Process for searching for sensitive data in at least one data packet, associated device and system

A searching device comprising:

• at least one processor;
• and
• at least one non-transitory computer readable medium comprising instructions stored thereon which when executed by the at least one processor configure the searching device to search for sensitive data in at least one data packet emitted by at least one terminal connected to a network, said at least one data packet having as destination a destination equipment item accessible via said network, the sensitive data having been inserted into said at least one packet before the at least one packet reaches the destination equipment item, wherein:
• the sensitive data comprises data enabling items of identification information relating to an identity and/or environment of an entity to which said at least one terminal belongs to be determined from the sensitive data,
• the searching device is separate from said destination equipment item and separate from said at least one terminal,
• the searching device is configured to be located on a route for routing said at least one data packet to said destination equipment item or connected to said at least one terminal using at least one tunnel, and
• the search comprises:
• receiving said at least one data packet,
• detecting sensitive data inserted into said at least one data packet,
• providing said entity, in response to said sensitive data being detected in said at least one packet, with items of information about said detected sensitive data.

An aggregating device including:

• at least one processor;
• and
• at least one non-transitory computer readable medium comprising instructions stored thereon which when executed by the at least one processor configure the aggregating device to:
• receive, coming from a plurality of searching devices, sensitive data detected by said searching devices in at least one data packet emitted by at least one terminal connected to a network, said at least one data packet having as destination a destination equipment item accessible via said network, and the sensitive data having been inserted into said at least one packet before the at least one packet reaches the destination equipment item, wherein:
• the sensitive data comprising data enabling items of identification information relating to an identity and/or environment of an entity to which said at least one terminal belongs to be determined from the sensitive,
• the plurality of searching devices are separate from said destination equipment item and separate from said at least one terminal, and
• the plurality of searching devices are located on a route for routing said at least one data packet to said destination equipment item or connected to said at least one terminal by a tunnel;
• and
• provide said entity with items of information about the sensitive data received from said plurality of searching devices.

A communication terminal including:

• at least one processor;
• and
• at least one non-transitory computer readable medium comprising instructions stored thereon which when executed by the at least one processor configure the communication terminal to:
• emit at least one data packet in a network, said at least one data packet having as destination a destination equipment item accessible via said network,
• duplicate the at least one data packet and transmit said duplicate at least one data packet to at least one searching device, wherein:
• said at least one searching device is separate from said destination equipment item and separate from said communication terminal,
• said at least one searching device is located on a route for routing said duplicate at least one data packet to said destination equipment item or connected to said communication terminal by a tunnel,
• access items of information about sensitive data inserted before the at least one data packet reaches said destination equipment item and detected in said duplicate at least one data packet by the at least one searching device, wherein:
• the items of information comprise items of identification information relating to an identity and/or environment of an entity to which said communication terminal belongs, and
• the sensitive data comprises data enabling the items of identification information to be determined from the sensitive data.