EP1884100A1

EP1884100A1 - Method for controlling connection of a peripheral to an access point, corresponding access point and peripheral

Info

Publication number: EP1884100A1
Application number: EP06755489A
Authority: EP
Inventors: Matthieu Malledant; Patrick Langlet; Claire Gilbertas
Original assignee: France Telecom SA
Current assignee: Orange SA
Priority date: 2005-05-26
Filing date: 2006-05-16
Publication date: 2008-02-06
Also published as: WO2006125885A1; US20100024003A1; CN101185308A

Abstract

The invention concerns a method for controlling connection of a peripheral (T) to an access point (AP) in shared network. It consists in pre-initializing (A) the access point through a local command of that access point, the pre-initializing step enabling at least the access point to be configured to provisionally match the peripheral, simultaneously initializing (B) the access point (AP) and the peripheral (T) through a substantially concurrent local command of the access point respectively of the peripheral, locally measuring and storing the initializing duration (Tap), (TT) of each local command at the access point respectively at the peripheral, and, following provisional matching of the access point and the peripheral, transmitting and receiving (Co), at least from the peripheral to the access point, the value of the stored initializing duration (TT) and comparing (C1) by equality comparison, the value of the locally measured initializing duration with the received initializing duration. If the received initializing duration (TTr) is substantially equal to the locally measured initializing duration (Tap), the peripheral being accepted as recognized connection requesting peripheral, the follow-up of the peripheral connection is authorized by invoking (D) a permanent matching procedure. Otherwise, the connection follow-up is inhibited (E) at the access point. The invention is useful for managing control of connection of peripherals to an access point in shared network such as WIFI, Bluetooth, online Powerline Communication or the like.

Description

METHOD FOR CONTROLLING THE CONNECTION OF A DEVICE TO A POINT OF ACCESS, ACCESS POINT AND PERIPHERAL CORRESPONDING

Provided is a method of controlling the connection of a device to a shared network access point, an access point and a device specially adapted for executing such a method and the computer program product (s). allowing the implementation of these.

At present, the connection of a device to a shared network access point uses a secure connection procedure, for shared networks such as radio or wired networks meeting the specifications of recommendations 802.11, 802.15, 802.16, Bluetooth, RFId or line carrier current for example. This secure connection procedure is applied, once the electromagnetic or electrical field supporting the shared network link is detected by the device.

In principle, any candidate device is a priori able to implement this secure connection procedure, regardless of the existence or not of other devices connected to the same access point, provided that device candidate has the necessary authorizations. In particular, after detection of the support field of the shared network link, any enabled device is able to launch such a procedure on simple transmission of its MAC address.

Pre-recognition procedures have been proposed more recently. Among these we can mention: The process described by WO 02060151 proposes an automatic pairing. The device described by the aforementioned document comprises a memory for registering pairing keys and a memory control circuit to perform an automatic connection procedure to a device and provide the latter, wishing to connect, a pairing key . This procedure implements a recognition phase between the pairing key distribution device and the pairing key receivers, wherein this device and a pairing key receiving apparatus have a first common key pre-configured in memory or generated locally according to a known calculation method. A comparison of the common key allows the pairing key distribution device and the receiving apparatus to identify with each other.

The aforementioned process has the disadvantage of an initial identification phase based on a common private key pre-configured in the pairing key distribution device and in each receiving device. The management of private keys is, in general, cumbersome and poorly adapted to mass-market devices. In addition, an additional device, the pairing key distribution device, is required to pair two devices.

The process described by US 2003 200434 proposes a method of recognition between two devices. This process consists of starting the two devices, designating one of the devices as master and the other as a slave, and then carrying them close to one another. The master apparatus transmits according to a specific radiation pattern, in reduced range, so that the slave device can receive the carrier signal to transmit a key to the latter. The master device then returns to its nominal radiation pattern and the slave device uses the key previously received to authenticate with the master device.

This process has two disadvantages:

Some radio link technologies are developed to have a maximum range, of the order of several hundred meters. This is for example the case of the WIFI radio technology defined by recommendation 802.11. Achieving a range of a few centimeters using these technologies proves impossible in practice;

Since the knowledge process between the two devices is based solely on the short range of the radio link used for key transmission, there is no mutual identification step. Thus, a malicious user can easily obtain that a slave device is related to its own master device, for little that his master device emits strong enough to dialogue with this slave device, which tries to pair.

The object of the present invention is to overcome the drawbacks of the techniques of the prior art and to improve them, by introducing an identification phase, linked to an identification of the requesting connection connection device, with the access point.

Another object of the present invention is in particular the implementation of a mutual identification phase allowing, on the one hand, recognition of the identified connection requesting device, with the access point, and, on the other hand, on the other hand, an acknowledgment of the access point requested from the device, independently of any assignment of a master or slave quality to one of these.

Another object of the present invention is also to introduce an increased security of the procedure for connecting a peripheral device to a shared network access point, by introducing into the identification phase, in particular the mutual identification phase, of a rejection criterion of any new foreign connection request to the transaction.

Another object of the present invention is also to introduce an increased security of the procedure for connecting a peripheral device to a shared network access point, by introducing into the identification phase, in particular the mutual identification phase, of a criterion for continuing the requested connection, conditionally accepted on the absence of any attempt at a foreign connection within a specified period of time from a connection request having satisfied the identification criterion. In general, the subject of the invention is a method of controlling the connection of a first device and a second device that is remarkable in that it consists, at least, in executing local initialization control during a certain period of time. duration on the first and the second device. Following a provisional pairing of the first and the second device, it then consists in exchanging the initialization duration values of the respective first and second devices. Yes - AT -

the initialization times of the first and second devices differ by a value less than a threshold value, the connection is continued. Otherwise, the connection is inhibited.

The present invention also relates to a method of controlling the connection of a device to a shared network access point, which is remarkable in that it consists at least in pre-initializing the access point by a local command of access point, the pre-initialization step to at least configure this access point to temporarily pair a device. It then consists in simultaneously initializing the access point and the peripheral device by a local command that is substantially concomitant with the duration of the access point respectively of the peripheral device and locally measuring and storing the initialization duration of each local control at the point level. access respectively of the device. Following a temporary pairing of the access point and the device, it consists in transmitting and receiving at least the device to the access point, the value of the initialization duration stored and compare by comparison of equality, the less at the access point, the value of the initialization time measured locally at the received initialization time. If the initialization time received is substantially equal to the locally measured initialization time, the device is admitted as the identified connection requesting device and the method then consists in allowing the continuation of the connection of the device by calling an authentication procedure. permanent pairing. Otherwise, the method consists in inhibiting, at least at the access point, the continuation of the connection.

The invention also relates to a shared network access point comprising at least one link signal interface, a remarkable link signal interface management software interface in that it comprises at least one module of pairing the access point / peripheral connected to this link signal interface management software interface and a database connected to the access / peripheral pairing module comprising, on the one hand, temporary data, and on the other hand, permanent data. It further comprises a device for initializing the access point by a local control of this point access. The access / peripheral pairing module makes it possible to locally measure and store the initialization time of the access point by the local control, and, following a temporary pairing of this access point and a device, to receive at least from this device a value of the stored initialization duration of this device, to compare by comparison of equality the value of the initialization duration measured locally with the value of the measured initialization duration received . If the received measured initialization time is substantially equal to the locally measured initialization time, the device is recognized as the identified connection requesting device and the continuation of the device connection is allowed by calling a permanent pairing procedure . Otherwise, the continuation of the connection is inhibited, at least at the access point.

