Methods for restricting access of network devices to subscription services in a data-over-cable system

• US 6,351,773 B1
• Filed: 12/21/1998
• Issued: 02/26/2002
• Est. Priority Date: 12/21/1998
• Status: Expired due to Fees

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: 3Com Corporation (HP Inc.)
• Inventors: Lee, Ronald B., Robinson, Philip T., Fijolek, John G., Gun, Levent
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): DINH, KHANH Q
• Application Number:
  US09/217,534
• Time in Patent Office: 1,163 Days
• Field of Search: 709/201, 709/220, 709/222, 709/224, 709/228, 709/227, 713/201, 370/19, 370/10
• US Class Current: 709/228
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04M 3/38 Graded-service arrangements, i.e. some subscribers prevented from establishing certain connections queuing arrangements H04Q3/64
• CPC Class Codes: H04M 7/006 Networks other than PSTN/ISDN providing telephone service, e.g. Voice over Internet Protocol (VoIP) , including next generation networks with a packet-switched transport layer H04L65/00 takes precedence; aspects not specific to the type of network H04M3/00; special services in those networks H04M3/42
• CPC Class Codes: H04N 2007/1739 the upstream communication being transmitted via a separate link, e.g. telephone line
• CPC Class Codes: H04N 21/6118 involving cable transmission, e.g. using a cable modem
• CPC Class Codes: H04N 21/6168 involving cable transmission, e.g. using a cable modem

Abstract

Methods for providing restricted access for a network device such as a cable modem or customer premise equipment on a data-over-cable system. An unknown or new network device is assigned a restricted network address such as a restricted Internet Protocol address. The restricted network address allows the network device to access less than all of the available features on the data-over-cable system. A connection timer is started on the data-over-cable system for a restricted connection to the network device. The connection timer restricts access to the data-over-cable system over a timed interval. A restricted connection is created between the data-over-cable system and the network device including the temporary restricted network address and the connection timer, thereby providing restricted access to the data-over-cable system over a timed interval. The methods may allow a data-over-cable system to provide restricted connections to unknown or new network devices without a long delay, yet provide security to the data-over-cable system.

Claims

1. In a data-over-cable system including a plurality of network devices, a method of restricting access for a network device, comprising the following steps:

receiving a connection request from a first network device on a second network device on the data-over cable system for a subscription service on the data-over-cable system;

determining from the second network device, whether information about the first network device is available on the data-over-cable system, and if not,

assigning a temporary restricted network address for a restricted connection to the first network device on the data-over-cable system from pre-determined list of restricted network addresses, wherein the temporary network address from the pre-determined list of restricted network addresses provides restricted access to subscription services on the data-over-cable system;

starting a connection timer on the data-over-cable system for a restricted connection to the first network device, wherein the connection timer restricts access to subscription services on the data-over-cable system over a timed interval; and

creating a restricted connection between the data-over-cable system and the first network device including the temporary restricted network address and the connection timer, thereby providing restricted access to subscription services the data-over-cable system.

2. A computer readable medium having stored therein instructions for causing a central processing unit to execute the method of claim 1.

3. The method of claim 1 wherein the first network device is any of a cable modem or customer premise equipment.

4. The method of claim 1 wherein the second network device is a cable modem termination system.

5. The method of claim 1 wherein the second network device is any of a Dynamic Host Configuration Protocol Server or a Remote Authentication Dial In User Service server.

6. The method of claim 1 wherein temporary restricted network address is an Internet Protocol address.

7. The method of claim 1 wherein the step of assigning a temporary restricted network address includes assigning a temporary Internet Protocol address obtained from a Dynamic Host Configuration Protocol server.

8. The method of claim 1 wherein the step of determining from the second network device, whether information about the first network device is available on the data-over-cable system, includes determining with information from a database associated with the second network device, whether information about the first network device is available on the data-over-cable system, wherein the database includes information about network devices that subscribe to services offered on the data-over-cable system.

9. The method of claim 1 wherein the step of determining from the second network device, whether information about the first network device is available on the data-over-cable system, includes determining whether a Medium Access Protocol address for the first network device is available on the data-over-cable system.

10. The method of claim 1 wherein the step of starting a connection timer includes starting a connection timer for a network port for a limited amount of time, wherein the network port is used to connect the first network device to a subscription service on the data-over-cable system on a restricted connection.

11. The method of claim 1, further comprising:

determining from the second network device, whether information about the first network device is available on the data-over-cable system, and if so,

assigning an unrestricted network address for an unrestricted connection to the first network device on the data-over-cable system from a list of unrestricted network addresses; and

creating an unrestricted connection to a subscription service between the data-over-cable system and the first network device including the unrestricted network address, thereby providing unrestricted access to a subscription service on the data-over-cable system.

12. In a data-over-cable system including a plurality of network devices, a method of changing access for a network device, comprising the following steps:

creating a restricted connection between a first network device and the data-over-cable system including a restricted network address from a pre-determined list of restricted network addresses providing restricted access to a subscription service the data-over-cable system, and a connection timer restricting access to the subscription service on data-over-cable system over a timed interval, thereby providing restricted access to the subscription service to the data-over-cable system over a timed interval;

obtaining information from the first network device on a second network device to uniquely identify the first network device on the data-over-cable system;

saving the information in a database associated with the second network device; and

changing the restricted connection to the subscription service between the first network device and the data-over-cable system to an unrestricted connection to the subscription service between the first network device and the data-over-cable system by;

terminating the restricted connection to the subscription service between the first network device and the data-over-cable system from the second network device;

receiving a new connection request from the first network device on the second network device to the subscription service on the data-over cable system;

validating information about the first network device using information from the database associated with the second network device; and

creating an unrestricted connection for the subscription service between the first network device and the data-over-cable system using information from the database.

13. A computer readable medium having stored therein instructions for causing processing unit to execute the method of claim 12.

14. The method of claim 12 further comprising changing the restricted network address to an unrestricted network address.

15. The method of claim 12 wherein the step of obtaining information from the first network device includes obtaining information with Simple Network Management Protocol messages.

16. The method of claim 12 wherein the Simple Network Management Protocol messages includes information parameters from a Simple Network Management Protocol management information base for a data-over-cable system.

17. The method of claim 12 wherein the step of changing the restricted connection to the subscription service between the first network device and the data-over-cable system includes applying information saved in the database associated with the second network device to the restricted connection, thereby creating an unrestricted connection to the subscription service between the first network device and the data-over-cable system.

18. In a data-over-cable system including a plurality of network devices, a method of restricting access for a network device, comprising the following steps:

receiving a connection request from a cable modem on a cable modem termination system on the data-over cable system for a subscription service on the data-over-cable system;

determining from the cable modem termination system, whether information about the cable modem is available on the data-over-cable system, and if not,

assigning a temporary restricted Internet Protocol address for a connection to the cable modem on the data-over-cable system from pre-determined list of restricted Internet Protocol addresses, wherein the temporary Internet Protocol address from the pre-determined list of restricted Internet Protocol addresses provides restricted access to the subscription service on the data-over-cable system;

starting a connection timer on the data-over-cable system for a restricted connection to the subscription service for the cable modem, wherein the connection timer restricts access to the subscription service on the data-over-cable system over a timed interval; and

creating a restricted connection between the data-over-cable system and the cable modem including the temporary restricted Internet Protocol address and the connection timer, thereby providing restricted access to the subscription service on the data-over-cable system over a timed interval.

19. A computer readable medium having stored therein instructions for causing a central processing unit to execute the method of claim 18.