System, device, and method for receiver access control in a multicast communication system

• US 7,573,881 B2
• Filed: 08/17/2005
• Issued: 08/11/2009
• Est. Priority Date: 09/13/2000
• Status: Expired due to Fees

• Current Assignee: RPX Clearinghouse LLC (RPX Corporation)
• Original Assignee: Nortel Networks Limited (Nortel Networks Corporation)
• Inventors: Cain, Bradley, Hardjono, Thomas P.
• Primary Examiner(s): PHAN, MAN U
• Application Number:
  US11/205,577
• Publication Number:
  US 20060034281A1
• Time in Patent Office: 1,455 Days
• Field of Search: 370351-408, 370231-236, 370337-349, 709204-245, 713163-165
• US Class Current: 370/392
• CPC Class Codes: H04L 12/185 with management of multicast group membership
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/104 Grouping of entities

Abstract

A system, device, and method for receiver access control in a multicast communication network uses a policy service to determine whether a subscriber device can be admitted to a multicast group. The subscriber device accesses the multicast communication network via an access device. The access device uses a policy service to obtain a policy decision from a policy server, where the policy decision indicates whether or not the subscriber device can be admitted to the multicast group. The access device enforces the policy decision by admitting the subscriber device to the multicast group if and only if the policy decision indicates that the subscriber device can be admitted to the multicast group.

Claims

1. A policy server apparatus comprising:

a policy database stored on a computer readable storage medium and containing policy information; and

policy service program code stored on the computer readable storage medium and operably coupled to determine a policy decision indicating whether a subscriber device can be admitted to a multicast group based upon the policy information contained in the policy database, wherein the policy service program code comprises

connection establishment logic operably coupled to establish a policy service connection between the policy server and the access device,

receiving logic operably coupled to receive a policy service request message at the policy server from an access device indicating at least an incoming interface over which a join request was received from the subscriber device by the access device and a multicast group associated,

policy determination logic operably coupled to determine a policy decision indicating whether the subscriber device can be admitted to the multicast group based upon the policy information contained in the policy database and at least the incoming interface over which the join request was received from the subscriber device by the access device and multicast group indicated in the policy service request message, and

sending logic operably coupled to send a policy service decision message from the policy server to the access device including the policy decision indicating whether the subscriber device can be admitted to the multicast group.

2. The apparatus of claim 1, wherein the policy service request message comprises a Common Open Policy Service (COPS) request message indicating at least the multicast group.

3. The apparatus of claim 2, wherein the COPS request message comprises:

an address for the incoming interface;

an index for the incoming interface; and

an address for the multicast group.

4. The apparatus of claim 1, wherein the policy service decision message comprises a Common Open Policy Service (COPS) decision message indicating the policy decision for the subscriber device.

5. The apparatus of claim 4, wherein the COPS decision message comprises a command code indicating whether to admit (install) the subscriber device or reject (remove) the subscriber device.

6. The apparatus of claim 1, wherein the connection establishment logic is operably coupled to receive from the access device a client open message and send to the access device a client accept message.

7. The apparatus of claim 6, wherein the client open message comprises a Common Open Policy Service (COPS) client-open message including a client type indicating that the access device is a multicast access point device, and wherein the client accept message comprises a COPS client-accept message.

8. A computer program product including a computer readable storage medium having program code for controlling a computer system stored thereon, the program code comprising:

policy service logic programmed to determine a policy decision indicating whether a subscriber device can be admitted to a multicast group based upon policy information contained in a policy database, wherein the policy service logic comprises

connection establishment logic programmed to establish a policy service connection between a policy server and the access device,

receiving logic programmed to receive a policy service request message from an access device indicating at least an incoming interface over which a join request was received from the subscriber device by the access device and a multicast group,

policy determination logic programmed to determine a policy decision indicating whether the subscriber device can be admitted to the multicast group based upon the policy information contained in the policy database and at least the incoming interface over which the join request was received from the subscriber device by the access device and multicast group indicated in the policy service request message, and

sending logic programmed to send a policy service decision message from the policy server to the access device including the policy decision indicating whether the subscriber device can be admitted to the multicast group.

9. The computer program of claim 8, wherein the policy service request message comprises a Common Open Policy Service (COPS) request message indicating at least the multicast group.

10. The computer program of claim 9, wherein the COPS request message comprises:

an address for the incoming interface;

an index for the incoming interface; and

an address for the multicast group.

11. The computer program of claim 10, wherein the policy service decision message comprises a Common Open Policy Service (COPS) decision message indicating the policy decision for the subscriber device.

12. The computer program of claim 11, wherein the COPS decision message comprises a command code indicating whether to admit (install) the subscriber device or reject (remove) the subscriber device.

13. The computer program of claim 8, wherein the connection establishment logic is programmed to receive from the access device a client open message and send to the access device a client accept message.

14. The computer program of claim 13, wherein the client open message comprises a Common Open Policy Service (COPS) client-open message including a client type indicating that the access device is a multicast access point device, and wherein the client accept message comprises a COPS client-accept message.