EP1518390A1

EP1518390A1 - Method for individualizing a terminal connected to at least one server through a network

Info

Publication number: EP1518390A1
Application number: EP03761646A
Authority: EP
Inventors: Rodolphe Grunenwald; Yolaine Vu Van
Original assignee: Schlumberger Systemes SA
Current assignee: Axalto SA
Priority date: 2002-06-28
Filing date: 2003-06-26
Publication date: 2005-03-30
Also published as: FR2841720B1; AP2005003214A0; WO2004004294A1; AU2003260632A1; MXPA05000168A; MA27314A1; FR2841720A1

Abstract

The invention concerns a method for individualizing a terminal (10) connected to at least one server (5) through a network (2) comprising the following steps: a) at the terminal (10) launching a session for connection (20) to the server (5), and b) at the server (5), processing the connection session in accordance with a selected operating procedure. The operating procedure comprises the following steps: c) at the server (5), in case of service request from the terminal included in the connection session, generating a unique certificate (ESN) associated with said terminal (10), and communicating said certificate to said terminal; d) at the terminal (10), receiving said certificate (ESN); and e) at the server (5), validating the service request with the terminal thus uniquely individualized.

Description

METHOD FOR INDIVIDUALIZING A TERMINAL CONNECTED TO AT LEAST ONE SERVER THROUGH A NETWORK

The present invention relates to a method for individualizing a terminal connected to at least one server through a network, a terminal and a server suitable for implementing said method.

It finds general application in the management of service terminals, and more particularly of communication terminals such as public telephones.

Generally speaking, a public telephone network is made up of public telephones distributed over a given territory. Public telephones are connected to a communication network, constituted for example by the switched telephone network PSTN (acronym for Public Switching Telephone Network), with which it communicates by means of a modem.

A public telephone network generally comprises one or more central computers or management servers, often called PMS servers (acronym of the English term Payphone Management System), allowing the network operator to operate the supervision of the various sound telephones. network.

This PMS server, connected to the switched telephone network via a router, has the function of exchanging with the telephone fleet information relating to the functioning of the telephone system.

In practice, the PMS server has the function of operating the downloading of updates to programs operating the circuits of public telephones, updates correcting any errors detected in the programs already in place or even introducing new services for users.

In addition, the PMS server has the function of receiving reports from each telephone, in particular alarm reports or billing statistics.

Two telephones, physically installed in two different places, can be initialized on site (by a surveillance and / or service agent) with the same telephone number, made possible by entering this number by the maintenance agent via a program service available in the public telephone.

In this case, the PMS server cannot correctly process the reports from the two separate telephones since they are erroneously considered according to the associated telephone number as coming from one and the same telephone. Consequently, duplicates of information appear, even erroneous accumulations of data such as the number of chargeable taxes, the number of calls made, etc. hindering the optimization and the profitability calculation of a set of telephones.

Likewise, the PMS server is unable to locate a telephone remotely, the initialization of which is incorrectly set up on site by a monitoring and / or service agent.

The present invention overcomes these drawbacks.

It relates to a method for individualizing a terminal connected to at least one PMS type server through a network, of the switched network type comprising the following steps: a) at the terminal, establish a connection session with the server, and

b) at the server level, receive and process the connection session according to a chosen operating mode.

According to a general definition of the invention, the operating mode comprises the following steps:

c) at the server level, in the event of a terminal service request included in the connection session, generate a certificate, called ESN (for Electronic Serial Number), unique associated with said terminal, and communicate said certificate to said terminal. This service request can only be an initialization request;

d) at the terminal, receive and store said certificate in its internal memories; and

e) at the server level, validate the terminal service request thus individualized in a unique manner.

Thus, a single certificate is sent to the terminal during certain connection sessions corresponding to a predetermined service request.

In practice, the service request is of the initialization type.

