Set Top Box With Firewall

• US 20090254936A1
• Filed: 06/15/2009
• Published: 10/08/2009
• Est. Priority Date: 12/28/2001
• Status: Abandoned Application

• Current Assignee: Chanyu Holdings LLC (Intellectual Ventures LLC)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Swix, Scott R., Gray, James H., Watson, Paul Thomas
• Application Number:
  US12/484,348
• Publication Number:
  US 20090254936A1
• Time in Patent Office: Days
• US Class Current: 725/25
• CPC Class Codes: H04N 21/44209 Monitoring of downstream path of the transmission network originating from a server, e.g. bandwidth variations of a wireless network arrangements for maintenance or administration in data switching networks involving bandwidth and capacity management H04L41/0896
• CPC Class Codes: H04N 21/4424 Monitoring of the internal components or processes of the client device, e.g. CPU or memory load, processing speed, timer, counter or percentage of the hard disk space used error monitoring in general G06F11/30; arrangements for monitoring conditions of receiving stations in broadcast systems H04H60/32; diagnosis, testing or measuring for television receivers H04N17/04
• CPC Class Codes: H04N 21/44245 Monitoring the upstream path of the transmission network, e.g. its availability, bandwidth
• CPC Class Codes: H04N 21/454 Content or additional data filtering, e.g. blocking advertisements
• CPC Class Codes: H04N 21/6547 comprising parameters, e.g. for client setup
• CPC Class Codes: H04N 7/165 Centralised control of user terminal subsequent to an upstream request signal H04N7/17345; Registering at central by two-way working H04N7/17309

Abstract

A set top box with a firewall is disclosed. The set top box uses two separate ports to communicate with two respective communications networks. The first port communicates with the first network to receive programming information and the second port communicates with the second network to receive information. A firewall, in communication with one of the ports, is capable of receiving and analyzing information from the port. The firewall helps to prevent harmful or unauthorized information from reaching other components of the set top box. The firewall can receive information before other components associated with the set top box and the firewall can include various different forms of filtering.

Claims

1. A set top box, comprising:

a first port coupling a processor to a first communications network and to a database, the first port sending resource information associated with the set top box, the resource information describing a disk drive and a capacity of the disk drive;

a second port coupling the processor to a second communications network;

the first port receiving an operating instruction that permits the processor to access the disk drive;

the processor receiving an instruction when there is a difference between the capacity of the disk drive and an authorized storage for the set top box defined in a database, the difference indicating unauthorized modification to the set top box, the instruction causing the processor to disable operation of the set top box.

2. The set top box according to claim 1, wherein the operating instruction causes the processor to limit the capacity of the disk drive.

3. The set top box according to claim 1, wherein the operating instruction causes the processor to increase the capacity of the disk drive.

4. The set top box according to claim 1, further comprising a firewall in communication with the second port and capable of receiving communications from the second port and capable of analyzing the information received from the second communications network

5. The set top box according to claim 4, wherein a firewall analyzes the operating instruction.

6. The set top box according to claim 4, wherein the firewall is disposed logically between the first port and other components associated with the set top box.

7. A set top box comprising:

a first port capable of communicating with a first communications network, a second port capable of communication with a second communications network and capable of receiving information from the second communications network;

a tuner in communication with the first communications network and capable of selecting a program;

a firewall in communication with the second port, capable of receiving communications from the second port and capable of filtering the information received from the second communications network.

8. The set top box according to claim 7, wherein firewall includes packet filtering.

9. The set top box according to claim 7, wherein firewall includes a proxy service.

10. The set top box according to claim 7, wherein firewall includes stateful inspection.

11. The set top box according to claim 7, wherein firewall is capable of analyzing information formatted in a communications protocol.

12. The set top box according to claim 7, wherein the set top box further comprises a remote resource manager capable of receiving instructions from the second communications network.

13. A set top box comprising:

a first port capable of communicating with a first communications network,

a second port capable of communication with a second communications network;

a tuner in communication with the first communications network and capable of selecting a program;

at least one fixed disk drive capable of storing the program information;

a firewall in communication with the second port, capable of receiving communications from the second port and capable of analyzing the information received from the second communications network.

14. The set top box according to claim 13, wherein the set top box further comprises an MPEG decoder.

15. The set top box according to claim 13, wherein the set top box further comprises a remote resource manager.

16. The set top box according to claim 15, wherein the remote resource manager is capable of receiving an instruction from the second communications network and wherein the instruction is used by the remote resource manager to modify a configuration of the set top box.

17. A method, comprising:

initiating communication between a set top box and a first service provider over a first communications network;

initiating communication between the set top box and a service provider over a second communications network;

sending resource information associated with the set top box describing a disk drive and a capacity of the disk drive;

receiving an operating instruction that permits a processor to access the disk drive; and

receiving an instruction when there is a difference between the capacity of the disk drive and authorized storage for the set top box defined in a database, the difference indicating unauthorized modifications to the set top box, the instruction causing the processor to disable operation of the set top box.

18. A method according to claim 18, wherein executing the operating instruction comprises limiting the capacity of the disk drive.

19. A method according to claim 18, wherein executing the operating instruction comprises increasing the capacity of the disk drive.

20. A computer program embodied on a computer-readable storage medium, the computer program including instructions for causing a processor to implement a process comprising:

initiating communication between a set top box and a first service provider over a first communications network;

initiating communication between the set top box and a service provider over a second communications network;

sending resource information associated with the set top box describing a disk drive and a capacity of the disk drive;

receiving an operating instruction that permits a processor to access the disk drive; and

receiving an instruction when there is a difference between the capacity of the disk drive and authorized storage for the set top box defined in a database, the difference indicating unauthorized modifications to the set top box, the instruction causing the processor to disable operation of the set top box.