SYSTEM AND METHOD FOR PROVIDING NETWORK SUPPORT SERVICES AND PREMISES GATEWAY SUPPORT INFRASTRUCTURE

• US 20100241748A1
• Filed: 09/07/2007
• Published: 09/23/2010
• Est. Priority Date: 12/29/2006
• Status: Active Grant

• Current Assignee: Tyson King
• Original Assignee: Prodea Systems, Inc.
• Inventors: McQuarters, Alvin R., Ramayya, Jude P., Nicholls, Leon E., Masina, Ramprakash, Cowgill, George A., Ansari, Amir, Raissyan, Atousa
• Granted Patent: US 8,281,010 B2
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: G05B 15/02 electric
• CPC Class Codes: G05B 19/042 using digital processors G05B19/05 takes precedence
• CPC Class Codes: G05B 2219/2642 Domotique, domestic, home control, automation, smart house
• CPC Class Codes: G06F 16/64 Browsing; Visualisation therefor generation of a list or set of audio data G06F16/638
• CPC Class Codes: G06F 16/68 Retrieval characterised by using metadata, e.g. metadata not derived from the content or metadata generated manually
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G08B 13/19656 Network used to communicate with a camera, e.g. WAN, LAN, Internet
• CPC Class Codes: G10L 15/22 Procedures used during a speech recognition process, e.g. man-machine dialogue
• CPC Class Codes: G10L 2015/223 Execution procedure of a spoken command
• CPC Class Codes: H04L 12/2803 Home automation networks
• CPC Class Codes: H04L 12/2807 Exchanging configuration information on appliance services in a home automation network arrangements for maintenance or administration involving network analysis for automatically determining the actual topology of a network H04L41/12; hardware or software tools for network management using graphical user interfaces H04L41/22; address allocation H04L61/50
• CPC Class Codes: H04L 12/2812 describing content present in a home automation network, e.g. audio video content retrieval from the Internet G06F16/95
• CPC Class Codes: H04L 12/2814 Exchanging control software or macros for controlling appliance services in a home automation network arrangements for maintenance or administration involving configuration of the network and network elements H04L41/08
• CPC Class Codes: H04L 12/2816 Controlling appliance services of a home automation network by calling their functionalities arrangements in telecontrol or telemetry systems for selectively calling a substation from a main station; in which substation desired apparatus is selected for applying a control signal thereto or for obtaining measured values therefrom H04Q9/00
• CPC Class Codes: H04L 12/2818 from a device located outside both the home and the home network access arrangements H04L12/2856; for remote control or remote monitoring of applications H04L67/025; arrangements for transmitting signals characterised by the use of a wireless eletrical link G08C17/00; telephonic communication systems adapted for combination with remote control systems H04M11/007
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 2012/2849 Audio/video appliances
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 47/80 : Actions related to the user profile or the type of traffic
• CPC Class Codes: H04L 47/83 : based on usage prediction
• CPC Class Codes: H04L 49/25 : Routing or path finding in a switch fabric
• CPC Class Codes: H04L 61/4552 : Lookup mechanisms between a plurality of directories; Synchronisation of directories, e.g. metadirectories
• CPC Class Codes: H04L 63/02 : for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 : based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 65/102 : Gateways arrangements for connecting between networks having differing types of switching systems, e.g. gateways, H04L12/66
• CPC Class Codes: H04L 65/1101 : Session protocols
• CPC Class Codes: H04L 65/1108 : Web based protocols, e.g. webRTC
• CPC Class Codes: H04L 67/01 : Protocols
• CPC Class Codes: H04L 67/104 : Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/125 : involving control of end-device applications over a network
• CPC Class Codes: H04L 67/141 : Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/51 : Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/53 : using third party service providers
• CPC Class Codes: H04L 69/325 : in the network layer [OSI layer 3], e.g. X.25 H04L69/16 takes precedence
• CPC Class Codes: H04N 21/00 : Selective content distribution, e.g. interactive television or video on demand [VOD] real-time bi-directional transmission of motion video data H04N7/14 ; broadcast or conference over packet switching networks H04L12/18
• CPC Class Codes: H04N 21/40 : Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
• CPC Class Codes: H04N 7/181 : for receiving images from a plurality of remote sources
• CPC Class Codes: H04W 12/00 : Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/033 : of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/0431 : Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/065 : Continuous authentication
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 12/35 : Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: Y10S 370/911 : Bridge, e.g. brouter, bus extender

