Method of controlling traffic policies from a security module in a mobile terminal
AssigneeOrange
InventorsBruno Chatras, Youssef Chadli
Life of this patent
Estimating the term…
Abstract
The invention relates to a method of controlling a packet stream generated by an application (APP) installed in a mobile terminal (UE), the stream being intended to be sent by the terminal over a communications network managed by an operator, the method comprising the following steps implemented in the terminal, for all or some of the packets generated by the application: obtaining and analysis of a packet, termed the first packet (P1), sending by the terminal of a second packet (P2) based on the first packet and conforming to at least one processing rule established by the operator, as a function of the result of the analysis and if the result of the analysis permits the sending.
Claims19
A method for controlling a packet stream generated by an application (APP) installed in a mobile terminal (UE), the stream being intended to be transmitted by the terminal over a communications network managed by an operator, the method comprising the following steps implemented in the terminal, for all or some of the packets generated by the application:
- obtaining (E1) and analysis (E2, E3, E4, E5) of a packet, called first packet (P1),
- transmission (E7) by the terminal of a second packet (P2) based on the first packet and conforming to at least one processing rule established by the operator, based on the result of the analysis and if the result of the analysis authorizes the transmission.
A method for determining an instruction relating to the transmission of a first packet (P1) included in a packet stream generated by an application (APP) installed in a mobile terminal (UE), the stream being intended to be transmitted over a communications network managed by an operator, the method being implemented in a security module (SIM-PDP) comprising at least one processing rule established by the operator, the method comprising the following steps:
- a step (F1) of reception of a request message (Req) from the terminal, the request message comprising at least one parameter based on the first packet (P1),
- determination (F2) of an instruction relating to the transmission of a second packet (P2) based on the at least one parameter, according to the at least one processing rule,
- a step (F3) of transmission of a response message (Rep) to the terminal, the response message comprising the determined instruction.
A security module (SIM) intended to be installed in a mobile terminal (UE) capable of transmitting a packet stream generated by an application (APP) installed in the mobile terminal and intended to be transmitted over a communications network managed by an operator, the security module comprising:
- a module (240) for obtaining and storing at least one processing rule (PCC) established by the operator,
- a module (250) for receiving a request message (Req) from the terminal, the request message comprising at least one parameter based on a packet (P1) of the stream,
- a module (260) for determining an instruction relating to the transmission of the packet of the stream, according to the at least one processing rule,
- a module (270) for transmitting a response message (Rep) to the terminal, the response message comprising the determined instruction.
A mobile terminal (UE) capable of transmitting a packet stream generated by an application (APP) installed in the mobile terminal and intended to be transmitted over a communications network managed by an operator, the terminal comprising:
- a module (140) for obtaining a packet, called first packet (P1),
- a module (150) for analyzing the first packet,
- a module (160) for transmitting, from the terminal, a second packet (P2) based on the first packet and conforming to at least one processing rule established by the operator, according to the result of the analysis.
A system comprising a mobile terminal (UE) capable of transmitting a packet stream generated by an application (APP) installed in the mobile terminal and intended to be transmitted over a communications network managed by an operator, the terminal comprising:
- a module (140) for obtaining a packet, called first packet (P1),
- a module (150) for analyzing the first packet,
- a module (160) for transmitting, from the terminal, a second packet (P2) based on the first packet and conforming to at least one processing rule established by the operator, according to the result of the analysis,
- and at least one security module (SIM) intended to be installed in the mobile terminal (UE), the security module comprising:
- a module (240) for obtaining and storing at least one processing rule (PCC) established by the operator,
- a module (250) for receiving a request message (Req) from the terminal, the request message comprising at least one parameter based on a packet (P1) of the stream,
- a module (260) for determining an instruction relating to the transmission of the packet of the stream, according to the at least one processing rule,
- a module (270) for transmitting a response message (Rep) to the terminal, the response message comprising the determined instruction.
A computer program (110) comprising instructions for implementing steps of a control method, when this method is executed by a processor, the control method for controlling a packet stream generated by an application (APP) installed in a mobile terminal (UE), the stream being intended to be transmitted by the terminal over a communications network managed by an operator, the method comprising the following steps implemented in the terminal, for all or some of the packets generated by the application:
- obtaining (E1) and analysis (E2, E3, E4, E5) of a packet, called first packet (P1),
- transmission (E7) by the terminal of a second packet (P2) based on the first packet and conforming to at least one processing rule established by the operator, based on the result of the analysis and if the result of the analysis authorizes the transmission.
A computer program (210) comprising instructions for implementing steps of a determination method, when this method is executed by a processor, the determination method for determining an instruction relating to the transmission of a first packet (P1) included in a packet stream generated by an application (APP) installed in a mobile terminal (UE), the stream being intended to be transmitted over a communications network managed by an operator, the method being implemented in a security module (SIM-PDP) comprising at least one processing rule established by the operator, the method comprising the following steps:
- a step (F1) of reception of a request message (Req) from the terminal, the request message comprising at least one parameter based on the first packet (P1),
- determination (F2) of an instruction relating to the transmission of a second packet (P2) based on the at least one parameter, according to the at least one processing rule,
- a step (F3) of transmission of a response message (Rep) to the terminal, the response message comprising the determined instruction.
Dependencies are inferred from the claim text.