WO2005046183A1

WO2005046183A1 - Method and system of discrimination in relation to the original site and/or multisite organisation of the connection site of a roaming terminal

Info

Publication number: WO2005046183A1
Application number: PCT/FR2004/002741
Authority: WO
Inventors: Noël CANTENOT; Luc Beloeil; Sébastien AUVRAY
Original assignee: France Telecom
Priority date: 2003-10-29
Filing date: 2004-10-25
Publication date: 2005-05-19
Also published as: FR2861929A1; EP1678921A1

Abstract

The invention relates to a discrimation method and device for discriminating in relation to the original site and/or multisite organization (O0) of a connection site of a roaming terminal (Tx). Addresses are allocated to the roaming terminal connected to a specific site forming a localization reference (LR), whereupon an RM signalling message (LR) comprising a localization reference is transmitted (A) from the terminal (Tx) to the original network of said terminal; (B) the localization reference (LR) is compared to at least one of the sets of permanent and temporary internal addresses, respectively another original multisite organization allocated for each connection to site of the original network, for identification purposes, and (C) localization discrimination information (LI) is transmitted from the original site to the roaming terminal (Tx) as a function of said comparison, whereby the roaming terminal (Tx) is connected to the original site or to a sight belonging to the orginal mutisite organization (O0) or to another site (Sp) which does not belong to the original multisite organization (O0). The invention can be applied to IP network engineering and management.

