Classifications

• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F8/00—Arrangements for software engineering
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L12/00—Data switching networks
  • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
  • H04L12/2801—Broadband local area networks
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
  • G06F16/90—Details of database functions independent of the retrieved data types
  • G06F16/95—Retrieval from the web
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
  • H04L41/02—Standardisation; Integration
  • H04L41/0246—Exchanging or transporting network management information using the Internet; Embedding network management web servers in network elements; Web-services-based protocols
  • H04L41/0253—Exchanging or transporting network management information using the Internet; Embedding network management web servers in network elements; Web-services-based protocols using browsers or web-pages for accessing management information
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
  • H04L41/08—Configuration management of networks or network elements
  • H04L41/0803—Configuration setting
  • H04L41/0813—Configuration setting characterised by the conditions triggering a change of settings
  • H04L41/082—Configuration setting characterised by the conditions triggering a change of settings the condition being updates or upgrades of network functionality
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
  • H04L41/22—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks comprising specially adapted graphical user interfaces [GUI]
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
  • H04L41/28—Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L61/00—Network arrangements, protocols or services for addressing or naming
  • H04L61/45—Network directories; Name-to-address mapping
  • H04L61/4505—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols
  • H04L61/4511—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols using domain name system [DNS]
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L67/00—Network arrangements or protocols for supporting network services or applications
  • H04L67/01—Protocols
  • H04L67/02—Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L67/00—Network arrangements or protocols for supporting network services or applications
  • H04L67/50—Network services
  • H04L67/51—Discovery or management thereof, e.g. service location protocol [SLP] or web services
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L67/00—Network arrangements or protocols for supporting network services or applications
  • H04L67/50—Network services
  • H04L67/55—Push-based network services
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L67/00—Network arrangements or protocols for supporting network services or applications
  • H04L67/50—Network services
  • H04L67/75—Indicating network or usage conditions on the user display
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
  • H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
  • H04N21/437—Interfacing the upstream path of the transmission network, e.g. for transmitting client requests to a VOD server
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
  • H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
  • H04N21/462—Content or additional data management, e.g. creating a master electronic program guide from data received from the Internet and a Head-end, controlling the complexity of a video stream by scaling the resolution or bit-rate based on the client capabilities
  • H04N21/4622—Retrieving content or additional data from different sources, e.g. from a broadcast channel and the Internet
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
  • H04N21/47—End-user applications
  • H04N21/475—End-user interface for inputting end-user data, e.g. personal identification number [PIN], preference data
  • H04N21/4751—End-user interface for inputting end-user data, e.g. personal identification number [PIN], preference data for defining user accounts, e.g. accounts for children
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
  • H04N21/47—End-user applications
  • H04N21/478—Supplemental services, e.g. displaying phone caller identification, shopping application
  • H04N21/4782—Web browsing, e.g. WebTV
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
  • H04L69/30—Definitions, standards or architectural aspects of layered protocol stacks
  • H04L69/32—Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
  • H04L69/322—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions
  • H04L69/329—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions in the application layer [OSI layer 7]

