ES2368681T3 - AUTHENTICATED CHANGE OF MEDIA PROVIDED ON A DSL CONNECTION. - Google Patents

Abstract

A procedure for enabling access of a subscriber terminal (204) served by an access node (206A-206C), in which the access node (206A-206C) is connected to a central network (208) carrying a plurality of media channels and in which the subscriber terminal is connected to the access node (206A-206C) over a respective local loop data connection, characterized in that the access node (206A-206C) is enabled with multicast capabilities and multiple subscribers authorized to access the same media channel are granted multicast access to a single instance of that channel in response to a subscriber's request to access a media channel transported by the central network.

Description

Authenticated change of media provided over a DSL connection

The present invention relates to enabling a client to access media on a communication path, and more particularly, enabling a client to quickly change the media channels that are provided on a communication path.

Background of the invention

Twenty-five years ago, telephone companies mainly used residential telephone lines to offer voice services to customers. For entertainment, customers usually left home to movie theaters, restaurants or parks.

Television broadcasts were the basic system for channeling home entertainment. The cable industry was incipient and consisted mainly of placing a large antenna and connecting amplifiers in line to feed the received signals to several houses. At that time the telephone companies were convinced that their participation in the voice services market was indisputable. Cable operators were too small and too specialized to be of much interest.

Today, the predominant service offered by telephone companies is still voice services. However, the boundary between the cable industry and the telecommunications industry is blurring. Cable companies have not stopped providing entertainment media. In particular, they are also providing data services on cable modems, and have indicated their intention to compete with telephone operators in providing voice services to residential customers.

Since technology has advanced, telephone wires and cable wires to homes have become exactly that, cables. What makes each cable different from any other cable are the services it can provide to customers. In turn, the service provided by a cable determines its importance and value. The more services a single cable can provide to a customer, the more valuable the cable will be. In this way, separate cables for each type of home service have become less important and are often unnecessary.

Over time, the type of access point / home connection has become less important than the services it can provide. While it is possible to evaluate the group's psychology and examine human behavior issues to try to determine the reason why predominantly entertainment industries, such as cable companies and Internet companies, have seen exponential growth patterns, This is not the purpose of this explanation. However, it is important to note that the growth figures indicate that the audience of consumers in an extended market, when correlated with entertainment, has resulted in a market segment that is profitable and growing. This is an observation that has been validated by the emergence of cable and internet companies from their humble beginnings to huge conglomerates today.

This observation has two parts. The first part is the growth of an audience of consumers in an extended market for entertainment that is provided to homes. The second part is that entertainment has played an equally important role in the emergence of an entirely new revenue sector.

Entertainment can be visual and acoustic, such as video or movies. Purely visual entertainment can take the form of a book, magazine or newspaper. Acoustic entertainment can include music, comments, news broadcasts, etc. The emergence of an open format for the exchange of visual entertainment on the Internet has been one of the cornerstones in the emergence and establishment of the dominant online service providers. Entertainment as described above does not differentiate between information and pure entertainment. However, the differentiating element between information and entertainment is more qualitative and subjective. The scope of supply of these is not necessarily different. Therefore, collectively, both visual and acoustic entertainments can be referred to as media.

In order for telecommunications companies to compete effectively for customers in the future, they will have to deploy a compelling set of services that include the media. These services must match, at least, or even exceed the provision of similar services on other networks, such as those provided by cable companies. It is with respect to these considerations and others for which the present invention has been made.

US Patent Publication No. 200110019559 discloses a procedure for self-authenticating an end user of one of the multiple service providers, in which the end user is given access to an authentication application and based on the information entered by the end user, a query is made to the database to determine the level of service.

US Patent No. 6,044,403 discloses a network server platform that hosts a plurality of services comprising a memory that stores a user profile and a controller to provide the user with information related to the user's interests.

WO 99/63759 discloses a system for providing television broadcasts on the internet, in which an IP multicast protocol is used for television programming and an IP monodiffusion protocol is used for video on demand services.

US Patent Publication No. 2002/026645 discloses a procedure for the real-time broadcast of content to an access network such as IP packets over a real-time broadcast network in response to a content request.

WO 01/35240 discloses a unified portal server located remote from a subscriber location and capable of providing services over a DSL connection.

WO 01/98920 discloses a system in which segments of a program are pre-stored in the client's premises and the rest of the segments are transmitted over a network from a server designated in response to a client's request.

WO / 95569 discloses a procedure for providing multicast information in a DSL network. A network control system controls the selective multiplexing of the information through the digital subscriber online access multiplexer (DSLAM).

US Patent Publication No. 2002/0016831 discloses a system for locating the geographic location of a user online in order to authenticate the identity of the user.

