Abstract: Techniques disclosed herein include systems and methods for excluding specific application traffic from customer consumption-based data billing counts. This is useful for excluding traffic from consumption totals where the application traffic has been accounted for using other means, such as through billing as a separate or technically distinct service. In practice, a tablet computer (or other end user device) can run a video application that uses a high-speed data network via a cable modem. This video application may be included as part of a core video package associated with a distinct cable television service. The system then provides accurate consumption billing of customer traffic that is outside of any other managed services by creating separate logical data service flows at a Cable Modem Termination System (CMTS) for excluding specific traffic counts.

Abstract: Apparatus and methods for providing content to packet-enabled devices in a content distribution network. In one embodiment, a network architecture is disclosed which enables delivery of content to IP-enabled devices such as mobile smartphones and tablet computers using a traditional high-speed data connection. This capability allows the managed network operator to provide content services to an IP-enabled device associated with a non-data subscriber. In one variant, a cable modem is provided which is limited to only retrieve content for delivery to the devices, yet which performs no other functions/services (including provision of high-speed data services). Alternatively, a “media server” modem is utilized to enable delivery of content from the managed network to a client or user device which is also able to obtain high-speed data service from a non-managed or third party managed network via a third-party access point. Security and authentication mechanisms for the transmitted content are also disclosed.

Abstract: Apparatus and methods for providing content to IP-enabled devices in a content distribution network. In one embodiment, a network architecture is disclosed which enables delivery of content to such IP-enabled devices without the use of a high-speed data connection This capability allow the managed network operator to provide content services to an IP-enabled device associated with a non-data subscriber. In one implementation, requests for content from user IP-enabled devices are received, authenticated, and content processed into a series of encrypted segments. Once the requesting user/device is authenticated, the segments are provided with a playlist. The rendering device is also provided access to a decryption key (e.g., via a URL to a managed key server). Variants providing (i) user access to the MSO distribution network via an indigenous modem or gateway; and (ii) user access to the MSO core via a gateway and a third party unmanaged network are described.

Abstract: Techniques disclosed herein include systems and methods for excluding specific application traffic from customer consumption-based data billing counts. This is useful for excluding traffic from consumption totals where the application traffic has been accounted for using other means, such as through billing as a separate or technically distinct service. In practice, a tablet computer (or other end user device) can run a video application that uses a high-speed data network via a cable modem. This video application may be included as part of a core video package associated with a distinct cable television service. The system then provides accurate consumption billing of customer traffic that is outside of any other managed services by creating separate logical data service flows at a Cable Modem Termination System (CMTS) for excluding specific traffic counts.

Abstract: The detection of devices with duplicate media access controller (MAC) addresses in a cable network may be accomplished by reference to a value indicative of a DOCSIS version supported by the device or by reference to a having a MAC address/giaddr pair. Where a version value is used, the detection of devices having duplicate MAC addresses looks for changes in the reported version value from a higher version to a lower version. Where MAC address/giaddr pairs are used, a centralized storage of historical cable modem MAC address/giaddr pair data is used to identify cable modems (CM's) that report duplicate MAC addresses. If duplication is detected, an appropriate remedial response is taken.

Abstract: A subscriber access control system (SACS) configures a network device connected to cable network to affect the behavior of that device. The SACS comprises a rules engine and a datastore that stores the current state of subscribers known to the SACS and historical request information. When the SACS receives a request to quarantine a device, it assigns attributes to a subscriber record accessed by a DHCP server to affect the configuration and behavior of that device. The actual behavior of the quarantined device is determined by the presence of the attribute and the value of the attribute.

Abstract: A MAC-to-IP system receives IP and/or MAC lease information of network end-points from one or more DHCP servers providing services to a region of a multi-system subscriber access network. The lease information includes the MAC and IP addresses of devices that can be provisioned by a DHCP server serving the particular region as well as lease expiration information (i.e., time and date). The lease information can be extracted from issued leases and does not affect the issuance of leases by the DHCP server. A DNS-to-MAC-to-IP query interface receives a DNS lookup request for a network end-point from a network device and converts the DNS lookup request into a MAC-to-IP database query. Data is obtained from the MAC-to-IP database to fulfill the DNS lookup request and DNS lookup response is created and sent to the requesting network device.

Abstract: The present invention teaches methods and systems for subscriber blocking of unauthorized network traffic in a cable data network. The cable modem termination system (CMTS) incorporates a data gateway agent that filters unauthorized traffic thereby eliminating consumption based subscribers from being responsible for related service charges. Embodiments incorporate the use of packet filtering, hybrid stateful packet filtering, content filtering, application layer filtering and time based filtering. Greater acceptance of consumption based billing is achieved by having the filter settings directed by the subscriber.

Abstract: The present invention teaches methods and systems for subscriber blocking of unauthorized network traffic in a cable data network. The cable modem termination system (CMTS) incorporates a data gateway agent that filters unauthorized traffic thereby eliminating consumption based subscribers from being responsible for related service charges. Embodiments incorporate the use of packet filtering, hybrid stateful packet filtering, content filtering, application layer filtering and time based filtering. Greater acceptance of consumption based billing is achieved by having the filter settings directed by the subscriber.

Abstract: A subscriber access control system (SACS) configures a network device connected to cable network to affect the behavior of that device. The SACS comprises a rules engine and a datastore that stores the current state of subscribers known to the SACS and historical request information. When the SACS receives a request to quarantine a device, it assigns attributes to a subscriber record accessed by a DHCP server to affect the configuration and behavior of that device. The actual behavior of the quarantined device is determined by the presence of the attribute and the value of the attribute.