Description

The present invention relates to a method and a system of discrimination, with respect to the site and / or the original multisite organization of the connection site of a mobile terminal. vis-a-vis the site and / or the original multisite organization, the connection site of a nomad-type computer terminal. The terminals. Communicators present the most varied functionalities or applications due to the constant increase in processing power. Correlatively, the regular increase in the densities of integration of these types of equipment has allowed the implementation of transportable terminals, then portable, having given rise to mobile computing, made even more accessible thanks to the dissemination and multiplication of accesses. to IP networks. Thus, in the context of such a use, the aforementioned terminals, designated nomadic terminals, terminals on the move or not, cover portable computers, light terminals, also designated PDAs, or finally any type of terminal capable of being connected to a local area network, which is not its original home network, for access to an IP network. The IP network is subdivided into different organizations, such as a company each comprising one or more local networks, which manage under the authority of a network administrator a set of sites, themselves composed of several links. Certain services on the IP network use the notion of hierarchy in the architecture of IP networks. These services can limit their network reach to a link, a site, an organization, or even extend this reach to the whole of the INTERNET, that is to all the IP networks using public IP addresses and which are interconnected to each other. other. Under these conditions, it is essential that a terminal on the move be able to determine whether it is connected to its original home network, on another site belonging to its original organization or another site external to this last. The location of this connection is indeed likely to modify the possibilities recognized by this terminal on the move to benefit from the services of the IP network whose access is restricted by the latter's original organization, such as its company. Among the current existing solutions for locating terminals connected to the IP network, only partial solutions have been proposed. The aforementioned partial solutions essentially consist of protocols for discovering neighboring terminals and for error management, as defined by iETF "The Internet Engineering Task Force", by the documents: - RFC 2461 (Neighbor Discovery for IP Version 6 ) for IP version 6, IPv6; - RFC 1256 (ICMP Router Discovery Messages) for the IP version 4 protocol, IPv4; - by dynamic IP address allocation protocols: - RFC 2131 (Dynamic Host Configuration Protocol) for the IPv4 protocol; - RFC 3315 (Dynamic Host Configuration Protocol for IPv6, (DHCPv6)); - by the specification documents of the IP addressing architectures used by the aforementioned protocols: - RFC 3513 (IPv6 Addressing Architecture) IPvδ; - RFC 2365 (Administratively Scoped IP Multicast, RFC 1918 (Address Allocation for Private Internets), RFC 3232 (Assigned Numbers: RFC 1700 is replaced by an Online Database) for IPv4; - by a document presented to the IETF, which offers a solution enabling a terminal on the IP network to distinguish the IPv6 prefix from its organization: - draft-zill-ipv6wg-zone-prefixlen-oo.txt (Organization Zone Prefix Length Discovery). Terminal mobility management solutions within IP networks are defined by IETF documents (www.ietf.org): - RFC 3344 (IP Mobility support for IPv4) for! Pv4; - draft-ietf-mobileip-ipv6-24.txt for IPv6. for managing the mobility of terminals within IP networks using an AAA infrastructure for "Authentication, Authorization, Accounting" are defined by the documents of the IETF (www.ietf.org): - Protocol Diameter: draft-ietf-aaa-diameter-17.txt - Mobile Application! Pv4: draft-ietf-aaa-diameter-mo bileip-13.txt; - Mobile IPv6 Application: draft-le-aaa-diameter-mobileipv6-0.3.txt. The prior techniques implementing the aforementioned solutions to allow the movement of a mobile terminal have many drawbacks, due to unsolved functional problems. A reminder of the addressing architecture for "Unicast" IP addresses will first be introduced. Any IP address has a prefix and a suffix. The prefix designates the address of the subnet, such as a local network for example, to which the IP address belongs, and therefore ultimately the address of the link, while the suffix identifies the machine itself , fixed or nomad terminal. In the remainder of the description, the term link refers to an IP subnet. In such a case, only the notions of "Unicast" or "Global Unicast" type addresses conform to such a syntax. In the context of this patent application, the term "unicast" designates all of the addresses "Unicast" and "Global Unicast". All fixed or nomadic terminals connected on the same link, belonging to the same original home network, forming a local network for example, have an IP address with the same prefix, but different suffixes. According to the IPv4 protocol, an IP address is coded on 32 bits. The length of the prefix used to describe a network address is variable, from 1 to 30 bits. Part of the address space, all addresses, IPv4 is reserved for "unicast" addresses, in accordance with the IETF document: RFC 3232. According to the IPv6 protocol, an IP address is coded on 128 bits. The length of the suffix of a "unicast" address is fixed at 64 bits, except for specific IPv6 addresses which begin with the word "000" whose use is highly regulated. A part of the address space, all of the addresses, IPv6 is reserved for "unicast" addresses, in accordance with the IETF document: RFC 3513. When connecting a mobile terminal while traveling to an IP network d 'reception distinct from its original home network, there are three current protocols enabling such a terminal to acquire an IP address allowing it to integrate into the host IP network. A first protocol, designated DHCP for "Dynamic Host Configuration Protocol", can be implemented within the framework of the aforementioned IPv4 and IPv6 protocols. It allows an IP terminal to request an address server to allocate an IP address from a pool, or set of addresses, which is specific to it for a period negotiated between the nomad terminal, client, and the server. Address. During such an allocation, the requesting IP terminal also detects the prefix of the link to which it is connected. The suite of IPv4 and IPv6 protocols defines a protocol called DHCPv4 respectively DHCPv6 based on a dynamic allocation mechanism. The latter provides good configuration flexibility and allows you to allocate an IP address and other network configuration parameters to a client terminal such as DNS address "Domain Name System", RFC documents 1034 and 1035 of I ' IETF, routers, servers, gateways or others. A second protocol is an integral part of the "Mobile IP" protocols. Within the framework of the aforementioned IPv4 and IPv6 protocols, the corresponding versions of this second protocol are compatible with the use of the DHCP protocol but use a different mode which is better suited to the mobility of nomadic terminals within different IP networks. In the two aforementioned versions, this second protocol is based on the fact that the routers of IP networks transmit periodically announcement messages, in particular in IPv6 version, describing the prefix of IP networks, of home or home attachment , to which terminals, fixed or nomadic, are connected. A mobile terminal on the move then uses these announcement messages to detect the prefix of the IP network to which it is connected, and uses it to self-generate and assign itself a single coherent "unicast" address. In the IPv4 version, however, the aforementioned periodic announcement messages can directly announce the complete "unicast" address which can be used by the mobile terminal while traveling. This address is an address assigned to a router, managed by the latter and can be used by a mobile terminal on the move when the procedures described in the Mobile IP protocol (for IPv4) are followed. Within the framework of this second protocol, a terminal, fixed or nomadic, has a fixed IP address, configured in a specific way in the terminal. This fixed IP address is part of the original home network of the terminal and constitutes an address consistent with the prefix of the original connecting link of the terminal, link and therefore original connecting network to which the mobile terminal is connected, when the latter is not in a situation of movement. Within the framework of "Mobile IP" protocols, a mobile terminal on the move always remains in contact with its original home network. For this purpose, a software agent called "Home Agent", HA, is provided at the latter. As soon as the mobile terminal on the move has acquired a new IP address distinct, and therefore unknown, from those belonging to its original home network, it then registers with its HA software agent by communicating the IP address newly acquired and which he will now use to communicate. Thus, the HA software agent is always aware of the IP address that must be used to get in touch with the mobile terminal while traveling. A third protocol is also implemented mainly by IP network access control protocols. Access control protocols are used between the mobile terminal on the move and the first IP router of the host IP network, also known as the access router. The access control protocol used between the access router and an access control server is generally the RADIUS protocol or a more recent development of the latter, the DIAMETER protocol. Among the parameters transported by the DIAMETER and RADIUS protocols, there is a parameter which specifies the IP address to be assigned to the mobile terminal on the move requesting access. This IP address is then transmitted to the terminal by the access control protocol. In this type of architecture, an access control server belonging to the home network of the nomad terminal and implementing the DIAMETER protocol, a server still designated as AAAH server, for "Authentication, Authorization and Accounting Home" is configured to provide authentication and access authorization for the mobile terminal on the move. Thus, the AAAH server is always notified when one of the terminals it manages tries to connect to the IP network and can even, depending on the case, suggest the IP address to assign to it. The advantage of the DIAMETER protocol is that this protocol offers a distributed architecture of access control servers, which makes it possible to control access to terminals through local networks managed by separate organizations. When allocating its new IP address, the mobile terminal on the move also detects the prefix of the link to which it is connected. The drawbacks, due to insufficiencies, of the three aforementioned current protocols can be summarized below. The DHCP protocol, apart from the address which it allows to allocate to a terminal, is capable of providing other network configuration parameters to the latter. The main parameters are the network mask, the validity time granted to the new address, the default network gateway address through which the terminal will access the IP network, as well as the client identifier and the server name. use. However, it cannot compensate for the problems due to the addressing inherent in the IPv4 protocol and its division into sites and organizations. In particular, the structure of the addresses and the terminal / router dialogs in no way allow the terminals to determine, when an address is allocated to the IP terminal while traveling: - if it is connected to another link belonging to its original site ; - if he is connected to a link from another site belonging to his original organization; - if he is connected to a link not belonging to his organization; - if the addresses overlap, several sites of the same company or several different companies can use the same network address prefixes. With the second protocol, an integral part of the "Mobile IP" protocols, when a terminal acquires a new IP address, this terminal can only determine the prefix of the subnet, such as a local network, to which the new acquired IP address belongs. and compare it to the prefix of its fixed address. If it can make it possible to detect if the mobile terminal is connected on its original link, in the negative, it in no way makes it possible to determine whether the mobile terminal is connected: - to another link belonging to its original site; - to a link belonging to another site of its original organization; - to a link not belonging to its organization. In addition, the aforementioned second protocol does not necessarily allow the mobile terminal to detect if it is connected to its original home network. This is particularly the case when there are recovery addressing plans, that is to say when several sites of the same company or several different companies use the same network prefixes. Under these conditions, if the nomad terminal connects to an IP network using the same prefix as its original home network, in the absence of possible discrimination, this nomad terminal will wrongly believe that it is connected to the latter. Finally, when a mobile terminal on the move transmits IP data packets outside the site where it is connected, a translation of the source address of the packets can be performed, for example in the case of addressing plans in recovery or if the organization's sites are linked via the INTERNET. Under these conditions, the mobile terminal on the move is therefore no longer accessible from the outside by its dynamically acquired address, but by its translated address. Remember that for any site to which a mobile terminal is connected, the interior actually designates all of the interconnected IP networks and nodes that are identifiable by all of the private and public IP addresses of the organization to which belongs to any aforementioned site. The exterior designates all IP networks and nodes that cannot be identified from the above addresses. In the case