Abstract

A disclosed, service management system (50) communicates via wide area network (99) with gateway devices (10), located at respective user premises. The service management system (50) remotely manages delivery of application services by the gateway device(s) (1 On), e.g. by selectively activating or deactivating service logic modules in the gateway devices. The service management system (50) also may selectively provide secure communications and exchange of information among gateway devices (10) and among associated endpoint devices (30). An exemplary service management system (50) includes a router connected to the network and one or more computer platforms, for implementing management functions. Examples of the functions include a connection manager for controlling system communications with the gateway devices, an authentication manager for authenticating each gateway device and controlling the connection manager and a subscription manager for managing applications services and/or features offered by the gateway devices. A service manager, controlled by the subscription manager, distributes service specific configuration data to authenticated gateway devices.

Claims

1. A service management system, for managing services through gateway devices at respective user premises, the gateway devices providing gateway connectivity to a wide area network and at least some server functionality for service delivery for one or more digital endpoint, client devices at respective customer premises over networks within the customer premises, the service management system comprising:

a router for connection to the wide area network for communications with the gateway devices; and

at least one computer platform coupled to the router, configured for implementing;

(a) a connection manager for controlling system communications with the managed gateway devices, via the router and the wide area network;

(b) an authentication manager for authenticating each of the gateway devices and controlling the connection manager to establish a signaling communication link through the wide area network with each of the gateway devices upon successful authentication of each respective gateway device;

(c) a subscription manager for managing applications services and/or features of the server functionality, to be enabled on each respective authenticated gateway device, based on a service subscription associated with the respective authenticated gateway device; and

(d) a service manager for distributing service specific configuration data to logic implementing the server functionality in authenticated gateway devices via the wide area network, responsive to the subscription manager.

2. The system of claim 1, wherein the authentication manager is configured for confirming authentication of the respective gateway device and application services provided or executed by each respective gateway device from time to time.

3. The system of claim 2, wherein the authentication manager is configured for controlling the connection manager to maintain a logical session for the signaling communication link through the wide area network with each respective gateway device as long as the authentication manager continues to confirm the authentication of the respective gateway device.

4. The system of claim 3, wherein the system is configured to communicate via the signaling communication link through the wide area network with each respective gateway device using a peer and presence messaging protocol.

5. The system of claim 1, further comprising:

a gateway device updater implemented on the at least one computer platform;

wherein the updater is configured for downloading service logic modules for implementing application services and/or service features to the gateway devices, via the wide area network, for enabling application services and/or service features identified by the service manager at respective gateway devices.

6. The system of claim 1, further comprising a location server functionality, implemented on the at least one computer platform, responsive to the service manager, for maintaining information as to accessibility of authenticated gateway devices for enabling peer to peer communications among gateway devices via the wide area network.

7. The system of claim 1, further comprising an accessibility test server functionality, implemented on the at least one computer platform, configured for communication via signaling communication link through the wide area network with each of the gateway devices, to determine nature of accessibility of each gateway device through the wide area network.

8. The system of claim 1, further comprising a Session Initiation Protocol (SIP) proxy server functionality and a Session Border Controller functionality, implemented on the at least one computer platform, configured to support SIP based voice over Internet protocol (VoIP) telephone services through the wide area network for endpoint devices communicating through a plurality of the gateway devices.

9. The system of claim 1, wherein the at least one computer platform comprises a plurality of computer platforms coupled to the router, to arrange the system to form a service management center network.

