System in a broadband network

• US 6,832,258 B1
• Filed: 08/11/2000
• Issued: 12/14/2004
• Est. Priority Date: 08/11/2000
• Status: Expired due to Fees

• Current Assignee: Telenor Sverige AB (Government of Norway)
• Original Assignee: Svenska Bredbandsbolaget Kapacitet AB
• Inventors: Öman, Andreas
• Primary Examiner(s): Thompson, Marc
• Assistant Examiner(s): MESFIN, YEMANE
• Application Number:
  US09/636,024
• Time in Patent Office: 1,586 Days
• Field of Search: 709/203, 709/224, 709/225, 709/226, 709/227, 709/228, 709/229, 709/220, 709/221
• US Class Current: 709/229
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0886 Fully automatic configuration
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/5022 by giving priorities, e.g. assigning classes of service
• CPC Class Codes: H04L 41/5051 Service on demand, e.g. definition and deployment of services in real time
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks

Abstract

The invention relates to a system for control and supervision of residential control in a broadband network (10). It comprises at least one of the following features port control, class of service assurance, forced direction for network login, abuse and anti-spoof protection, provided by hardware and software broadband network (10) dedicated means (22, 24, 26, 28, 30). Thereby the system is providing services differentiation for customers to the network (10).

Claims

1. A system for control and supervision of residential control in a broadband network comprising a plurality of hardware and software broadband network dedicated units including at least a protocol server, and a membership policy server, wherein in order to provide service differentiation for customers, said plurality of units is configured to:

control a port by feeding a protocol server for auto-configuration of client network parameters with information from the membership policy server, said policy server providing that each network customer address can be connected to a unique name of a port for one customer inside the network;

assure a class of service for specific types of customer equipment while denying attempts to lease additional customer addresses through said protocol server, said protocol server keeping a record of all assigned addresses to said policy server;

provide forced direction for network login procedure by redirecting a customers browser to a predetermined login procedure when a network connected equipment is turned on, thus providing a controlled way of identifying each customer before using other services; and

provide abuse and anti-spoof protection by adjusting border gateway control routing tables in real time with respect to said protocol for auto-configuration.

2. A system according to claim 1, wherein said plurality of units is further configured to announce helper addresses as dynamic routes providing instant fail-over if a daemon fails by withdrawing routes from a network service providers boarder gateway control table, wherein a lower prioritized daemon immediately takes control, which provides that it is impossible for a customer to use an address without leasing it from said protocol server.

3. A system according to claim 1, wherein said plurality of units is further configured to adjust border gateway protocol routes to customer devices/equipment in real time according to protocol for auto-configuration of client network parameters, thus enhancing load balancing in network fiber rings.

4. A system according to claim 1, wherein said plurality of units is further configured to provide real time traffic analyzing detecting unauthorized servers run by a customer and a software which provides network address translation.

5. A system according to claim 1, wherein said port control controls activation and deactivation of residential access ports.

6. A system according to claim 1, wherein said port control assigns a static network address to a specific port and MAC address.

7. A system according to claim 1, wherein said forced direction provides forced network portal logins.

8. A system according to claim 1, wherein said plurality of units is further configured to provide traffic mediation which enables the system to aggregate Cisco®

NetFlow information based on a residential port.

9. A system according to claim 1, wherein said plurality of units is further configured to provide port snooping through display of port information or port link states.

10. A system according to claim 1, wherein said plurality of units is further configured to provide network address to residential port logging, which enables to find out who a specific network address was leased to at a given time so as to administer abuse in a broadband network.

11. A system for control and supervision of residential control in a broadband network comprising a plurality of hardware and software broadband network dedicated units including at least a protocol server, and a membership policy server, wherein in order to provide service differentiation for customers, said plurality of units is configured to provide real time traffic analyzing detecting unauthorized servers run by a customer and a software which provides network address translation, said plurality of units being further configured to at least:

control a port by feeding a protocol server for auto-configuration of client network parameters with information from the membership policy server, said policy server providing that each network customer address can be connected to a unique name of a port for one customer inside the network;

assure a class of service for specific types of customer equipment while denying attempts to lease additional customer addresses through said protocol server, said protocol server keeping a record of all assigned addresses to said policy server;

provide forced direction for network login procedure by redirecting a customers browser to a predetermined login procedure when a network connected equipment is turned on, thus providing a controlled way of identifying each customer before using other services;

or

provide abuse and anti-spoof protection by adjusting border gateway control routing tables in real time with respect to said protocol for auto-configuration.

12. A system according to claim 11, wherein said plurality of units is further configured to announce helper addresses as dynamic routes providing instant fail-over if a daemon fails by withdrawing routes from a network service providers boarder gateway control table, wherein a lower prioritized daemon immediately takes control, which provides that it is impossible for a customer to use an address without leasing it from said protocol server.

13. A system according to claim 11, wherein said plurality of units is further configured to adjust border gateway protocol routes to customer devices/equipment in real time according to protocol for auto-configuration of client network parameters, thus enhancing load balancing in network fiber rings.

14. A system according to claim 11, wherein said port control controls activation and deactivation of residential access ports.

15. A system according to claim 11, wherein said port control assigns a static network address to a specific port and MAC address.

16. A system according to claim 11, wherein said forced direction provides forced network portal logins.

17. A system according to claim 11, wherein said plurality of units is further configured to provide traffic mediation which enables the system to aggregate Cisco®

NetFlow information based on a residential port.

18. A system according to claim 11, wherein said plurality of units is further configured to provide port snooping through display of port information or port link states.

19. A system according to claim 11, wherein said plurality of units is further configured to provide network address to residential port logging, which enables to find out who a specific network address was leased to at a given time so as to administer abuse in a broadband network.