FR2841720A1 - METHOD FOR INDIVIDUALIZING A TERMINAL CONNECTED TO AT LEAST ONE SERVER THROUGH A NETWORK - Google Patents

Abstract

The method of individualizing a terminal (10) connected to at least one server (5) through a network (2) comprises the following steps: a) at the terminal (10), establishing a connection session (20 ) with the server (5), and b) at the level of the server (5), process the connection session according to a chosen operating mode The operating mode comprises the following steps: c) at the level of the server (5), in the event of terminal service request included in the connection session, generate a unique certificate (ESN) associated with said terminal (10), and communicate said certificate to said terminal; d) at the terminal (10), receive and store said certificate (ESN ); ande) at the level of the server (5), validating the service request with the terminal thus individualized in a unique manner.

Description

METHOD FOR INDIVIDUALIZATION OF A TERMINAL CONNECTED TO

  LESS A SERVER THROUGH A NETWORK

  The present invention relates to a method for individualizing a terminal connected to at least one server through a network, a terminal and

  a server adapted to the implementation of said method.

  It finds general application in the management of service terminals, and more particularly of communication terminals such

than public phones.

  Generally speaking, a public telephone network is made up of public telephones distributed over a given territory. Public telephones are connected to a communication network, constituted for example by the switched telephone network PSTN (acronym for Public Switching Telephone Network), with which it

communicates using a modem.

  A public telephone network generally comprises one or more central computers or management servers, often called PMS servers (acronym of the English term Payphone Management System), allowing the network operator to operate the supervision of

  different phones on its network.

  This PMS server, connected to the switched telephone network via a router, has the function of exchanging with the fleet of telephones

  information relating to the operation of the telephone system.

  In practice, the PMS server has the function of operating the downloading of program updates operating the circuits of public telephones, updates correcting any errors detected in the programs already in place or even

  introducing new services for users.

  In addition, the PMS server has the function of receiving reports from each telephone, in particular alarm reports or

  many billing statistics.

  Two telephones, physically installed in two different places, can be initialized on site (by a surveillance and / or service agent) with the same telephone number, made possible by entering this number by the maintenance agent via a program of

  maintenance available in the public telephone.

  In this case, the PMS server cannot correctly process the reports from the two separate telephones since they are erroneously considered according to the associated telephone number as coming from one and the same telephone. Consequently, duplicates of information appear, even erroneous accumulations of data such as the number of chargeable taxes, the number of calls made, etc. hindering optimization and the

  profitability calculation of a set of telephones.

  Similarly, the PMS server is unable to remotely locate a telephone whose initialization is incorrectly set up on

  site by a surveillance and / or service agent.

  The present invention overcomes these drawbacks.

  It relates to a method for individualizing a terminal connected to at least one PMS type server through a network, of the switched network type comprising the following steps: a) at the terminal, establishing a connection session with the server , and b) at the server level, receive and process the connection session according to a chosen operating mode. According to a general definition of the invention, the operating mode comprises the following steps: c) at the server level, in the event of a terminal service request included in the connection session, generate a certificate, called ESN (for Electronic Serial Number) ), unique associated with said terminal, and communicate said certificate to said terminal. This service request can only be an initialization request; d) at the terminal, receive and store said certificate in its internal memories; and e) at the server level, validate the terminal service request

  thus uniquely individualized.

  Thus, a single certificate is sent to the terminal during certain connection sessions corresponding to a predetermined service request.

  In practice, the service request is of the initialization type.

  This certificate guarantees the absence of duplicates or duplicates in the server tables, which allows correct processing of reports.

from each terminal.

  Advantageously, the certificate is stored at the level of its generation to be either transmitted to the terminal during an initiation session, or checked for any other type of session.

  (download, daily call, call for alarm ...).

  At this stage two fundamental points of the invention are to be specified: At the time of the initial start-up of a server of PMS type, a source certificate (ESN) is generated coded on 8 bytes. This random number is specific and unique to each PMS. This guarantees the uniqueness of the numbers generated on each server specially

  in the case of a cascading system with several PMS servers.

