication interface, and wherein the unique identifier is a MAC address of the wireless local communication interface of the terminal. ### Claim 13 (depends on 12) The very high-availability secure communication system according to claim 12, wherein the fourth physical communication interface operates in a frequency band centered on 900 MHz. ### Claim 14 (depends on 12) The very high-availability secure communication system according to claim 12, wherein the provisional memory is written at a moment when a connection is detected on a wired physical communication interface between the mobile terminal and the communication box, the terminal serving as a peripheral device for the communication box.