The invention also relates to a device connectable to a shared network access point comprising at least one link signal interface, a remarkable link signal interface management software interface in that it comprises at least a device / access point pairing module connected to this link signal interface management software interface and a database connected to the peripheral pairing / access point module comprising, on the one hand, temporary data and, on the other hand, permanent data. It further comprises a device initialization device by a local control of this device. The device / access point pairing module makes it possible to locally measure and store the initialization time of the device by the local control, and, following a temporary pairing of this device and this access point, to receive at least from this access point a value of the stored initialization duration of this access point, comparing by comparison of equality the value of the initialization duration measured locally to the value of the initialization duration measured received. If the received measured initialization time is substantially equal to the locally measured initialization time, the access point is recognized as the access point initialized for the access-requesting device and the continuation of the device connection is allowed. by calling a permanent pairing procedure. Otherwise, the continuation of the connection is inhibited, at least at the device level.

The method, the access point and the peripheral object of the invention find application to the management of the connection control of peripherals to a shared network access point implementing technologies as varied as WIFI, Bluetooth, Online Carrier or Other Currents.

They will be better understood from reading the description and from the following drawings in which:

FIG. 1 represents a flow diagram of the essential steps of implementing the method of controlling the connection of a peripheral to a shared network access point according to the subject of the present invention;

FIG. 2 represents, by way of illustration, a specific implementation detail of the steps of simultaneous initialization and temporary pairing, of reciprocal transmission of the local initialization duration values of the access point and the peripheral, to the peripheral device to the access point, and comparing these values to perform a mutual identification of the access-seeking device and the access point, in a nonlimiting preferred embodiment of the method of the invention shown in Figure 1;

FIG. 3 a represents, by way of illustration, a block diagram of a shared network access point according to the object of the present invention;

FIG. 3b represents, by way of illustration, a block diagram of an access / peripheral pairing module incorporated in the object access point of the invention, as represented in FIG. 3a; FIG. 3c represents, in the form of a flowchart, the essential steps of a control protocol for a connection requested by a peripheral as conducted by the access / peripheral pairing module represented in FIG. 3b in the pre-initialization phase of the latter;

FIG. 3d represents, in the form of a flowchart, the essential steps of a control protocol of a connection requested by a peripheral, as driven by the access point / device pairing module shown in Figure 3b, in the initialization phase of the latter;

FIG. 4a represents, by way of illustration, a block diagram of a device connectable to a shared network access point according to the subject of the present invention;

FIG. 4b represents, by way of illustration, a block diagram of a peripheral pairing module / access point incorporated in the peripheral device of the invention as represented in FIG. 4a;

FIG. 4c represents, in the form of a flowchart, the essential steps of a protocol for controlling a connection requested by a device, as carried by the peripheral pairing / access point module represented in FIG. 4b.

A more detailed description of the method of controlling the connection of a peripheral network shared access point device, object of the present invention, will now be given in connection with Figure 1, then with Figure 2.

The access point and the device constitute a first and a second device.

With reference to the above-mentioned FIG. 1, the method which is the subject of the invention consists, at least in a step A, of a device T and a shared network access point AP, of pre-initializing the access point AP. by local control of this access point.

The pre-initialization step executed in step A shown in FIG. 1 allows at least the configuration of the AP access point to temporarily pair a device. Step A is followed by a step B of simultaneously initializing the access point AP and the peripheral device T by a local control substantially concomitant in duration of the access point AP respectively of the peripheral device T and to be measured locally and to be memorized. the initialization duration T _ap for the access point AP respectively the duration TT for the device T of each local command at the access point, respectively of the device T. Following the aforementioned measurement operations and taking into account the configuration performed in step A for the access point AP, a temporary pairing of the access point AP and the peripheral T is then carried out.

In general, it is indicated that the concept of temporary pairing covers the notion of configuration of the access point AP to allow the latter to exchange with the device T requesting the connection certain information necessary for the execution of identification and continuation of the connection when the identification criteria have been satisfied, as will be described later in the description. This notion of temporary pairing therefore corresponds to a specific notion of pairing which consists of an exchange of technical data allowing a limited connection to be executed to execute the provisional pairing.

Since the temporary pairing has been performed between the access point AP and the peripheral T in step B of FIG. 1, the method which is the subject of the invention then consists in carrying out a step of transmitting and receiving, at the step C ₀ of FIG. 1, at least from the peripheral to the access point, the value of the initialization duration TY memorized locally at the level of the peripheral T, this operation being noted:

Transmissi on ^Tτ ) AP (TYr)

The operation of transmitting and receiving the value of the stored initialization time TT locally at the device is followed by a step Ci of comparing by equality comparison at least at the access point AP the value of the initialization duration measured locally of the access point AP, that is to say the initialization duration T _ap , to the initialization duration received TY _r corresponding in fact to the initialization duration of the peripheral. In FIG. 1, the equality comparison operation is noted:

T _Tr = T _ap E E?

In this relation, it is indicated that E represents a tolerance in percentage of duration of the initialization duration value of the access point AP, that is to say of the duration T _ap . In an example of non-limiting implementation, the value of E can be taken equal to 5% of this initialization time for example.

If the initialization time received Tχ _r is substantially equal to the initialization duration measured locally T _ap , to the tolerance value E near, then in positive response to the test C) the device is admitted as the connection requesting device identified and the method which is the subject of the invention then consists, in a step D, of authorizing the continuation of the connection of the peripheral device T to the access point AP by calling a permanent pairing procedure.

Otherwise, in a negative response to the test C ₁ of FIG. 1, the method that is the subject of the invention, the device T requesting the connection not being recognized as the requesting requesting connection device, the method which is the subject of the invention consists in inhibiting in step E, at least at the access point, the continuation of the connection.

It is understood in particular that the equality comparison described above may in fact consist of a comparison of the value of the difference of the initialization times of the first and the second device to a threshold value. If this value is lower than this threshold value, the connection is continued. Otherwise the connection is inhibited.

More specifically, it is understood in particular that, the method that is the subject of the present invention makes it possible to code the initialization time at the initiative of the single user of the peripheral device T and the access point AP. Indeed, the local concomitant control in duration of the access point and the device T making it possible to initialize simultaneously the access point and the considered device makes it possible to validly match the requesting device of connection T to the access point AP chosen. by the user.

Indeed, the initialization time can be any and left to the initiative of the user in a range of values between 5 to 25 seconds for example.

Thus, the user can act substantially simultaneously in the aforementioned tolerance value E to execute a connection and in particular an initialization of the access point AP and the peripheral T that he wishes to connect to the latter. It is understood, in particular, that the time coding of the simultaneous initialization time of the peripheral device and of the access point AP makes it possible, under the will and the action of the user, to assign a common value that is substantially identical to the point AP access and the device to be connected, which validates the particular identification of the requesting device connection to the access point AP.

It is understood that in the event that an access point AP has been pre-initialized, an uninitiated third party provided with another peripheral device for example can not benefit from the initialization of the access point made for a peripheral device. previous, except of course to know the exact value, to the tolerance value, of the initialization time already executed.

A preferred non-limiting embodiment of the connection control method of a peripheral device to an access point AP will now be given in connection with FIG. 2. In general, it is indicated that step B of FIG. FIG. 1, relating to the simultaneous initialization of the access point AP and of a peripheral T may consequently comprise the execution of the local command by the user in step B ₀ , local control executed on the point access AP and on the device T to locally store the initialization times T _ap respectively T _T. The simultaneous initialization step B ₀ may then be followed by a temporary pairing step B ₁ of the access point AP and of the peripheral device T. The above-mentioned temporary pairing step can advantageously be implemented by reduction. the range in transmission / reception of the access point AP for example. This technique will be described in more detail later in the description in connection with an access point according to the subject of the present invention.