This certificate guarantees the absence of duplicates or duplicates in the server tables, which allows correct processing of reports from each terminal. Advantageously, the certificate is stored at the level of its generation to be either transmitted to the terminal during an initiation session, or checked for any other type of session (downloading, daily call, call for alarm, etc.).

At this stage two fundamental points of the invention are to be specified:

• At the initial start-up of a PMS type server, a source certificate (ESN) is generated coded on 8 bytes. This random number is specific and unique to each PMS. This guarantees the uniqueness of the numbers generated on each server especially in the case of a system cascading several PMS servers.

• Starting from this “root” number, the following certificates generated will be done in increments of 1, then distributed terminal by terminal and finally stored in the server tables. • If in all call sessions (downloading, daily call, call for alarm, etc.) the certificate (ESN) is checked, it will be generated during initialization sessions only in the following cases:

1. If the operator has globally authorized (all terminals) the initialization of said terminals by choosing an option via its man-machine interface,

2. If the operator has uniquely authorized (one or more terminals) the initialization of said terminals by choosing an option via its man-machine interface, 3. This principle will advantageously avoid accidental (unauthorized) resets of terminals existing. The table below will summarize the above points:

The PMS is equipped for this purpose with a function allowing:

• The generation of a source certificate (ESN) at the time of starting the PMS server and its storage in its tables,

• The increment of 1, then the storage of each ESN generated, transmitted to the terminals following an initialization request,

• Control of any certificate (ESN) in all possible sessions from terminals,

• The possibility of disengaging, if necessary, globally, the control of the certificate (ESN),

• The regeneration of a certificate (ESN) on request during a new initialization request.

According to a preferred embodiment, the source certificate is a random number. It will be used as the base number for the generation of the following certificates (ESN) in successive increments of 1.

The present invention also relates to an installation, a terminal and a server for implementing the method according to the invention. Other characteristics and advantages of the invention will become apparent in the light of the detailed description below and of the drawings in which:

- Figure 1 is a schematic view of a public telephone network used for the implementation of the method according to the invention;

Figure 2 is a flowchart illustrating the steps of the method according to the invention; and

FIG. 3 is a diagram illustrating the operating mode according to the invention.

In FIG. 1, the reference 1 designates a public telephone network 1, comprising a fleet of public telephones 10.

The telephones 10 are intended for use by self-service users and are therefore installed for this purpose in public places, such as streets or semi-public areas, such as shopping centers, airports, hotel halls, restaurants. , shops, etc.

These telephones 10 allow users to carry out telephone communications, using an appropriate telephone network referenced 2.

This telephone network 2 is of the analog switched type PSTN (Public Switching Telephone Network) or of the digital type ISDN (Integrated Services Digital Network).

This network 2 can also be constituted by a mobile radiotelephony network, whatever its nature: GSM, CDMA, TDMA, AMPS, D-AMPS, GPRS, or by the Internet or more generally by all communication networks capable of transmitting data as well as by any combination of such networks.

These public telephones 10 can also be adapted to access information or service servers for Web and Internet services, as well as information or service servers for services residing on private networks.

Such access allows the operator operating the network 1, to offer users a wide range of services, ranging for example, and without limitation, from reading their electronic mail to consulting local information.

These public telephones 10 are suitable for communicating with a server 5, also called a PMS dedicated to the operation and management of the public telephony network 1.

The function of the PMS server 5 is to exchange information with the fleet of public telephones 10 concerning their operation and more generally the operation of the public telephone system.

In particular, the PMS server 5 manages the initialization sessions of public telephones and establishes statistical data from information received from public telephones 10 (alarms, operating counters).

The public telephones 10 and the PMS 5 are provided with appropriate means of supervision and of reception / transmission of information.

These organization and reception / transmission means are responsible for organizing the exchange of information between public telephones 10 and the PMS 5 or an FTP server 4 (For File Transfer Protocol), capable of controlling data or software transfers between the public telephones 10 and the FTP server 4.

In other functions, the PMS server 5 transfers to the public telephones 10, the files necessary for their operation, such as tariff tables, configuration parameters such as the type of dialing, the characteristics of the line, opposition lists or monitoring the means of payment used.

