EP4165889A1

EP4165889A1 - Access method and device for managing access to a secure communication session between participating communication terminals by a requesting communication terminal

Info

Publication number: EP4165889A1
Application number: EP21737113.7A
Authority: EP
Inventors: Richard Guignon; Sébastien Poivre; Nicolas Doisy
Original assignee: Orange SA
Current assignee: Orange SA
Priority date: 2020-06-16
Filing date: 2021-06-15
Publication date: 2023-04-19
Also published as: US20230308493A1; WO2021255375A1; FR3111504A1

Abstract

The invention relates to the access to a secure communication session between participating communication terminals, by a terminal requesting access. An object of the invention is a method for accessing a first secure communication session, referred to as the first session, in progress between participating communication terminals, referred to as participating terminals, by a requesting communication terminal, referred to as the requesting terminal, the access method comprising: - triggering an entry into the first session in progress of the requesting terminal on receipt of an acceptance from one of the participating terminals following a transmission of an access request message sent by the requesting terminal to at least one participating terminal of the first session. Hence, the requesting terminal will easily access the first secure communication session even if the requesting terminal does not follow the secure access procedure.

Description

DESCRIPTION

ACCESS PROCEDURE AND ACCESS MANAGEMENT DEVICE TO A SECURE COMMUNICATION SESSION BETWEEN PARTICIPATING COMMUNICATION TERMINALS BY A COMMUNICATION TERMINAL

APPLICANT

Technical area

The invention relates to access to a secure communication session between participating communication terminals by a requesting access terminal. By secure communication session is meant in particular a secure shared digital space such as a conference call, a video conference, a virtual collaborative space, etc. which requires the use of access keys for each of the participating communication terminals.

State of the art

This type of secure communication session requires the list of participants to be defined prior to the establishment of the communication session: for example user and / or participant user IDs. Thus, only the participants identified in the list will be authorized to establish and / or access the secure communication session.

To add an additional degree of security, provision can also be made for the establishment and / or access to the secure communication session to be further conditioned on the provision by the participating communication terminal wishing to establish and / or access the secure communication session of a key composed in particular of an access code (such as a digital code, an alphanumeric code, also called a password, a diagram, a code composed of a succession of images, etc. ) and / or biometric data ...

Thus, only previously registered participants can access this secure communication session and, if necessary, must be able to present the access code to be authorized to access it.

However, a participant may have forgotten or lost their access code. This can be problematic because the content (conversation, textual documents, audio and / or video, etc.) that the participant had to share during this secure communication session will then not be accessible by the other participants. And, when the secure communication session allows the generation of at least one final content, this final content will be erroneous because it will not be a function of the content of the participant who has not accessed the secure communication session but only of the content. shared by participants who accessed this session.

One solution would be the use of an access code retrieval system. However, if an access code recovery system is not provided in connection with secure access to the secure communication session or if the participant does not have the necessary means for this retrieving the access code (for example, if he does not have the mobile phone receiving the temporary code by SMS with him), he will not be authorized to access the secure communication session.

In addition, the list of participants may be incorrect: a person and / or a communication device having been omitted from the list. In this case too, the omitted person will not be authorized to access the secure communication session: he will therefore not be able to contribute to the session and if this generates final content, this final content will be incorrect.

A solution, if such a person is aware of the communication session or has been notified by a participant of the communication session, would be for him to contact the person administering the list of participants and the latter to add them to this list. of participants in order to be able to access the secure communication session. But this process is laborious because first requires that the skipped person be aware of the scheduled secure communication session, then the skipped person knows the person administering the participant list and at least one way to contact them (phone number, email address, etc.), and that the person administering the list of participants be contacted by the omitted person before the secure communication session to integrate them into the list of participants. In addition, even in this case, there is still a risk of error that the omitted person is included in another list when the administrator manages several lists of participants in separate secure communication sessions.

Disclosure of the invention

One of the aims of the present invention is to remedy drawbacks with respect to the state of the art.

An object of the invention is a method of accessing a first secure communication session, called the first session, in progress between participating communication terminals, called participating terminals, by a requesting communication terminal, called requesting terminal, the method access comprising

- trigger an entry in the first session in progress of the requesting terminal upon receipt of an acceptance from one of the participating terminals following a transmission of an access request message sent by the requesting terminal to at least one participating terminal of the first session.

Thus, the requesting terminal will easily access the first secure communication session even if the requesting terminal does not follow the secure access procedure (i.e. the requesting terminal is not a terminal from the list of participants authorized to access the first secure communication session, or the requesting terminal does not have the access code to the first secure communication session). In addition, the requesting terminal accessing the first secure communication session will have access to the same exchanges carried out in the first session as any of the terminals participating in the first session. Advantageously, the access method comprising

- receive acceptance from a participating terminal.

Thus, the acceptance is managed directly by the access method avoiding network overload if the acceptance is first transmitted to the requesting terminal which must then transmit it to the access method to trigger entry into the first session. of the requesting terminal.

Advantageously, the access method comprising:

- receive an access request from a requesting terminal, the access request including the access request message, and

- send the access request message to at least one terminal participating in the first session.

Thus, the participating terminal has the necessary elements for the transmission of the acceptance directly to the access method since the access request comes from the access method and not directly from the requesting terminal.

In addition, the requesting terminal can thus make a request for access to a first session even if it does not have the means (telephone number, email address, user identifier in a social network, etc.) to directly contact a participant. at the first session.

Advantageously, sending the access request message to the at least one terminal participating in the first session comprises one of the following steps:

- broadcast the message to all participating terminals prior to access by the requesting terminal to the first session;

- send the message by asynchronous communication to at least one of the participating terminals;

- send the message to at least one terminal participating in the first session outside of the first session.

Thus, whatever the mode of transmission of the access request message, the message is received by at least one participant and the requesting terminal is not aware of the exchanges taking place in the first session before accessing them. upon acceptance.

In addition, broadcasting the message thus maximizes the possibility of an acceptance of the access request.

In addition, with the transmission of the message outside the first session, a suspension of exchanges in the first session can thus be avoided. Advantageously, the access request message comprising at least one data from the following data:

- a short audio warning data,

- an identifier associated with the requesting terminal,

- an identifier associated with a terminal participating in the secure communication session,

- an identifier of the first session to which the requesting terminal requests access,

- a text, audio or video message from a user of the requesting terminal.

Advantageously, the access method comprising

- Establish, prior to triggering entry into the first session of the requesting terminal, a second synchronous communication session between the requesting terminal and one of the terminals participating in the first session upon request for establishment of said one of the participating terminals following a transmission of an access request message sent by the requesting terminal to at least one participating terminal of the communication session.

Advantageously, the access method comprising

- close the second session as soon as it is implemented by the access process of one of the following steps:

+ receipt of an acceptance by the participating terminal of the second session,

+ triggering entry into the first session of the requesting terminal.

Another object of the invention is a method of requesting access to a first secure communication session, called the first session, in progress between participating communications terminals, called participating terminals, by a requesting communication terminal, called requesting terminal. , the access request method comprising

- enter the first session in progress of the requesting terminal triggered upon receipt of an acceptance from one of the participating terminals following a transmission of an access request message sent by the requesting terminal to at least one terminal participant of the first session.

An object of the invention is also a method for administering access to a first secure communication session, called first session, in progress between participating communications terminals, called participating terminals, by a requesting communication terminal, called terminal. requesting, the access administration method comprising

- send an acceptance from one of the participating terminals following receipt of an access request message received by at least one participating terminal of the first session of the requesting terminal, the acceptance sent triggering, upon receipt, an entry in the first current session of the requesting terminal. Advantageously, according to an implementation of the invention, the various steps of the method according to the invention are implemented by software or computer program, this software comprising software instructions intended to be executed by a data processor of a device forming part of a communication architecture and being designed to control the execution of the various steps of this method.