Stage C of FIG. 1 consisting of the transmission step Co and of comparison C ₁ previously described in connection with the above-mentioned figure may, in a nonlimiting preferred embodiment, be executed in such a way that the transmission between the access point AP and the device T of the value of the duration initialization measured locally and stored is reciprocal between the access point AP and the device T.

This operation is then represented in step Coi of FIG. 2 by the relations: Transmission T ^Tτ > AP (TV)

Transmission AP ^Tap > T (Ta _pr )

The transmission operation of the device T to the access point AP respectively of the access point AP to the device T of the aforementioned initialization time values can advantageously be executed by transmission of a value message comprising at least the value of the stored initialization duration and for example the identifier at the link level of the issuer of this message and of an acknowledgment message, the acknowledgment message including at least one reference to the value message. The aforementioned message transmission process will be described later in the description. In step Ci shown in FIG. 2, it is recalled that:

T _T denotes the value of the initialization time of the device T measured locally at this device;

- T _TΓ denotes the value of the initialization duration of the device T transmitted and received at the access point AP; - T _ap designates the value of initialization time of the access point AP measured locally at the latter;

- T _ap r denotes the duration of the initialization value of the access point AP transmitted to the device T and received by the latter.

Under these conditions, the authorization to continue the connection is then made advantageously conditional on the mutual identification of the requesting access device respectively identified access point simultaneously initialized for the access requesting device.

For this purpose, an equality comparison of the value of the initialization duration stored locally and the value of the initialization time transmitted is then executed on the one hand at the access point AP in step Cn of Figure 2 and, on the other hand, at the peripheral T Ci in step ₂ of the Figure 2.

The tests executed in steps Cj ₁ and C1 ₂ by equality comparison respectively verify the relations:

T _apr = T _τ ± D

The error tolerance values E and D may be different. On positive response to the above-mentioned step Cn and on positive response in the above-mentioned step C ₁₂ , that is to say when the equality comparison of the value of the initialization duration stored locally T _ap respectively TT and of the value of the initialization duration transmitted, that is to say T _r respectively T _apr are satisfied, then the control method of a connection object of the invention is then continued by step D of Figure 1 under the conditions which will be described below. If, on the contrary, one of the comparison steps Q ₁ or Q ₂ is not satisfied, that is to say on a negative response to one of these two steps, then an end of connection procedure Cu, respectively C ₁₄ is called, the continuation of the connection being then inhibited. A specific mode of implementation of the permanent pairing step B of FIG. 1 will now be described with reference to FIG. 2.

In general, the above-mentioned step D may consist of a step C of initialization of the permanent pairing. Indeed, advantageously, the step of allowing the continuation of the connection of the device can be made conditional on the absence, prior to the call of the permanent pairing procedure itself, of a new step of pre-initialization and / or simultaneous initialization step between the AP access point already configured for temporary pairing and at least one other device. This operation is represented by the step D1 of FIG. 2, denoted 3 T \, intended to verify either an attempt to connect another device from any duration other than the initialization duration of the device having initialized the device. access point AP, this operation being represented in FIG. 2 by a connection end step D ₂ on the existence of a value T'τ different from Tj.

Similarly, the step of allowing the device connection procedure may advantageously include a rejection criterion of any new connection request foreign to an existing connection request for an identified connection requesting device.

This situation may correspond, for example, to the case where a first device that has performed the pre-initialization operations of the AP access point and then simultaneously initialises this peripheral and this access point to a third-party device having the value of initialization time of this device, tries again to initiate a simultaneous initialization procedure from the same initialization time.

The existence of a value T'τ equal or not to T _T in this situation, that is to say in positive response to the test Di of FIG. 2, also leads to the end of connection of step D ₂ of Figure 2.

On the contrary, on a negative response to the test D] of FIG. 2, the continuation of the connection of the peripheral considered is carried out by a step D ₃ designated as a permanent pairing sequence.

As shown in FIG. 2, step D ₃ may comprise, before the call step, a permanent pairing configuration procedure D ₃ o at the access point, a parameter encryption step D _31. description of permanent pairing configuration followed by a step D ₃₁ of transmitting the encrypted permanent pairing configuration description parameters, from the AP access point to the provisionally paired T-device. For the implementation of the encryption step D ₃₁ , the access point AP is able to collect by the short-range connection signal for example any encryption key sent by the device T, which was of course identified simultaneously for example in steps Cn and Ci ₂ . With regard to the implementation of step D1 of FIG. 2, it is indicated that this can be carried out advantageously as follows:

During the pre-initialization step of the access point AP, the local control exerted to execute this pre-initialization can make it possible, in addition to the configuration of the latter to be able to temporarily pair a peripheral, to trigger for example a pre-configured time counter of duration P ₁ for example. This time counter can make it possible to limit in time, at the access point AP, the simultaneous initialization steps of the peripheral device T and the access point AP, then temporary pairing and finally initialization of pairing. permanent.

- Similarly, during the simultaneous initialization of the peripheral T and the access point AP by the user by execution of a local command at each of these, the end of the local control at the level of the peripheral T can advantageously trigger a pre-configured time counter P ₂ value for the purpose of limiting in time at the device T simultaneous pairing and exchange operations for example time values written in steps Bi and C ₀₁ of Figure 2.

It is thus understood that when the access point AP and the peripheral T are identified mutually for example as represented in the steps Co ₁ , C ₁₁ , C ₁₂ of FIG. 2, if, during the period of time counter Pi, the access point AP has received several values of device initialization time Tτ _r or if during the second period of time counter P ₂ the device has received several values of initialization time of access point T _apr then the pairing procedure ends with a failure as shown in the test Di of Figure 2 previously described in the description.

It is thus understood that the aforementioned test Di makes it possible to prevent the case of connection of a second malicious user who would try to pair his device on the access point AP considered but that this mode of operation allows also prevent the case of a second user trying to divert the connection of the device to its own access point.

A more detailed description of a network access point shared by a device AP access point according to the subject of the present invention will now be given in connection with Figures 3a to 3d.

In general, it is indicated that the access point AP object of the invention, will be described for a network access point shared by radio link in a non-limiting manner, the access point object of the invention , which can be implemented also in other technologies, such as line carrier currents on low voltage distribution network or other.

Consequently, with reference to FIG. 3a, it is indicated that the access point AP which is the subject of the invention comprises at least one link signal interface, in the particular case of FIG. 3 has a radio interface carrying the reference lo, and a link signal interface management software interface bearing the reference 1 _\ which constitutes, in this case, a radio interface software interface. The link signal management or radio interface interface contains computer program elements for switching the frames of the aforementioned radio interface to another radio interface or to a network interface.

As will be observed further in FIG. 3a, the access point AP which is the subject of the invention also comprises an access / peripheral pairing module bearing the reference I ₂ linked to the software interface. link signal interface management li. The aforementioned infrastructure or software interface II also makes it possible to go back to the access point / device I ₂ pairing module with determined information or to include in radio frames, for example, information sent by the module. pairing access point / device I ₂ . The software interface 1 j of course makes it possible to manage the duration value messages previously mentioned in the description, in order to ensure the transmission of these messages to the access point AP, respectively the peripheral T, as well as mentioned earlier in the description. In addition, the access point AP object of the invention comprises a database I ₃ connected to the access point / device pairing module I ₂ , this database comprising on the one hand temporary data and on the other hand permanent data. The database I ₂ is structured so that part of the aforementioned database is volatile and allows the access point / device pairing module I ₂ to store and retrieve information whose nature is temporary. , such as device identifiers T candidates for a connection for example, while a second part of the database I ₃ is nonvolatile and contains for example configuration files relating to the module of pairing access points / peripheral I ₂ . These configuration elements are radio configuration elements when the link signal is a radio signal or line carrier configuration elements when the link signal is a line carrier signal. In addition, the access point AP comprises a pre-initialization circuit of the access point AP via a local control of this access point, this pre-initialization circuit carrying the reference I ₄ on the Figure 3a.