  * Starting from this "root" number, the following certificates generated will be done in increments of 1 then distributed terminal by terminal and

  finally stored in the server tables.

  15. If in all call sessions (download, daily call, call for alarm, etc.) the certificate (ESN) is checked, it will be generated during initialization sessions only in the following cases: 1. If the operator has globally authorized (all terminals) the initialization of said terminals by choosing an option via its man-machine interface, 2. If the operator has uniquely authorized (one or more terminals) the initialization of said terminals by choosing an option via its man-machine interface, 3. This principle will advantageously avoid resets

  accidental (unauthorized) of existing terminals.

  The table below will summarize the points above: PMS PMS ESN generated Reset result reset or partial global check? allowed? allowed? No No Checked Reset initiated if ESN presented correct. No generation of a new ESN No Yes Generated Reset and return of a new ESN Yes Yes or No Generated Reset and return of a new ESN The PMS is equipped to do this, with a function authorizing: The generation of a source certificate (ESN) at the start of the PMS server and its storage in its tables, * The increment of 1, then the storage of each ESN generated, transmitted to the terminals following an initialization request, The control of any certificate (ESN) in all possible sessions from terminals, * The possibility of disengaging if necessary, globally, control of the certificate (ESN), * The regeneration of a certificate (ESN) on request during 'a

new initialization request.

  i5 According to a preferred embodiment, the source certificate is a random number. It will serve as the basic number for generating certificates

  following (ESN) in successive increments of 1.

  The present invention also relates to an installation, a terminal and a server for implementing the method according to the invention. Other characteristics and advantages of the invention will become apparent on

  light of the detailed description below and drawings in

  which: - Figure 1 is a schematic view of a public telephone network used for the implementation of the method according to the invention; - Figure 2 is a flowchart illustrating the steps of the method according to the invention; and - Figure 3 is a diagram illustrating the operating mode according to the invention. In FIG. 1, the reference 1 designates a telephony network 1

  public, including a fleet of public telephones 10.

  The telephones 10 are intended for use by self-service users and are therefore installed for this purpose in public places, such as streets or semi-public areas, such as shopping centers, airports, hotel halls, restaurants. , shops, etc. These telephones 10 allow users to carry out telephone communications, using a telephone network

suitable referenced 2.

  This telephone network 2 is of the analog switched type PSTN (Public Switching Telephone Network) or of the digital type ISDN (Integrated

Digital Network Services).

  This network 2 can also be constituted by a mobile radiotelephony network, whatever its nature: GSM, CDMA, TDMA, AMPS, D-AMPS, GPRS, or even by the Internet network or more generally by all suitable communication networks. transmitting

  data as well as any combination of such networks.

  These public telephones 10 can also be adapted to access information or supply servers for Web and Internet services, as well as information or supply servers for

  services residing on private networks.

  io Such access allows the operator operating network 1, to offer users a wide range of services, ranging for example, and without limitation, from reading their electronic mail to

  consultation of local information.

  These public telephones 10 are suitable for communicating with a server 5, also called a PMS dedicated to operation and management.

  of the public telephone network 1.

  The PMS server 5 has the function of exchanging with the fleet of public telephones 10 information concerning their operation and more

  generally the operation of the public telephone system.

  In particular, the PMS server 5 manages the initialization sessions of public telephones and establishes statistical data from information received from public telephones 10 (alarms, operating counters). Public telephones 10 and PMS 5 are provided with means

  appropriate supervision and reception / transmission of information.

  These organization and reception / transmission means are responsible for organizing the exchange of information between the public telephones 10 and the PMS 5 or an FTP server 4 (For File Transfer Protocol), capable of controlling data or software transfers. between phones

public 10 and the FTP server 4.

  s In other functions, the PMS server 5 transfers to the public telephones 10, the files necessary for their operation, such as tariff tables, configuration parameters such as the type of dialing, the characteristics of the line, opposition lists. or

  monitoring the means of payment used.