10. A system for providing managed services for a plurality of endpoint devices associated with a premises having a local area network, comprising:

a gateway device located at the premises coupled for communication with at least one of the endpoint devices which is located at the premises via the local area network and for communication with a wide area network outside the premises, the gateway device operable to deliver one or more application services to the plurality of endpoint devices;

the gateway device including one or more service logic modules for causing the gateway device to provide the one or more application services respectively, and configuration data for configuring the one or more service logic modules to enable the gateway device to deliver the one or more application services, wherein;

(a) the service logic modules and configuration data are logically positioned on the user premises side of a logical demarcation line between the wide area network and the user premises, and

(b) the gateway device is further operable to provide interoperability among two or more of the endpoint devices; and

a service management system coupled to the wide area network for communication with the gateway device, for remotely managing the delivery of the one or more application services by the gateway device,

the service management system being operable to selectively activate or deactivate one or more of the service logic modules in the gateway device.

11. The system of claim 10, wherein the service management system is further operable to facilitate communications and exchange of information via the wide area network, among the gateway device and at least one other gateway device located at another premises and/or among the at least one endpoint device and one or more endpoint devices associated with the at least one other gateway devices.

12. The system of claim 10, wherein the communication of the service management system with the gateway device utilizes a signaling communication session through the wide area network.

13. The system of claim 12, wherein the service management system is configured to authenticate the gateway device and to maintain the signaling communication session through the wide area network so long as the gateway device remains validly authenticated.

14. The system of claim 10, wherein the service management system comprises:

a router for connection to the wide area network for communications with the gateway device; and

at least one computer platform coupled to the router, configured for implementing;

(1) a connection manager for controlling communications with the gateway device, via the router and the wide area network;

(2) an authentication manager for authenticating the gateway device and controlling the connection manager to establish a signaling communication link through the wide area network with the gateway device upon successful authentication of the gateway device;

(3) a subscription manager for managing the applications services and/or features of the application services, to be enabled on the gateway device, based on a service subscription associated with the gateway device; and

(4) a service manager for communication via the signaling communication link, for distributing the configuration data to the gateway device via the signaling link through the wide area network, responsive to the subscription manager, for the selective activation or deactivation of one or more of the service logic modules.

15. The system of claim 14, wherein the authentication manager is configured for confirming authentication of the gateway device and application services provided or executed by the gateway device from time to time.

16. The system of claim 15, wherein the authentication manager is configured for controlling the connection manager to maintain a logical session for the signaling communication link through the wide area network with the gateway device as long as the authentication manager continues to confirm the authentication of the gateway device.

17. The system of claim 16, wherein the service management system and the gateway device are configured to communicate via the signaling communication link using a peer and presence messaging protocol.

18. The system of claim 14, further comprising:

a gateway device updater implemented on the at least one computer platform;

wherein the updater is configured for downloading service logic modules for implementing application services and/or service features to the gateway device, via the wide area network, for enabling application services and/or service features identified by the service manager at gateway device.

19. The system of claim 14, further comprising a location server functionality, implemented on the at least one computer platform, responsive to the service manager, for maintaining information as to accessibility of authenticated other gateway devices for enabling peer to peer communications of the gateway device with one or more of the other gateway devices via the wide area network.

20. The system of claim 10, wherein, the gateway device comprises:

a first interface for enabling bi-directional communications within the premises via the local area network, with one or more of the endpoint devices;

a second interface for enabling bi-directional communications for the one or more endpoint devices via the wide area network, and for enabling at least some bi-directional communications with the service management system via the wide area network;

a processor coupled to the interfaces; and

storage coupled to the processor, for storing programming for the processor including the one or more service logic modules and for storing the configuration data.

21. The system of claim 20, wherein, for each application service, processor execution of the programming provides functions in relation to a respective service for one or more endpoint devices including:

(1) application server communication with a client functionality of one or more endpoint devices, for the respective service, communicated on top of network layer communications of one or both of the interfaces;

(2) enforcement regarding authorization, authentication, configuration, or use of the respective service via the one or more endpoint devices; and

(3) management of the application service based upon the communications with the service management center via the wide area network through the second interface.