of the third protocol, the use of an access control protocol based on an architecture of the DIAMETER type has the consequence that the mobile terminal on the move has only a fixed identifier called NAI for "Network Access Identifier" , which allows, among other things, to determine the AAAH server to be interrogated to request access. In addition, the mobile terminal does not know the IP address of the AAAH server belonging to its original home network. Thus, when an address is assigned to the mobile terminal while traveling, the latter cannot in any case determine whether it is connected: - to another link belonging to its original site; - to a link belonging to another site of its original organization; - to a link not belonging to its original organization. The object of the present invention is to remedy all of the drawbacks presented by the aforementioned protocols of the prior art. In particular, an object of the present invention is the implementation of a method and a system allowing a mobile IP terminal on the move to discriminate if it is connected to the original link belonging to its original site or another link belonging to its original site. Another object of the present invention is the implementation of a method and a system allowing a mobile IP terminal on the move to discriminate if it is connected to a site other than its original site, belonging to its original organization. Another object of the present invention is finally the implementation of a method and a system allowing a mobile IP terminal on the move to determine whether it is connected to a link that does not belong to its original organization . The method of discrimination, vis-à-vis the site and / or the original multisite organization, of the connection site of a nomad terminal, object of the present invention, is implemented for this nomad terminal capable of '' operate in and / or outside its original home network, to this nomad terminal being allocated, by the original home site, a permanent internal address for any network connection of this nomad terminal on a site belonging to this original home network, a temporary internal address for any network connection of this mobile terminal on another site belonging to this original multisite organization, and, by any site not belonging to this original organization , a temporary external address for any network connection of this nomad terminal on any site, the above addresses forming, for this nomad terminal a location reference. It is remarkable in that it consists at least, during any connection of this nomad terminal in a network on a determined site, to transmit, from the nomad terminal to the home network of origin, a signaling message comprising at least the reference location, compare, for identification, the location reference to the address values of at least one of the sets formed by the set of internal permanent addresses allocated to all the nomad terminals attached to this network of attachment of origin and likely to operate in the home network and by all internal temporary addresses allocated to this set of nomadic terminals for any connection to another site belonging to this original multisite organization, and, transmitting from the original attachment site to this nomadic terminal an acknowledgment signaling message containing at minus location discrimination information from the mobile terminal. The location discrimination information designates either the connection of the mobile terminal on its original home network upon identification of the location reference in all of the internal permanent addresses, or the connection of the mobile terminal on the network on another site belonging to the original multisite organization upon identification of the location reference in all of the internal temporary addresses, or even the connection of the nomad terminal on the network to any site not belonging to the original multisite organization in the absence of identification of the location reference in both, all of the internal permanent addresses, all of the internal temporary addresses. The system of discrimination, vis-à-vis the site and / or the original multisite organization, of the connection site of a nomad terminal, object of the present invention, is implemented for this nomad terminal capable of '' operate in and or out of its original home network, to this nomad terminal being allocated an internal permanent address for any network connection of this nomad terminal on a site belonging to this original home network, a temporary address internal for any network connection of this mobile terminal on another site belonging to the original multi-site organization, and, by any site, not belonging to this original organization, a temporary external address for any connection in network of this nomad terminal on any site, these addresses forming for this nomad terminal a location reference. It is remarkable in that it comprises at least, at the nomad terminal, a transmission module, from this nomad terminal to the original home network of the latter, of a signaling message comprising at least the reference location, and, at the level of the home network, a database comprising at least a first set of internal permanent addresses allocated, by the home network, to all of the nomadic terminals attached to this home network source and a second set of internal temporary addresses that may be allocated to this set of mobile terminals, for any connection to another site belonging to this original multisite organization, a comparison module, for identification, of the reference localization to the address values of at least one of the first and second sets of permanent internal and respectively temporary addresses, and, a transmission module, from the original home network to this nomad terminal, of a message d acknowledgment of signaling containing at least one location discrimination information designating either the connection of the nomad terminal on its home network on identification of this location reference in this first set of internal permanent addresses, or the connection of the nomad terminal networked on another site belonging to this original multisite organization upon identification the location reference in this second set of internal temporary addresses, or the connection of this nomad terminal on a network to any site not belonging to this original multisite organization, in the absence of identification of the reference location in each of the first and second sets of permanent and temporary internal addresses respectively. The method and system which are the subject of the invention find application in the management of routing and engineering of IP networks. The invention will be better understood on reading the description and on observing the following drawings in which, in addition to FIG. 1 relating to the prior art: - FIG. 2a represents, purely by way of illustration, a flowchart of implementation of the essential steps of the discrimination method, vis-à-vis the site and / or the original multisite organization, of the connection site of a mobile terminal in accordance with the object of the present invention; - Figure 2b shows, purely by way of illustration, a flowchart of detailed implementation of the step of comparing the method which is the subject of the present invention; - Figure 3 shows, by way of illustration, a block diagram of a system of discrimination, vis-à-vis the site and / or the original multisite organization, of the connection site of a nomad terminal conforming to the object of the present invention; - Figure 4a shows, purely by way of illustration, a flowchart of the steps of the process implemented by a mobile terminal executing the method which is the subject of the present invention; - Figure 4b shows, purely by way of illustration, a flowchart of the steps of the process implemented by a software agent installed in a server hosted on a site belonging to the home network of origin executing the process which is the subject of the present invention. A more detailed description of the method of discrimination, vis-à-vis the site and or the original multisite organization, of the connection site of a mobile terminal in accordance with the object of the present invention will now be given in conjunction with Figure 1 relating to the prior art and the following figures. In FIG. 1, relating to the prior art, a multi-site organization of origin O has been represented.₀ comprising for example three sites Si, S₂, S₃, the site Si corresponding to a local area network, for example of the IP type comprising a plurality of routers Ru, R₁₂ and R₁₃ and a server S enabling the management of the aforementioned multi-site organization Oo to be managed. The S site₂ is for example constituted by a local subnet of the IP type connected to the local network constituting the original home network of the site S-i. Finally, the S site₃ is a site belonging to the original multisite organization Oo, the S site₃ however, being connected to the original home network and to the Si site via the INTERNET network for example. A nomad terminal T₁ is thus likely to operate in its original home network, this terminal being referenced T₁ and connected to router R₁₂ for example and or outside its original home network, this terminal then being noted T₂ when it is connected to the local subnetwork making up site S₂ through router R₂. The aforementioned nomad terminal can also be connected outside its original home network on site S₃ belonging to the multisite organization of origin Oo but via the INTERNET network, the aforementioned nomad terminal being noted T₃ in this situation and connected to router R₃. Finally, the aforementioned nomad terminal can be connected to any site marked S_p not belonging to the original multisite organization O₀ but on the contrary to any multisite organization, noted O_p, the aforementioned nomad terminal bearing the reference T₄ in this situation. It is understood of course, that by way of nonlimiting example, the aforementioned nomadic terminal bearing the references T-i, T2, T₃ and T can be constituted by the same terminal on the move or, of course, by any separate nomadic terminal capable of implementing the method which is the subject of the present invention. As shown in Figure 1, at the nomad terminal T₁ is allocated by the original home site and finally by the home home network an internal permanent address noted P @ n for any network connection of the nomad terminal T₁ on a site belonging to this original home network. Similarly, a temporary internal address is allocated to the nomad terminal referenced T₂ or T₃ for any network connection of the aforementioned mobile terminal on another site belonging to the original multisite organization Oo. It is understood, in particular, that the administrator of the IP network constituting the original multisite organization O₀ and ultimately the administrator of the Si, S sites₂ and S₃ is then able to allocate, when the mobile terminal in position T₂ is connected to site S₂, an internal temporary address noted P @₂j or on the contrary, an internal temporary address noted P @_3k or P @₄ι, when the mobile terminal in position T₃ is connected to site S₃. It is pointed out in particular that the distinction between the temporary internal addresses P @_3k or P @₄| corresponds to a temporary address known as substantially arbitrary mobility known by the server center S respectively to a translation address for example as described previously in the description. It is recalled, in particular, that, in the case of a company, the administrator has a set of IP addresses, called private, which can be used freely; any administrator of another IP network can also freely re-use these same IP addresses (RFC 1918 of the IETF). In addition, when this company wishes to communicate on the INTERNET, it must then use globally unique IP addresses, unique in the world and therefore whatever the network connected to the INTERNET. Globally unique addresses are called public and assigned either by the Internet service provider, or by a regional RIR organization for "Regional Internet Registry". Most often companies use equipment between their network and the INTERNET which translates private addresses into public addresses. In the method which is the subject of the invention, the IP address assigned to the mobile terminal T_x may be private and the datagrams used to reach the server S can nevertheless pass through an address translator via the INTERNET and therefore appear to come from a public address. Such a public address can, for example, be owned by the site S₃in Figure 1 or any other site. Finally, when the mobile terminal is connected to any site, such as site S_p not belonging to the original multisite organization but to another multisite organization O_p, then the address allocated to the terminal in position T₄ in Figure 1 is designated P @₅m and constitutes a temporary external address. P @₅m denotes a private address and P @₆n denotes a public address used for translating the address of the private address P @₅m above. It is understood, in these conditions, that the concept of internal permanent and temporary address corresponds to the internal character of the addresses allocated vis-à-vis the multi-site organization of origin Oo, while the external character of the temporary address, when the mobile terminal is connected to a site that does not belong to the original multisite organization, corresponds to the external nature of this address vis-à-vis the aforementioned original multisite organization. It will of course be understood that, a priori, only the internal addresses are known to the original multisite organization Oo, the external addresses not being known to the latter. Consequently and in accordance with one aspect of the method which is the subject of the present invention, it is considered that the aforementioned internal and / or external addresses form, for the mobile terminal, a location reference with respect to the original multisite organization O₀. Thus, by way of nonlimiting example, we note:

all of the permanent internal addresses of one of the subnets allocated to all of the nomadic terminals attached to the original home network supporting the original S-i site. This set is the set of internal permanent addresses of the original link or origin subnet, the set {P @_X therefore refers to all the addresses of the original site S1, all the subnets being combined;

all of the temporary internal addresses allocated to all of the aforementioned nomadic terminals for any connection of one of these nomadic terminals to another site belonging to the original multisite organization O₀ ;

all private external temporary addresses allocated by a multisite organization O_p separate from the original multisite organization and for any S site_p belonging to this separate multisite organization. -^@ t the set of public addresses used by translating private addresses P @₅m- With reference to FIG. 2a, for any connection of the aforementioned nomadic terminal in a network on a given site, the method which is the subject of the invention consists of a step A to be transmitted from the nomadic terminal T-i, T₂, T₃ or T₄ to the original home network and finally to the site S1 belonging to the original multisite organization Oo, a signaling message comprising at least the location reference mentioned above. In FIG. 2a, the signaling message is noted: RM (LR) where LR designates the above-mentioned location reference. It will be recalled that the location reference is formed at least by one of the addresses allocated to the nomad terminal on the move mentioned above according to the situations represented in FIG. 1. The signaling message can make it possible to record the connection of the terminal nomadic. In particular, advantageously without limitation, it is indicated that the location reference LR can consist of a coded value, depending on the allocated address. In this hypothesis, this coded value can be obtained at the mobile computer level, from a specific XOR bit-by-bit or other coding function of the permanent address with a setting key, the reciprocal coding function and the configuration key making it possible to restore the permanent address being known only to the server S of the original site So- The coding function and the reciprocal identity decoding function allow for example to transmit only the original permanent address. For this purpose, the mobile terminal can carry out a test, which can compare the result of the coding of the location reference LR, by means of the coding function f, designated f (LR), and the result of this same coding function applied to the original permanent address (P @,. The mobile terminal knowing only f ({P @_1S!} calculates f (LR) to be able to make this comparison. The latter allows the mobile terminal to detect or not whether or not it is connected to its original link on its original site S1. The server S must decode the result value of the RP @ ι coding_Sι = f {P @_is to find the real whole