Abstract: A subscriber access control system (SACS) configures a network device connected to cable network to affect the behavior of that device. The SACS comprises a rules engine and a datastore that stores the current state of subscribers known to the SACS and historical request information. When the SACS receives a request to quarantine a device, it assigns attributes to a subscriber record accessed by a DHCP server to affect the configuration and behavior of that device. The actual behavior of the quarantined device is determined by the presence of the attribute and the value of the attribute.

Abstract: A MAC-to-IP system receives IP and/or MAC lease information of network end-points from one or more DHCP servers providing services to a region of a multi-system subscriber access network. The lease information includes the MAC and IP address of devices that can be provisioned by a DHCP server serving the particular region as well as lease expiration information (i.e., time and date). The lease information can be extracted from issued leases and does not affect the issuance of leases by the DHCP server. A DNS-to-MAC-to-IP query interface receives a DNS lookup request for a network end-point from a network device and converts the DNS lookup request into a MAC-to-IP database query. Data is obtained from the MAC-to-IP database to fulfill the DNS lookup request and DNS lookup response is created and sent to the requesting network device.

Abstract: A system and method for managing provisioning parameters in a cable network. A dynamic TFTP (DTFTP) server and a CMTS manage the provisioning of devices in a cable network. The DTFTP server and the CMTS share common provisioning parameters. A provisioning parameter has a name and a value. When changes are made in the value of a provisioning parameter that is also used by a CMTSs supported by that DTFTP server, the DTFTP server securely communicates the new provisioning parameter values to each such CMTS. In one embodiment of the present invention, the DTFTP server pushes the new provisioning parameter values to the CMTSs. In another embodiment of the present invention, a poller pulls the provisioning parameters from the DTFTP server to a central datastore where changes in provisioning parameters used by the CMTSs supported by the DTFTP are identified. The changed provisioning parameter values are pushed from the central datastore to the CMTSs.

Abstract: The detection of devices with duplicate media access controller (MAC) addresses in a cable network may be accomplished by reference to a value indicative of a DOCSIS version supported by the device or by reference to a having a MAC address/giaddr pair. Where a version value is used, the detection of devices having duplicate MAC addresses looks for changes in the reported version value from a higher version to a lower version. Where MAC address/giaddr pairs are used, a centralized storage of historical cable modem MAC address/giaddr pair data is used to identify cable modems (CM's) that report duplicate MAC addresses. If duplication is detected, an appropriate remedial response is taken.

Abstract: A system and method for provisioning provisionable network devices with a dynamically created boot file using a server. A dynamic configuration server (DCS) generates one or more boot file templates, each boot file template comprising attributes having a name and value. A boot file request comprising a boot file template identifier is received by the DNS from a provisionable network device. The DCS uses the boot file template identifier to select a boot file template for the provisionable network device and to assign attribute values to the attributes of the selected boot file template. The boot file is used to provision the provisionable network device.

Abstract: The present invention teaches methods and systems for blocking unauthorized access to cable modem configuration files stored on trivial file transfer protocol (TFTP) servers. Filenames are modified by the DHCP to incorporate an authentication key (and optional cloaking) prior to transmission to the cable modem. When the TFTP server receives a modified filename, it also generates an authentication key. The authentication keys must match in order for the cable modem to receive the configuration file requested. At a minimum, authentication keys depend upon the un-modified filename, the cable modem IP address and a “coordination pass phrase” known to the TFTP server and DHCP server, but not known to the cable modem. Variations include optional cloaking, various actions performed for non-matching authentication keys, selection of authentication key generating algorithm and inclusion of cable modem MAC address in the authentication key for all cable modems or for premium service customer cable modems.

Abstract: A subscriber access control system (SACS) configures a network device connected to cable network to affect the behavior of that device. The SACS comprises a rules engine and a datastore that stores the current state of subscribers known to the SACS and historical request information. When the SACS receives a request to quarantine a device, it assigns attributes to a subscriber record accessed by a DHCP server to affect the configuration and behavior of that device. The actual behavior of the quarantined device is determined by the presence of the attribute and the value of the attribute.

Abstract: The present invention teaches methods and systems for subscriber blocking of unauthorized network traffic in a cable data network. The cable modem termination system (CMTS) incorporates a data gateway agent that filters unauthorized traffic thereby eliminating consumption based subscribers from being responsible for related service charges. Embodiments incorporate the use of packet filtering, hybrid stateful packet filtering, content filtering, application layer filtering and time based filtering. Greater acceptance of consumption based billing is achieved by having the filter settings directed by the subscriber.

Abstract: A system and method for provisioning provisionable network devices with a dynamically created boot file using a server. A dynamic configuration server (DCS) generates one or more boot file templates, each boot file template comprising attributes having a name and value. A boot file request comprising a boot file template identifier is received by the DNS from a provisionable network device. The DCS uses the boot file template identifier to select a boot file template for the provisionable network device and to assign attribute values to the attributes of the selected boot file template. The boot file is used to provision the provisionable network device.

Abstract: A system and method for managing provisioning parameters in a cable network. A dynamic TFTP (DTFTP) server and a CMTS manage the provisioning of devices in a cable network. The DTFTP server and the CMTS share common provisioning parameters. A provisioning parameter has a name and a value. When changes are made in the value of a provisioning parameter that is also used by a CMTSs supported by that DTFTP server, the DTFTP server securely communicates the new provisioning parameter values to each such CMTS. In one embodiment of the present invention, the DTFTP server pushes the new provisioning parameter values to the CMTSs. In another embodiment of the present invention, a poller pulls the provisioning parameters from the DTFTP server to a central datastore where changes in provisioning parameters used by the CMTSs supported by the DTFTP are identified. The changed provisioning parameter values are pushed from the central datastore to the CMTSs.