The invention is therefore also aimed at a program comprising program code instructions for executing the steps of the method for accessing a first secure communication session and / or the method for requesting access and / or the method for accessing a first secure communication session. administration of access when said program is executed by a processor.

This program can use any programming language and be in the form of source code, object code or intermediate code between source code and object code such as in a partially compiled form or in any other desirable form.

An object of the invention is also a device for managing access to a first secure communication session, called the first session, in progress between participating communications terminals, called participating terminals, by a requesting communication terminal, called requesting terminal. , the access management device comprising

a controller capable of triggering an entry in the first session in progress of the requesting terminal upon receipt of an acceptance from one of the participating terminals following a transmission of an access request message sent by the requesting terminal to the destination of 'at least one terminal participating in the first session.

An object of the invention is also a requesting communication terminal, called requesting terminal, able to request access to a first secure communication session, called first session, in progress between participating communication terminals, called participating terminals, by a requesting communication terminal, called requesting terminal, the requesting terminal comprising

a connector capable of entering the requesting terminal into the first session in progress, the connector being triggered upon receipt of an acceptance from one of the participating terminals following a transmission of an access request message sent by the requesting terminal to at least one terminal participating in the first session.

Advantageously, the requesting terminal comprising

- a generator of an access request message capable of being sent by the requesting terminal to at least one terminal participating in the first session.

An object of the invention is also a communication terminal participating, called a participating terminal, in a first secure communication session called a first session, in progress between participating communications terminals, called participating terminals, the participating terminal comprising

a connector capable of establishing the first session between the participating terminal and at least one other participating terminal,

a validator capable of accepting access to the first session following a transmission of an access request message sent by the requesting terminal to at least one terminal participating in the first session, the validator triggering an entry in the first current session of the requesting terminal.

Advantageously, the participating terminal comprising

- a connector capable of establishing a second synchronous communication session with the requesting terminal prior to acceptance by the validator.

Brief description of the drawings

The characteristics and advantages of the invention will emerge more clearly on reading the description, given by way of example, and the figures relating thereto which represent:

[Fig 1a] Figure 1a, a simplified diagram of a method for managing access to a first secure communication session,

[Fig. 1b] Figure 1b, a simplified diagram of a method for accessing a first secure communication session by a requesting terminal according to the invention,

[Fig. 2] Figure 2, a simplified diagram of a method for requesting access to a first secure communication session by a requesting terminal according to the invention,

[Fig. 3] Figure 3, a simplified diagram of a method for administering access to a first secure communication session by a requesting terminal according to the invention,

[Fig. 4] Figure 4, a simplified diagram of an exchange diagram in a communication architecture implementing a method for accessing a first secure communication session by a requesting terminal according to the invention,

[Fig. 5] Figure 5, a simplified diagram of a communication architecture comprising a device for managing access to a first secure communication session by a requesting terminal according to the invention,

[Fig 6a] Figure 6a, a simplified diagram of the use of an access management method in a particular use case of the invention,

[Fig. 6b] Figure 6b, a simplified diagram of the use of a possible first step of an access request process according to the invention in the case of use of the invention of Figure 6a,

[Fig. 6c] Figure 6c, a simplified diagram of the use of a possible second step of an access request method according to the invention in the case of use of the invention of Figure 6a,

[Fig. 6d] Figure 6d, a simplified diagram of the use of an access administration method according to the invention in the case of use of the invention of Figure 6a,

[Fig. 6e] FIG. 6e, a simplified diagram of the use of a possible second step of an access request method according to the invention in the use case of the invention of FIG. 6a. Description of the embodiments

Figures 1a and 1b illustrate a method of managing access to a first secure communication session. Figure 1a shows the access management method as it may exist in the prior art. Figure 1b shows steps that can be integrated alone or in combination with the management method of Figure 1a following the establishment of the first session.

FIG. 1a therefore illustrates a simplified diagram of a method for managing access to a first secure communication session.

The method for managing access to the first secure communication session SSix_MNGT comprises an establishment of the first secure communication session SSix_STB, in particular, following a request for establishment of a secure communication session ssix_oreq from a first terminal of communication TPi participant. The first participant communication terminal TPi is a communication terminal of the list of participants associated with the first secure communication session SSix. In this particular case, the establishment of the first SSix_STB session involves access from the first participating terminal TP1 to the first SSix session.

In particular, the SSix_MNGT access management method comprises providing SSix_SACC of a secure access to the first SSix session to at least one participating terminal from the list 7 _{n ne [2 iV]} on subsequent request for a secure access ssi _x _sreq at the first session by the at least one participating terminal from the list TR _hh f _N ]

Following the provision of secure access to the first SSix_SACC session, the at least one participating terminal TPn accesses the first SSix session. The participating terminals TPi, {TP _n } n accessing the first SSix session exchange data such as text messages, audio and / or video communications, content, etc. with each other. via this first SSix session.

The SS1X_MNGT management process is implemented

- or by a management device separate from the participating terminals TP _n , in particular implemented in a communication server of a communication network;

- or by a management device implemented in the administrator terminal of the first session;

- or by a management device implemented in the first participating terminal TPi which required the establishment of the first session.

A particular embodiment of the SS1X_MNGT management method is a program comprising program code instructions for executing the steps of the SSix_MNGT management method when said program is executed by a processor. FIG. 1b illustrates a simplified diagram of a method for accessing a first secure communication session by a requesting terminal according to the invention.

The SSix_ACC access method is a method of accessing a first secure communication session SSix called the first session, in progress between participating communications terminals {TP _n } _{n = 1} ... _N , called participating terminals, by a requesting communication terminal TR, called requesting terminal. The SSix_ACC access method includes

- trigger an ENT_TRG entry in the first SSix session in progress of the requesting terminal TR upon receipt of an OK_REC acceptance from one of the participating TP terminals, following a DAC_TR transmission of a dacc_mssg access request message sent by the terminal requesting TR to at least one terminal participating in the first session

In the case where access to the first secure communication session is conditional on membership in a list of participating communication terminals associated with this first session in order to secure the first session (for example, preventing third-party terminals, such as that is to say not belonging to this list access to the exchanges carried out during this first session), the requesting terminal is in particular a communication terminal not belonging to the list of participants associated with the first secure communication session.

In the case where, to secure the first session, the participating terminals must also provide an access code to be authorized to access the first session, the requesting terminal can also be one of the participating terminals that does not have the access code. when requesting access: either the user of the access terminal has forgotten the access code to the first session, or the access code previously recorded by the requesting terminal has been lost, or the access code is provided to the user of the requesting terminal on a communication terminal of the user of the requesting terminal separate from the requesting terminal which the user does not have at the time of the access request (in particular, the terminal requesting is a computer or a tablet by means of which a user requests access to a collaborative space, for example while on the move, this collaborative space sends the user's mobile phone an access code . If the user has forgotten their mobile phone, for example at home, they will not be able to access this space.).

In particular, the SSix_ACC access method includes

- receive OK_REC acceptance from a TPi participating terminal.

In particular, the SSix_ACC access method comprising:

- receive DACC_REC an access request acc_req from a terminal requesting TR, the access request acc_req including the access request message dacc_mssg, and

- send DACC_TR the access request message dacc_mssg to at least one terminal participating in the first session In particular, the DACC_TR transmission of the access request message to the at least one terminal participating in the first SSix session comprises:

- broadcast the message to all participating terminals prior to access by the requesting terminal to the first session.

In an alternative embodiment, the DACC_TR transmission of the access request message to the at least one terminal participating in the first SSix session comprises:

- send the message by asynchronous communication to at least one of the participating terminals.

In particular, the DACC_TR transmission of the access request message to at least one participating terminal of the first SSix session includes:

In particular, the dacc_mssg access request message includes at least one of the following data:

- a short warning sound data, in particular a jingle, a ringing, a warning tone ..., such as an entry gong, an entry bell dring, an audio data corresponds to a "knock knock" at a door, etc. ;

- an identifier associated with the requesting terminal, such as a telephone number, an IMEI identifier, etc. a name, pseudonym or email address of a user of the requesting terminal, etc. ;

- a text, audio or video message from a user of the requesting terminal.