Summary of the invention

The present invention relates to solving the deficiencies, inconveniences and problems mentioned above, and will be understood by reading and studying the following specification.

In accordance with an embodiment of the present invention, a method for a fast, authenticated channel change is provided for media such as video supplied over an Internet Protocol (IP) network to a client. The embodiment allows channel changes to be made quickly with validation on an access node. An example of an access node is a Digital Subscriber Online Access Multiplexer (DSLAM) that provides high-speed access to a client, on which a channel is supplied. The reasons why a channel may not be available to the customer may be commercial, that is, the customer may not be subscribed or may not have paid for the requested channel. It could also be because a block has been placed on a requested channel to restrict its availability to the customer based on either a time limitation or personal preferences. For example, a client may not allow a violent viewer to watch violent movies on a particular channel.

Thus, in accordance with the present invention, a method is provided to enable access of a subscriber terminal served by an access node, in which the access node is connected to a central network carrying a plurality of channels. of media and in which the subscriber terminal is connected to the access node over a respective local loop data connection, characterized in that the access node is enabled with multicast capabilities and is granted to multiple subscribers authorized to access the same media channel multicast access to a single instance of that channel, in response to a subscriber's request to access a media channel transported by the central network.

A further aspect of the invention is directed to provide at least one protocol for IGMP multicasting. In addition, a connection module can be used by the subscriber to provide an xDSL connection that is served locally by the receiving DSLAM.

In addition, stored information can be included in a database in the receiving access node.

A still further aspect of the invention is directed to provide each instance of each channel to the central network on a router coupled to another network. In addition, a remote process can be used to keep the information stored. In addition, a remote process can be used to update the stored information.

Another embodiment of the invention relates to access to the requested channel by means of an xDSL connection for the subscriber that is served locally by the receiving access node. In addition, the channel may include means to display, record and play with a connection module. In addition, the media can include at least one of videos, graphics, images, text, talk shows.

Another embodiment of the invention relates to an access node for enabling rapid access to at least one channel over an xDSL connection, comprising (a) a network interface that uses a packet-based protocol to send and receive packets with a core network and other network interface for multiplexing local xDSL connections that are associated with a user, and (b) a transcoder that performs actions, including: (i) enabling multicast operation on the access node to access at least to a channel in the central network in which at least one subscriber is coupled to the central network by the xDSL connection, (ii) receiving a request for at least one channel of an xDSL local connection associated with a user, (iii) use the information stored to determine if the subscriber is authorized to access the requested channel, and (iv) if it is determined that the subscriber is authorized to access the requested channel, provide access to the soli channel cited in the central network in the local connection by means of the local xDSL connection associated with the subscriber, in which the central network establishes a single instance of each channel that can be selected by the subscribers.

Another embodiment of the invention relates to a system for enabling rapid access to at least one channel over an xDSL connection coupled to a central IP-based network, comprising: (a) at least one access node enabled for multicasting to enable access to at least one channel in the central network, in which at least one subscriber is coupled to the central network by the xDSL connection; (b) a connection module to send a request for at least one channel from a subscriber to an access node enabled for multicasting, in which the access node serves an xDSL local connection for the connection module; (c) a database for locally storing the information in the receiving access node, the information being used to determine if the subscriber is authorized to access the requested channel; and (d) a router that enables the central network to establish a single instance of each channel that can be selected by the subscribers, in which if it is determined that the subscriber is authorized to access the requested channel, the access node of Reception is used to provide access to the requested channel in the core network.

Yet another embodiment of the invention relates to a computer-readable medium that includes instructions for performing actions, including: (a) using at least one multicast access node enabled for multicasting to enable access to at least one channel in the network central, in which at least one subscriber is coupled to the central network by means of the xDSL connection; (b) in a multicast-enabled access node, receive a request for at least one channel of a subscriber, in which the receiving access node serves an xDSL local connection for the subscriber; (c) use the information stored in the receiving access node to determine if the subscriber is authorized to access the requested channel; and (d) if it is determined that the subscriber is authorized to access the requested channel, use the access node to provide access to the requested channels in the central network, in which the central network establishes a single instance of each channel that can Be selected by the subscribers.

Yet another embodiment of the invention relates to a method for enabling rapid access to at least one channel over an xDSL connection, comprising: (a) using media on at least one multicast-enabled access node to enable access to by at least one channel in a central network, in which at least one subscriber is coupled to the central network via the xDSL connection; (b) in a multicast-enabled access node, use means to receive a request from a subscriber for at least one channel, in which the receiving access node serves an xDSL local connection for the subscriber; (c) a means to use the information stored in the receiving access node to determine if the subscriber is authorized to access the requested channel; and (d) if it is determined that the subscriber is authorized to have access to the requested channel, use the access node to provide access to the requested channel in the central network, in which the central network establishes a single instance of each channel that can Be selected by the subscribers.