Referring to the connection control method object of the invention described previously in the description, it is indicated that the pre-initialization generated by the initialization circuit I ₄ allows at least to configure the access point AP to temporarily pair a device to the latter.

The AP access point further comprises an initialization circuit which advantageously can be constituted by the aforementioned pre-initialization circuit I ₄ . The pre-initialization and initialization circuit I ₄ makes it possible to generate a local pre-initialization or initialization control of the access point AP, this command being directly transmitted to the access / peripheral pairing module. I ₂ .

In general, the above-mentioned access point / peripheral pairing module I ₂ makes it possible, of course, to implement the method that is the subject of the invention, and in particular the steps devolved on the access point AP, such as local measurement and storing the initialization time of the access point AP by the local control executed via the initialization circuit I ₄ , then, following the temporary pairing of the access point AP and a peripheral device T to receive at least one of the aforementioned device T a stored initialization time value generated by a local initialization command and to compare by comparison of equality, the value of the initialisation duration measured locally, that is to say -dire the duration of initialization T _ap described previously in the description, the value of the measured received duration of initialization, that is to say the length Tτ _r measured by the device T. Finally, the module pairing allows driving the decisions related to the aforementioned comparison. In particular, if the measured initialization time received TV _r is substantially equal to the locally measured initialization time T _ap and is uniquely received, the device is then recognized as the requesting connection-identified device and the continuation T device connection is allowed, by calling a permanent pairing procedure. Otherwise, the continuation of the connection is inhibited at the access point AP.

With regard to the pre-initialization and / or initialization circuit I ₄ represented in FIG. 3a, it is indicated that this latter can be constituted by any actuator element making it possible to generate a local initialisation control signal at the level of FIG. AP access point. In particular, it may be constituted by a receiver circuit of a signal generated by a television control selection apparatus, for example by infrared control or the like.

In a particular nonlimiting embodiment, it is indicated that the pre-initialization circuit of the access point AP and the initialization circuit constituted by the same circuit I ₄ in FIG. advantageously constituted by a push button or single control button disposed on the AP access point chassis.

It is understood, in particular, that in the context of a domestic use of an AP access point constituting a network access gateway shared by a WIFI network for example, the home user is then led to simply exert a release-release for pre-initialization stage of the access point AP then a fixed duration support, left at the sole initiative of the user, and a release of this same push button to execute the initialization step AP access point. Finally, in a nonlimiting preferred embodiment of the access point AP which is the subject of the invention, the latter may advantageously comprise, in addition to the usual radio interface I ₀ , this radio interface which may be constituted by a radio interface to long range such as a WIFI interface for example, a second short-range radio interface with the reference I ₅ in Figure 3 a. The short-range radio interface may advantageously be constituted by an infrared interface, a Bluetooth interface or the like of which the transmission / reception diagram conditions can then be adapted as will be described later in the description.

It is understood, in particular, that the long-range radio interface and the short-range radio interface can then be switched for the implementation of the connection control process according to the method of the present invention via the access point / device pairing module I ₂ shown in FIG. 3a, to ensure temporary pairing with short-range radio links, respectively permanent pairing in long-range radio link with the peripheral device T.

The aforesaid operating mode then makes it possible to secure the connection process by an effective control not only of the identification of the calling party of the connection but also by reducing the scope of the transactions, that is to say message exchanges between the user. AP access point and the device T requesting connection, for the duration of the control connection.

A functional description of the access point / device pairing module I ₂ integrated with the AP access point, object of the invention, described in FIG. 3a will now be given in connection with FIG. 3b. In general, it is indicated that the access point / device pairing module I ₂ is a module consisting of a computer program subdivided, where appropriate, into submodules.

More specifically, with reference to FIG. 3b, it is pointed out that the access / peripheral pairing module I ₂ combines a set of functions, which are supervised by a management element that is not shown in FIG. 3b. This management organ makes it possible to articulate all of the aforementioned functions, that is to say to launch the various functions at the desired time and in particular within the framework of the pre-initialization and then the initialization phase of the d-point. AP access considered. The access / device pairing module I ₂ comprises the following modules:

module 1 _2a for storing / extracting the database. This function enables the various constituent functions of the pairing module I ₂ to store or retrieve from the database I ₃ data such as device level 2 identifiers or variables relating thereto;

- module l _2b Supervision / push button. This function makes it possible to measure in particular the support time, that is to say the initialization time T _ap executed by the user of the access point AP on the push button, that is to say say the duration of the local initialization command of the AP access point. The aforementioned function is related to the storage / retrieval function of the database _2a for storing the support time T _ap . It is also in connection with a short-range connection management function l _2c in order to parameterize the radio interface as soon as the pushbutton is released as part of the pre-initialization phase for the support of a short-range connection. The Supervision / pushbutton function is furthermore related to a radio data transmission / reception function 1 _{2 (1 in} order to transmit to the device T via the radio channel in short-range mode during the temporary pairing the time support, that is to say the duration of initialization T _ap of the access point AP. Finally, the function Supervision / pushbutton l ₂ b is used to trigger the timer Pi aforementioned in the description and used to protect the access point AP against any attempt of an unscrupulous user as mentioned previously in the description;

- short-range connection management module l _2c . This function makes it possible to establish a dialogue with the software infrastructure for managing the interface of the link signal, that is to say with the software interface I j represented in FIG. 3 a, in order to parameterize the interface link signal in short-range mode. The above setting varies depending on the radio technology used. For an IEEE 802.11 type of technology, this setting consists in activating an additional network name, such as for example "Pairing", to fix a high radio modulation, for example at 54 Mb / s and, optionally, to reduce the radio power of the radio. transmission and reception of the short-range radio interface;

- Send / receive radio data module l _2d - This function sends or receives data to the software infrastructure II shown in Figure 3a;

- Device identification module l _2e . This function is responsible for identifying the requesting T device. In particular, it ensures reception of the access point support time, ie the local initialization value T _ap of the access point AP, originating from the push button Supervision function. ₂ b on the one hand, and the peripheral support time Tχ _r value of the initialization time of the device T from the function Send / receive radio data ^ _d , on the other hand. The device identification function mentioned above also has the error rate E from the database storage / retrieval function \% _Ά . From these data, the peripheral identification function l _2e is able to identify the device and then stores in the database I ₃ of Figure 3a, the result of this identification. In addition, if the result of the comparison is positive, an identifier of the device T, such as the identifier or address at the link level of the latter, is also stored.