In particular, the SSix_ACC access method includes

- establish SS ₂ _STB, prior to the triggering of the ENT_TRG entry in the first SSix session of the requesting terminal TR, a second SS ₂ synchronous communication session between the requesting terminal TR and one of the participating terminals TPi in the first session on request of establishment ss ₂ _req of said one of the participating terminals TPi following a DACC_TR transmission of an access request message sent by the requesting terminal to at least one participating terminal of the communication session.

Then, the SS1X_ACC access method comprises, in particular, an implementation of an SS ₂ _COM communication via the second SS ₂ session between the participating terminal TPi and the requesting terminal TR. They can thus exchange in particular messages ss ₂ _mssgi, ss ₂ _mssg ₂ ... Through these exchanges, the participating terminal TPi and / or the user of the participating terminal TPi can ask the requesting terminal TR and / or the user of the terminal requesting information TR complementary. For example, when only the telephone number of the requesting terminal is provided by the access request message dacc_mssg, the participating terminal TPi and / or its user can request the name of the user of the requesting terminal and any other information. on the requesting terminal (technical capacities for example to check its compatibility to access all or part of the first session - content, type of video communication, etc.) or on the user of the requesting terminal (attachment to a school, a level school, company, team, etc .; skills; age, etc.). The additional information will allow the user of the participating terminal TPi or the participating terminal to implement a decision process to accept or not the access request from the requesting terminal.

In particular, the SSix_ACC access method includes

- close SS ₂ _CL the second session as soon as the SSix_ACC access method has implemented one of the following steps:

+ receipt of an OK_REC acceptance by the participating terminal TPi of the second SS ₂ session,

+ triggering of the ENT_TRG entry in the first SSix session of the requesting terminal TR.

In particular, the reception of an OK_REC acceptance or the triggering of the ENT_TRG entry commands ss ₂ _stp the closing of the second SS ₂ _CL session.

In particular, the SSix_ACC access method includes managing a second SS ₂ _MNGT communication session, called the second session, distinct from the first session. The second session SS ₂ allows the requesting terminal TR to exchange with at least one terminal participating in the first session TPi. The management of a second SS ₂ _MNGT session includes in particular the implementation of the SS ₂ _COM communication via the second SS ₂ session between the participating terminal TPi and the requesting terminal TR.

In particular, the management of a second SS ₂ _MNGT session includes establishing the second SS ₂ _STB session and / or closing the second SS ₂ _CL session.

In particular, the steps of managing a second SS ₂ _MNGT session are implemented by the SSix_ACC access method.

Following the triggering of the ENT_TRG entry in the first SSix session of the requesting terminal TR, the requesting terminal TR accesses the first SSix session. The participating terminals TPi, {TP _n } n and the requesting terminal TR accessing the first session SSix exchange data such as text messages, audio and / or video communications, content, etc. with each other. via this first SSix session. In particular, the SSix_ACC access method is implemented in the SSix_MNGT access management method, in particular as illustrated in FIG. 1a, following the establishment of the first SSix_STB session.

In a particular embodiment, the SSix_MNGT management method comprises creating a first secure communication session SSix_CREA prior to its establishment SSix_STB. The SSix_CREA creation of the first session is carried out at the request of a participating terminal called the administrator of the first session, for example the first participating terminal TPi. During this creation SSix_CREA is generated a list of participants of which at least one identifier associated with each of the participants is provided by the administrator terminal. The identifier associated with a participant is in particular an identifier relating to a participating user having a communication terminal by means of which the first session is accessed and / or a participating communication terminal. For example, when creating a first session for a conference call (audio conference or video conference), the participant identifiers are in particular the numbers of the participating phones. Another example, when creating a first session for a collaborative space allowing both textual and / or audio and / or video exchanges in addition to sharing content (s), the identifiers of the participants are notably email addresses of participating users.

Once the first session has been created, the SSix_MNGT management process establishes the first SSix_STB session either (first option) automatically on a date and / or a start of session time associated with the first session, or (second option) upon receipt by the SSix_MNGT management method of a first session request ssi _x _oreq from a first participating terminal TPi, etc. The example of FIG. 1a corresponds to this second option.

In particular, the SSix_MNGT management method verifies that the request for the first ssix_oreq session comes from the administrator terminal which contributed to the creation of the first session before establishing the first SSix_STB session.

Once the first session is established, the SSix_MNGT management method provides secure SSix_SACC access to the first session to a participating communication terminal, called a participating terminal, upon request for secure access ssix_sreq by a participating terminal TP _n . By participating terminal is, in particular, meant a communication terminal of which an identifier forms part of the list of participants associated with the first session or of which the user has an identifier which forms part of the list of participants associated with the first session.

In particular, providing access to the first SSix_SACC session includes checking whether the communication terminal from which the secure access request ssix_sreq originates is a communication terminal relating to one of the participants in the list of participants. By a terminal relating to one of the participants of the list of participants is in particular heard a terminal corresponding to a terminals from the list of participants (when this list includes terminal identifiers) and / or a terminal available to a user corresponding to one of the users from the list of participants (when this list includes identifiers relating to users: email address , name, nickname, etc.) ... It should be noted that the list of participants can also include both terminal identifiers (telephone number, IP address, IMEI, etc.), user identifiers ( email address, name, nickname, etc.) ...

In particular, the SSix_MNGT management method activates the SSix_ACC access method as soon as at least one participating terminal TPi accesses the first session, or the administrator terminal when the first session is established SSix_STB at its request ssix_oreq or any other participating terminal TP _{n, n} = i ... N when the first session is established automatically, for example at a given time.

The triggering of the ENT_TRG entry of a requesting terminal TR implemented by the SSix_ACC access method results from an ok cmd acceptance by a participating terminal TPi following a transmission of a dacc_mssg access request message by the requesting terminal TR.

In particular, the SSix_ACC access method comprises receiving DACC_REC an access request acc_req (dacc_mssg) from the requesting terminal and then transmitting DACC_TR the access request message dacc_mssg to at least one participating terminal TPi. Thus, if the requesting terminal TR does not know the participating terminals TP _n , nor their users UPn, its access request will all the same be studied or even accepted and, in this case, it will all the same access the first session SSix.

Alternatively, on condition that the requesting terminal TR knows at least one participating terminal TPi or one participating user UPi (provided with a participating terminal TPi) in the first SSix session, the access request acc_req is transmitted directly from the requesting terminal TR to the participating terminal TPi or to the participating user UPi (provided with a participating terminal TPi). And, the participating terminal TPi accepting the access request directly or indirectly command ok cmd the triggering ENT_TRG by the SSix_ACC access method of the input of the requesting terminal TR in the first SSix session.

In particular, the ENT_TRG trigger is commanded directly ok cmd by the participating terminal TPi. Alternatively, the SSix_ACC access method includes receiving OK_REC an acceptance ok cmd from the participating terminal TPi. Receipt of an OK_REC acceptance commands ent_ok to trigger entry into the first ENT_TRG session.

Optionally, the ok_cmd acceptance includes, in addition to validating the entry into the first SS1X session of the requesting terminal (for example, in the form of an identifier associated with the requesting terminal and, optionally, of an identifier of the first session ), data relating to access granted. For example, access to the first SSix session for the requesting terminal TR can be:

- total, that is to say identical to the access granted to other participants;

- access from a predefined category, such as the guest category, or ^nth category (in particular when the participants are themselves already divided into several categories for differentiated access: access in:

+ textual and / or audio and / or video exchanges, and / or + reading, and / or writing of content, and / or + sharing or not of content);

- limited (access in textual exchange only, and listening / viewing of exchanges of participating terminals and / or reading access to shared content, without document sharing by the requesting terminal), etc.

