Enhanced CSU/DSU (channel service unit/data service unit)

• US 7,225,329 B2
• Filed: 03/19/2003
• Issued: 05/29/2007
• Est. Priority Date: 03/19/2003
• Status: Expired due to Fees

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: SBC Properties, L.P. (AT&T, Inc.)
• Inventors: Chen, Zesen, Jones, Kenneth Roger, Gonsalves, Brian
• Primary Examiner(s): Moise; Emmanuel L.
• Assistant Examiner(s): GERGISO, TECHANE
• Application Number:
  US10/392,286
• Publication Number:
  US 20040187026A1
• Time in Patent Office: 1,532 Days
• Field of Search: 713/153, 380/255, 370/231, 709/299
• US Class Current: 713/153
• CPC Class Codes: H04L 43/0882 Utilisation of link capacity
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

In an embodiment, a communication node coupled to a first data network and a second data network is disclosed. The first data network is a wide area data network. The communication node includes a first data interface to the first data network, a second data interface to the second data network, a data processor responsive to the first data interface and to the second data interface, and an encryption module coupled to the data processor. The first data interface is a telephony type interface and the second data interface is a packet data interface. The data processor receives input traffic data carried over the first data interface and generates management performance data based on measurements with respect to the input traffic data. The encryption module receives the management performance data to produce encrypted management performance data to be communicated to the second data network via the second data interface.

Claims

1. A channel service unit/data service unit (CSU/DSU) coupled to a first data network and coupled to a second data network, the first data network being a wide area data network, the CSU/DSU comprising:

a first data interface to the first data network, the first data interface comprising a telephony type interface;

a second data interface coupled to the second data network via a data router separate from and external to the CSU/DSU, wherein the data router does not have encryption capability, wherein the second data interface comprises a packet data interface, and wherein the second data network includes a remote terminal, the remote terminal including decryption software, and wherein the remote terminal receives and decrypts the encrypted management performance data for display to a user of the remote terminal;

a data processor responsive to the first data interface and to the second data interface, the data processor receiving input traffic data carried over the first data interface and generating management performance data based on measurements with respect to the input traffic data;

a third data interface, the third data interface comprising a serial data interface and wherein the data processor is further coupled to the third data interface; and

an encryption module coupled to the data processor, the encryption module to receive the management performance data and to produce encrypted management performance data to be communicated to the second data network via the data router coupled to the second data interface.

2. The CSU/DSU claim 1, wherein operating system software is loaded onto the data processor.

3. The CSU/DSU of claim 1, wherein the encryption module is implemented as a hardware element.

4. The CSU/DSU of claim 1, wherein the encryption module is implemented as a software program loaded onto a computing device.

5. The CSU/DSU of claim 4, wherein the computing device is the data processor.

6. The CSU/DSU of claim 1, wherein the remote terminal is a network management workstation.

7. The CSU/DSU of claim 1, wherein the encryption module is configured to perform data encryption standard (DES) encryption.

8. The CSU/DSU of claim 1, wherein the first data interface is a digital line.

9. The CSU/DSU of claim 8, wherein the digital line is one of a T1 line, an E1 line, and a DS3 line.

10. The CSU/DSU of claim 1, wherein the second data network is a local area network.

11. A method of processing data and of communicating encrypted data, the method comprising:

receiving input data at a first interface of a channel service unit/data service unit (CSU/DSU), the first interface responsive to a wide area network;

processing the input data using a data processing device of the CSU/DSU to produce traffic data and management data associated with the input data;

performing encryption at an encryption module of the CSU/DSU on the traffic data and the management data to produce encrypted data; and

communicating the encrypted data via a second interface of the CSU/DSU to a local area network;

wherein the encrypted data is communicated to a layer three data router coupled to the local area network, wherein the layer three data router is separate from and external to the CSU/DSU, and wherein the layer three data router does not have encryption capability.

12. The method of claim 11, wherein the management data is selected from service level data, traffic performance data, network management data, configuration data, and error reporting data.

13. A method of using data communications equipment coupled to a first data network and coupled to a second data network, the first data network being a wide area data network, the second data network being a local area network, the method comprising:

receiving a first wide area data frame at a first data interface to the first data network of a channel service unit/data service unit (CSU/DSU);

processing the first wide area data frame at a data processor responsive to the first data interface to produce traffic data and management data;

sending an encryption request along with the traffic data and the management data from the data processor to an encryption module of the CSU/DSU coupled to the data processor;

receiving the encryption request along with the traffic data and the management data at the encryption module;

encrypting the traffic data and the management data at the encryption module to produce encrypted data;

communicating the encrypted data to the data processor in response to the encryption request; and

communicating the encrypted data to a data router of the second data network via a second data interface to the second data network, wherein the data router does not have encryption capability;

wherein the second data network includes a remote terminal, the remote terminal including decryption software, and wherein the remote terminal receives and decrypts the encrypted data for display to a user of the remote terminal.

14. The method of claim 13, wherein the encryption module is configured to perform data encryption standard (DES) encryption.