Verification of consumer equipment connected to packet networks based on hashing values

• US 20050286535A1
• Filed: 06/29/2004
• Published: 12/29/2005
• Est. Priority Date: 06/29/2004
• Status: Abandoned Application

• Current Assignee: Bellsouth Intellectual Property Corporation (AT&T, Inc.)
• Original Assignee: Bellsouth Intellectual Property Corporation (AT&T, Inc.)
• Inventors: Aaron, Jeffrey A., Shrum, Edgar Vaughan Jr.
• Application Number:
  US10/880,249
• Publication Number:
  US 20050286535A1
• Time in Patent Office: Days
• US Class Current: 370/395.21
• CPC Class Codes: H04L 41/0869 Validating the configuration within one network element
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies

Abstract

Consumer equipment that is connected to a packet switched network is verified, and a Quality of Service for communications therewith are controlled based on the verification. Information is hashed to generate a first hash value. The information in a memory of the consumer equipment is hashed to generate a second hash value. The first hash value and the second hash value are compared to generate a verification indication for the consumer equipment. The Quality of Service for information packets that are communicated with the consumer equipment through the packet switched network is controlled based on the verification indication.

Claims

1. A method of verifying consumer equipment connected to a packet switched network, the method comprising:

first hashing information to generate a first hash value;

second hashing the information in a memory of the consumer equipment to generate a second hash value;

comparing the first hash value and the second hash value to generate a verification indication for the consumer equipment; and

controlling based on the verification indication at least one of Quality of Service (QoS) for information packets communicated with the consumer equipment through the packet switched network and access by the consumer equipment to communicate through the packet switched network.

2. The method of claim 1, wherein controlling at least one of Quality of Service (QoS) and access by the consumer equipment comprises controlling Quality of Service (QoS) for information packets communicated with the consumer equipment through the packet switched network.

3. The method of claim 1, wherein controlling at least one of Quality of Service (QoS) and access by the consumer equipment comprises controlling access by the consumer equipment to communicate through the packet switched network.

4. The method of claim 1, wherein controlling Quality of Service (QoS) for information packets communicated with the consumer equipment through the packet switched network comprises selectively denying QoS requests associated with information packets from the consumer equipment based on the verification indication.

5. The method of claim 4, further comprising carrying out at a network QoS application interface (API) the selectively denying QoS requests associated with information packets from the consumer equipment based on the verification indication.

6. The method of claim 1, further comprising:

carrying out at the consumer equipment the second hashing of the information; and

carrying out at the packet switched network the first hashing of the information and the comparing the first hash value and the second hash value to generate a verification indication for the consumer equipment.

7. The method of claim 1, wherein the first hashing of the information comprises:

carrying out the first hashing of the information at the packet switched network to generate the first hash value; and

loading the information into the memory of the consumer equipment.

8. The method of claim 1, further comprising:

carrying out at the consumer equipment the first hashing of the information and the second hashing of the information; and

carrying out at the packet switched network the comparing the first hash value and the second hash value to generate a verification indication for the consumer equipment.

9. The method of claim 1, wherein the second hashing of the information is carried out at the consumer equipment based on a verification request from the packet switched network.

10. The method of claim 9, where the second hashing of the information is carried out an elapsed time after the first verification value is generated, wherein the elapsed time is based on whether the memory is a read-only memory or a read-write memory.

11. The method of claim 9, where the second hashing of the information is carried out an elapsed time after the first verification value is generated, wherein the elapsed time is based on whether the information can be modified by a subscriber.

12. The method of claim 1, wherein the second hashing of the information is carried out an elapsed time after the first verification value is generated, wherein the elapsed time is based on how often the information can change.

13. The method of claim 1, wherein the second hashing of the information is carried out an elapsed time after the first verification value is generated, wherein the elapsed time is based on whether the information contains program operations or data.

14. The method of claim 1, wherein the second hashing of the information is carried out an elapsed time after the first verification value is generated, wherein the elapsed time is based on traffic characteristics of information packets communicated with the consumer equipment.

15. The method of claim 1, further comprising generating a trust profile for the consumer equipment, wherein the second hashing of the information is carried out an elapsed time after the first verification value is generated, and wherein the elapsed time is based on the trust profile.