In a particular embodiment, possibly complementary to the previous particular embodiment, the terminated TPi participant (s) having received the access request message dacc_mssg from the requesting terminal TR can exchange synchronous or asynchronous with the requesting terminal TR prior to acceptance ok cmd. The terminated TPi participant (s) can notably send the requesting terminal a first message mssgl

In particular, the first message mssgl from (one of) terminated (l) (ux) participant (s) TPi includes a request relating to the requesting terminal TR, in particular to its capacities in terms of peripheral (camera, microphone, size of screen, etc.), in terms of memory, in terms of processing (software, plug-in, etc.), etc. and / or to the user of the requesting terminal (identity, location, age, skill (s), level of skill (s), etc.). In this case, the requesting terminal TR can send in return or in response a second message mssg2 comprising in particular one or more responses to the requests of the first message mssgl The exchange can continue with additional messages between the terminated (s) TPi participant (s) and the requesting terminal TR. In particular, the exchange is closed in particular by accepting ok cmd by one of the participating terminals TPi exchanging with the requesting terminal TR.

In particular, one of the mssg messages coming from the participating terminal TPi includes the acceptance command ok cmd. In the latter case, the requesting terminal TR commands ok cmd to trigger its entry into the first ENT_TRG session by transmitting the accept command contained in the first mssgl message to the SSix_ACC access method.

A particular embodiment of the SSix_ACC access method is a program comprising program code instructions for executing the steps of the SSix_ACC access method when said program is executed by a processor. A particular embodiment of the SS1X_MNGT management method is a program comprising program code instructions for the execution of the steps of the SSix_MNGT management method and of the SSix_ACC access method when said program is executed by a processor.

FIG. 2 illustrates a simplified diagram of a method for requesting access to a first secure communication session by a requesting terminal according to the invention.

The SSix_DACC access request method is a method of requesting access to a first secure communication session, called the first session, in progress between participating communication terminals TPi, called participating terminals, by a requesting communication terminal TR, said requesting terminal. The SSix_DACC access request process includes

- enter SSix_ENT in the first session in progress SSix of the requesting terminal TR triggered acc_cmd upon receipt of an acceptance from one of the participating terminals following a transmission of an access request message dacc_mssg sent by the requesting terminal TR to the destination at least one participating terminal TPi of the first session.

In particular, the SSix_DACC access request process comprises:

- send DACC_EM an acc_req access request from the requesting terminal TR to at least one participating terminal of the first SSix session, the acc_req access request including the dacc_mssg access request message.

In particular, the DACC_EM transmission of the access request message to at least one participating terminal of the first SSix session includes:

In an alternative embodiment, the DACC_EM transmission of the access request message to the at least one terminal participating in the first SSix session comprises:

- a short warning sound data, in particular a jingle, a ringtone, a bell warning ..., such as an entry gong, an entry bell dring, an audio data corresponds to a "knock knock" on a door, etc. ;

- a text, audio or video message from a user of the requesting terminal.

In particular, the SSix_DACC access request process comprises

- connected SS2_CNX the requesting terminal TR, prior to the SSix_ENT entry in the first SSix session of the requesting terminal TR, to a second synchronous communication session SS2 established with one of the participating terminals TPi in the first session following the DACC_EM transmission from the access request message sent by the requesting terminal to at least one participating terminal of the communication session.

Then, the SS1X_DACC access request method comprises, in particular, an implementation of an SS2_COM communication via the second SS2 session between the participating terminal TPi and the requesting terminal TR. They can thus exchange in particular messages ss2_mssgi, ss2_mssg2 ... Through these exchanges, the participating terminal TPi and / or the user of the participating terminal TPi can ask the requesting terminal TR and / or the user of the requesting terminal TR for information. complementary. For example, when only the telephone number of the requesting terminal is provided by the access request message dacc_mssg, the participating terminal TPi and / or its user can request the name of the user of the requesting terminal and any other information. on the requesting terminal (technical capacities for example to check its compatibility to access all or part of the first session - content, type of video communication, etc.) or on the user of the requesting terminal (attachment to a school, a level school, company, team, etc .; skills; age, etc.). The additional information will allow the user of the participating terminal TPi or the participating terminal to implement a decision process to accept or not the access request from the requesting terminal.

In particular, the SSix_DACC access request process comprises

- disconnect SS2_DCNX from the second session of the requesting terminal as soon as the second session is closed by a process for managing the second session SS2_MNGT following:

+ an OK_REC acceptance of the entry into the first SSix session of the requesting terminal TR by the participating terminal TPi of the second SS2 session,

+ the ENT_TRG entry in the first SSix session of the terminal requesting TR.

In particular, the SS1X_DACC access request method includes participating as a caller SS2_CE in a second communication session, called the second session, distinct from the first session. The second session SS2 allows the requesting terminal TR to exchange with at least one terminal participating in the first TPi session. Participation as a caller in a second SS2_CE session comprises in particular the implementation of the SS2_COM communication via the second SS2 session between the participating terminal TPi and the requesting terminal TR.

In particular, participation as a caller in a second SS2_CE session includes connecting SS2_CNX and / or disconnecting SS2_DCNX the requesting terminal TR from the second SS2 session.

In particular, the steps of participating as a caller in a second SS2_CE session are implemented by the SSix_DACC access request method.

Following the SS1X_ENT entry in the first SSix session of the requesting terminal TR, the requesting terminal TR accesses the first SSix session. The participating terminals TPi, {TP _n } n and the requesting terminal TR accessing the first session SSix exchange data such as text messages, audio and / or video communications, content, etc. with each other. via this first SSix session.

In a particular embodiment, the SSix_ENT entry of a requesting terminal TR results from an acc_cmd acceptance by a participating terminal TPi following a transmission of an access request message dacc_mssg by the requesting terminal TR.

In particular, the SSix_DACC access request method includes sending DACC_EM an acc_req (dacc_mssg) access request from the requesting terminal to at least one participating terminal TPi, in particular via the SSix_ACC access method.

Alternatively, on condition that the requesting terminal TR knows at least one participating terminal TPi or one participating user UPi (provided with a participating terminal TPi) in the first SSix session, the access request acc_req is transmitted directly from the requesting terminal TR to the participating terminal TPi or to the participating user UPi (provided with a participating terminal TPi). And, the participating terminal TPi accepting the access request commands directly or indirectly (in particular, via the SSix_ACC access method) ok cmd the entry into the first session of the requesting terminal SS1X_ENT

In particular, the SSix_ENT input is controlled directly acc_cmd by the participating terminal TPi. Alternatively, the SSix_ACC access method receiving an ok cmd acceptance from the participating terminal TPi commands acc_cmd the SSix_ENT entry.

In a particular embodiment, possibly complementary to the previous particular embodiment, the TPi participant (s) having received the access request message dacc_mssg from the requesting terminal TR little (fri) t exchange synchronously or asynchronous with the requesting terminal TR prior to acceptance triggering the acc_cmd input command. The requesting terminal TR can in particular receive SS2_REC from (u) (es) terminated (l) (ux) participant (s) TPi a first message mssgl, in particular via a second session SS2 - the first message mssgl is then, for example, relayed from the participating terminal TPi to the requesting terminal TR by management of the second session SS2_MNGT.

In particular, the first mssgl message includes a request relating to the requesting terminal TR, in particular to its capacities in terms of peripheral device (camera, microphone, screen size, etc.), in terms of memory, in terms of processing (software, plug -in ...), etc. and / or to the user of the requesting terminal (identity, location, age, skill (s), level of skill (s), etc.). In this case, the requesting terminal TR can send SS2_EM in return or in response to a second message mssg2 comprising in particular one or more responses to the requests of the first message mssgl, in particular via the second session SS2 if the first message mssgl was transmitted via it. ci - the second message mssg2 is then, for example, relayed from the requesting terminal TR to the participating terminal TPi by the management of the second session SS2_MNGT. The exchange can continue with additional messages between the TPi participant (s) and the requesting terminal TR. In particular, the exchange is closed in particular by the accept command acc_cmd by one of the participating terminals TPi exchanging with the requesting terminal TR.