Definitions

• This invention concerns a system and User interface suitable for use in an interactive bi-directional communication such as a cable modem, computer, TV, VCR, set top box or an associated peripheral device.
• Home entertainment systems increasingly include both Personal Computer and television functions (PC/TV functions) involving multiple source and multiple destination communication.
• Such a system may receive data from satellite or terrestrial sources comprising High Definition Television (HDTV) broadcasts, Multi- point Microwave Distribution System (MMDS) broadcasts and Digital Video Broadcasts (DVB).
• HDTV High Definition Television
• MMDS Multi- point Microwave Distribution System
• DVD Digital Video Broadcasts
• Such a system may also provide high speed Internet access through a broadcast link or a coaxial link (e.g. cable TV lines) using a cable modem or via a telephone line link using an ADSL or ISDN (Asynchronous Digital Subscriber Line or Integrated Services Digital Network) compatible modem, for example.
• a home entertainment system may also communicate with local sources such as Digital Video Disk (DVD), CDROM, VHS, and Digital VHS (DVHSTM) type players, PCs, set top boxes and many other types of sources.
• DVD Digital Video Disk
• VHS Compact Disc
• DVHSTM Digital VHS
• a home entertainment system supporting Internet compatible bi-directional communication using cable and other types of modems it is desirable for a home entertainment system supporting Internet compatible bi-directional communication using cable and other types of modems to be able to provide security and flexibility of operation. Specifically, it is desirable to provide a secure User interface preventing unauthorized Internet access and supporting complex User interactive tasks whilst providing a simple command interface suitable for the general public. It is further desirable to provide User flexibility in configuring home entertainment communication functions and in allocating Internet domain names (e.g. Universal Resource Locators - URLs) to manage and access elements and peripherals of a home entertainment system and to support Internet applications.
• Internet domain names e.g. Universal Resource Locators - URLs
• Such applications may involve devices including video receivers, audio receivers, VCRs, DVDs, PCs, printers, scanners, copiers, telephones, fax machines and home appliances that are operated in stand alone mode or in a domestic (or other) intra-net, for example.
• a system enables the allocation of Internet domain names for usage in a home, private Internet or other intra-net system independently of the public Internet.
• the system uses a method for translating a domain name to a corresponding Internet compatible web page address for use in a processing device supporting Internet compatible bi-directional communication at a User site.
• the method involves examining a message that is destined for a domain name server and that conveys a domain name to be translated to an Internet compatible address.
• the message is intercepted if the conveyed domain name matches an entry in a predetermined intercepting domain name database.
• the intercepted domain name is translated to an
• Figure 1 shows a cable modem system, according to the invention.
• Figure 2 shows a functional depiction of the cable modem in a network environment with multiple PCs and a cable TV system head-end, according to the invention.
• Figures 3 shows a flowchart of a method for translating a domain name to a corresponding Internet compatible web page address, according to the invention.
• Figures 4 shows a flowchart of a method for inhibiting and unlocking
• Figures 5-8 show web pages generated by the cable modem of Figure 1 depicting examples of User interface menus providing the capability of locking and unlocking Internet access, according to the invention.
• Figures 9-11 show User interface menus generated by the cable modem of Figure 1 exemplifying password and userid entry for use in managing Internet access, according to the invention.
• Figures 12 and 13 show web pages generated by the cable modem of Figure 1, according to the invention.
• FIG. 1 shows a cable modem system that advantageously prevents unauthorized Internet access by providing a User with the capability of locking and unlocking the modem's Internet communication function.
• the cable modem system also incorporates a Domain Name Snoop Server (DNSS) for advantageously intercepting Domain Name resolution requests and for translating a domain name to a corresponding Internet compatible web page address.
• DNSS Domain Name Snoop Server
• the modem advantageously generates a web page based graphical user interface for display to a user on a PC using different standardized browser applications.
• the exemplary embodiment of system 12 of Figure 1 supports cable modem bridging communication between a remote CATV head-end and local area network (LAN) devices, e.g. a PC, that are local to the cable modem.
• the bi- directional communications between system 12 and the CATV head-end are in a multi-layered protocol format.
• This multi-layered protocol format involves a QAM (Quadrature Amplitude Modulation) or QPSK (Quadrature Phase Shift Keying Modulation) physical layer.
• This physical layer conveys MPEG2 (Moving Pictures Expert Group) transport protocol data conveying DOCSIS MAC (Media Access Control) data frames.
• the MAC data conveys Ethernet data frames or MAC management data and the Ethernet data in turn conveys IP layer data.
• the cable modem also maintains a return communication path to the CATV head-end employing Time Division Multiplexed communication of return data in Ethernet protocol.
• the encompassing physical layer data transmitted from the CATV head-end to the cable modem is processed and converted to Ethernet or USB format for communication to LAN devices attached to corresponding Ethernet or USB ports.
• the cable modem maintains bi-directional communication with the LAN devices and also receives data from the devices in corresponding Ethernet or USB protocol.
• the bi-directional communications between system 12 and the Ethernet compatible or USB compatible devices (attached to ports 72 and 82 of system 12) involve a multi- layered protocol format in similar fashion to the communication between the CATV head-end and system 12.
• This multi-layered protocol format may include Ethernet/USB frames, HTTP (Hyper Text Transmission Protocol) and TCP/IP (Transmission Control Protocol/Internet Protocol) data and other protocols depending on the applications served.
• the cable modem described herein employs an MPEG compatible protocol conforming to the MPEG2 image encoding standard, termed the "MPEG standard". This standard is comprised of a system encoding section (ISO/TEC 13818-
