Detection of unauthorized applications, objects, or configurations in a local device of a cable system

• US 20030018445A1
• Filed: 07/19/2001
• Published: 01/23/2003
• Est. Priority Date: 07/19/2001
• Status: Abandoned Application

• Current Assignee: General Instrument Corporation (CommScope Holding Company, Inc.)
• Original Assignee: General Instrument Corporation (CommScope Holding Company, Inc.)
• Inventors: Vince, Lawrence D., Safadi, Reem
• Application Number:
  US09/908,875
• Publication Number:
  US 20030018445A1
• Time in Patent Office: Days
• US Class Current: 702/119
• CPC Class Codes: H04N 21/4424 Monitoring of the internal components or processes of the client device, e.g. CPU or memory load, processing speed, timer, counter or percentage of the hard disk space used error monitoring in general G06F11/30; arrangements for monitoring conditions of receiving stations in broadcast systems H04H60/32; diagnosis, testing or measuring for television receivers H04N17/04
• CPC Class Codes: H04N 21/6582 Data stored in the client, e.g. viewing habits, hardware capabilities, credit card number arrangements where receivers interact with the broadcast H04H20/38
• CPC Class Codes: H04N 21/8193 dedicated tools, e.g. video decoder software or IPMP tool
• CPC Class Codes: H04N 7/17318 Direct or substantially direct transmission and handling of requests

Abstract

A local device associated with a communication network is tested for signs of tampering by downloading from a remote device, via the network, a policing code object into the local device. The policing code object is executed within the local device and a message including the results of tests performed by the policing code object are evaluated to determine whether corrective action is required.

Claims

1. A method of determining, over a communication network, the condition of code or configuration data residing in a local device, the method comprising:

(a) downloading from a remote device, via the communication network, a policing code object into the local device;

(b) executing the policing code object in the local device; and

(c) the remote device receiving, from the local device, a message including a summary of the results of one or more tests performed by the policing code object.

2. The method of claim 1, wherein the tests determine whether the code or configuration data is one or more of (i) valid or authorized code or configuration data previously loaded into the local device, and (ii) unauthorized code or configuration data previously loaded into the local device for fraudulent or mischievous purposes.

3. The method of claim 2, further comprising:

(d) the remote device taking corrective action in response to (i) the message indicating that valid or authorized code or configuration data is not present in the local device, (ii) the message indicating that unauthorized code or configuration data is present in the local device, or (iii) the remote device not receiving a message comprising a summary of the test results within a predetermined period of time.

4. The method of claim 3, wherein the corrective action consists of one or more of the following actions:

(I) altering the condition of the local device;

(II) denying service to a user of the local device; and

(III) alerting a system operator.

5. The method of claim 1, wherein the communication network is an OpenCable network, and the local device is at least one of a point-of-deployment (POD) module and a host.

6. The method of claim 5, wherein the message is sent from the POD module to the remote device via the host.

7. The method of claim 1, wherein the message is an acknowledgement message that includes a confirmation of the authenticity of the test results.

8. The method of claim 7, wherein the acknowledgement message is a signed acknowledgement message.

9. The method of claim 1, wherein the communication network is a hybrid-fiber coax (HFC) network.

10. The method of claim 1, wherein the local device is at least one of a set-top terminal and a cable modem.

11. The method of claim 1, wherein the code or configuration data is stored in a memory in the local device.

12. The method of claim 1, wherein the remote device is a remotely located access controller.

13. The method of claim 1, wherein step (b) is implemented immediately after step (a) has been completed or when instructed by the remote device.

15. The CATV system of claim 14, wherein the tests determine whether the code or configuration data is one or more of (i) valid or authorized code or configuration data previously loaded into the local device, and (ii) unauthorized code or configuration data previously loaded into the local device for fraudulent or mischievous purposes.

16. The CATV system of claim 15, wherein the remote device takes corrective action in response to (i) the message indicating that valid or authorized code or configuration data is not present in the local device, (ii) the message indicating that unauthorized code or configuration data is present in the local device, or (iii) the remote device not receiving a message comprising a summary of the test results within a predetermined period of time.

17. The CATV system of claim 16, wherein the corrective action consists of one or more of the following actions:

(I) altering the condition of the local device;

(II) denying service to a user of the local device; and

(III) alerting a system operator.

18. The CATV system of claim 14, wherein the communication network is an OpenCable network, and the local device is at least one of a point-of-deployment (POD) module and a host.

19. The CATV system of claim 18, wherein the message is sent from the POD module to the remote device via the host.

20. The CATV system of claim 14, wherein the message is an acknowledgement message that includes a confirmation of the authenticity of the test results.

21. The CATV system of claim 20, wherein the acknowledgement message is a signed acknowledgement message.

22. The CATV system of claim 14, wherein the communication network is a hybrid-fiber coax (HFC) network.

23. The CATV system of claim 14, wherein the local device is at least one of a set-top terminal and a cable modem.

24. The CATV system of claim 14, wherein the code or configuration data is stored in a memory in the local device.

25. The CATV system of claim 14, wherein the remote device is a remotely located access controller.

26. The CATV system of claim 14, wherein the policing code object is executed in the local device immediately after being downloaded or when instructed by the remote device.

14. A CATV system, comprising:

(a) a remote device;

(b) a communication network; and

(c) a local device, wherein code or configuration data resides in the local device, a policing code object is downloaded from the remote device into the local device via the communication network, the policing code object is executed in the local device, and the remote device receives, from the local device, a message including a summary of the results of one or more tests performed by the policing code object.