In particular, one of the mssg messages coming from the participating terminal TPi includes the acceptance command acc_cmd, ok cmd. In the latter case, the requesting terminal TR commands acc_cmd its entry in the first SSix_ENT session by transmitting the acc_cmd, ok cmd acceptance command contained in the received message mssg either directly to the SS1X_ENT entry or to the SSix_ACC access method .

A particular embodiment of the SSix_DACC access request method is a program comprising program code instructions for performing the steps of the SSix_DACC access request method when said program is executed by a processor.

FIG. 3 illustrates a simplified diagram of a method for administering access to a first secure communication session by a requesting terminal according to the invention.

The SSix_ADM access administration method administers an access to a first secure communication session SSix, called the first session, in progress between participating communications terminals TPn, called participating terminals, by a requesting communication terminal TR, called requesting terminal . The SSix_ADM access administration method comprises - sending an OK_EM acceptance from one of the participating terminals TPi following receipt of a dacc_mssg access request message received by at least one participating terminal TPi of the first session of the requesting terminal TR at destination, the ok cmd acceptance sent triggering, on reception, an entry in the first session in progress of the requesting terminal.

In particular, the SSix_ADM access administration method comprises:

- receive DACC_REC an access request message dacc_mssg from a terminal requesting TR. In particular, the reception DACC_REC is a reception of an access request acc_req comprising the access request message dacc_mssg Optionally, the access request message dacc_mssg is relayed by an SS1X_ACC access method, for example such as described in connection with figure 1 b.

- a text, audio or video message from a user of the requesting terminal.

In particular, the sending of the OK_EM acceptance is activated ok_act by the participating user UPi with the participating terminal TPi implementing the SSix ADM access administration method.

For example, the access request message dacc_mssg includes an input gong and the name of the requesting user UR of the requesting terminal TR. The dacc_mssg access request message will be reproduced by the participating terminal TPi. And, the participating user UPi with the participating terminal TPi will perform an ok_act approval action: oral approval, pressing an OK key on a physical or virtual keyboard, nodding. The SSix_ADM access administration process optionally includes a UP_CPT capture of the ok_act approval action which activates the issuance of the OK_EM acceptance.

In particular, the SSix_ADM access administration method comprises

- request SS2_STBR an establishment, prior to triggering the entry ENT_TRG in the first session SSix of the requesting terminal TR, of a second session SS2 of synchronous communication between the requesting terminal TR and one of the participating terminals TPi in the first session on request ss2_req establishment of said one of the participating terminals TPi following receipt DACC_REC of the access request message sent by the requesting terminal TR. Then, the SSix_ADM access administration method comprises, in particular, an implementation of an SS ₂ _COM communication via the second SS ₂ session between the participating terminal TPi and the requesting terminal TR. They can thus exchange in particular messages ss ₂ _mssgi, ss ₂ _mssg ₂ ... Through these exchanges, the participating terminal TPi and / or the user of the participating terminal TPi can ask the requesting terminal TR and / or the user of the terminal requesting additional information TR. The additional information will allow the user of the participating terminal TPi or the participating terminal to implement a decision process to accept or not the access request from the requesting terminal.

In particular, the SSix_ADM access administration method comprises

- disconnect SS ₂ _DCNX the participating terminal TPi from the second SS ₂ session as soon as the SSix_ACC access method has implemented one of the following steps:

In particular, the SSix_ADM access administration method includes participating as a _{caller SS 2} _CG in a second communication session, called the second session, distinct from the first session. The second SS session ₂ allows the participating terminal TPi to exchange with the requesting terminal. Participation as a caller in a second SS ₂ _CG session includes in particular the implementation of the SS ₂ _COM communication via the second SS ₂ session between the participating terminal TPi and the requesting terminal TR.

In particular, participation as a caller in a second SS ₂ _CG session includes requesting the establishment of the second SS ₂ _STBR session and / or disconnecting the participating terminal TPi from the second SS ₂ _DCNX session.

In particular, the steps of participating as a caller in a second SS ₂ _CG session are implemented by the SSix_ADM access administration method.

Following the transmission of the OK_EM acceptance triggering, by the SSix_ACC access method, the ENT_TRG entry in the first SSix session of the requesting terminal TR, the requesting terminal TR accesses the first SSix session. The participating terminals TPi, {TP _n } n and the requesting terminal TR accessing the first session SSix exchange data such as text messages, audio and / or video communications, content, etc. with each other. via this first SSix session.

The triggering of the ENT_TRG entry of a requesting terminal TR implemented by the SSix_ACC access method results from an OK_EM transmission, by a participating terminal TPi, of an ok cmd acceptance received, in particular by the method of SS1X_ACC access, following a transmission of a dacc_mssg access request message by the requesting terminal TR. In particular, the SSix_ADM access administration method comprises receiving DACC_REC an access request message dacc_mssg from a requesting terminal TR, in particular in the form of an access request acc_req (dacc_mssg) from the requesting terminal comprising the dacc_mssg access request message.

In particular, the access request message dacc_mssg received DACC_REC by the SSix_ADM access administration method is sent by an SSix_DACC access request method as described in particular in connection with FIG. 2 and relayed (this is ie received from the requesting terminal then sent to at least one participating terminal TPi) by an SSix_ACC access method as described in particular in connection with FIG. 1b.

Alternatively, on condition that the requesting terminal TR knows at least one participating terminal TPi or one participating user UPi (equipped with a participating terminal TPi) in the first SSix session, the access request acc_req is received DACC_REC directly by the user. participating terminal TPi of the requesting terminal TR. And, the participating terminal TPi accepting the access request directly or indirectly command ok cmd the triggering ENT_TRG by the SSix_ACC access method of the input of the requesting terminal TR in the first SSix session.

In particular, the ENT_TRG trigger is commanded directly ok cmd by the participating terminal TPi by an OK_EM transmission of acceptance to the SSix_ACC access process. Alternatively, the SSix_ACC access method includes receiving OK_REC an acceptance ok cmd from the participating terminal TPi. Receipt of an OK_REC acceptance commands ent_ok to trigger entry into the first ENT_TRG session.

Optionally, the OK_EM acceptance comprises, in addition to a validation of the entry into the first SS1X session of the requesting terminal ok_cmd {SSix, TR) (for example, in the form of an identifier associated with the requesting terminal and, optionally, of an identifier of the first session), data relating to the access granted ok_cmd {SSix, TR, acc_tyTR). For example, the acc_tyTR access to the first SSix session for the requesting terminal TR can be:

- total, that is to say identical to the access granted to other participants;

- limited (access in textual exchange only, and listening / viewing of exchanges of participating terminals and / or reading access to shared content, without document sharing by the requesting terminal), etc. In a particular embodiment, possibly complementary to the previous particular embodiment, the participating terminal TPi having received the access request message dacc_mssg from the requesting terminal TR can exchange synchronously or asynchronously with the requesting terminal TR prior to the OK_EM issue of acceptance ok cmd. The participating terminal TPi can in particular send to the requesting terminal a first message mssgl.

In particular, the first message mssgl from the participating terminal TPi comprises a request relating to the requesting terminal TR, in particular to its capacities in terms of peripheral device (camera, microphone, screen size, etc.), in terms of memory, in terms of processing. (software, plug-in ...), etc. and / or to the user of the requesting terminal (identity, location, age, skill (s), level of skill (s), etc.). In this case, the requesting terminal TR can send in return or in response a second message mssg2 comprising in particular one or more responses to the requests of the first message mssgl The exchange can continue with additional messages between the participating terminal TPi and the requesting terminal TR. In particular, the exchange is closed in particular by accepting ok cmd by the participating terminal TPi exchanging with the requesting terminal TR.

A particular embodiment of the SSix_ADM access administration method is a program comprising program code instructions for performing the steps of the SSix_ADM access administration method when said program is executed by a processor.