• the Internet TCP/IP (Transmission Control Protocol/Internet Protocol) and Ethernet compatible protocols described herein provide compatibility with the Multimedia Cable Networks Systems (MCNS) preliminary requirements and DOCSIS 1.0 (Data Over Cable Service Interface Specification 1.0) requirements ratified by the International Telecommunications Union (ITU) March 1998 and as specified in RFC 2669 (Request For Comment Document 2669). Further, the discussion of Domain Name processing herein involves Domain Name Resolution procedures that are documented in RFC 1591 March 1994 and in RFC 1918 February 1996 and other documents. The RFC documents are available via the Internet and are prepared by Internet standards working groups.
• MCNS Multimedia Cable Networks Systems
• IP Internet Protocol
• the cable modem (system 12) of Figure 1 communicates with a CATV head-end over a bi-directional broadband high speed RF link on line 10 which typically consists of coaxial cable or hybrid fiber/coax (HFC).
• the modem system 12 bi-directionally communicates with devices located at a User site over local area networks (LANs).
• LANs local area networks
• Typical User-side local area networks include Digital/Intel/Xerox Ethernet compatible networks attached via connector 72.
• Other User-side devices communicate via a Universal Serial Bus (USB) compatible network attached via connector 82.
• User devices attached on the Ethernet and USB networks may include equipment such as personal computers (PCs), network printers, video receivers, audio receivers, VCRs, DVDs, scanners, copiers, telephones, fax machines and home appliances, for example.
• diplexer 20 of cable modem system 12 of Figure 1 separates upstream communications (sent from modem 12 to a CATV head-end) from downstream communications (sent from a CATV head-end to modem 12) conveyed via cable line 10.
• Diplexer 20 separates upstream data from downstream data based on the different frequency ranges that the upstream data (typically 5-42 MHz) and downstream data (typically 92-855 MHz) respectively employ.
• Controller 60 configures the elements of cable modem 12 of Figure 1 to receive MPEG2 transport data from the CATV head-end on cable line 10 and to convert the data to Ethernet or
• controller 60 configures the elements of cable modem 12 of Figure 1 to receive Ethernet or USB compatible data from ports 72 and 82 and to convert and transmit MPEG2 transport protocol data to the CATV head-end on cable line 10. Controller 60 configures the elements of system 12 through the setting of control register values within these elements using a bi-directional data and control signal bus. Specifically, controller 60 configures tuner 15, saw filter 25, differential amplifier 30 and MCNS (Multimedia Cable Networks Systems) interface device 35 to receive a DOCSIS formatted signal on a previously identified RF channel frequency.
• the DOCSIS formatted signal comprises an MPEG2 transport protocol format conveying Ethernet compatible data frames including IP data content.
• Controller 60 employs an initialization process to determine the RF channel frequency that tuner 15 is to be configured to receive.
• the initialization process involves iteratively tuning to successive candidate RF channel frequencies until a DOCSIS compliant signal is obtained.
• Controller 60 recognizes a DOCSIS compliant signal on a candidate channel through the successful decode by MCNS interface processor 35 of the received data and through a correspondingly acceptable error rate for the decoded data.
• controller 60 in conjunction with MCNS interface 35, amplifier 85 and RF transformer 87 also transmits data upstream to the CATV head-end for a variety of purposes including for adaptively and iteratively adjusting upstream and downstream communication parameters. These parameters include cable modem transmission power level and timing offset, for example.
• an RF carrier is modulated with MPEG2 transport protocol data using 64 or 256 QAM (Quadrature Amplitude Modulation).
• the MPEG2 transport data includes Ethernet formatted data which in turn includes IP data representing a User requested HTML (HyperText Mark-Up Language) web page, for example.
• the MPEG transport data is provided by diplexer 20 to tuner 15.
• Tuner 15 down-converts the input signal from diplexer 20 to a lower frequency band which is filtered by saw filter 25 to enhance signal isolation from neighboring RF channels.
• the filtered signal from unit 25 is level shifted and buffered by differential amplifier 30 to provide a signal compatible with MCNS interface processor 35.
• the resultant down converted, level-shifted signal from amplifier 30 is demodulated by MCNS processor 35.
• This demodulated data is further trellis decoded, mapped into byte aligned data segments, deinterleaved and Reed- Solomon error corrected within processor 35.
• Trellis decoding, deinterleaving and Reed-Solomon error correction are known functions described, for example, in the reference text Digital Communication, Lee and Messerschmidt (Kluwer Academic Press, Boston, MA, USA, 1988).
• Processor 35 further converts the MPEG2 format data to Ethernet data frames that are provided to processor 60.
• Processor 60 parses and filters the Ethernet compatible data from unit 35 using filters configured from the CATV head-end.
• the filters implemented by processor 60 match IP data identifiers in incoming Ethernet frame packets provided by unit 35 with IP identifier values pre-loaded from the CATV head-end.
• IP identifier values are pre-loaded during a previously performed initialization or configuration operation.
• processor 60 implements a data admission control function forwarding selected data to local LAN devices and discarding other selected data content.
• This configurable filter system may be advantageously used to filter data based on metadata items in the incoming data for a variety of purposes including based on, (a) content rating for parental or other blocking control, (b) predetermined User preferences for targeting advertisements and "push-content", (c) firewall filtering, (d) identity of source, and (e) a data search function.
• the filtered Ethernet compatible serial data is communicated to a PC via Ethernet interface 65, filter and isolation transformer 70 and port 72.
• Interface 65 buffers and conditions the data from processor 60 for filtering and transforming by unit 70 for output to a PC via port 72.
• controller 60 converts and filters IP data (conveyed in Ethernet data frames) from processor 35 for output in USB format via port 82.
• the USB data is buffered by transceiver 75 and filtered by noise and interference suppression (EMI ESD) filter 80 prior to output to USB compatible LAN devices connected to port 82.
• EMI ESD noise and interference suppression
• Modem system 12 also communicates data upstream from an attached PC, for example, to a CATV head-end.
• controller 60 of system 12 receives Ethernet compatible data from the attached PC via port 72, interface 65 and filter/isolation transformer 70 and provides it to processor 35.
