Method for managing communication between terminals in a communication network, and devices and system for implementing the method

A method of communication in a network, the method comprising, between a first terminal and a second terminal between which is established a first encrypted connection for transmitting data:

• storing, by the second terminal, in association with said first connection, an intermediate processing function intended to be applied between the first terminal and the second terminal on at least a part of said data, a filter characterizing said at least a part of the data, and a key shared with the first terminal;
• receiving, by the second terminal, at least one first message originating from said intermediate function, carrying data sent by the first terminal;
• checking, by the second terminal, whether said data correspond to the stored filter;
• and
• if they correspond:
• accepting the establishment of a second encrypted connection with the intermediate function and associating said second connection with the first connection, wherein the first encrypted connection and the second encrypted connection are comprised in a collaborative connection established between the first and second terminals;
• and
• upon receiving data via said second connection corresponding to said filter, associating said data with the first connection, wherein:
• said first connection is established between the first terminal and the second terminal according to the QUIC protocol;
• and
• at least one said second connection is established according to the TLS protocol between the first terminal and the second terminal via at least one said intermediate function capable of decrypting the data exchanged via said second connection.

A method comprising, for processing data transmitted in a network between a first terminal and a second terminal between which is established a first encrypted connection, for a first device configured to implement a first intermediate processing function for data transmitted between the first terminal and the second terminal over a second connection via said first device:

• receiving from a first device of the network at least one first message intended for the first device, carrying data sent by the first terminal intended for the second terminal, said first device of the network being the first terminal or a second device configured to implement a second intermediate processing function for said data, the second connection being encrypted between the first device and the first device, said first message comprising:
• a first ordered list identifying at least one second device of the network to be traveled through by said at least one message in order to be routed to the second terminal, said at least one second device being the second terminal or at least one third device configured to implement a third intermediate processing function for said data;
• and
• a second ordered list comprising at least one key intended to be presented by each device in the first list to the next device in said first list, the key intended to be presented to the second terminal being shared between the first terminal and the second terminal;
• applying the first intermediate processing function to said data carried in said at least one first message;
• updating the first list and the second list;
• and
• sending, to the next device identified in the first list, said at least one first message integrating the update to the first and second lists, with the data processed by the first intermediate processing function and the key extracted from the second list intended to be presented to the next device, the second connection being encrypted between the first device and the next device.

A data communication device, comprising a processor and a memory operatively coupled to the processor, wherein the processor is configured to implement a method of communication in a network, between a first terminal and a second terminal between which is established a first encrypted connection for transmitting data, the method carried out by the first terminal, and comprising:

• storing, in association with said first connection, at least one second connection between the first terminal and the second terminal via at least one intermediate processing function intended to be applied to at least a part of said data referred to as eligible for the second connection, and a filter characterizing said data eligible for the second connection, for establishing a collaborative connection between the first and second terminals comprising the first encrypted connection and the associated at least one second connection, said at least one second connection being encrypted between the first terminal and said intermediate processing function;
• and
• sending data to the second terminal via the collaborative connection by sending, via said second connection, at least one first message intended for said intermediate function and carrying said data for the second terminal, wherein said data correspond to said filter, and the first message comprises information according to which said data are intended for the second terminal, wherein:
• said first connection is established between the first terminal and the second terminal according to the QUIC protocol;
• and
• at least one said second connection is established according to the TLS protocol between the first terminal and the second terminal via at least one said intermediate function capable of decrypting the data exchanged via said second connection.

A data communication system, comprising a first terminal configured to implement a method of communication in a network, between a first terminal and a second terminal between which is established a first encrypted connection for transmitting data, the method carried out by the first terminal, and comprising:

• storing, in association with said first connection, at least one second connection between the first terminal and the second terminal via at least one intermediate processing function intended to be applied to at least a part of said data referred to as eligible for the second connection, and a filter characterizing said data eligible for the second connection, for establishing a collaborative connection between the first and second terminals comprising the first encrypted connection and the associated at least one second connection, said at least one second connection being encrypted between the first terminal and said intermediate processing function;
• and sending data to the second terminal via the collaborative connection by sending, via said second connection, at least one first message intended for said intermediate function and carrying said data for the second terminal, wherein said data correspond to said filter, and the first message comprises information according to which said data are intended for the second terminal;
• a second terminal configured to implement a method of communication in a network, between a first terminal and a second terminal between which is established a first encrypted connection for transmitting data, the method carried out by the second terminal, and comprising:
• storing, in association with said first connection, an intermediate processing function intended to be applied between the first terminal and the second terminal on at least a part of said data, a filter characterizing said at least a part of the data, and a key shared with the first terminal;
• receiving at least one first message originating from said intermediate function, carrying data sent by the first terminal;
• checking whether said data correspond to the stored filter;
• and if they correspond:
• accepting the establishment of a second encrypted connection with the intermediate function and associating said second connection with the first connection;
• and upon receiving data via said second connection corresponding to said filter, associating said data with the first connection;
• and a device configured to implement a method of processing data transmitted in a network between a first terminal and a second terminal between which is established a first encrypted connection, the method comprising, for a first device configured to implement a first intermediate processing function for data transmitted between the first terminal and the second terminal over a second connection via said first device:
• receiving from a first device of the network at least one first message intended for the first device, carrying data sent by the first terminal intended for the second terminal, said first device of the network being the first terminal or a second device configured to implement a second intermediate processing function for said data, the second connection being encrypted between the first device and the first device, said first message comprising:
• a first ordered list identifying at least one second device of the network to be traveled through by said at least one message in order to be routed to the second terminal, said at least one second device being the second terminal or at least one third device configured to implement a third intermediate processing function for said data;
• and a second ordered list comprising at least one key intended to be presented by each device in the first list to the next device in said first list, the key intended to be presented to the second terminal being shared between the first terminal and the second terminal;
• applying the first intermediate processing function to said data carried in said at least one first message;
• updating the first list and the second list;
• and sending, to the next device identified in the first list, said at least one first message integrating the update to the first and second lists, with the data processed by the first intermediate processing function and a key extracted from the second list intended to be presented to the next device, the second connection being encrypted between the first device and the next device.

A processing circuit comprising a processor and a memory, the memory storing code instructions of a computer program comprising portions of code for implementing a method of communication in a network, between a first terminal and a second terminal between which is established a first encrypted connection for transmitting data, the method carried out by the first terminal, and comprising:

• storing, in association with said first connection, at least one second connection between the first terminal and the second terminal via at least one intermediate processing function intended to be applied to at least a part of said data referred to as eligible for the second connection, and a filter characterizing said data eligible for the second connection, for establishing a collaborative connection between the first and second terminals comprising the first encrypted connection and the associated at least one second connection, said at least one second connection being encrypted between the first terminal and said intermediate processing function;
• and sending data to the second terminal via the collaborative connection by sending, via said second connection, at least one first message intended for said intermediate function and carrying said data for the second terminal, wherein said data correspond to said filter, and the first message comprises information according to which said data are intended for the second terminal, during the execution of said program by the processor, wherein:
• said first connection is established between the first terminal and the second terminal according to the QUIC protocol;
• and
• at least one said second connection is established according to the TLS protocol between the first terminal and the second terminal via at least one said intermediate function capable of decrypting the data exchanged via said second connection.