In a particular embodiment of the invention, the invention relates to a program comprising program code instructions for executing the steps of the method for accessing a first secure communication session and / or the method for requesting information. access and / or the access administration method when said program is executed by a processor.

FIG. 4 illustrates a simplified diagram of an exchange diagram in a communication architecture implementing a method for accessing a first secure communication session by a requesting terminal according to the invention.

The embodiment of FIG. 4 provides for the use of a SCOM communication server implementing an SS1X_ACC access method according to the invention, in particular an SS1X_ACC access method as illustrated by FIG. 1b and / or an SS1X_MNGT access management method optionally implementing the SS1X_ACC access method. The SCOM communication server is or comprises a separate management device from the participating terminals TP _n in the first secure communication session SSix and from the requesting communication terminal TR.

A first secure communication session SSix is established by the communication server SCOM (as shown in phase I of FIG. 4). In particular, the SSix_MNGT access management method implemented by the SCOM communication server includes the establishment of the first SSix secure communication session. Optionally, the first secure communication session SSix is established on a request for establishment of the first ssix_oreq session originating from a participating terminal: the first participating terminal TPi in the case of FIG. 4. The first participating terminal TP1 is in particular a terminal communication administrator of the first session, i.e. the communication terminal having defined a list of participants in the first SSix session and / or the type (s) of access authorized for the at least one of the participants (the same predefined type of access can be authorized for one or more or even all of the participants).

The first terminal TP1 having access to the first SSix session can prepare the work envisaged in the first session, for example by sharing content c and / or by depositing a welcome message from the other participants.

At any time of the first SS1X session, at least one of the participating terminals TPi, {TP _n } (distinct from the first terminal in the example of FIG. 4) requests ssix_sreq secure access to the first session to the SCOM communication server .

In particular, the SS1X_MNGT access management method checks AUTH_V whether the participating terminal in question TPi, {TP _n } is authorized to access the first SS1X session prior to providing the secure SS1X_ACC access to the first session ssix to the participating terminal TPi, {TPn} requiring this secure access. This AUTH_V authorization check comprises in particular at least one of the following verification steps:

- check LST_V if the participating terminal in question TPi, {TP _n } is a terminal from the list of participants and / or a terminal available to a user from the list of participants;

- check CDA_V if the access code provided by the participating terminal in question TPi, {TP _n } corresponds to an access code to the first session.

The SCOM communication server provides secure access to the first SSix participating terminal session in question TPi, {TP _n } (as shown in phase II of FIG. 4). The first terminal TP1 and the other participating terminals TPi, {TP _n } having access to the first SSix session can then exchange with each other and / or share content depending on the type of the first communication session: conference call, and / or conference text or "chat room" in English, and / or audio conference, and / or videoconference, and / or collaborative space with in particular document sharing in reading and / or writing. During this first SSix session, a requesting terminal TR can, at any time, request access to the first session, in particular from the SCOM communication server as illustrated in FIG. 4. For this, it sends an access request message daccc_mssg possibly in an acc_req access request. This transmission of a daccc_mssg access request message by the requesting terminal is in particular a step of an SS1X_DACC access request method (in particular as illustrated by FIG. 2) implemented by the requesting terminal.

The SCOM communication server receiving the access request message daccc_mssg transmits it to at least one participating terminal TPi, TPi, TP _n . Optionally, the reception then the transmission to a participating terminal TPi, TPi, TP _n of the access request message daccc_mssg is a step of an SS1X_ACC access method, in particular as illustrated by FIG. 1b , and / or an SS1X_MNGT access management method (possibly implementing steps of an SS1X_ACC access method) implemented by the SCOM communication server.

Following this request, at least one participating terminal TPi can send an ok_cmd acceptance of this request to the SCOM communication server. Optionally, the transmission of an acceptance by the participating terminal TPi to the SCOM communication server is a step of an SS1X_ADM access administration method, in particular as illustrated in FIG. 3. In this case, the server communication SCOM commands acc_cmd access by the requesting terminal to the first SS1X session which triggers the entry of the requesting terminal TR into the first SS1X session (phase III illustrated by FIG. 4). The first terminal TP1, the other participating terminals TPi, {TPn} and the requesting terminal having access to the first session SSix can then exchange with each other and / or share content depending on the type of the first communication session and / or their type. access.

Prior to the issuance of an ok cmd acceptance by the participating terminal TPi, the participating terminal can request an ss2_req establishment of a second communication session between the participating terminal TPi and the requesting terminal TR to the SCOM communication server. The SCOM communication server establishes the second SS2 session. Thus, the participating terminal TPi and the requesting terminal TR can exchange to allow in particular the participating terminal TPi and / or its user UPi to determine APV_DT whether the access by the requesting terminal to the first session is approved or not. The exchanges are notably exchanges of messages ss2_mssgi, ss2_mssg2 ... In particular, the reception by the SCOM communication server of the ok_cmd acceptance or the triggering by the SCOM communication server of the input of the requesting terminal TR closes ss2_stp the second session.

FIG. 5 illustrates a simplified diagram of a communication architecture comprising a device for managing access to a first secure communication session by a requesting terminal according to the invention. The access management device 31 is able to manage access to a first secure communication session, called the first session, in progress between participating communications terminals 1 ₁ ..1 n, 1i, called participating terminals, by a requesting communication terminal 2, called requesting terminal. The access management device 31 comprises

- a controller 312 capable of triggering an entry in the first session in progress of the requesting terminal 2 upon receipt of an ok cmd acceptance from one of the participating terminals 1i..1n, 1 i (the terminal 1i in the example illustrated by FIG. 5) following a transmission of a dacc_mssg access request message sent by the requesting terminal 2 to at least one participating terminal of the first session 1 ₁ ..1 n, 1i.

The communication architecture illustrated in Figure 5 comprises

- several participating terminals 1 i, l ₂ ... 1n, 1i in the first SSix secure communication session via a communication network 4,

- a communication terminal requiring 2 access to the first SSix session, and

- an access management system 31.

In particular, the access management device 31 is implemented in a communication server, that is to say a device capable of managing at least one communication session via the communication network 4.

In particular, the access management device 31 is, or comprises, or is implemented in a device for managing a first secure communication session via the communication network 4. In the example of FIG. 5, the device management system implements a device for managing a first secure communication session 310.

In particular, the access management device 31 comprises a base of first secure sessions 313 in which lists of participants are recorded in association with the first secure communication sessions. Optionally, there are also recorded in the base of first secure sessions 313 predefined dates and / or times of the start and / or end of the first secure sessions in association with a first session.

In particular, the access management device 31 comprises a generator 310o capable of establishing ssix_stb a first secure communication session SSix.

Optionally, the generator 310o receives an establishment request ssix_oreq from a first participating terminal 1i. Then the generator 310o is able to establish ssix_stb the first secure communication session SS-ix upon receipt of the establishment request ssix_oreq. In particular, the access management device 31 comprises a connector 310 _A capable of providing secure access ssix_sacc to the first secure communication session SSix to other participating terminals l ₂ ... 1n, 1i on access request secure ssix_sreq of these participating terminals l ₂ ... 1n, 1i. Then, at least one of the participating terminals comprises in particular a generator / transmitter of a request for the establishment of a first secure session (not illustrated). This is the case, in particular, of the first participating terminal 1 i of FIG. 5. And, the participating terminals comprising in particular a generator / sender of a request for access to the first secure session (not illustrated). This is the case, in particular, of the other participating terminals l ₂ ... 1 n, 1 i of FIG. 5.

In particular, the management device 31 further comprises an access request relay 311 capable of transmitting to at least one of the participating terminals l ₂ ... 1n, 1i an access request message dacc_mssg received from a terminal requesting 2. In particular, the relay comprises a receiver (not illustrated) of the access request message dacc_mssg and / or access request acc_req coming from the requesting terminal, the access request acc_req (dacc_mssg) comprising the request message d 'access. Optionally, the relay includes a sender (not shown) of the dacc_mssg access request message to at least one of the participating terminals l ₂ ... 1n, 1 i via the first SSix session or outside, by synchronous communication , asynchronous or broadcast. The relay also includes, in particular, a message extractor (not illustrated) from a request capable of extracting an access request message dacc_mssg from an access request acc_req. The extractor is implemented between the request receiver and the access request message sender to provide the sender with the access request message extracted from the received access request.