  The public telephones 10 for their part transmit information relating to their use, namely a daily report comprising data relating to the transactions carried out, to the traffic, an alarm report which makes it possible to report to the PMS 5 the occurrence of incidents or attacks on their integrity, such as a breakdown in the card reader or a torn handset, so as to provide for the intervention of a surveillance agent and a status file characterizing the content of the telephone (such as indications of the different versions of

  programs used by the microprocessor).

  To facilitate data exchange, we can use a server 4 specifically designed and adapted to file transfer 4, called FTP

(File Transfer Protocol).

  From orders received by the PMS server 5, each public telephone 10 which integrates a client FTP server entity, will connect to the

  FTP server 4 and download or download the appropriate files.

  Furthermore, the public telephones 10 can connect to a PROXY server 6 serving as a communication interface between the

  public telephones 10 and the PMS server 5.

  Furthermore, to allow connection to the various servers and in particular to the PROXY 6 server, to the PMS server 5 or to the FTP server 4, the telephones 10 are equipped with TCP / IP communication protocols conforming to the technical recommendations of 11ETF (Internet Engineering task Force) . With reference to FIGS. 2 and 3, the Applicant proposes an individualization method making it possible according to the invention to avoid the creation of

  duplicates which may occur in certain situations.

  One of these situations corresponds to that of a surveillance and / or service agent wishing to install a telephone in the location of his choice and wishing to initialize the terminal for the first time

with the PMS server 5.

  According to the invention, the individualization method comprises the following steps. First of all, the terminal 10 calls the PMS server 5 according to a connection session 20 of the Connect type, according to a chosen format, for example

  according to the protocol for data transfer PDU (Protocol Data Unit).

  Connection session 20 includes a service request

  corresponding here to an initialization request.

  This service request is accompanied by type data

  identification, for example NAP terminal number.

  For its part, the PMS 5 server verifies the NAP identity of the terminal

appellant.

  The verification (steps 30 and 34, Figure 3) then relates to whether the connected terminal is a new terminal, declared to the

  prior or not, with the possibility of general or partial initialization.

  If it is a new terminal, that is to say unknown to the tables of server 5, or declared as such, then an ESN certificate for "Electronic Serial Number, that is to say number of electronic series "

  is generated by the server 5 (step 32, Figure 3).

  This ESN certificate is unique for the connected terminal. It is

  associated with the identity number of the NAP terminal.

  Preferably, the ESN certificate is a random number (at the first

  generation), for example coded on 8 bytes.

  The server 5 stores the ESN certificate thus generated in a table in

  correspondence with the associated NAP identity.

  Then, the server 5 communicates (step 24, FIG. 2) the ESN certificate thus generated to the terminal, via the FTP server 4 and / or if necessary.

the PROXY 6 server.

  For its part, the terminal receives the ESN certificate and stores it in a

  appropriate memory, for example a Flash type memory.

  This ESN certificate thus makes it possible to individualize the new terminal in a unique way, which prevents the duplicates mentioned above. In the case of a terminal already registered in the tables of the PMS server, and for which the general or partial initialization is authorized, the server 5 also dynamically generates an ESN certificate. This certificate is then written to a server table before being

  send to the terminal, as described above.

  In practice, the ESN-2 certificate of terminal 10-2 of NAP-2 identity includes an increment of 1 compared to the ESN-1 certificate of

terminal 10-1 of identity NAP- 1.

  In the case of an already known terminal and in the absence of a general or partial initialization (step 36, FIG. 3), the service request is

  validated after verification of the ESN certificate of the connecting terminal.

  (There is no generation of a new certificate here) In case of negative verification of the ESN certificate, the service request

is refused by the server.

  In case of positive verification, the service request is authorized by

the server.

  The communication protocol between the server and the terminal can, if necessary, include steps for accepting data exchange ACCEPT (step 22, figure 2) and DISCONNECT (step 26, figure 2)

in accordance with the PDU protocol.