• Processor 35 modulates an RF carrier with the received Ethernet format data using 16 QAM or QPSK (Quadrature Phase Shift Keying Modulation).
• the resultant modulated data is time division multiplexed onto cable line 10 for upstream communication via amplifier 85, transformer 87 and diplexer 20.
• Amplifier 85 outputs the data to the CATV head-end with an appropriate power level selected in the previously described initialization 5 process.
• Transformer 87 provides a degree of fault and noise isolation in the event of a failure in the modem 12 or upon the occurrence of locally generated noise in the modem or in attached devices.
• modem system 12 also communicates data upstream from devices attached via USB port 82.
• controller 80 In an exemplary implementation, controller 80
• transceiver 75 receives Ethernet compatible data from transceiver 75 and provides it to processor 35 for upstream communication in the manner previously described.
• transceiver 75 receives Ethernet data encapsulated within USB frames from port 82 via filter 80 and removes the USB frame data to provide Ethernet format data to controller 60.
• Controller 60 is also responsive to on/off and reset switch 90 and performs a variety of functions in addition to those already described.
• modem 12 under the direction of controller 60 advantageously, (a) enables a User to lock the modem and prevent unauthorized Internet access, (b) supports interception of Domain Name resolution requests and the translation of a domain name to a
• controller 60 configures modem 12 parameters using configuration information provided from a CATV head-end.
• Controller 60 also directs system 12 in synchronizing and multiplexing upstream communication onto cable line 10 and implements a rate limit in controlling upstream data traffic. Further, controller 60 bi-directionally filters received data and provides selected data to either the CATV head-end and LAN devices attached to ports 72 and 82. Controller 60 also maintains a TCP/IP data stack for buffering and data
• the ranging communication is initiated by the CATV head-end and comprises the continuous but intermittent polling of individual modems to determine status and to identify modem or line failures.
• Figure 2 shows a functional depiction of the cable modem of Figure 1
• Cable modem 12 provides bi-directional bridging communication between a cable service provider 240 at a head-end and LAN connected PCs 220 and
• bi-directional bridging communication between different input and output protocols is provided by interface and protocol conversion functions 225 and 5 235.
• the bi-directional communication path provided by units 225 and 235 supports protocol conversion in a multi-layered protocol structure.
• the protocol layers involve hierarchical MPEG2, Ethernet, and IP protocol layers as well as a USB protocol layer and a QAM or QPSK modulation physical layer.
• a TCP/IP stack 260 buffers request and
• the SNMP function 245 receives and interprets SNMP
• function 245 configures modem 12 and updates system parameters using configuration information provided from the CATV head-end. Function 245 also configures bi-directional filters in system 12 for parsing and either forwarding, re-directing or discarding received messages from PCs
• Function 245 also supports the previously described ranging communication function initiated by head-end 240 for continuous polling of modem 12 to determine the modem status and operational condition.
• Web page generator function 255 generates interactive HTML web pages as exemplified in Figures 12 and 13 discussed later. The generated web pages
• Function 25 comprise a graphical User interface enabling a technician to readily perform diagnostic tests on system 12 and the associated networks.
• Function 255 generates HTML web pages for display on an attached User's PC 220, for example, allowing a technician to determine faults and status directly through the User's PC.
• a generated web page may also be remotely accessed following a password and userid
• the generated web pages enable an authorized User to prevent unauthorized Internet access by providing a User with the capability of locking and unlocking the modem's Internet communication function.
• the generated web pages also provide a User interface enabling viewing and/or update of system parameters and received data such
• the web pages also provide diagnostic, billing, status, internal configuration and other information and enable modem configuration change.
• the functions performed by the generated web pages that are described herein may be incorporated within a
• the web pages generated by function 255 also provide an interface enabling a User to allocate an Internet domain name to a private Internet (versus the public Internet).
• the interface for example, enables a User to allocate an Internet domain name to an element in a home (or other) intra-net system.
• an intercepting Domain Name Snoop Server (DNSS) 230 supports interception of Domain Name resolution requests generated by PC 220 in response to a User Internet web page request initiated via a browser running on PC 220, for example.
• the DNSS 230 translates the intercepted domain name to a corresponding private Internet web page address thereby enabling private Internet domain names to be allocated via the generated web pages for usage in a home or other private Internet or intra-net system and independently of the public Internet.
• Figures 3 shows a flowchart of a method for translating a domain name to a corresponding Internet compatible web page address.
• the method is employed by controller 60 of Figure 1 (in conjunction with the other elements of system 12 of Figures 1 and 2) to enable private Internet domain names to be allocated via a generated web page for usage in a home or other private intra-net system.
• PC 220 Figure 2) in step 303 ( Figure 3) transmits a Domain Name Resolution request to system 12 ( Figure 2) in response to a User web page request via a browser running on PC 220.
• the PC 220 browser submits a Domain Name Request following standard Internet resolution protocols as detailed the RFC (Request For Comment) documents available on the Internet e.g. RFC 1035, 1591, 1816 as well as subsequent and earlier RFCs associated with these documents.
• RFC Request For Comment
• DNS Domain Name Server
• Requests are submitted by a resolver to one or more DNS's to get the full IP address of a particular machine or device. For example, on a web browser a User may type RCA.com. This is then sent to a DNS which may translate it to IP address 157.254.235.215. A web browser uses this IP address to contact the web server and retrieve web page information. Note that this example is extremely simplified. In practice, several hierarchically organized DNS's are used via a referral or recursion process, plus many other processes are involved including caching and age factor processing.
