Network access system including a programmable access device having distributed service control

• US 7,499,458 B2
• Filed: 12/30/2004
• Issued: 03/03/2009
• Est. Priority Date: 11/28/2000
• Status: Expired due to Fees

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Business Global LLC (Verizon Communications Inc.)
• Inventors: Yao, Lei, Thomas, Howard Lee, McDysan, Dave
• Primary Examiner(s): Levitan; Dmitry
• Application Number:
  US11/026,216
• Publication Number:
  US 20050117576A1
• Time in Patent Office: 1,524 Days
• Field of Search: 370/351, 370/357, 370/360, 370/372, 370/386, 370/389, 370/392, 370/396, 370/395.2, 370/395.21, 370/400, 370/401, 370/422, 709/223, 709226-229, 709/244
• US Class Current: 370/396
• CPC Class Codes: H04L 45/308 Route determination based on user's profile, e.g. premium users
• CPC Class Codes: H04L 45/60 Router architectures
• CPC Class Codes: H04L 47/2475 for supporting traffic characterised by the type of applications
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A distributed network access system in accordance with the present invention includes at least an external processor and a programmable access device. The programmable access device has a message interface coupled to the external processor and first and second network interfaces through which packets are communicated with a network. The programmable access device includes a packet header filter and a forwarding table that is utilized to route packets communicated between the first and second network interfaces. In response to receipt of a series of packets, the packet header filter in the programmable access device identifies messages in the series of messages upon which policy-based services are to be implemented and passes identified messages via the message interface to the external processor for processing. In response to receipt of a message, the external processor invokes service control on the message and may also invoke policy control on the message.

Claims

1. A system for providing distributed routing services, comprising:

a processor configured to apply a policy rule on received messages and to support establishment of a network connection between a first network and a second network, wherein the processor is configured to program an access device, and

a routing module in communication with the access device, the routing module being separate from the processor and configured to route packets to an external router that is external to the system,

wherein the access device is configured to enforce the policy rule associated with the network connection, the access device being configured to forward messages between the first network and the second network and to filter header information of the received messages to identify messages for processing by the processor, wherein the identified messages are forwarded to the processor and other messages are forwarded correspondingly to the first network or the second network.

2. A system according to claim 1, further comprising:

a policy server configured to store the policy rule, wherein the policy server provides policy decisions based on the policy rule to the processor.

3. A system according to claim 1, wherein the processor is further configured to perform network signaling to setup the network connection.

4. A system according to claim 1, further comprising:

a network management server coupled to the processor and configured to generate billing information in accordance with services implemented by the processor.

5. A system according to claim 1, wherein the access device is configured to collect statistics regarding network traffic and to report the statistics to the processor.

6. A system according to claim 1, wherein the access device filters based upon protocol information pertaining to protocol layers higher than Layer 3.

7. A system according to claim 1, wherein the access device performs policing of packets by reference to traffic parameters, and selectively marks packets that do not conform with the traffic parameters.

8. A system according to claim 1, further comprising:

a buffer coupled to the processor, the buffer storing outgoing packets; and

a scheduler that schedules the transmission of the outgoing packets to support multiple quality of service classes.

9. A method for providing communication services, the method comprising:

receiving messages from a first router at a network access system configured to support distributed routing services;

selectively forwarding the messages by the network access system to second router, wherein the network access system includes,

a processor configured to apply a policy rule on the received messages and to support establishment of a network connection between the first router and the second router, wherein the processor is configured to program an access device, and

a routing module in communication with the access device, the routing module being separate from the processor and configured to route packets to an external router that is external to the system,

wherein the access device is configured to enforce the policy rule associated with the network connection, the access device being configured to forward messages between the first router and the second router, and to filter header information of the received messages to identify messages for processing by the processor, wherein the identified messages are forwarded to the processor and other messages are forwarded correspondingly to the first router or the second router.

10. A method according to claim 9, wherein the network access system includes a policy server that is configured to store the policy rule, wherein the policy server provides policy decisions based on the policy rule to the processor.

11. A method according to claim 9, wherein the processor is further configured to perform network signaling to setup the network connection.

12. A method according to claim 9, wherein the network access system includes a network management server configured to generate billing information in accordance with services implemented by the processor.

13. A method according to claim 9, wherein the access device is configured to collect statistics regarding network traffic and to report the statistics to the processor.

14. A method according to claim 9, wherein the access device filters based upon protocol information pertaining to protocol layers higher than Layer 3.

15. A method according to claim 9, wherein the access device performs policing of packets by reference to traffic parameters, and selectively marks packets that do not conform with the traffic parameters.

16. A method according to claim 9, wherein the network access system includes:

a buffer coupled to the processor, the buffer storing outgoing packets; and

a scheduler that schedules the transmission of the outgoing packets to support multiple quality of service classes.

17. A method for providing distributed control of communication services, the method comprising:

establishing, by a processing module, a connection between a first network and a second network;

applying, by the processing module, a policy rule on traffic flow from the first network over the connection; and

communicating, via an access module, with a customer premise equipment coupled to the first network, the access module being configurable by the processing module to support the communication services, wherein the access module selectively forwards a message within the traffic flow to the processing module for enforcement of the policy rule, and another message within the traffic flow is forwarded, via a routing module that is separate from the processing module, to an external router coupled to the second network.

18. A method according to claim 17, wherein the access module communicates with a data switch, the data switch being configured to provide signaling between the access module and the routing module.

19. An apparatus comprising:

a service policy interface configured to receive a policy rule;

a plurality of signaling controllers configured to support establishment of a network connection between a first network and a second network;

a device controller configured to program an access device, wherein the access device is configured to enforce the policy rule associated with the network connection, the access device being further configured to forward messages between the first network and the second network; and

a message processor coupled to the access device, wherein the access device is further configured to filter header information of the messages to identify messages for processing by the message processor, wherein the identified messages are forwarded to the processor and other messages are forwarded correspondingly to the first network or the second network, the access device being further configured to communicate with a router that is separate from the apparatus, the router being configured to route packets to an external router.