FIG. 5 also illustrates a requesting communication terminal 2, called requesting terminal, capable of requesting access to a first secure communication session SSix, called first session, in progress between participating communication terminals 1i, l ₂ ... 1n , 1i, called participating terminals, by the requesting communication terminal 2, said requesting terminal. The requesting terminal 2 has

a connector 22 capable of entering the requesting terminal 2 in the first current session SSix, the connector 22 being triggered acc_cmd upon receipt of an ok cmd acceptance from one of the participating terminals 1 i following a transmission of a message from access request dacc_mssg sent by the requesting terminal 2 to at least one participating terminal of the first session 1 i, l ₂ ... 1 n, 1i.

In particular, the requesting terminal 2 comprises

a generator 21 of a dacc_mssg access request message capable of being sent by the requesting terminal 2 to at least one terminal participating in the first session 1i, l ₂ ... 1n, 1i. Optionally, the generator 21 is able to generate an access request acc_req comprising the access request dacc_mssg. The generator 21 generates an access signal acc_sg such as the access request message dacc_mssgo u the access request acc_regsuite to a dact action of the requesting user UR. In particular, the requesting terminal 2 comprises at least one output man-machine interface, called the output interface, or reproduction means 24, such as a screen, at least one loudspeaker, etc. and / or at least one. human-machine input or input interface (not shown), called the input interface, such as a keyboard, a mouse, a touch screen, a microphone, a camera, etc.

In the case where the generator 21 generates an access signal acc_sg following a dact action by the requesting user UR, the generator 21 receives from an input interface data relating to the dact action relating to this interface d user input requesting UR. For example, the requesting user activates a warning button (equivalent to an entrance doorbell) on this input interface or hits the touch screen in a manner similar to knocking the door ("knock knock") ...

FIG. 5 also illustrates participating communication terminals 1 _1, 1 ₂ ... 1 n, 1 i. A participant communication terminal 1 _1, 1 ₂ ... 1 n, 1 i, called participant terminal, is a communication terminal able to access a first secure communication session SSix called first session, in progress between communication terminals participantsli, l ₂ ... 1n, 1i, called participating terminals. A participating terminal 1 _1, l ₂ ... 1n, 1i has

- a connector 12i (illustrated in FIG. 5 only for the participating terminal 1i) capable of establishing the first session SSix between the participating terminal 1i and at least one other participating terminal 1 _1, I ₂ ... I n,

a validator 16i (illustrated in FIG. 5 only for the participating terminal 1 i) capable of accepting an ok access cmd to the first SSix session following a transmission of an access request message dacc_mssg sent by the requesting terminal 2 to destination of at least one participating terminal 1 i of the first session, the validator 16i triggering an acc_cmd entry in the first session SSix in progress of the requesting terminal 2.

In particular, the participating terminal 1i includes a receiver 11i of a dacc_mssg access request message to the first SS1X session from the requesting terminal 2.

In particular, the participating terminal 1i comprises at least one output man-machine interface, called the output interface, or reproduction means 14i, such as a screen, at least one loudspeaker ... and / or at least one. human-machine input or input interface (not shown), called the input interface, such as a keyboard, a mouse, a touch screen, a microphone, a camera, etc.

The receiver 11 i optionally supplies the access request message dacc_mssg to the output interface 14i so that the access request message dacc_mssg can be perceived (read, heard, etc.) by the participating user UPi of the participating terminal TPi.

In particular, the validator 16i receives, directly or via an input interface (not shown) from the participating terminal TPi, an ok_act acceptance action from the participating user UPi in response in particular to the access request message dacc_mssg provided to the participating user UPi by the output interface 14i.

In particular, the participating terminal 1i comprises

- a connector 130i capable of establishing a second SS2 synchronous communication session with the requesting terminal 2 prior to the ok cmd acceptance by the validator 16i.

In particular, the participating terminal 1i comprises a generator 15i for requesting the establishment of a second ss2_req session. The generator 15i sends the request to establish a second session ss2_req to a second session management device 32 in particular implemented in a communication server 3. Thus, the first secure communication session management device 31 and the second session management device 32 can, for example, be implemented in a communication server 3.

In particular, the access management device 32 comprises a generator 320 capable of establishing ss2_stb a second communication session SS2 between the requesting terminal 2 and the participating terminal 1i.

In particular, the participating terminal 1 i and the requesting terminal 2 each comprise a communication device, respectively 13i, 23, via the second session SS2. The communication devices 13i, 23 include connectors 130i, 230 for the second session SS2, and possibly transmitters 131 i, 231 and / or receivers 132i, 232 for example of messages mssg-i, mssg2 ... which are transmitted via the second SS2 session under the names of ss2_mssgi, ss2_mssg2 ...

In particular, the second session establishment request generator 15i SS2 activates xtrg the communication device via the second session 13i of the participating terminal 1 i.

In particular, the messages mssg-i, mssg2 ... transmitted via the second session are input via the input interfaces respectively 131 i, 231 and reproduced by the output interfaces respectively 132i, 232 respectively intended for the participating user UPi and the requesting user UR.

In particular, the validator 16i comprises an analyzer capable of deciding according to the access request message dacc_mssg, and / or the messages exchanged via the second session ss2_mssgi, ss2_mssgi ..., in particular those received from the requesting terminal 2, and / or or an ok act action by the participating user UPi of an access acceptance by the requesting terminal 2 to the first SSix session. If the analyzer decides on an acceptance, the validator 16i sends an acceptance ok_cmd to the management device of the first session 31, in particular to the controller 312. FIGS. 6a to 6e illustrate a use of the invention in the case where the first secure session is a collaborative space comprising a textual exchange space, a videoconference and a document sharing space between participating users UPi, UP2 .. UPn each equipped with at least one participating communication terminal to access this collaborative space.

FIG. 6a illustrates a simplified diagram of the use of an access management method in a particular use case of the invention.

FIG. 6a represents a screen of the participating terminal of a first participating user LIP1.

The screen possibly includes several windows, including a window associated with the first SSix_WD session and possibly in sub-windows:

- a textual exchange sub-window SSIX_XWDUPI in which the text messages exchanged by the various participants in the first session are reproduced, in particular in chronological order (in the example of FIG. 6a: the messages of the first participating user mssgi, upi, mssg4, upi, a message from the second participating user mssg2, up2, a message from an ^nth participating user mssg3, up _n ...); and or

- an SSix_pWD sharing sub-window, the SSix_pWD sharing sub-window itself comprising in particular one or more sub-window, for example

+ a sub-window in which a Visio flow is reproduced, in this case the Visio flow of the first participating user LIP1, and / or

+ A sub-window in which a content is shared, in this case a ^jth content q, upi the first user participating LIP1,

+ etc.

FIG. 6b illustrates a simplified diagram of the use of a possible first step of an access request method according to the invention in the case of use of the invention of FIG. 6a.

FIG. 6a represents a screen of the requesting terminal of a user requesting UR. The requesting user is aware of the first session and, for example, enters an address from the first session (such as a url type address in their browser). Its screen then displays a first entry window in the first SSix_EWDi session.

This first SSix_EWDi session entry window comprises in particular a zone for entering an identifier id_cptz of the user requesting UR and / or an identifier of his terminal and / or a zone for entering an access code cd_cptz. The UR requesting user who does not have the access code or is not part of the list of participants cannot enter the ID identifier and / or the CD access code requested for secure access. at the first SSix session. The first SSix_EWDi session entry window comprises in particular a virtual warning button kk_cptz on which the requesting user can act dact to send an access request message. In a non-illustrated variant of the invention, the user requesting UR having previously been identified as not belonging to the list of participants, the entry window only comprises an interaction element such as the virtual warning button kk_cptz, or a capture of a knocking gesture on a door, or a capture of an oral “Hello! Is there anyone? "," Hello ", or etc.