• the Domain Name Resolution request is submitted by PC 220 to system 12 for forwarding and translation of the Domain Name entered by the User into a corresponding IP address of the source of the requested web page.
• an Intercepting Domain Name database (unit 250 of Figure 2) is provided for use within system 12.
• the intercepting Domain Name database associates IP addresses with Domain Names of intra-net devices on a domestic LAN (a private intra-net) and is derived from Domain Names and IP address information locally allocated by a User via a web page interface generated by system 12.
• Domain Name database may be downloaded using DHCP (Dynamic Host
• the intercepting Domain Name database may be downloaded from local Internet location e.g. from local storage or the database may be pre-stored within system 12.
• Snoop Server (DNSS) 230 of system 12 examines the Domain Name Resolution request message from PC 220 to determine if the conveyed Domain Name matches a name in database 250.
• system 12 intercepts the Domain Name Resolution request from PC 220 ( Figure 2) if the conveyed Domain Name matches a name in database 250 ( Figure 2). Upon such a name match, system 12, in step 317, inhibits further communication of the Domain Name Resolution message to a public Internet Domain Name Server.
• Snoop Server (DNSS) 230 in step 320 in conjunction with database 250, translates the intercepted Domain Name to an IP compatible address and in step 323 communicates the IP address back to the requesting source (PC 220 in this example).
• system 12 in step 325 maintains a history of Domain Name and IP address translations and requests within database 250 and collates and compiles the information for monitoring and other purposes including, for example, parental control, firewall filtering, or for the accumulation of User preference data as a background operation.
• the compiled information is made available for display on a web page generated by unit 255 either continuously or upon User request via the web page.
• the process of Figure 3 terminates in step 330.
• step 317 is not performed and system 12 also communicates the Domain Name Resolution message received from PC 220 to a public Internet Domain Name Server.
• system 12 may receive two IP address translations in response. One from DNSS 230 and one from a remote public Domain Name Server. The received IP addresses may or may not be the same, consequently, a potential address conflict and race condition arises.
• system 12 is programmed to select the first IP address response received. The first response received is typically the response from local DNSS 230.
• system 12 may be conditioned differently, for example, system 12 may be conditioned to give priority to responses from a particular source such as from the remote server.
• the intercepting Domain Name Server and the features of the process of Figure 3 provide a means for a User to easily and quickly allocate, add, or alter
• Internet domain names used in a private Internet e.g., to accommodate the addition of devices to the private Internet.
• This enables a User to flexibly manage and change the configuration of elements and peripherals of a home (or other) intra-net system via a web page running on a standardized browser, for example.
• a User may advantageously manage Domain Name allocation on a private Internet without impact on the public Internet or the cumbersome and time consuming burden of having to register Domain Name allocations and changes with public Internet gateways and service providers (ISPs).
• ISPs public Internet gateways and service providers
• a User requesting a web page generated within the private Internet need not know the complex IP address of this web page. Instead the User may access the web page by submitting a locally allocated private Internet Domain Name that is recognized by the Intercepting Domain Name Server as corresponding to the required web page.
• the intercepting Domain Name Server and the features of the process of Figure 3 also advantageously enable: (a) the EP addresses of the web pages generated by system 12 or of other information sources or devices on a private Internet to be dynamically assigned for security or other purposes; (b) the assignment of alias (or User customizable) Domain Names and IP addresses to an information source enabling system 12 (or a DNS server) to intercept and respond to DNS requests that are not directly addressed to it, for example; and (c) the overriding of a Domain Name with a locally allocated substitute name.
• system 12 is able to communicate to a device on a LAN or subnet using a locally assigned private Internet domain name or IP address identifying the device as being on this particular LAN or subnet.
• the domain name or IP address may be assigned via a web page generated by unit 255 or may be assigned by the local or remote downloading of data to database 250 ( Figure 2) as previously mentioned. This eliminates the need for a User to have to adjust the IP address or netmask of a PC on the LAN in order to access the web page generated by unit 255 in system 12, for example.
• FIG. 4 shows a flowchart of a method for inhibiting and unlocking Internet access using a cable modem.
• the User interface is presented on a PC attached to Ethernet port 72.
• the method is employed by controller 60 of Figure 1 (in conjunction with the other elements of system 12 of Figures 1 and 2) to enable secure locking of the modem to prevent unauthorized Internet access. This ensures that unauthorized users (e.g., children) will not have access to the network devices unattended. It also provides assurance to a User that his/her PC cannot be accessed while the modem is locked.
• step 405 of Figure 4 following the start at step 400, the communication bridging capability of cable modem 12 is enabled. As previously described, this bridging capability enables an Ethernet device, e.g.
• a PC connected to port 72 of system 12 of Figure 1, to connect to an RF network for communication on cable line 10 as specified under DOCSCIS standards.
• the DOCSIS specifications provide that a modem shall consistently range (i.e. maintain bi-directional communication) with the Cable Modem Termination System (CMTS) while connected. Therefore, in order to remove Internet connectivity, the consumer either needs to physically disconnect the modem from the RF network, or needs to remove power to the modem.
• CMTS Cable Modem Termination System
• the method and system described in connection with Figure 4 provides a locking mechanism, via either hardware (i.e., lock and key) or software
• a userid and password entered in step 410 is verified in step 415 using a menu exemplified in Figure 9.
• This menu and other menus used in the Figure 4 process are displayed on a PC attached to port 72 ( Figure 1).
• the entry of an incorrect password or userid results in steps 410 and 415 being repeated for a specified number of attempts using the incorrect password processing menu of Figure 1 1 until controller 60 ( Figure 1 ) declares successful verification or failure.