  These exchanges allow in particular to validate the receipt of the

ESN certificate on the terminal side.

  Thus, in the event of a problem in the transmission / reception of the ESN certificate and in the absence of acknowledgment of receipt issued by the terminal, the server

  keeps in its tables the old value of the certificate.

  The individualization process also responds to the problem encountered when a service agent wishing to install a new terminal,

  made an error in entering the identity number of the NAP terminal.

  In this case, the server checks the identity of the NAP number. If it is unknown, the server considers this phone as a new phone and it is managed as if it is a first initialization as described above (as long as this creation

  be authorized by the PMS server).

  If the NAP number is known, the server then checks the NAP and ESN pair.

  In the event of a negative comparison in the server tables, the telephone is systematically refused. In the event of a positive comparison, initialization is validated with an individualized terminal according to the invention. The individualization method according to the invention also responds to maintenance operations, for example when an agent wishes

  change a terminal card after a failure.

  If after replacing the card, the NAP number is unknown to the server, the terminal is considered to be a new terminal and it is managed as such, i.e. calculation of an ESN certificate and sending by the server at the terminal (provided that this automatic creation is

authorized by the PMS server) ..

  In the case where the terminal is already known by the server, a new initialization must be implemented in order to allocate new initialization files as well as the ESN certificate (the reinitialization of said terminal is authorized by the operator by setting man machine interface). In this case, the ESN certificate is checked

according to step 36.

  The method according to the invention also finds an application when no initialization is planned or planned and an agent wishes

  perform an initialization due to a technical problem.

  In this case, the server checks the pair formed by the NAP number and the ESN certificate to guarantee the absence of duplication. In the event of a positive verification, initialization is authorized and the server communicates the corresponding files while in the event of verification

  negative, communication is refused.

  Preferably, the ESN certificate is systematically checked, in particular during service requests of the alarm, report type.

  daily, download of objects, remote diagnosis.

Claims (9)

  1. Method for individualizing a terminal (10) connected to at least one server (5) through a network (2), of the type comprising the following steps: a) at the terminal (10), establishing a session connection (20) with the server (5), and b) at the server (5), processing the connection session according to a chosen operating mode, characterized in that said operating mode comprises the following steps: c) at the level the server (5), in the event of a service request from the terminal included in the connection session, generating a single certificate (ESN) associated with said terminal (10), and communicating said certificate to said terminal; d) at the terminal (10), receive and store said certificate (ESN) and e) at the server (5), validate the service request with the   terminal thus uniquely individualized.   2. Method according to claim 1, characterized in that the certificate (ESN) is stored at the server after receipt of an acknowledgment   reception sent by the terminal at the end of step d).   3. Method according to claim 1, characterized in that in the event of a connection session devoid of service request, the connection session is processed according to the following steps :, i) in the absence of certificate (ESN) among the connection session, consider said connection session as being provided with a service request and process it according to step c), ii) in the presence of a certificate among the connection session, verify said certificate, and in case of positive verification , authorize the connection request while in case of negative verification, refuse the connection request.   4. Method according to claim 1 or claim 2, characterized in that the source certificate (ESN) is a random number.   5. Method according to one of the preceding claims, characterized in that   that the service request is of the initialization, alarm,   downloading of objects or other similar event.   6. Installation of the type comprising a terminal connected to at least one server through a network for the implementation of the method according to   any one of claims i to 4, characterized in that the   terminal (10) comprises communication means, processing means and storage means and in that the server (5) comprises communication means, processing means, storage means and generation means suitable for generate and / or control a unique certificate (ESN) for each terminal 7. Terminal for implementing the method according to any one   claims 1 to 4, characterized in that the terminal comprises   means of communication, means of processing and means of memorization.   8. Terminal according to claim 6, characterized in that it belongs to the group formed by public telephones, service apparatus and the like 9. Server for implementing the method according to any one   claims 1 to 4, characterized in that the server (5)   includes communication means, processing means, storage means and generation means capable of generating and / or controlling a single certificate (ESN) for each terminal (10).