If necessary, the above-mentioned function also makes it possible to store in the database I ₃ the value of a variable Ch if the latter has been transmitted by the device T. It is specified that the variable Ch mentioned above indicates to which type the device T will access, once connected, to the access point AP or the type itself of the device;

- Key analysis module l2f. This function collects the encryption keys from the send / receive data radio function l _2d and then analyzes them as will be described later in the description. If only one encryption key is received from an identified T-device, this key is stored in the database I ₃ via the storage / retrieval function of the database l _2a ;

- module Choice of configuration elements l _2g . This function is used to extract from the database I ₃ , the configuration elements and the variable Ch optionally sent by the device T. The configuration elements then allow the device T to establish a secure long-range radio connection by permanent pairing . The concept of permanent pairing covers, of course, the aforementioned secure link to which it is terminated the sole will of the user. The aforementioned function optionally selects the configuration elements to be sent to the device T according to the value of the aforementioned variable Ch;

- Encryption module l _2h - This function collects, on the one hand, via the function Storage / retrieval of the database l _2a the key which makes it possible to encrypt the radio message for a given device and, on the other hand, , through the function Choice configuration items l _2g , the configuration elements to be transmitted to the device T. The aforementioned encryption function l _2h sends its data to the function Send / receive radio data l _2d for encrypted transmission configuration items at the T device; - long-range connection management module I ₂ ; When the entire identification procedure is completed, that is to say in accordance with the method that is the subject of the present invention as represented in FIG. 1 for example, either after call and execution of the permanent pairing D and in In particular, execution of the steps U ₃ o, D ₃₁ and D ₃₂ of FIG. 2, the aforementioned function is then responsible for preparing the long-range connection of the peripheral T. For this purpose, it acts in consultation with the radio interface management software infrastructure I ₁ of Figure 3a.

Referring to Figure 3b, it is indicated that the various modules referenced in this figure can be implemented in the form of software modules whose interactions are shown in Figure 3b above. The aforementioned modules are then constituted by corresponding program product modules or, where appropriate, by a single program product for example.

A more detailed description of a protocol for controlling a connection requested by a device, as conducted by the access point / device pairing module I ₂ in the pre-initialization phase of the latter, will now be given. in connection with Figure 3c.

To proceed with the pre-initialization of the access point AP, a user presses the push-button I ₄ of FIG. 3a. It can of course launch the corresponding local command by any means equivalent to this push button. This step is represented in step S _apO i of FIG. 3 c. As soon as the release operation of the aforementioned pre-initialization command is released, ie as soon as the push-button I _{4 is released,} for example, a step of configuring the access point AP for temporary pairing is then executed, this step being referenced S _ap o ₂ in FIG. 3 c. In addition, the release of the push button I ₄ causes the start of the time counter Pi value which aims to limit any attempt to reinitialize as described above in the description.

A more detailed description of the essential steps of a connection control protocol requested by a device driven by the access point / device pairing module I ₂ shown in FIG. 3 a, in the initialization phase of the latter will be now given in connection with Figure 3d.

The pre-initialization step having been executed by the user, the user is then led to execute the initialization step of the access point AP jointly with the peripheral T that he wishes to connect.

The initialization step and initiation of the identification procedure are then engaged by a step S _ap i triggered by a support and a release of control button, push button I ₄ of Figure 3a, located on the AP access point. The duration of pressing on the push button of the access point, that is to say the initialization time T _ap of the AP access point is counted by the Supervision function of the push button l _2b , shown in Figure 3b. The value of this duration is stored in step S _ap2 by the function

Storing / extracting the database l _2a of Figure 3b.

The access point / device pairing module I ₄ then receives the pairing of the peripheral device T on the radio network temporarily open during temporary pairing, during the pre-initialization of the access point AP described in FIG. 3c. The aforementioned temporary pairing may advantageously optionally be performed through the short-range link set up following the first user support on the push button I ₄ , during the execution of the pre-initialization step. By way of non-limiting example, the access network, in this case, is an IEEE 802.11 type network whose range is then reduced by forcing the access point to communicate with a radio modulation rate chosen the highest. possible depending on the radio capabilities of the device at 54Mb / s. By way of example, the transmission and radio reception power in this situation is chosen for example equal to 1 milliwatt. A very high radio modulation combined with a very low transmission / reception power, as described previously, makes it possible to limit the malicious listening and the espionage of the radio exchanges. The restricted range of the AP access point in this situation makes it possible to increase the security and all the following radio messages, up to the final step preceding the setting up of the long-range radio link are exchanged thanks to the short-range radio link.

When the mutual recognition process between the access point AP and the terminal T is implemented, as previously described in the description with reference to FIG. 2, then in a step S _ap4 the point-of- _attachment module access / terminal sends via the function Send / receive radio data hd, on the short-range radio link, the value of the initialization time of the access point, T _ap value, and preferably its identifier at link level, that is, its MAC address. The sending of this variable can optionally be executed through a secure tunnel. The aforementioned duration variable T _ap and the link level identifier can then be sent in a message of value as described previously in the description for example.

In step S _ap5, the access point / device pairing module then waits for reception of the initialization time value of the connection requesting device, that is to say the duration TT. In the absence of reception of this duration value after a duration Pi triggered by the time counter previously mentioned in the description, the pairing procedure terminates on a failure. This situation is represented by the NO branch of response to the test S _ap5 and back to an end of connection situation. Similarly, upon receipt of several TT device initialization time values after the time counter duration P ₁ as mentioned previously in the description, the pairing procedure also ends with a failure and a return to end of connection.

On the contrary, on a positive response to test S _ap s the initialization value of the peripheral Tτ _r is received, the function Send / receive radio data _2d transmits the function to the identification device the _second initialization duration variable Tτ _r supra. The Device Identification 1 _{2nd function} will then call the error variable E in the database I ₃ and perform the equality check to verify the successful identification. If the equality comparison relation is verified as previously mentioned in the description, the procedure continues in positive response to the test S _ap6 . Otherwise, in the absence of a successful comparison and identity verification, the pairing procedure ends with a failure by returning to the end of connection step. The preceding comparison step being verified at the true value, the device identification function h _e allows the next step S _ap7 to store in the database I ₃ the identifier at the link level of the device T. The device T is then considered recognized and identified as the device that requested the connection, the very will of the user of the latter. When transmitting the value of initialization time of the TT value device and in the presence of the variable Ch, previously mentioned in the description, this variable, which can further indicate the type of device T concerned audiovisual or other, is also stored in the database I ₃ with the link-level identifier of the considered device.

The next step, step S _ap s is a preconfigured step in time during which the AP access point collects, by radio, the encryption keys that is to say RSA public keys that will allow to encrypting the configuration data transmitted to the candidate device T for connection. The next step S _ap9 , after the aforementioned preconfigured time has _elapsed , consists in transmitting, via the function Send / receive radio data l ₂ a to the key analysis function l _2f , the aforementioned public key. The Key Analysis function then proceeds to an analysis of the transmitted keys according to the following rules: a) the encryption keys received from an unidentified device during the step S _ap6 are ignored; b) if at least two encryption keys are received from a device identified in step S _ap6 , then the encryption keys are ignored and the pairing procedure terminates on a failure. This situation is represented by the negative response branch of the test S _ap9 of FIG. 3d; c) if a single encryption key is received from a device identified in step S _ap6 , then the encryption key is retained and used in the next step, noted S _apl o. This situation is represented in FIG. 3d by the positive test response of step S _ap9 ; d) if no encryption key is received from the identified device, the pairing procedure then ends on a failure represented by the negative response to the test of step S _ap9 .

The following step S _ap io is that in which the function Choice of configuration elements l _2g of FIG. 3b makes it possible to search the database I _{3 for} the possible configuration elements, the identifier of the peripheral T and, when this The latter is present, the variable Ch. The aforementioned variable may optionally make it possible to discriminate the configuration elements to be sent to the identified device from the set of possible configuration elements. The AP AP uses the encryption key received in step S _ap9 and the encryption algorithm associated therewith for encrypting the configuration information and sending it to the candidate T device for connection.