• the password for the modem is changed using a change password menu as exemplified in Figure 10.
• This menu may be invoked via icons 505 and 605 in the exemplary modem generated web pages of Figures 5 and 6 respectively.
• the password change menu of Figure 10 prompts the User for the original password and the new password twice (as confirmation of the new password).
• a typical password may be, for example, any combination of letters, numbers, and non-alphanumeric characters up to a maximum of 10 characters.
• the menu of Figure 10 or a similar menu may be used to initially set the password upon initialization of modem 12.
• a software mechanism, a MIB (Management Information Base comprising a software procedure allowing remote management) may also be used to allow the password to be reset by the head end, in the event of a lost password.
• a default password (e.g., "letmeout"), detailed in the User's manual, may be used to invoke the procedure for allowing a head-end to reset the password.
• a private MIB enabled in the modem allows a management station, operated from the cable head-end, or the network operations center controlled by an Internet service provider, to reset the password back to the default, in the event that a password is lost or forgotten.
• a User commands the MIB to reset either the User's password or userid or both password and userid.
• a User telephones the cable operator or Network Operations Center and provides the default password as authorization to request that the password in his modem be reset.
• the default password may be communicated to the head-end via modem 12 to directly invoke the MIB based procedure to reset the password.
• a User requests display of a web page in step 420.
• the requested web page acts as the User interface permitting the User to lock the modem and inhibit Internet access communication.
• a User initiates locking and unlocking of Internet access communication of the modem in step 425 via icons 500 and 700 of the web pages of Figures 5 and 7 respectively.
• a User initiates unlocking and locking of Internet access communication via check boxes 600 and 800 of the web pages of Figures 6 and 8 respectively.
• a User initiates locking of the modem in step 425 via icon 500 of the web page of Figure 5 or via a check box (e.g. as shown in icon 800 of the web page of Figure 8).
• the functions described may be activated and inactivated using User interface menus and web pages that differ from those depicted in Figures 5-12.
• Modem 12 Internet access communication is disabled in step 430 and a web page is displayed indicating this disabled status in the manner exemplified by icons 500 and 800 of Figures 5 and 8 respectively.
• Modem 12 disables Internet access by advantageously inhibiting bridging communication of IP data between the CATV head-end and the LAN devices connected to ports 72 and 82.
• any attempt to access the Internet that is originated by a web browser on a client device e.g. PC 220 of Figure 2
• any attempt to access the Internet that is originated by a web browser on a client device e.g. PC 220 of Figure 2
• the modem While the modem is locked, no traffic is passed from the customer's home network, or PC (and private Internet), to the RF side of the network to the head-end and the public Internet.
• the bridging function of the modem is disabled.
• modem 12 maintains multi-layered protocol communication with the CATV head-end to support the DOCSIS standard ranging process and to support SNMP (simple network management protocol as defined in RFC 1157) access to the database (unit 250 of Figure 2) within modem 12.
• the ranging communication process is initiated by the CATV head-end and is described in the DOCSIS Radio Frequency Interface Specification.
• the ranging communication messages comprise periodic ranging maintenance messages that are conveyed on the
• MAC Media Access Control
• OSI Open Systems Interconnection
• modem 12 In the locked mode, modem 12 also maintains multi-layered protocol communication with a PC (e.g. PC 220 of Figure 2 attached to an Ethernet port) to provide a web page based User interface (as exemplified in Figures 5-8) allowing a User to unlock and re-lock the modem as required.
• PC e.g. PC 220 of Figure 2 attached to an Ethernet port
• Modem 12 disables Internet access by advantageously inhibiting bridging communication of IP data between the CATV head-end and attached LAN devices using a filter mechanism.
• a filter mechanism may be employed to pass data between the CATV head-end and attached LAN devices in one or more particular protocol layers whilst inhibiting communication in other protocol layers.
• the use of bi-directional filtering permits particular protocol layers to be passed in one direction, e.g. from head-end to a LAN device, whilst one or more different layers are passed from a LAN device to the head-end.
• all bridging communication may be inhibited.
• the filter may be implemented as a configurable filter and used to bi-directionally filter data between the CATV head-end and attached LAN devices based on one or more of, (a) content,
• the content filtering may be implemented based on metadata or other content or content derived items for a variety of specific purposes including those previously described in connection with Figure 1.
• the filter may be implemented in similar fashion to the DOCSIS Cable Device MIB as specified in RFC 2669 which defines the docsdevFilterlPDirection object and the docsDevFilterlpDaddr object or may be implemented using other filter mechanisms.
• a filter using primarily these two objects may be employed to restrict all traffic, or selected traffic, from a User's web browser (e.g. on PC 220 of Figure 2) to the head-end and further to the Internet.
• the modem filters data traffic to restrict all inbound traffic from the browser (e.g. in PC 220) with a destination address matching the gateway IP address (corresponding to the IP address of the Cable Modem Termination System in the head-end).
• such a filter may be configured to restrict any selected protocol or selected content being passed in either direction through the modem. This ensures that a User may block access to the Internet and also that access is blocked from the Internet (via the head-end) to the User's PC to enhance security.
• modem 12 prevents unauthorized Internet access by inhibiting communication to the CATV head-end on the Ethernet communication protocol layer whilst concurrently maintaining communication to the CATV head-end on the MAC protocol layer.
• the MAC protocol layer conveys management information supporting ranging operation and other modem and network management functions.
• modem 12 concurrently maintains multi-layered protocol communication with a PC (e.g. PC 220 of Figure 2 attached to an Ethernet port of modem 12) to provide a web page based User interface (as exemplified in Figures 5-8) allowing a User to unlock and re-lock the modem as required.
