Two-tiered authorization and authentication for a cable data delivery system

• US 6,324,267 B1
• Filed: 04/10/1997
• Issued: 11/27/2001
• Est. Priority Date: 01/17/1997
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Scientific-Atlanta Incorporated (Cisco Systems, Inc.)
• Inventors: Hraster, Scott E., Bowcutt, Roy A.
• Primary Examiner(s): Kuntz, Curtis
• Assistant Examiner(s): RAMAKRISHNAIAH, MELUR
• Application Number:
  US08/835,916
• Time in Patent Office: 1,692 Days
• Field of Search: 379/207, 379/201, 379/67, 379/88, 379/210, 379/211, 379/258, 379/111, 379/112, 379/91, 379/93, 379/95, 379/98, 379/107, 455/410, 455/411, 348/12, 348/13, 348/7, 370/401
• US Class Current: 379/93.02
• CPC Class Codes: H04H 20/79 using downlink of the CATV systems, e.g. audio broadcast via CATV network
• CPC Class Codes: H04H 60/84 which are fixed telephone networks
• CPC Class Codes: H04L 12/2801 Broadband local area networks
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/2863 Arrangements for combining access network resources elements, e.g. channel bonding modem pooling H04L25/14; routing of packets H04L45/00; multichannel or multilink protocols H04L69/14
• CPC Class Codes: H04L 12/2872 Termination of subscriber connections
• CPC Class Codes: H04L 12/2874 Processing of data for distribution to the subscribers
• CPC Class Codes: H04L 12/5692 Selection among different networks
• CPC Class Codes: H04L 2101/604 Address structures or formats
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0663 Performing the actions predefined by failover planning, e.g. switching to standby network elements
• CPC Class Codes: H04L 41/0677 Localisation of faults
• CPC Class Codes: H04L 61/50 Address allocation
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 61/5061 Pools of addresses
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04N 21/25816 : involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/42676 : for modulating an analogue carrier signal to encode digital information or demodulating it to decode digital information, e.g. ADSL or cable modem
• CPC Class Codes: H04N 21/6118 : involving cable transmission, e.g. using a cable modem
• CPC Class Codes: H04N 21/6168 : involving cable transmission, e.g. using a cable modem
• CPC Class Codes: H04N 7/17309 : Transmission or handling of upstream communications

Abstract

Apparatus for a cable television subscriber to log onto a computer network with a modem over an upstream path using a USERID and password. The network validates the subscriber USERID and subscriber password with a stored database of valid USERIDs and associated passwords. After the USERID and password are validated, the modem then provides its electronic serial number to the network for validation against a stored database of authorized serial numbers. Upon additional validation of the modem'"'"'s serial number, the subscriber is authorized to use the network.

Claims

1. In a cable delivery network for delivering digital data to a host location upon a subscriber initiated request, apparatus for authenticating that the subscriber is authorized to use said network, said apparatus comprising:

a network manager including a database of authorized users and a validation agent, wherein the database includes an associated USERID and password for each of the authorized users and authorized identifying numbers for telephone dial up devices; and

said host location including a telephone dial up device for the subscriber to log onto said network and connect to said network manager using identification information, wherein said identification information includes a subscriber USERID and a subscriber password, wherein said dial up device includes a cable data receiver for receiving the digital data, wherein said telephone dial up device is uniquely identified by an electronic identifying number, wherein said validation agent authorizes the subscriber to use said network in accordance with a comparison of said identification information to said users in said database, including a comparison of subscriber USERID and subscriber password to USERIDs and passwords stored in said database, and wherein said validation agent authorizes said dial up device to receive said digital data in accordance with a comparison of said electronic identifying number of said dial up device with said authorized identifying numbers stored in said database.