, s fixed. Only the server S knows the inverse function f¹, which applied to the coded value of the permanent address f¹ '(f {P @_Xsι}) = {P @_XS} returns the latter. The server S can then compare the location reference value LR with {P @_1S '^, s = 1 to H, to check that the terminal is on its original site. Step A is then followed by a step B consisting in comparing for identification the location reference LR with the address values of at least one of the previously cited sets formed by the set of internal permanent addresses allocated to the all nomadic terminals attached to the original home network and by all of the internal temporary addresses allocated to this set of nomadic terminals for any connection to another site belonging to the original multisite organization O₀. In FIG. 2a, the comparison operation is symbolized by the relation:

The comparison step B is then followed by a step C consisting in transmitting from the original attachment site Si to the mobile terminal, depending on the position of the latter, an acknowledgment message or a signaling response message containing at least one location discrimination information from the aforementioned mobile terminal. In step C, the signaling response or acknowledgment message is noted: AM (LI). For the aforementioned message LI designates the location discrimination information transmitted to the mobile terminal. According to a remarkable aspect of the method which is the subject of the invention, the location discrimination information LI designates: - or the connection of the mobile terminal on one of its original attachment links, that is to say on its original attachment site If, upon identification of the LR location reference in all of the internal permanent addresses; - or the connection of the mobile terminal network on another site belonging to the original multisite organization upon identification of the LR location reference in all of the internal temporary addresses previously mentioned; - or even the connection of the nomad terminal on the network to any site not belonging to the original multisite organization, in the absence of identification of the LR location reference in either set of internal permanent addresses, set of internal temporary addresses. In FIG. 2a, in the aforementioned step C, the content of the location discrimination information is represented by the relationships: LI = 0 if LR e Si; LI = 1 if LR e (S₂; S₃);

In the previous relation, it is indicated that the relations of belonging to the sites S, S₂ and S₃ are represented symbolically but executed by checking that the location reference belongs to all of the addresses associated with each of the aforementioned sites, as mentioned previously in the description. It is also understood that the absence of membership of the location reference LR is also obtained by checking the absence of identification of the location reference LR in all the sets of addresses associated with each of the sites S1, S2, S3 belonging to the original multisite organization. Of course, in the symbolic relation given for step C of FIG. 2a, the values 0, 1 and 2 of the location information LI are completely arbitrary. Finally, in step C of Figure 2a, T_x actually designates the mobile terminal in the position T-i, T2, T₃ or T₄. More specifically, we indicate that all of the internal permanent addresses r @ ι / f^° and all of the temporary internal addresses (^p@ 2_jVS . @ 3kk = ι^and Ψ® lC^are advantageously formed by disjoint sets of address values allocated by the original home network to the mobile terminal which requests it when it is connected to the network on one of the sites belonging to the original multisite organization. This operation is of course carried out under the control of the server S and of the network administrator responsible for the latter. However, the sets @nQ> r @ 2 yC^and

®^so constituted

by disjoint sets of address values, the set

P ® ^was ^re *

a non-disjoint set, covering the sets r @ i £! . T @ 2jl_ ^J. ^because ' ^es

addresses of the set

can be translated into addresses

It is further indicated that the set of internal temporary addresses is formed either by predetermined address values, that is to say by the subset @ 2jj7 ^f and ψ @ 3k) _k ïι ' ^{ces va} ' ^eurs predetermined addresses which can of course be arbitrary but contained in a range of specific addresses determined by the network administrator or by address values calculated by translation. For example the values of the subset r @ 4 / fc ^his t attributed by administration of a translation system and under the authority of the original home network and the network administrator. With regard to the external temporary address allocated to the mobile terminal in position T in FIG. 1, for any network connection on any site S _p not belonging to the original multisite organization, it is indicated that such a temporary address can for example be formed by an address value allocated to the mobile terminal by the separate multi-site organization O _p under the authority of the administrator of the latter, but translated into a single IP address on the INTERNET, before to reach the server S within the original multisite organization Oo, between the multisite organization O _p and the INTERNET. With regard to a specific implementation of the comparison step B of FIG. 2a, it is indicated, by way of nonlimiting example, that such an implementation may consist of a succession of steps as shown in Figure 2b. In FIG. 2b, the location reference LR is noted LR = ^p @ χy where x denotes the situation reference of the mobile terminal and y an address allocated in this situation. By way of nonlimiting example, the aforementioned steps may then include, within the framework of the implementation of step B, a step Bi of belonging of the location reference to all of the internal permanent addresses, a positive response to this test B ₁ making it possible to conclude, in a step B ₂ , at the value 0 of the location discrimination information LI, the terminal T _x then being connected to the original site Si belonging to the multisite organization Oo origin. On the contrary, on a negative response to the test Bi, a new test B ₃ is called for comparing the location reference LR with all of the internal temporary addresses as mentioned previously in the description. On a positive response to test B ₃ , the location information LI is allocated the value LI = 1, the terminal T _x being thus connected to a site S _x distinct from the original site Si but belonging to the multi-site organization d 'origin O ₀ . On the contrary, on a negative response to the test B3, then the location information LI is assigned the value 2, the mobile terminal T _x being connected to any site S _q not belonging to the multisite organization of origin Oo. A system of discrimination, vis-à-vis the site and / or the original multisite organization, of the connection site of a nomad terminal capable of operating in and or outside its original home network, in accordance with the object of the present invention, will now be described in connection with FIG. 3. In general, it is indicated that the system object of the present invention operates in the context as defined in connection with FIG. 1. In particular , it is indicated that the address allocation process, when connecting the nomad terminal on its original home network, and on its original site, on a site separate from its site and its home network of origin but belonging to the same organization of origin Oo respectively on a separate site belonging to any multisite organization distinct from the original multisite organization, the any site therefore not belonging to the latter, is of course semb lable to that described in connection with Figures 1 and 2a previously in the description. With reference to FIG. 3, it is indicated that the system which is the subject of the invention is developed at the level of the nomad terminal, this nomad terminal being referenced T _x whatever the connection situation of the latter previously described in connection with FIG. 1 , the mobile terminal T _x being deemed to be connected to a site S _x belonging to any multisite organization O _y distinct from the original multisite organization Oo of the aforementioned mobile terminal. The system which is the subject of the invention thus comprises, at the level of the nomadic terminal T _x, a transmission module from this nomadic terminal to the original home network, that is to say the site Si of the latter of a message. signal comprising at least the LR location reference as described in accordance with the method of the present invention. In a nonlimiting manner, it is indicated that the portable terminal can conventionally comprise a central processing unit CPU, if necessary a hard disk unit HDD, a working memory RAM, if necessary, a ROM read-only memory which can store a or resident programs. The signaling message is designated RM (LR). In a nonlimiting manner, it is indicated that any site S _x can be connected to the site Si and to the original home network supporting the latter, either via an IP network or, where appropriate, by the INTERNET network. for example. Under these conditions, the signaling message is transmitted via the aforementioned networks to the address of the original multisite organization Oo and in particular, the home site and the original home network to the server S for example. Step A shown in FIG. 2a is illustrated in FIG. 3. The system which is the subject of the present invention comprises, at the level of the original attachment network and, in particular, of the site Si belonging to the original multisite organization, a database module comprising at least a first set of internal permanent addresses allocated, all the @lz '* ^ens ^this emblem permanent addresses being allocated by the originating home network to all mobile terminals attached to this original home network and a second set of internal temporary addresses that can be allocated to the above-mentioned set of mobile terminals for any connection to another site belonging to the original multisite organization. With reference to the preceding description of the process which is the subject of the present invention, it is recalled that this second set of internal temporary addresses is formed by the subsets f @ 2 C; l ^p @ 3kï ι '