• PC e.g. PC 220 of Figure 2 attached to an Ethernet port of modem 12
• any attempt by an unauthorized User, e.g., in step 445, to surf the web is blocked and results in termination of this branch of the process of Figure 4 in step 450.
• the modem may be unlocked by an authorized User in steps 440, 455 and 460.
• a password prompt menu (e.g. the menu of Figure 9) is displayed in response to a User's attempt to unlock the modem in step 440.
• a User may attempt to unlock the modem by either activating unlock button 700 of the web page of Figure 7 or checking the "Web Access" checkbox 800 of Figure 8 for example.
• step 460 Upon validation of a correct password in step 460, following password entry in step 455, the modem is unlocked to support bridging communication in step 470 and to provide the User with Internet access.
• This branch of the Figure 4 process terminates in step 475.
• the User Upon identification of an invalid password in step 460, the User is notified that the entered password is invalid in step 465 via a menu as exemplified by Figure 1 1. Through this menu, the User in step 465 may retry password validation starting with step 440 or the User may cancel the attempt to unlock the modem. If the User cancels his unlocking attempt in step 465 the processed is returned to step 430 and a web page is displayed.
• the authorization of a User to lock and unlock the modem to provide Internet access may be performed in other ways and need not involve the entry of a password or userid.
• An access card mechanism may be provided within modem 12 for use in validating authorization based on a digital signature, or other authorization or entitlement data, for example.
• modem 12 may respond to a different access device such as a physical or electronic key for determining User authorization.
• Figures 12 and 13 show web pages generated by the cable modem of
• FIG. 1 These web pages advantageously enable a technician, for example, to determine and adjust specific internal modem configurations.
• the web pages support interactive functions comprising one or more of, (a) configuring modem 12, (b) requesting display of system parameters, (c) selecting a service billing option, and (d) assigning Internet addresses.
• the web page employs password protection access similar to that previously described in connection with preventing unauthorized Internet access. Consequently, even if an unauthorized User discovers the URL address of a particular web page, it is password protected.
• the web page also displays specific diagnostic information to a technician thereby eliminating the need for the technician to rely on LED indications and special diagnostic equipment to be able to access internal status (e.g. items 910-920 of Figure 13) and set configurations.
• a technician may set return channel power level (item 913 of Figure 12), for example.
• the information available on the web page includes specific information about the customer's network configuration. Specifically, it includes the number of PCs connected to the network, the Ethernet speed (100Mb or 10Mb) and the MAC address of modem 12 (items 900 and 902 of Figure 13), for example.
• the displayed web page may indicate other address information such as (a) the web page IP address, (b) a File Transfer Protocol (FTP) address, and (c) an Email address.
• FTP File Transfer Protocol
• the web page also provides other customer network information including the amount of traffic and details concerning collisions on the network. This advantageously eliminates the need for customized diagnostic equipment or software.
• Modem 12 also generates browser alert boxes for certain network events of which a User would like to be informed. Further, the browser allows special HTML information to be displayed during a retrieval of web page data. During this time period modem 12 sends information to a user concerning certain events occurring on the network. These events include alerts about unauthorized access to the User's LAN network, LAN network traffic overflow, and data transfer amounts through modem 12.
• Modem 12 also allows a cable Internet service provider to limit data transfer by establishing quotas and the User is also able to see the amount of data transferred.
• the alert boxes also allows a User to view statistics for specific types of accesses including web page retrievals, DNS requests, FTP (File Transfer Protocol) file transfers, email messages, etc.
• these events and associated information are not confined to being displayed in alert boxes on a browser but are also available on a web page generated by modem 12 in response to an on-demand
• command line (item 911) in Figures 12 and 13 may be used for entry and allocation of a domain name or EP address to a peripheral (locally connected) device of modem 12.
• Command line 91 1 may also be used in associating an entered domain name with a corresponding EP address (and vice versa) involving the update of a database within modem 12.
• a peripheral device may comprise, (a) a device on an intra-net and (b) a device on a domestic home network, and (c) a device on a private Internet.
• command line 911 provides a data entry line enabling User entry of data for configuration of a data traffic filter within modem 12.
• Such a traffic filter may be used for filtering data based on, (a) content rating for parental or other blocking control, (b) predetermined User preferences for targeting advertisements and "push-content", (c) firewall filtering, (d) identity of source or destination, and (e) a data search function.
• the web pages of Figures 12 and 13 may employ menus displayed in areas 905 and 907, for example, specifically supporting the entry, allocation and association of domain names and corresponding EP addresses.
• specific menus presented in areas 905 and 907 may also be used for activating, inactivating and configuring data traffic filters.
• Modem 12 also acts as a browser proxy agent for web page surfing.
• Modem 12 pre-fetches and forward caches web pages associated with the web page that a user is currently viewing. This increases Internet surfing speeds by eliminating the delay caused by a remote web site or the Internet infrastructure.
• modem 12 is used as a firewall excluding disruptive and objectionable traffic to protect a User's network system in a home or business from outside invasion and disruption.
• the architectures of the systems of Figure 1 and Figure 2 is not exclusive. Other architectures may be derived in accordance with the principles of the invention to accomplish the same objectives.
• modem 12 of Figures 1 and 2 and the process steps of Figures 3 and 4 may be implemented in whole or in part within the programmed instructions of controller 60.
• principles of the invention apply to any multi-layered protocol bi- directional communication system and are not limited to DOCSIS compatible modems or to any other type of modem.