2. A system that determines whether a subscriber in a network for delivering digital data to a host location upon a subscriber initiated request is authorized to use said network, comprising:

a network manager with a database of authorized users and a validation agent;

a host location coupled to a connection device to access said network manager via a path for a subscriber to log onto said network and connect to said network manager using authentication information, wherein said connection device includes a unique identifying number and said validation agent authorizes the subscriber to use said network in accordance with a validation that said authentication information is associated with said authorized users in said database and in accordance with one of multiple tiers of authorization;

wherein a subscriber USERID and a subscriber password are used in the creation of said authentication information;

wherein said database includes an associated USERID and password for each of said authorized users;

wherein said validation agent is designated to authorize said subscriber to use said network in accordance with a validation that said authorization information is consistent with information related to USERIDs and passwords stored in said database;

wherein said connection device is identified by its unique electronic identifying number;

wherein said database is configured to include authorized electronic identifying numbers for said connection devices; and

wherein said validation agent is implemented to authorize said connection device to receive said digital data in accordance with a comparison of said electronic identifying number of said connection device with said electronic identifying numbers stored in said database.

3. The system of claim 2, wherein a telephone dial up device is included in said connection device;

and

wherein a cable data receiver is included in said connection device;

and said connection device is coupled to both a telecommunications line and a cable television network wherein said subscriber may make data requests via said telecommunication line and receive data via said cable television network.

4. A method that determines whether a subscriber in a data delivery network for delivering digital data to a host location upon a subscriber initiated request is authorized to use said network, comprising:

implementing a network manager with a database of authorized users and a validation agent;

implementing a host location coupled to a connection device to access said network manager via a path, wherein said connection device includes a unique electronic identifying number;

permitting a subscriber to log onto said network and connect to said network manager using multiple tiers of authentication information, wherein said validation agent authorizes said subscriber to use said network in accordance with a validation that said authentication information is associated with said authorized users in said database and in accordance with one of multiple tiers of authorization;

wherein the above steps further include;

using a subscriber USERID and a subscriber password in the creation of said identification information;

configuring said database to include an associated USERID and password for each of said authorized users;

implementing said validation agent to authorize said subscriber to use said network in accordance with a validation that said identification information is consistent with information related to USERIDs and passwords stored in said database;

identifying said connection device by its unique electronic identifying number;

configuring said database to include authorized electronic identifying numbers for said connection devices;

implementing said validation agent to authorize said connection device to receive said digital data in accordance with a comparison of said electronic identifying number of said connection device with said electronic identifying numbers stored in said database;

including in said connection device a telephone dial up device and a cable data receiver;

coupling said connection device to both a telecommunications line and a cable television network; and

implementing said validation agent to authorize said connection device to receive said digital data via said cable television network in accordance with a comparison of said electronic identifying number of said connection device with said electronic identifying numbers stored in said database.

5. The method of claim 4, further comprising the steps of:

including in said connection device a telephone dial up device and a cable data receiver; and

coupling said connection device to both a telecommunications line and a cable television network wherein said subscriber may make data requests via said telecommunication line and receive data via said cable television network.

6. A system that determines whether a subscriber in a network for delivering digital data to a host location upon a subscriber initiated request is authorized to use said network, comprising:

a network manager with a database of authorized users and a validation agent;

a host location coupled to a connection device to access said network manager via a path for a subscriber to log onto said network and connect to said network manager using authentication information, wherein said connection device includes a unique identifying number and said validation agent authorizes the subscriber to use said network in accordance with a validation that said authentication information is associated with said authorized users in said database and in accordance with one of multiple tiers of authorization;

wherein a subscriber USERID and a subscriber password are used in the creation of said authentication information;

wherein said database includes an associated USERID and password for each of said authorized users;

wherein said validation agent is designated to authorize said subscriber to use said network in accordance with a validation that said authentication information is consistent with information related to USERIDs and passwords stored in said database;

wherein a telephone dial up device is included in said connection device;

wherein a cable data receiver is included in said connection device;

wherein said connection device is coupled to both a telecommunications line and a cable television network; and

wherein said validation agent is implemented to authorize said connection device to receive said digital data via said cable television network in accordance with a comparison of said electronic identifying number of said connection device with said electronic identifying numbers stored in said database.