The system which is the subject of the invention further comprises a comparison module for identifying the location reference LR to the address values of at least one of the first and second sets of permanent internal and respectively temporary addresses. It will of course be understood that the aforementioned comparison comparison module can be installed at the level of the server S, as will be described below in the description, such a module then operating in accordance with step B of FIG. 2a and where appropriate, according to steps B ₀ to B ₅ shown in FIG. 2b. Finally, the system which is the subject of the invention comprises a transmission module from the original home network, that is to say in fact from the site Si or more particularly from the server S, to the nomad terminal Tx connected to the site Sx belonging to any multisite organization Oy, a response or acknowledgment signaling message containing location discrimination information from the mobile terminal designating either the connection of the latter on its original home network on identification of the location reference in the first set of internal permanent addresses, i.e. the connection of this nomad terminal on a network to another site belonging to the original multisite organization Oo upon identification of the LR location reference in the second set of addresses temporary internal, or the connection of the aforementioned nomadic terminal on a network on any site not belonging to the multisit organization original e in the absence of identification of the location reference in either of the first and second sets of permanent internal and respectively temporary addresses. The process of assigning an arbitrary coded value to the location discrimination information LI conforms to that described in FIG. 2b for example. In FIG. 3, the comparison operation of step B of FIG. 2a is shown executed at the level of the server S making it possible to manage the entire network under the authority of the multisite organization of Oo origin and step C is represented in phantom by the transmission of the response message or acknowledgment of AM signaling (LI) previously mentioned in the description. In a practical way, it is indicated that the module for transmitting the signaling request message RM (LR) can advantageously be formed by a software agent noted NA directly executable by the nomad terminal and allowing the creation and the transmission of the signaling message. to the address of the original home network. It is understood, in particular, that the software agent can be directly loaded into the working memory RAM of the central unit of the nomadic terminal T _x from either the ROM read-only memory, or when this terminal is provided with a disk. HDD hard from the latter. This operating mode is a conventional operating mode and will therefore not be described in detail. In addition, the comparison module for identifying the location reference to the address values and the module for transmitting a recorded acknowledgment message are advantageously trained by a software agent HA 'installed in a server hosted on a site belonging to to the original home network. In a preferred embodiment, it is understood that the aforementioned software agent can be constituted either by a sui generis software agent, or from an existing software agent and already having certain existing functions, the actual comparison operation being added to the latter. Finally, it is indicated that the database module can advantageously be formed by a server and in particular the aforementioned server S, this server being updated from all the sites such as S1 to S3 belonging to the multisite organization d 'origin O ₀ . Finally, the object of the invention relates to a first software product recorded on a storage medium for the implementation of the method object of the invention as described in connection with FIGS. 2a and 2b and of the system object of the invention as described in connection with FIG. 3. This first software product is of course executable by the nomad terminal and it consists of a software agent directly executable by this nomad terminal as described above. The software agent NA makes it possible, for example, as shown in FIG. 4a, on discrimination of an IP address allocated to the nomad terminal distinct or not from the internal permanent address allocated to the aforementioned nomad terminal by its original home network, this operation being carried out following a connection of the aforementioned nomadic terminal on a site belonging to an IP network, the creation then the transmission of a signaling message to the address of the original home network. The signaling message comprises at least the allocated address distinct from the above-mentioned internal permanent address. In FIG. 4a, there is thus shown, by way of nonlimiting example, the implementation of step A of FIG. 2a of the method which is the subject of the invention by means of the aforementioned software product, from a step Ai in which for a terminal T _x being for example connected to the site S _x belonging to an organization O _y , the location reference LR is deemed to be equal to P ('xy In the example of FIG. 4a, we indicate , by way of nonlimiting example, that the indices x and y correspond to the set of possibilities described for the connection of the nomad terminal in situation Ti to T ₄ of FIG. 1. By way of nonlimiting example, a test A ₂ can then be carried out consisting in verifying the absence of identity of the location reference possibly encoded with the internal permanent address allocated to the mobile terminal and which is permanently stored in the latter, memorization possibly coded. in test A ₂ , the location reference LR being identical to the permanent address of the terminal considered, step A consists of continuing the normal connection and message exchange procedure. On the contrary, on a positive response to test A ₂ , the location reference being distinct from the internal permanent address allocated to the nomad terminal considered, address P @ _si , a step A3 is called consisting in forming the signaling message RM which can then advantageously include the location reference LR as well as a reference to the internal permanent address above, this reference being noted RP @ _r or any value coded from the above permanent address. Steps A ₃ and A ₄ are then followed by a step A ₅ consisting in effectively transmitting the signaling message, which is denoted RM (LR, ...). Specifically, it is indicated that the reference to the abovementioned internal permanent address RP @,. can advantageously allow to perform