Landscapes

• Engineering & Computer Science (AREA)
• Signal Processing (AREA)
• Computer Networks & Wireless Communication (AREA)
• Databases & Information Systems (AREA)
• Multimedia (AREA)
• Theoretical Computer Science (AREA)
• General Engineering & Computer Science (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Human Computer Interaction (AREA)
• Data Mining & Analysis (AREA)
• Computer Security & Cryptography (AREA)
• Health & Medical Sciences (AREA)
• Child & Adolescent Psychology (AREA)
• General Health & Medical Sciences (AREA)
• Software Systems (AREA)
• Data Exchanges In Wide-Area Networks (AREA)
• Small-Scale Networks (AREA)

Applications Claiming Priority (5)

Publications (1)

Family

ID=26856295

Family Applications (1)

Country Status (8)

Families Citing this family (16)

Family Cites Families (2)

• 2000
  • 2000-10-13 KR KR1020027004577A patent/KR20020039678A/ko not_active Application Discontinuation
  • 2000-10-13 JP JP2001531277A patent/JP2003512775A/ja not_active Withdrawn
  • 2000-10-13 WO PCT/US2000/028345 patent/WO2001030043A2/en not_active Application Discontinuation
  • 2000-10-13 BR BR0014780-0A patent/BR0014780A/pt not_active IP Right Cessation
  • 2000-10-13 MX MXPA02003711A patent/MXPA02003711A/es unknown
  • 2000-10-13 AU AU10833/01A patent/AU1083301A/en not_active Abandoned
  • 2000-10-13 EP EP00972132A patent/EP1222792A2/en not_active Withdrawn
  • 2000-10-13 CN CN00814291A patent/CN1379946A/zh active Pending

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events