Step S _ap i ₀ is then followed by a step S _ap π in which from the configuration elements chosen and communicated by the Choice of configuration elements function l _2g to the long-range connection management function l ₂ j the latter allows the setting up of the radio configuration necessary for the long-range pairing, that is to say the permanent pairing of the device T. This operation can be executed for example by setting up a new name network or a new security key or by checking the configuration already in place. The short-range connection management function I ₂ then makes it possible to uninstall the configuration set up, and in particular to deactivate the temporary radio network during the temporary pairing created when the first pushbutton I ₄ of the access point AP is first pressed. during the pre-initialization step of the latter.

A more detailed description of a device connectable to a shared network access point, according to the subject of the invention, will now be given in connection with FIGS. 4a to 4c.

As in the case of an AP access point previously described, the device object of the invention will be described in the case of the use of a link signal consisting of a radio signal without limitation.

With reference to FIG. 4a, the secure peripheral device connectable to a shared network access point, object of the invention, comprises a link signal interface ₂₀ which is constituted by a long-range radio interface for example. It further comprises a link signal interface management software interface 2j which is constituted by a software management infrastructure of the aforementioned radio interface 2o. The device according to the invention further comprises, as shown in FIG. 4a, a peripheral pairing / access point module 2 ₂ connected to the link signal interface management software interface 2i and a database 2 ₃ connected to the peripheral pairing module / access point 2 ₂ . According to a structure comparable to the database of the access point AP which is the subject of the invention, as described above with reference to FIG. 3a, the database ₂₃ may advantageously comprise, on the one hand, temporary data and on the other hand, permanent data as will be described hereinafter.

In addition, and according to a remarkable aspect of the device connectable to a shared network access point object of the invention, the latter comprises a circuit ₂₄ for initializing the device by a local control of this device.

Of course, the notion of local control corresponds to the notion of a command exercised locally on the device at the initiative of the user requesting a connection for this device. Remarkably, the device / access point pairing module

2 ₂ integrated in the device object of the invention, to locally measure and store the initialization time of the device by the local control then, following a temporary pairing of this device and an access point AP such that previously described in the description, to receive at least this access point a value of the stored initialization duration of this access point by a local initialization command and compare by comparison of equality the value of the measured received initialization duration corresponding to the value of the variable T _after previously described in the description. If the measured initialization time received T _apr is substantially equal to the locally measured initialization time of the device the duration T _T then the access point AP is recognized as access point initialized for the access-seeking device, this by the expressed will of the user of the access point AP and the device T considered. The device / access point pairing module 2 ₂ then makes it possible to authorize the continuation of the connection of the call connection requesting device T of a permanent pairing procedure as described above. Otherwise, the pairing module device / access point 2 ₂ makes it possible to inhibit the continuation of the connection at the level of the peripheral device T.

More specifically, it is indicated with respect to the secure device, object of the present invention as represented in FIG. 4a, that the radio interface management software interface 2 constituting the aforementioned software infrastructure contains the elements of computer program for sending and receiving frames of a radio interface. It also makes it possible to go back to the device / access point pairing module 2 _{2 with} specific information or to include in the radio frames the information sent by the aforementioned peripheral pairing module. Of course, the software interface or software infrastructure 2 _\ ensures the management of radio messages as defined above in the description relative to the implementation of the method object of the present invention.

The database ₂₃ is structured such that part of the database is volatile and enables the peripheral pairing / access point module 2 ₂ to store and retrieve information whose nature is temporary, such as the AP access point identifiers, and a second non-volatile portion containing configuration information relating to the device / access point pairing module, such as predefined network name in the case of IEEE 802.11 type networks. for example.

In addition, with reference to FIG. 4a, it is indicated that the initialization circuit ₂₄ may be constituted by any remote control signal receiving circuit, for example from any remote control, in a manner similar to the initialization circuit. AP access point. However, in a preferred embodiment, the initialization circuit ₂₄ is advantageously constituted by a control button disposed on the frame of the device T.

Finally, with reference to same figure 4a, it is indicated that the T device, object of the invention, besides the first radio interface 2o constituting a long-range link signal interface preferably includes a second link signal interface May ₂ at short range. The first radio interface 2o and the second radio interface 2. ₅ may then, according to an advantageous feature of the device of the present invention, be switched at the initiative of the device pairing module / 2 access point ₂ to provide the step of provisional connection by pairing short-range respectively a permanent pairing in long-range connection with the access point, in accordance with the method of the present invention. Such a mode of operation of the device T object of the present invention will be described later in the description.

With regard to the peripheral pairing module / access point 2 _{2 it} is indicated that the latter is essentially of a software nature. The functions implemented by the aforementioned module will now be described in connection with FIG. 4b, which represents a block diagram of the latter.

All the functions implemented by the peripheral pairing / access point module 2 ₂ are advantageously supervised by a management unit not shown in FIG. 4b, which makes it possible to articulate all the aforementioned functions, ie that is to say to start the functions according to a defined protocol, which will be described later in connection with Figure 4c.

The peripheral pairing module / access point 2 ₂ comprises, as represented in FIG. 4b:

a storage / extraction module of the database 2 _2a . This function enables the different functions implemented by the peripheral pairing / access point module 2 ₂ to store or retrieve from the database 2 ₃ data such as identifiers at level 2 of the access point. PA or variables used by the T device;

- Supervision module / pushbutton 2 _2b . This function makes it possible to measure the support time TT, that is to say the value of the duration of initialization of the peripheral executed by the user on the circuit such as a push button 2 ₄ . This function is related to the function Storage / extraction of the database 2 _2a to store the support time T _τ above. It is furthermore related to the short-range connection management function 2 _2c previously described in order to parameterize the radio interface as soon as the control button 2 _{4 is released.} the user to support a short-range connection with the AP access point. The Supervision / pushbutton function 2 _2b is also related to a function Collect variables 2 _{2f in} order to send to the access point AP, via the short-range radio channel, for example, the duration of initialization of the device, that is to say the value T _T stored locally. In addition, the supervision function / button 2 ₂ b allows, advantageously, to trigger the timer P ₂ described above in the description for implementing the method to allow the protection against any attempt to access non authorized. - short-range connection management module 2 _2c . This function makes it possible to establish a dialogue with the radio interface management software infrastructure module 2 \, in order to parameterize the radio interface in short-range mode for example. This setting varies depending on the radio technology used. For an IEEE 802.11 type radio technology, the above-mentioned parameterization may consist of connecting to a predefined network name, for example "pairing", then setting a high radio modulation at 54 Mb / s and, optionally, lowering the power transmission and reception radio of the short-range radio interface 2 ₅ ;

- Send / receive radio data module 2 _2c j. This function makes it possible to send, respectively to receive, data to the management software infrastructure of the radio interface 2 _\ ;

- Access point identification module 2 _2nd - This function is used to identify the AP access point. It receives, on the one hand, the support time or initialization duration of the peripheral device Tj, originating from the push-button supervision function ₂ 2b, and, on the other hand, the access point support time. , that is, the initialization time of the access point transmitted T _apr from the function Send / receive data radio 2 _2d above. The access point identification function 2 _2e advantageously also has an error rate D which may be different from the error rate E applied to the access point AP and coming from the function Storage / extraction of the database. 2 _2a . From the aforementioned data, the access point identification function 2 _2e is able to identify the access point AP as a pre-initialized access point then initialized for the requested connection and then store in the database ₂₃ , the result of the identification thus executed. When, in addition, the result of the identification is positive, the identifier at the link level of the identified AP recognized access point is also stored in the database 2 ₃ ;

- module Collecting variables 2 ₂ f. This function is related to the function Supervision / pushbutton 2 _2b and the function Storage / retrieval of the database 2 _{2a in} order to collect the initialization time of the device support time device T _T and the value of the variable Ch previously mentioned in the description. The aforementioned variables are then transmitted to the function Send / receive radio data 2 _2d for transmission to the access point AP;