identification or even authentication of the mobile terminal by the original home network. For this purpose, the signaling message RM can be transmitted with the location reference fields LR respectively of reference to the internal permanent address RP Cm. or coded value encrypted for example so

ensure the transmission of these addresses under confidentiality, the decryption operation making it possible to ensure authentication of the mobile terminal author of the signaling message for example. Finally, the present invention also relates to a second software product recorded on a storage medium for the implementation of the method as described above in connection with FIGS. 2a and 2b and of the system which is the subject of the invention as described in link with FIG. 3. Preferably, the aforementioned software product can be executed by a server hosted on a site belonging to a home network of origin of the nomadic terminals, the server S represented in FIG. 1 for example. The aforementioned software product advantageously consists of a software agent HA 'directly executable by the aforementioned server S. This software agent HA ′ makes it possible, on reception of a registration message RM, which comprises at least one location reference LR of one of the nomadic terminals, to compare for identification the location reference with the address values of the at least one of the sets formed by the set of internal permanent addresses allocated to the set of nomadic terminals attached to this original attachment network, that is to say to the set {P @ _1Z - ^° [ . The comparison is also carried out if necessary against all of the internal temporary addresses allocated to the set of terminals. nomads for any connection to another site belonging to the original multisite organization Oo. It makes it possible to transmit from the home attachment site Si and in particular from the home attachment network to the mobile terminal, an acknowledgment or signaling response message which contains at least location discrimination information from the mobile terminal IL . The aforementioned information IL corresponds either to the connection of the nomad terminal on a link of its home site of origin or to the connection of the nomad terminal in network on another site belonging to the multisite organization of origin O ₀ or to the connection of the original terminal network on any site not belonging to the original multisite organization as described above in the description in connection with the method and system objects of the present invention. Preferably but not limited to, as shown in FIG. 4b, the aforementioned software product HA ′ of course makes it possible to implement step B of comparison as described in FIGS. 2a and 2b for example, but, preferably, the 'step B above can be preceded by a step of identification or authentication of the mobile terminal. This operation can then consist, from the signaling message RM (LR, RP @ _r ), of checking the reference to

the internal permanent address RP (λ. to the true value in an ABo test.

On a negative response to the aforementioned ABo test step, the recording operation is defeated, while on a positive response to the aforementioned ABo test, the comparison step for identification, step B of FIG. 2a, and by example, according to the steps shown in Figure 2b, can then be implemented according to the method of the present invention. For the implementation of the method and the system which are the subject of the present invention on the basis of one of the three protocols previously mentioned in the description, the corresponding modifications can be introduced at the level of the software agent installed on the site of attachment 'origin respectively on any embedded software agent installed on the mobile terminal.

Claims

CLAIMS 1. Method of discrimination, vis-à-vis the site and / or the original multisite organization of a nomadic terminal, the connection site of this terminal likely to operate in and / or outside its network home network, said mobile terminal being allocated, by said home site, an internal permanent address for any network connection of this mobile terminal on a site belonging to this home network, a temporary address internal for any network connection of this nomad terminal on another site belonging to said original multisite organization, and, by any site not belonging to said original organization, a temporary external address for any network connection of this mobile terminal on said arbitrary site, said addresses forming for said mobile terminal a location reference, characterized in that it consists at least, during any connection of said terminal l nomad network on a specific site, to: - transmit from said nomad terminal to said home network, a signaling message comprising at least said location reference; compare, for identification, said location reference with the address values of at least one of the sets formed by the set of internal permanent addresses allocated to the set of nomadic terminals attached to this home attachment network, and likely to operate in the original home network and by all of the internal temporary addresses allocated to this set of mobile terminals for any connection to another site belonging to said original multisite organization; and - transmit from the home attachment site to said mobile terminal a signaling acknowledgment message containing at least one location discrimination information from the mobile terminal, said location discrimination information designating either the connection of said mobile terminal on its network of original attachment on identification of said location reference in all internal permanent addresses, ie the connection of said nomad terminal on a network to another site belonging to said original multisite organization upon identification of said location reference in the all internal temporary addresses, or still the connection of said nomad terminal on a network to any site not belonging to said original multisite organization in the absence of identification of said location reference in both sets of internal permanent addresses, together internal temporary addresses.

2. Method according to claim 1, characterized in that the temporary external address allocated to the nomad terminal for any network connection of this nomad terminal on any site not belonging to the original multisite organization is formed by a permanent address value allocated to said mobile terminal and translated or non-translated between said mobile terminal and said origin site through the INTERNET.

3. Method according to one of claims 1 or 2, characterized in that it is implemented in the context of the transmission protocol of IP networks.

4. Method according to one of claims 1 to 3, characterized in that said location reference is a coded value depending on the permanent address allocated to said mobile terminal.