The public telephones 10 for their part transmit information relating to their use, namely a daily report comprising data relating to the transactions carried out, to the traffic, an alarm report which makes it possible to report to the PMS 5 the occurrence of incidents or attacks on their integrity, such as a breakdown in the card reader or a torn handset, so as to provide for the intervention of a surveillance agent and a status file characterizing the content of the telephone (such as indications of the different versions of programs used by the microprocessor).

To facilitate the exchange of data, one can use a server 4 specifically designed and adapted to the file transfer 4, called. FTP (File Transfer Protocol).

From orders received by the PMS server 5, each public telephone 10 which integrates a client FTP server entity, will connect to the FTP server 4 and download or download the appropriate files.

Furthermore, the public telephones 10 can connect to a PROXY server 6 serving as a communication interface between the public telephones 10 and the PMS server 5. Furthermore, to allow connection to the various servers and in particular to the PROXY 6 server, to the PMS server 5 or to the FTP server 4, the telephones 10 are equipped with TCP / IP communication protocols in accordance with the technical recommendations of 11ETF (Internet Engineering task Force) .

Referring to Figures 2 and 3, the Applicant proposes an individualization method according to the invention to avoid the creation of duplicates which may occur in certain situations.

One of these situations corresponds to that of a surveillance and / or service agent wishing to install a telephone in the location of his choice and wishing to initialize the terminal for the first time with the PMS server 5.

According to the invention, the individualization method comprises the following steps.

First of all, the terminal 10 calls the PMS server 5 according to a connection session 20 of Connect type, according to a chosen format, for example according to the protocol for data transfer PDU (Protocol Data Unit).

The connection session 20 includes a service request corresponding here to an initialization request.

This service request is accompanied by identification type data, for example number of the NAP terminal.

For its part, the PMS server 5 verifies the NAP identity of the calling terminal. The verification (steps 30 and 34, FIG. 3) then relates to the fact of knowing whether the terminal in connection is a new terminal, declared beforehand or not, with the possibility of general or partial initialization.

If it is a new terminal, that is to say unknown to the tables of server 5, or declared as such, then an ESN certificate for "Electronic Serial Number, that is to say number of electronic series "is generated by the server 5 (step 32, FIG. 3).

This ESN certificate is unique for the connected terminal. It is associated with the identity number of the NAP terminal.

Preferably, the ESN certificate is a random number (at the first generation), for example coded on 8 bytes.

The server 5 stores the ESN certificate thus generated in a table corresponding to the associated NAP identity.

Then, the server 5 communicates (step 24, FIG. 2) the ESN certificate thus generated towards the terminal, via the FTP server 4 and / or the PROXY server 6 if necessary.

For its part, the terminal receives the ESN certificate and stores it in an appropriate memory, for example a Flash type memory.

This ESN certificate thus makes it possible to individualize the new terminal in a unique way, which prevents the duplicates mentioned above.

In the case of a terminal already registered in the tables of the PMS server, and for which general or partial initialization is authorized, the server 5 also dynamically generates an ESN certificate. This certificate is then written to a table on the server before being sent to the terminal, as described above.

In practice, the ESN-2 certificate of the terminal 10-2 of NAP-2 identity comprises an increment of 1 compared to the ESN-1 certificate of the terminal 10-1 of NAP-1 identity.

In the case of a terminal already known and in the absence of a general or partial initialization (step 36, FIG. 3), the service request is validated after the verification of the ESN certificate of the terminal in connection. (There is no generation of a new certificate here)

In case of negative verification of the ESN certificate, the service request is refused by the server.

In case of positive verification, the service request is authorized by the server.

The communication protocol between the server and the terminal may, if necessary, comprise steps for accepting the exchange of data ACCEPT (step 22, figure 2) and DISCONNECT (step 26, figure 2) in accordance with the PDU protocol.

