Methods for verifying the validity of an IP resource, and associated access control server, validation server, client node, relay node and computer program

A method for declaring an IP resource associated with a client domain, said method being implemented in a client node of said client domain and comprising:

• obtaining by the client node a list of at least one IP resource associated with the client domain;
• transmitting said list by the client node to an access control server configured to verify that said at least one IP resource is actually associated with said client domain;
• receiving at least one request originating from said access control server, via at least one relay node of said client domain associated with at least one IP resource selected from said list by said access control server, said at least one IP resource selected belonging to a group consisting of an IP address, an IP prefix and a domain name, said at least one IP resource selected identifying at least another client node, which is different than the client node that transmitted the list, and said request comprising a control message;
• and
• transmitting to said access control server a response to the request including an item of information characteristic of said control message.

A method for processing at least one IP resource validation request associated with a client domain,

• said method comprising:
• receiving or intercepting by a relay node of the client domain at least one request to at least one selected IP resource associated with the client domain, said at least one request originating from an access control server and comprising a control message, the at least one IP resource having been selected by the access control server from a list of at least one IP resource actually associated with the client domain and belonging to a group consisting of an IP address, an IP prefix and a domain name, the list being previously transmitted from a client node of said client domain to said access control server, and the at least one IP resource selected identifying at least another client node, which is different than the client node that transmitted the list;
• and
• transmitting by the relay node said at least one request to said client node.

A method for verifying validity of an IP resource associated with a client domain,

• said method comprising:
• receiving by a validation server at least one request comprising an item of information representative of an identity of a client domain and of said at least one selected IP resource, the validation server being associated with the at least one selected IP resource, which was selected by an access control server from a list of at least one IP resource associated with the client domain, the list having been previously transmitted from a client node of said client domain to said access control server, the at least one selected IP resource identifying at least another client node which is different than the client node that transmitted the list;
• identifying by the validation server said client domain based on said item of information representative of the identity of the client domain;
• and
• verifying by the validation server that the at least one selected IP resource is actually associated with the client domain, taking into account the identity of the client domain, wherein the at least one selected IP resource belongs to a group consisting of an IP address, an IP prefix and a domain name.

An access control server comprising:

• at least one programmable computing machine or one dedicated computing machine configured to verify validity of an IP resource associated with a client domain, implementing:
• receiving a list of at least one IP resource associated with said client domain, transmitted from a client node of said client domain to said access control server;
• selecting at least one IP resource to be validated from said list, wherein the at least one IP resource selected belongs to a group consisting of an IP address, an IP prefix and a domain name, and the at least one IP resource selected identifies at least another client node, which is different than the client node that transmitted the list;
• and
• verifying that said at least one selected IP resource identifying at least another client node is associated with said client domain comprising the client node that transmitted the list, prior to initiating, by said access control server, any action related to said at least one selected IP resource, wherein the verifying comprises:
• transmitting at least one request to the at least one selected IP resource, to be received or intercepted by at least one relay node of said client domain associated with said at least one selected IP resource, said request comprising a control message;
• receiving a response to the request including an item of information characteristic of said control message, transmitted by said client node to said access control server, said relay node having previously relayed said request to said client node;
• and
• validating said at least one IP resource selected by correlating said request and said response.