Two-tiered authorization and authentication for a cable data delivery system

• US 20010050979A1
• Filed: 08/14/2001
• Published: 12/13/2001
• Est. Priority Date: 01/17/1997
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Roy A. Bowcutt, Scott E. Hrastar
• Inventors: Hrastar, Scott E., Bowcutt, Roy A.
• Granted Patent: US 7,296,283 B2
• Time in Patent Office: Days
• US Class Current: 379/93.03
• CPC Class Codes: H04H 20/79 using downlink of the CATV systems, e.g. audio broadcast via CATV network
• CPC Class Codes: H04H 60/84 which are fixed telephone networks
• CPC Class Codes: H04L 12/2801 Broadband local area networks
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/2863 Arrangements for combining access network resources elements, e.g. channel bonding modem pooling H04L25/14; routing of packets H04L45/00; multichannel or multilink protocols H04L69/14
• CPC Class Codes: H04L 12/2872 Termination of subscriber connections
• CPC Class Codes: H04L 12/2874 Processing of data for distribution to the subscribers
• CPC Class Codes: H04L 12/5692 Selection among different networks
• CPC Class Codes: H04L 2101/604 Address structures or formats
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0663 Performing the actions predefined by failover planning, e.g. switching to standby network elements
• CPC Class Codes: H04L 41/0677 Localisation of faults
• CPC Class Codes: H04L 61/50 Address allocation
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 61/5061 Pools of addresses
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04N 21/25816 : involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/42676 : for modulating an analogue carrier signal to encode digital information or demodulating it to decode digital information, e.g. ADSL or cable modem
• CPC Class Codes: H04N 21/6118 : involving cable transmission, e.g. using a cable modem
• CPC Class Codes: H04N 21/6168 : involving cable transmission, e.g. using a cable modem
• CPC Class Codes: H04N 7/17309 : Transmission or handling of upstream communications

Abstract

Apparatus for a cable television subscriber to log onto a computer network with a modem over an upstream path using a USERID and password. The network validates the subscriber USERID and subscriber password with a stored database of valid USERIDs and associated passwords. After the USERID and password are validated, the modem then provides it electronic serial number to the network for validation against a stored database of authorized serial numbers. Upon additional validation of the modem'"'"'s serial number, the subscriber is authorized to use the network.

Claims

1. In a cable data delivery network for delivering digital data to a host location upon a subscriber initiated request, apparatus for authenticating that the subscriber is authorized to use said network, said apparatus comprising:

a network manager including a database of authorized users and a validation agent;

said host location including a telephone dial up device for the subscriber to log onto said network and connect to said network manager using said identification information, wherein said validation agent authorizes the subscriber to use said network in accordance with a comparison of said identification information to said authorized users in said database.

2. The apparatus of

claim 1

wherein said identification information includes a subscriber USERID.

3. The apparatus of

claim 2

wherein said identification information includes a subscriber password.

4. The apparatus of

claim 3

wherein said database includes an associated USERID and password for each of said authorized users.

5. The apparatus of

claim 4

wherein said validation agent authorizes said subscriber to use said network in accordance with a comparison of said subscriber USERID and said subscriber password to USERIDS and passwords stored in said data base.

6. The apparatus of

claim 5

wherein said dial up device includes a cable data receiver for receiving said digital data.

7. The apparatus of

claim 6

wherein said call up device is uniquely identify by an electronic identifying number.

8. The apparatus of

claim 7

wherein said database further includes authorized identifying numbers for said dial up devices.

9. The apparatus of

claim 8

wherein said validation agent authorizes said call up device to receive said digital data in accordance with a comparison of said identifying number of said call up device with said identifying numbers stored in said database.