16. The method of claim 15, wherein generating a trust profile for the consumer equipment comprises generating the trust profile based on at least one of credit information associated with a subscriber who is associated with the consumer equipment, law enforcement records associated with the subscriber, presence of children in a household of the subscriber, ages of children in the household of the subscriber, earlier verification indications generated for the consumer equipment, and an identity of the type, manufacturer, and/or model of the consumer equipment.

17. The method of claim 1, further comprising selecting at least one portion of the information in the memory to be hashed and verified based on at least one of whether the memory is a read-only memory or a read-write memory, whether the portion of the information can be modified by a subscriber, and how often the portion of the information can change, whether the portion of the information contains program operations or data, whether the portion of the information contains one or more predetermined component functions of a predetermined program, an identity and/or functionality of a corresponding program, traffic characteristics of information packets communicated with the consumer equipment, and wherein:

the first hashing comprises hashing the selected at least one portion of the information in the memory; and

the second hashing comprises hashing the selected at least one portion of the information in the memory.

18. The method of claim 1, wherein at least one of the first hashing the information and the second hashing the information comprises:

repetitively hashing nested portions of the information to generate a plurality of hash values, wherein the nested portions of the information at least partially overlap.

19. The method of claim 18, further comprising identifying a portion of the information that has changed based on the plurality of hash values, and wherein controlling Quality of Service (QoS) for information packets communicated with the consumer equipment through the packet switched network is based on the identified portion of the information that has changed.

20. A packet switched network comprising:

a verification system that is configured to receive a second hash value from a consumer equipment, wherein the second hash value is based on a hashing of information in a memory of the consumer equipment;

configured to compare the second hash value to a first hash value to generate a verification indication for the consumer equipment, and configured to control based on the verification indication at least one of Quality of Service (QoS) for information packets communicated with the consumer equipment through the packet switched network and access by the consumer equipment to communicate through the packet switched network.

21. The packet switched network of claim 20, wherein the verification system is configured to selectively deny QoS requests associated with information packets from the consumer equipment based on the verification indication.

22. The packet switched network of claim 21, further comprising a network QoS application interface (API), wherein the verification system is configured to control the network QoS API to selectively deny QoS requests associated with information packets from the consumer equipment.

23. The packet switched network of claim 20, wherein the verification system is configured to hash the information to generate the first hash value, and configured to communicate the information to the consumer equipment for loading into the memory.

24. The packet switched network of claim 20, wherein the verification system is configured to request the second hash value from the consumer equipment.

25. The packet switched network of claim 24, wherein the verification system is configured to request a third hash value an elapsed time after requesting the second hash value, wherein the elapsed time is based on at least one of whether the memory is a read-only memory or a read-write memory, whether the information can be modified by a subscriber, how often the information can change, whether the information contains program operations or data, an identity and/or functionality of a corresponding program, traffic characteristics of information packets communicated with the consumer equipment.

26. The packet switched network of claim 24, wherein the verification system is configured to generate a trust profile for the consumer equipment, wherein the trust profile is based on at least one of credit information associated with a subscriber who is associated with the consumer equipment, presence of children in a household of the subscriber, ages of children in the household of the subscriber, earlier verification indications generated for the consumer equipment, and the verification system is configured to request a third hash value an elapsed time after requesting the second hash value, wherein the elapsed time is based on the trust profile.

27. The packet switched network of claim 24, wherein the request from the verification system requests that the consumer equipment hash at least one selected portion of the information in the memory of the consumer equipment to generate the second hash value, wherein the selected portion of the information is based on at least one of whether the memory is a read-only memory or a read-write memory, whether the portion of the information contains one or more predetermined component functions of a predetermined program, whether the portion of the information can be modified by a subscriber, how often the portion of the information can change, whether the portion of the information contains application program operations or data, an identity and/or functionality of a corresponding program, traffic characteristics of information packets communicated with the consumer equipment.

28. Consumer equipment comprising:

a memory that is configured to at least temporarily store information; and

a controller that is configured to communicate information packets through a packet switched network at a Quality of Service (QoS) that is defined by the packet switched network, configured to hash the information in the memory to generate a hash value, and configured to communicate the hash value to the packet switched network.

29. The consumer equipment of claim 28, wherein the controller is configured to hash the information in the memory based on a verification request from the packet switched network.

30. The consumer equipment of claim 28, wherein the controller is configured to repetitively hash nested portions of the information in the memory to identify a portion of the information that has changed.