22. The system of claim 20, wherein:

the service logic modules provide logic for a plurality of application services;

the programming further includes logic for interfaces for the application services, logic for a services framework, and logic for platform management; and

interaction and interoperability of the application service interfaces logic, the application services logic, the services framework logic, and the platform management logic is managed responsive to the communications with the service management center via the wide area network through the second interface.

23. A system for providing managed services for a plurality of endpoint devices associated with a plurality of user premises having local area networks, comprising:

a plurality of gateway devices, each respective gateway device being located at a respective user premises coupled for communication with at least one of the endpoint devices which is located at the user premises via the local area network at the respective premises and for communication with a wide area network outside the user premises, the respective gateway device operable to deliver one or more application services to one or more endpoint devices associated therewith;

each respective one of the gateway devices including one or more service logic module for providing the one or more application services respectively, and configuration data for configuring the one or more service logic modules to enable the respective gateway device to deliver the one or more application services to the associated one or more endpoint devices, wherein the service logic modules and configuration data are logically positioned on a user premises side of the logical demarcation line between the wide area network and the respective user premises;

the gateway devices being further operable to provide interoperability among two or more of the endpoint devices; and

a service management system coupled to the wide area network for communication with the gateway devices, for remotely managing the gateway devices located at the plurality of user premises,

the service management system further operable to selectively activate or deactivate one or more service logic modules in each of the gateway devices for providing an application service at a respective user premises, and

the service management system further operable to selectively provide secure communications and exchange of information among the gateway devices and among the endpoint devices associated therewith.

24. The system of claim 23, wherein the service management system is further operable to facilitate communications and exchange of information via the wide area network, among the gateway devices and/or among the endpoint devices at a plurality of the user premises.

25. The system of claim 24, wherein the service management system comprises:

a router for connection to the wide area network for communications with the gateway devices; and

at least one computer platform coupled to the router, configured for implementing;

(a) a connection manager for controlling system communications with the managed gateway devices, via the router and the wide area network;

(b) an authentication manager for authenticating each of the gateway devices and controlling the connection manager to establish a signaling communication link through the wide area network with each of the gateway devices upon successful authentication of each respective gateway device;

(c) a subscription manager for managing applications services and/or features of the server functionality, to be enabled on each respective authenticated gateway device, based on a service subscription associated with the respective authenticated gateway device; and

(d) a service manager for communication via the signaling communication links, for distributing service specific configuration data to logic implementing the server functionality in authenticated gateway devices via respective signaling links through the wide area network, responsive to the subscription manager.

26. The system of claim 25, further comprising:

a gateway device updater implemented on the at least one computer platform;

wherein the updater is configured for downloading service logic modules for implementing application services and/or application service features to the gateway devices, via the wide area network, for enabling application services and/or application service features identified by the service manager at respective gateway devices.

27. The system of claim 25, further comprising a location server functionality, implemented on the at least one computer platform, responsive to the service manager, for maintaining information as to accessibility of authenticated gateway devices for enabling peer to peer communications among gateway devices via the wide area network.

28. The system of claim 25, further comprising an accessibility test server functionality, implemented on the at least one computer platform, configured for communication via signaling communication link through the wide area network with each of the gateway devices determine nature of accessibility of each gateway device.

29. The system of claim 25, further comprising a Session Initiation Protocol (SIP) proxy server functionality and a Session Border Controller functionality, implemented on the at least one computer platform, configured to support SIP based voice over Internet protocol (VoIP) telephone services through the wide area network for endpoint devices communicating through a plurality of the gateway devices.

30. The system of claim 23, wherein, each respective one of the gateway devices comprises:

a first interface for enabling bi-directional communications within the respective user premises via local area network, with one or more of the associated endpoint devices;

a second interface for enabling bi-directional communications for the one or more associated endpoint devices via the wide area network, and for enabling at least some bi-directional communications with the service management system via the wide area network;

a processor coupled to the interfaces; and

storage coupled to the processor, for storing programming for the processing including the one or more service logic modules for the respective gateway device and for storing the configuration data for the respective gateway device.