FIG. 6c illustrates a simplified diagram of the use of a possible second step of an access request method according to the invention in the case of use of the invention of FIG. 6a.

Optionally, following the action of the user requesting dact relative to the first session entry window SSix_EWDi, a second entry window SSIX_EWD2 is reproduced allowing the requesting user UR to complete the access request message dacc_cpl. In particular, the requesting user can add their name, the reason for their access request, etc. And, the dacc_mssg access request message thus constituted by the user's dact action and / or a dacc_cpl complement is transmitted from the requesting terminal to at least one participating terminal of one of the participating users U1 ... UPn.

FIG. 6d illustrates a simplified diagram of the use of an access administration method according to the invention when using the invention of FIG. 6a.

At least one of the participating terminals of the participating users UP1 ... UPn receives the access request message and reproduces it in a DACC_WD access request window. FIG. 6d illustrates the screen of the participating terminal of the participating user i UPi. At this moment, the exchanges continued compared to those illustrated in figure 6a: new messages are reproduced: mssg5, up2, mssg6, up3, mssg7, up2, mssgs.upi, mssgg.upi in the pane d 'textual exchange SSIX_XWDUPÎ

If the participating user i UPi establishes a second session with the requesting terminal of the requesting user UR, the exchanges relating to this second session are reproduced in connection with the access request window DACC_WD. For example, if these exchanges are voice, they will only be possible if the DACC_WD access request window is activated (for example by selection by the participating user i UPi). In another example, the exchanges are reproduced in textual form in the DACC_WD access request window at least if they are textual exchanges, or even also by voice-to-text conversion when they are voice and / or audio. In the example of FIG. 6d, a Visio stream originating from the requesting terminal of the requesting user SS2_VUR is reproduced. Thus, the requesting user UR has the impression of addressing a participating user as via a videophone or an intercom at the entrance to a secure room or a home. The access request window DACC_WD comprises at least one interaction element OK_BT allowing the participating user UPi to accept the access request from the requesting user. This interaction element is in particular a physical or virtual acceptance button, and / or a camera picking up a nod of the head, and / or a microphone picking up an oral acceptance, etc.

FIG. 6e illustrates a simplified diagram of the use of a possible second step of an access request method according to the invention in the case of use of the invention of FIG. 6a.

Figure 6e shows a screen of the requesting terminal of the requesting user UR.

_{- an SS IX} _XWDU _R text exchange sub-window in which the text messages exchanged by the various participants in the first session are reproduced, in particular in chronological order (in the example of FIG. 6e: all the messages exchanges started in FIG. 6a and then continued in particular in FIG. 6d, including a message from the terminal requesting the first SSix session (mssg-io.upR, mssg4, upi, etc.); and or

+ a sub-window in which a Visio flow is reproduced, in this case the Visio flow of the first participating user UPi, and / or

+ A sub-window in which a content is shared, in this case a ^jth content q, upi the first participating user UPI

+ etc.

Using the invention, a requesting user who knows the location of the secure shared digital space (for example, the access url, the name of the virtual room, etc.) but who is not able to enter their usernames and / or passwords due to forgetting, loss, etc. has the possibility of requesting access (in particular in the form of a voice, sound, liver, visual, etc.) call to this space that he seeks to reach via a secure channel. This call, visible from inside this space, allows anyone already present to accept their entry into / access to this space.

The invention is applicable to any secure shared digital space as soon as it requires an access key (regardless of its form). Thus, only one person will need their key to access this space before validating (by acceptance ok cmd) the access of the other participants one by one by recognizing them using their voice when the request message for access includes a voice message, their face when the access request message includes a photo or video of the requesting user, their access material, a secret question or any other recognition element. The invention is also aimed at a support. The information medium can be any entity or device capable of storing the program. For example, the medium can comprise a storage means, such as a ROM, for example a CD ROM or a microelectronic circuit ROM or else a magnetic recording means, for example a floppy disk or a hard disk.

On the other hand, the information medium can be a transmissible medium such as an electrical or optical signal which can be conveyed via an electrical or optical cable, by radio or by other means. The program according to the invention can in particular be downloaded over a network, in particular of the Internet type.

Alternatively, the information medium can be an integrated circuit in which the program is incorporated, the circuit being adapted to execute or to be used in the execution of the method in question.

In another implementation, the invention is implemented by means of software and / or hardware components. From this perspective, the term module can correspond equally well to a software component or to a hardware component. A software component corresponds to one or more computer programs, one or more sub-programs of a program, or more generally to any element of a program or of a software capable of implementing a function or a function set as described above. A hardware component corresponds to any element of a hardware set (or hardware) capable of implementing a function or a set of functions.

Claims

1. A method of accessing a first secure communication session, called first session, in progress between participating communications terminals, called participating terminals, by a requesting communication terminal, called requesting terminal, the access method comprising

2. A method of accessing a first secure communication session according to the preceding claim, the access method comprising

- receive acceptance from a participating terminal.

3. A method of accessing a first secure communication session according to any one of the preceding claims, the access method comprising:

4. A method of accessing a first secure communication session according to any one of the preceding claims, in which sending the access request message to the at least one terminal participating in the first session comprises one of the following steps:

5. A method of accessing a first secure communication session according to any one of the preceding claims, the access request message comprising at least one data from the following data:

- a short audio warning data,

- an identifier associated with the requesting terminal,

- a text, audio or video message from a user of the requesting terminal.

6. A method of accessing a first secure communication session according to any one of the preceding claims, the access method comprising

- establish, prior to triggering entry into the first session of the requesting terminal, a second synchronous communication session between the requesting terminal and one of the terminals participating in the first session upon request for establishment of said one of the participating terminals following transmission of an access request message sent by the requesting terminal to at least one participating terminal of the communication session.

7. A method of accessing a first secure communication session according to the preceding claim, the access method comprising

+ receipt of an acceptance by the participating terminal of the second session,

+ triggering entry into the first session of the requesting terminal.

8. A method of requesting access to a first secure communication session, called the first session, in progress between participating communications terminals, called participating terminals, by a requesting communication terminal, said requesting terminal, the requesting process. access including

9. A method of administering access to a first secure communication session, said first session, in progress between participating communication terminals, called participating terminals, by a requesting communication terminal, said requesting terminal, the administration method. access comprising

- send an acceptance from one of the participating terminals following receipt of an access request message received by at least one participating terminal of the first session of the requesting terminal, the acceptance sent triggering, upon receipt, an entry in the first current session of the requesting terminal.

10. Program comprising program code instructions for executing the steps of the method of accessing a first secure communication session according to any one of claims 1 to 7 and / or of the access request method according to claim 8 and / or the access administration method according to claim 9 when said program is executed by a processor.

11. Device for managing access to a first secure communication session, called first session, in progress between participating communications terminals, called participating terminals, by a requesting communication terminal, called requesting terminal, the device for managing communication. access including

12. Requesting communication terminal, called requesting terminal, capable of requesting access to a first secure communication session, called first session, in progress between participating communications terminals, called participating terminals, by a requesting communication terminal, called requesting terminal, the requesting terminal comprising

13. Requesting terminal according to the preceding claim, the requesting terminal comprising

14. Participating communication terminal, said participating terminal, in a first secure communication session called first session, in progress between participating communication terminals, said participating terminals, the participating terminal comprising

- a connector capable of establishing the first session between the participating terminal and at least one other participating terminal, - a validator capable of accepting access to the first session following transmission of an access request message sent by the terminal requesting to at least one terminal participating in the first session, the validator triggering an entry in the first session in progress of the requesting terminal.

15. Participating terminal according to the preceding claim, the participating terminal comprising - a connector capable of establishing a second synchronous communication session with the requesting terminal prior to acceptance by the validator.