- Key generator module 2 _2g . This function is intended to generate an encryption key then transmitted to the function Send / receive radio data 2 _2d for transmission to the access point AP. This function is also responsible for generating a decryption key which is stored in the database 2 ₃ . It is recalled that when the encryption key is transmitted to the access point AP, this encryption key is for example a public key while the decryption key is instead a private key, which can be stored in the database 2 ₃ in a secure manner; - Decryption module configuration information 2 _2h - This function is responsible for decrypting the configuration elements transmitted by the AP access point. For this purpose, the aforementioned function is related to the database 2 ₃ to recover the aforementioned decryption key. After decryption, the aforementioned configuration elements are sent to a long-range connection management function 2 ₂ ; ;

- Long Range Connection Management Module 2 ₂ j. This function, when the entire identification procedure is complete, is intended to prepare the long-range connection of the device T to the access point AP from the configuration items received. This function operates in conjunction with the interface or software infrastructure for managing radio interfaces. A description of a protocol of the operating mode of a device according to the subject of the present invention, as described with reference to FIGS. 4a and 4b, will now be described with reference to FIG. 4c.

With reference to the aforementioned figure, the identification procedure is triggered by a press and release in step S _T1 of the control button ₂₄ located on the device. This first step corresponds to the triggering of the initialization of the peripheral T. The duration of the push of the control button ₂₄ is counted by the supervision function of the pushbutton _22b of FIG. 4b, the value of this duration being the value Tj. The release of the control button further allows the device T to trigger a timer, the time counter P ₂ previously described in the description. In particular, when the mutual recognition between the access point AP and the peripheral T is executed, all the steps of the method and the protocol shown in FIG. 4c, up to the step of receiving the initialization time value. of the access point, value T _apr , must be executed in the duration P2 determined by the aforementioned time counter.

In step ST _2, the initialization duration of the peripheral T _T is stored by the storage / retrieval function of the database 2 _2a .

In the next step ST ₃ , the peripheral pairing module / access point 2 ₂ then sets up the temporary pairing on a predefined network name with the access point in connection with the management software infrastructure. radio interfaces 2 _\ . Optionally, this temporary pairing can be performed via the 2 $ short-range radio link. In the example given previously in the description, the access network in this situation is an IEEE 802.11 type network whose range is reduced by forcing the device to communicate with a radio modulation rate as high as possible according to the radio possibilities. for example 54 Mb / s and using the lowest possible transmission and radio reception power, for example 1 mW. A very high radio modulation combined with a very low transmitting / receiving power makes it possible to limit the espionage of the radio exchanges. The restricted scope actually increases the security of transactions and all radio messages exchanged until the final initialization step are exchanged through the aforementioned short-range radio link.

The next step Sj ₄ is implemented by the function Collect variables 2 _2f which allows the collection of the variable TT, the identification at the link level of the device T and, optionally, the variable Ch. These variables are then transmitted by the function Send / receive radio data on the radio link to the AP access point. The sending of these variables can, if necessary, be executed via a secure tunnel. The aforementioned variables are then sent in a message of value as described previously in the description for example. The device T may, optionally, transmit the variable Ch indicating which type of application it accesses when connected to the access point AP, that is to say the type of application or the type of device, such as an audiovisual device, for example, that it constitutes.

The next step ST ₅ is a step in which the peripheral pairing / access point module 2 ₂ waits for reception of the access point initialization value, the value T _apr . On a negative response to the test of the step ST ₅ , that is to say, in the absence of reception of the duration value mentioned above after the duration P ₂ , the pairing procedure ends on a failure by return to an end-of-connection situation. Moreover, upon reception of several access point initialization values T _ap after the duration P ₂ , the pairing procedure also ends with a return to an end of connection step on a failure.

In the following step S _T6 , upon reception of the value message containing the access point initialization value variable, variable T _apr , the function Send / receive radio data 2 ₂ j, transmits to the identification function access point 2 _2e , the value of the aforementioned variable. The function identification access point 2 _2nd bed in the database the error variable D and then checks by comparing the equality relation:

T _ap r = T _T ± D.

If the relationship is verified, the procedure continues otherwise, the pairing procedure ends with a failure by returning to an end-of-connection state. These operations are represented by the positive response, respectively negative, the test ST ₆ of Figure 4c.

It will be recalled, according to a remarkable aspect of the method and the protocol of the present invention, that the error values E and D applied for the mutual recognition applications of the access point AP and the peripheral T may be different and that the aforementioned equality comparison can be performed by taking as a reference the value of local initialization time, that is to say the value T _ap of the initialization duration of the access point AP, respectively T _T of T device, to perform each comparison at the access point AP, respectively the device T. Thus, by this operating mode, the two comparisons are made completely independent in the absence of any assignment of master or slave device quality to one and / or the other AP access point equipment or terminal T.

In step ST _7, the abovementioned comparison relation is verified and the identification / access point function 2 _2e makes it possible to store in the database 2 ₃ the identifier at the link level of the access point AP. The AP AP is now considered recognized and identified as the access point chosen by the user of the T requesting connection device.

The next step S _TS is a step in which the device T generates an encryption key by means of the function Key generator 2 _2g , the corresponding decryption key then being stored in the database 2 ₃ . The encryption key is sent to the access point via short-range radio interface ₂₅ . The key generated is a public key of the RSA system for example, the stored decryption key then being the private key associated with this public key and stored securely.

The next step Sτ ₉ is a waiting step in which the device T waits for reception of the configuration elements relating to the long-range connection to be established. On negative response to the test of step Sτ ₉ if the configuration elements are not received after a determined period, the pairing procedure ends on a failure by returning to a termination step. At on the contrary, on reception of the configuration elements, that is to say in positive response to the test of step Sχ ₉ , the received configuration elements are then decrypted by the function Decryption / configuration information 2 ₂ h and sent to the Long Range Connection Management function 2 ₂ ; This situation is represented on a positive response to test Sχ ₉ of FIG. 4c.

The next step Sj ₁₁ is a step of setting up the long-range connection from the configuration elements and the long-range connection management function 2 ₂ ; supra. This long-range connection can be implemented based on a new network name provided with a provided encryption key. Following the step STU, then the connection between the device and the access point AP is continued.

With regard to the exchange of initialization time values between the device T and the access point AP and vice versa, it is indicated that the aforementioned variables can be transmitted as part of existing radio messages, such as the additional fields. in the messages defined by the recommendation

IEEE 802.11, "probe request" and "probe response" for example.

However, the aforementioned initialization values may be subject to the sending of specific messages, in particular in the form of a value transmission message of an initialization duration, between a shared network access point and a shared network access point. candidate device to connect to this access point.

Such a message comprises in particular, in addition to an address field of the recipient of the message, an address field of the sender of the message and at least one message identification field, a value field of initialization duration of the message. the sender of the message. It may further comprise a field of address at the link level of the sender of the message.

In particular, the constituent data structure of such a message is shown in Table 1 below. Table 1

The value message thus constituted is sent by the access point AP to step S _ap4 of FIG. 3d and a corresponding value message is sent to step Sχ ₄ of FIG. 4c with, optionally, its identifier at link level and the variable Ch.

In addition, the transmission of the aforementioned value transmission message is subject to the sending of an acknowledgment message of such an initialization value value transmission message by the equipment which has received the initialization value transmission message.

Such an acknowledgment message has a data structure as shown in Table 2 below.

Table 2

The invention finally covers a computer program recorded on a storage medium for execution by a remarkable computer in that during the execution by the computer of an access point, this computer program allows the implementation of the method, at the access point, as described previously in the description in conjunction with Figures 1 and 2.