5. Discrimination system, vis-à-vis the site and / or multi-site organization of origin of a nomadic terminal, the connection site of this terminal likely to operate in and / or outside its home network. 'origin, said nomad terminal being allocated, by said home network, a permanent internal address for any network connection of this nomad terminal on a site belonging to this home network, a temporary internal address for any network connection of this nomad terminal on another site belonging to said original multi-site organization, and, by any site not belonging to said original organization, a temporary external address for any network connection of this nomad terminal on said arbitrary site, said addresses forming for said mobile terminal a location reference, characterized in that the latter comprises at least; - At the level of said nomad terminal, means of transmission, from this nomad terminal to said original home network, of a signaling message comprising at least said location reference; and at the level of said original home network, - database means comprising at least a first set of internal permanent addresses allocated, by said original home network, to all of the nomadic terminals attached to this original home network and a second set of temporary internal addresses likely to be allocated to this set of mobile terminals, for any connection to another site belonging to said original multisite organization; means of comparison, for identification, of said location reference with the address values of at least one of the first and second sets of permanent addresses, respectively temporary internal; and - means for transmitting, from said original home network to said mobile terminal, a signaling acknowledgment message containing at least one location discrimination information designating either the connection of said mobile terminal to its home network. origin upon identification of said location reference in the first set of internal permanent addresses, ie the connection of said mobile terminal network on another site belonging to said original multisite organization upon identification of said location reference in the second set of temporary internal addresses, or the connection of said nomadic terminal on a network to any site not belonging to said original multisite organization in the absence of identification of said location reference in either of the first and second sets of permanent internal and temporary addresses respectively.

6. System according to claim 5, characterized in that said means of transmission of the signaling message are formed by a software agent, directly executable by said nomad terminal, allowing the creation then the transmission of said signaling message to the address of the network. of original attachment.

7. System according to one of claims 5 or 6, characterized in that said means for comparing, for identification, said location reference to address values and said means for transmitting a signaling acknowledgment message are trained by a software agent located in a server hosted on a site belonging to the original home network.

8. System according to one of claims 5 or 7, characterized in that said database means are formed by a server, updated from all the sites and belonging to said original multisite organization.

9. Product computer program for the implementation of the method according to one of claims 1 to 4 respectively of the system according to one of claims 5 to 8 and executable by a nomad terminal, characterized in that it consists of a software agent directly executable by this nomad terminal, said software agent allowing, on discrimination of an IP address allocated to said nomad terminal distinct or not from the internal permanent address allocated to said nomad terminal by its original home network, further to a connection of this nomad terminal on a site belonging to an IP network, the creation and then the transmission of a signaling message to the address of said original home network, said signaling message comprising at least said distinct allocated address or no of said internal permanent address.

10. A computer program product according to claim 9, characterized in that said signaling message further comprises a reference to said internal permanent address, authorizing the identification or even the authentication of said nomad terminal by said original home network. .

11. Product computer program for the implementation of the method according to one of claims 1 to 4 respectively of the system according to one of claims 5 to 8, and executable by a server hosted on a site belonging to a network of original attachment of mobile terminals, characterized in that it consists of a software agent directly executable by said server, said software agent making it possible, on receipt of a signaling message comprising at least one location reference of one of said terminals nomads, to compare, for identification, said location reference with the address values of at least one of the sets formed by the set of internal permanent addresses allocated to the set of nomad terminals attached to this network of attachment of origin and likely to operate in the original home network and by all of the internal temporary addresses allocated to this set of terminals nomads for any connection to another site belonging to said organization of origin and to transmit, from the site of origin attachment to said nomad terminal, a response or acknowledgment signaling message containing at least information of location discrimination of the nomad terminal, corresponding either to the connection of said nomad terminal on its original home network, or to the connection of said nomad terminal on a network on another site belonging to said original multisite organization, or even to the connection of said terminal network origin on any site not belonging to said original multisite organization.

12. Computer program product according to claim 11, characterized in that said comparison step for identification is preceded by a step of authentication of said mobile terminal.

13. Nomad terminal capable of operating in and / or outside its network and its original home site, managed by an original multisite organization, said nomad terminal being allocated, by said original home site, an internal permanent address for any network connection of this nomad terminal on a site belonging to this original home network, an internal temporary address for any network connection of this nomad terminal on another site belonging to said multisite organization origin, and, by any site not belonging to said organization of origin, a temporary external address for any network connection of this nomad terminal on said site, said addresses forming for said nomad terminal a location reference, characterized in that said nomad terminal comprises at least: - means of transmission, from said nomad terminal to said original home network, d 'a signaling message comprising at least said location reference; means for receiving a signaling acknowledgment message transmitted by the original home site and containing at least one location discrimination information from the mobile terminal, said location discrimination information designating either the connection of said terminal nomad on its home network on identification of said location reference in all internal permanent addresses, ie the connection of said nomad terminal on a network on another site belonging to said original multisite organization upon identification of said location reference in all of the internal temporary addresses, or even the connection of said nomadic terminal on a network to any site not belonging to said original multisite organization in l absence of identification of said location reference in both of the internal permanent addresses, all of the internal temporary addresses.

14. mobile terminal according to claim 13, characterized in that said external temporary address allocated to the mobile terminal for any network connection of this mobile terminal on any site not belonging to the original multisite organization is formed by a permanent address value allocated to said nomad terminal and translated or not translated between said nomad terminal and said origin site through the Internet.

15. nomad terminal according to one of claims 13 or 14, characterized in that said means for transmitting the signaling message are formed by a software agent executable by said nomad terminal, allowing the creation and then the transmission of said signaling message to the address of the original home network.

16. mobile terminal according to claim 15, characterized in that, for the execution of the creation of said signaling message, said executable software agent comprises at least, for a determined location reference deemed to correspond to a mobile terminal connected to a site determined by any organization: - a test consisting in verifying the absence of identity of the location reference and the internal permanent address allocated to said mobile terminal, permanently stored in the latter; and, on a negative response to said test, said location reference being identical to the permanent address of said mobile terminal, - a step consisting in continuing the normal connection and message exchange procedure; otherwise, on a positive response to said test, said location reference being distinct from said internal permanent address allocated to said mobile terminal, a step consisting in forming said signaling message, comprising at least said location reference