These exchanges allow in particular to validate the receipt of the ESN certificate on the terminal side.

Thus, in the event of a problem in the transmission / reception of the ESN certificate and in the absence of an acknowledgment of receipt issued by the terminal, the server keeps in its tables the old value of the certificate. The individualization method also responds to the problem encountered when a service agent wishing to install a new terminal makes an error in entering the identity number of the NAP terminal.

In this case, the server checks the identity of the NAP number.

If it is unknown, the server considers this telephone to be a new telephone and it is managed as if it were a first initialization as described above (provided that this automatic creation is authorized by the PMS server).

If the NAP number is known, the server then checks the NAP and ESN pair.

In the event of a negative comparison in the server tables, the telephone is systematically refused. In the event of a positive comparison, initialization is validated with an individualized terminal according to the invention.

The individualization method according to the invention also responds to maintenance operations, for example when an agent wishes to change a card of the terminal after a breakdown.

If after replacing the card, the NAP number is unknown to the server, the terminal is considered to be a new terminal and it is managed as such, i.e. calculation of an ESN certificate and sending by the server at the terminal (provided that this automatic creation is authorized by the PMS server). .

In the case where the terminal is already known by the server, a new initialization must be implemented in order to assign new initialization files as well as the ESN certificate (the reinitialization of said terminal is authorized by the operator by setting interface update machine man). In this case, the ESN certificate is checked in accordance with step 36.

The method according to the invention also finds an application when no initialization is planned or planned and an agent wishes to carry out an initialization due to a technical problem.

In this case, the server checks the pair formed by the NAP number and the ESN certificate to guarantee the absence of duplication. In the event of a positive verification, initialization is authorized and the server communicates the corresponding files while in the event of a negative verification, communication is refused.

Preferably, the ESN certificate is systematically checked, in particular during service requests of the alarm type, daily report, download of objects, remote diagnosis.

Claims

1. Method for individualizing a terminal (10) connected to at least one server (5) through a network (2), of the type comprising the following steps: a) at the terminal (10), establishing a session connection (20) with the server (5), and b) at the server (5), processing the connection session according to a chosen operating mode, characterized in that said operating mode comprises the following steps: c) at the level the server (5), in the event of a service request from the terminal included in the connection session, generating a unique certificate (ESN) associated with said terminal (10), and communicating said certificate to said terminal; d) at the terminal (10), receiving and storing said certificate (ESN); and e) at the server level (5), validating the service request with the terminal thus uniquely individualized.

2. Method according to claim 1, characterized in that the certificate (ESN) is stored at the server after receipt of an acknowledgment of receipt issued by the terminal at the end of step d).

3. Method according to claim 1, characterized in that in the event of a connection session devoid of service request, the connection session is processed according to the following steps:, i) in the absence of certificate (ESN) among the connection session, consider said connection session as being provided with a service request and process it according to step c), ii) in the presence of a certificate among the connection session, verify said certificate, and in case of positive verification , authorize the request connection while in case of negative verification, refuse the connection request.

4. Method according to claim 1 or claim 2, characterized in that the source certificate (ESN) is a random number.

5. Method according to one of the preceding claims, characterized in that the service request is of the initialization, alarm, download of objects or other similar event type.

6. Installation of the type comprising a terminal connected to at least one server through a network for the implementation of the method according to any one of claims 1 to 4, characterized in that the terminal (10) comprises means of communication , processing means and storage means and in that the server

(5) includes communication means, processing means, storage means and generation means capable of generating and / or controlling a certificate (ESN) unique for each terminal

7. Terminal for implementing the method according to any one of claims 1 to 4, characterized in that the terminal includes communication means, processing means and storage means.

8. Terminal according to claim 6, characterized in that it belongs to the group formed by public telephones, service apparatus and the like

9. Server for implementing the method according to any one of claims 1 to 4, characterized in that the server (5) comprises means of communication, means of processing, storage means and generation means capable of generating and / or controlling a single certificate (ESN) for each terminal (10).