It is understood in particular that the above-mentioned computer program is then implanted on the access point AP either in integrated form or in modular form to constitute an access / peripheral point pairing module such as the module I ₂ of FIG. FIG. 3a in an access point as described in connection with FIGS. 3a and 3b and operating according to the pre-initialization and initialization protocols described with FIGS. 3c and 3d above in the description.

The invention also covers a computer program recorded on a storage medium for execution by a remarkable computer in that this computer program, when executed by the computer of a peripheral, allows the implementation of the method, at this device, as described previously in the description in conjunction with Figure 1 and Figure 2.

In particular, it will be understood that the above-mentioned computer program is implemented either in integrated form or in modular form to form a peripheral pairing / access point module 2 ₂ as described with reference to FIG. 4a in a device conforming to FIG. the subject of the present invention as described above in the description in conjunction with Figures 4a, 4b and operating according to the protocol described in connection with Figure 4c.

Claims

1. A method of controlling the connection of a first device and a second device, characterized in that it consists at least of: - executing a local initialization command for a certain duration on the first and the second device; and, following a provisional pairing of this first and second device,

- Exchange the values of initialization durations respective of the first and the second device; and, if the initialization times of the first and second devices differ by a value less than a threshold value,

- continue the connection; if not,

- inhibit the connection.

2. Method according to claim 1, characterized in that for controlling the connection of a peripheral device to a shared network access point, said method consists of at least:

pre-initializing said access point by a local command of this access point, the pre-initialization step making it possible at least to configure said access point to temporarily pair a peripheral; then

simultaneously initializing said access point and said peripheral device by a local command that is substantially concomitant in duration of said access point respectively of said peripheral, locally measuring and storing the duration of initialization of each local control at said access point respectively of said peripheral; and, following a temporary pairing of said access point and said peripheral, transmitting and receiving, at least from said peripheral to said access point, the value of the initialization duration stored and comparing by equality comparison, less at said access point, the value of the initialization time measured locally at the received initialization time; and if the received initialization time is substantially equal to the measured initialization time locally, said device being admitted as the identified connection requesting device,

- allow the continuation of the connection of said device by calling a permanent pairing procedure; otherwise, - inhibiting, at least at said access point, the continuation of the connection.

3. Method according to claim 2, characterized in that the transmission between said access point and said peripheral of the value of the initialization time measured locally and stored being reciprocal, the authorization to continue the connection is conditional on the mutual identification of the access-seeking device identified respectively of the access point simultaneously initialized for this access-requesting device, by comparison of the value of the initialization duration stored locally and the value of the duration initialization received.

4. Method according to one of claims 2 or 3, characterized in that the temporary pairing step between said access point and said device is to reduce the range in transmission / reception of at least said point of access.

5. Method according to one of claims 2 to 4, characterized in that the step of allowing the continuation of the connection of said device is conditional on the absence, prior to the call of the permanent pairing procedure, a new step of pre-initialization and / or simultaneous initialization between said access point and at least one device.

6. Method according to one of claims 2 to 5, characterized in that the step of allowing the continuation of the connection of said device includes a rejection criterion of any new connection request foreign to an existing connection request for a requesting connection device identified.

7. Method according to one of claims 1 to 6, characterized in that the transmission step between said access point and said device and / or reciprocally is performed by transmission of a value message comprising at raoins said value of the stored initialization duration and the identifier at the link level of the sender of this message, and

an acknowledgment message, said acknowledgment message comprising at least one reference to said value message.

8. Access point to a shared network, by a device comprising a link signal interface, a link signal interface management software interface, characterized in that said access point comprises at least:

an access / peripheral pairing module connected to said link signal interface management software interface; a database connected to said access / peripheral pairing module and comprising temporary data and permanent data;

Means for pre-initializing said access point by a local control of this access point, the pre-initialization making it possible at least to configure said access point to temporarily pair a peripheral;

Means for initializing said access points by local control of this access point, said access / peripheral pairing module making it possible to locally measure and store the initialisation time of said access point; by said local command, and, following a temporary pairing of this access point and a device, receive at least this device a value of the initialization time stored in this device by a local initialization command, comparing by comparison of equality the value of the initialization duration measured locally with the value of the received measured initialization duration, and, if the received measured initialization duration is substantially equal to the locally measured initialization duration, said device being recognized as an identified connection requesting device, allowing the continuation of the connection of said device by performing a perm pairing procedure anent; otherwise, inhibit at the access point the continuation of the connection.

9. Shared radio network access point according to claim 8, characterized in that said pre-initialization means of said access point and said initialization means of said access point are constituted by a single control button disposed on the chassis of said access point, said single control button delivering said local control signal of pre-initialization or initialization to the initiative a user to said access point / device pairing module.

10. Access point according to one of claims 8 or 9, characterized in that it comprises:

- a first short-range radio interface; and

a second long-range radio interface, the first radio interface and the second radio interface being switched via said access / peripheral pairing module to ensure temporary pairing with short-range radio links or permanent pairing respectively in long-range radio link with said peripheral.

11. Device connectable to a shared network access point, comprising a link signal interface, a link signal interface management software interface, characterized in that said device comprises at least:

a peripheral pairing / access point module connected to said link signal interface management software interface; a database connected to said peripheral pairing / access point module and comprising, on the one hand, temporary data and, on the other hand, permanent data;

means for initializing said peripheral by a local control of this peripheral, said peripheral / access point pairing module making it possible to locally measure and store the duration of initialization of said peripheral by said local control, and, following a temporary pairing of this device and an access point, receiving at least this access point a value of the initialization time stored in this access point by a local initialization command, compare by comparison the value of the received measured initialization time, and if the measured initialization time received is equal substantially equal to the locally measured initialization time, said access point being recognized as an access point initialized for said access-requesting device, allowing the continuation of the connection of said peripheral by executing a permanent pairing procedure , otherwise, inhibit at the said device the continuation of the connection.

12. Device according to claim 11, characterized in that said initialization means are constituted by a control button disposed on the frame of said peripheral, said control button delivering said initialization control signal on the initiative of a user to said device / access point pairing module.

13. Device according to one of claims 11 or 12, characterized in that it comprises:

a first short-range link signal interface; and

a second long-range link signal interface, the first and the second link signal interface being switched via said peripheral pairing / access point module to provide a link pairing temporary step; short range respectively a permanent pairing in long-range connection with said access point.

14. Message transmitting a value of an initialization time between a shared network access point and a candidate device to a connection at this access point, characterized in that, in addition to a recipient address field of the message, an address field of the sender of the message, the latter comprises at least one identification field of the message, an initialization value value field of the sender of the message.

15. Acknowledgment message of a value transmission message of an initialization duration according to claim 14, characterized in that, in addition to an address field of the addressee of the message, an address field of the transmitter of the message, the latter comprises at least one identification field of the acknowledged message.

16. Computer program recorded on a storage medium for execution by a computer, characterized in that during execution by the computer of an access point, it allows the implementation of the method, at the access point, according to one of claims 1 to 7.

17. Computer program according to claim 16, characterized in that said computer program is implanted on the access point either in integrated form or in modular form to constitute an access point / device pairing module in an access point according to one of claims 8 to 10.

18. Computer program recorded on a storage medium for execution by a computer, characterized in that during execution by the computer of a device, it allows the implementation of the method, at the peripheral level according to one of claims 1 to 7.

19. Computer program according to claim 18, characterized in that said computer program is implemented either in integrated form or in modular form to form a peripheral pairing module / access point in a device according to one of claims 11 to 13.