A still further embodiment of the invention relates to a method for enabling rapid access to at least one channel over a connection, comprising: (a) using at least one multicast-enabled access node to enable access to at least a channel of a central network, in which at least one subscriber is coupled to the central network by the connection; (b) in a multicast-enabled access node, receive a request from at least one channel of a subscriber, in which the receiving access node serves locally the connection for the subscriber; (c) use the information stored in the receiving access node to determine if the subscriber is authorized to access the requested channel; and (d) if it is determined that the subscriber is authorized to access the requested channel, use the access node to provide access to the requested channel in the central network, television programs. According to another aspect of the invention, an apparatus, system and computer-readable medium can be used to perform substantially the same actions as explained above for the procedure.

Brief description of the drawings

Figure 1 illustrates a schematic diagram of an exemplary system to enable a client to change the channels of the media provided through an xDSL telephone line;

Figure 2a shows a schematic diagram of an exemplary core network that includes DSLAMs enabled not for multicasting;

Figure 2B shows a schematic diagram of an exemplary core network, which includes multicast-enabled DSLAMs;

Figure 3 shows a schematic diagram of an exemplary core network that includes multicast-enabled DSLAMs that validate channel requests by customers;

Figure 4 illustrates a schematic diagram of an exemplary core network for the interaction of an OSS, DSLAM and STB;

Figure 5 shows a flow chart for an overview of the actions performed by the authentication module;

Figure 6 illustrates a flow chart for an overview of the actions performed by the OSS module;

Figure 7 shows a schematic diagram of an exemplary connection module, and

Figure 8 shows a schematic diagram of an exemplary DSLAM, in accordance with the present invention.

Detailed description of the preferred embodiment

In the following detailed description of exemplary embodiments of the invention, reference is made to the accompanying drawings, which form a part thereof, and which show, by way of illustration, specific exemplary embodiments with which the invention. Each embodiment is disclosed in sufficient detail to enable those skilled in the art to practice the invention, and it should be understood that other embodiments can be used, and other changes can be made, without departing from the spirit or scope of the present invention. . The detailed description that follows, therefore, should not be taken in a sense of limitation, and the scope of the present invention is defined only by the appended claims.

Throughout the specification and the claims, the following terms have the meaning explicitly associated in the present specification, unless the context clearly indicates otherwise. The term "package" It refers to an IP packet. The term "flow" means a packet flow.

The term "connection" refers to a flow or packet flows that share a common path. The term " node " refers to a network element that interconnects one or more networks or devices. The term "user" refers to any person or customer, such as a company or organization, that uses a device to communicate or access resources I over a network. The term "operator" refers to any technician or organization that maintains or services a packet-based network.

The term " router " refers to a dedicated network element that receives packets and forwards them to their destination. In particular, a router is used to extend or segment networks by sending packets from one logical network to another. A router typically operates at layer 3 and below the Open Systems Interconnection (OSI) reference model for networks. However, some routers may provide additional functionality that operates above layer 3 of the OSI reference model.

The term "xDSL" refers to any version of a Digital Subscriber Line (DSL) that communicates packets between an end-user modem and an access node, for example, a Digital Subscriber Line Access Multiplexer (DSLAM), connected to a network central. The DSL versions include Asymmetric DSL, Symmetric DSL, Rate DSL, hybrid DSL, very high bit rate DSL, and the like.

The term " core network " refers to any digital switched packet network. For example, Frame Delay, Asynchronous Transfer Mode (ATM) and Switched Megabit Data Service, and the like.

The term DSLAM refers to a Digital Subscriber Line Access Multiplexer that is used to separate signals from multiple local xDSL loops into analog voice signals for a Public Switched Telephone Network (PSTN) and signal data for a central network.

The term connection module or "STB" refers to a device that enables a monitor, screen, television, and the like, to become a user interface of a digital network, such as a central network, the Internet, and the like. The connection module also allows the reception and decoding of digital broadcasts to reproduce, execute and / or display.

Referring to the drawings, the same numbers indicate the same parts in all views. In addition, a reference to the singular includes a reference to the plural, unless otherwise indicated or inconsistent with the disclosure of this specification.

A procedure and system for rapid media channel changes provided by bearers on an ADSL connection to a home is provided. The information of each subscriber client is stored in the DSLAM that supports the xDSL connection in the home. In addition, each DSLAM supports multicast protocols, so that only one instance of a channel is provided to the core network regardless of the number of clients that have requested access to the channel.

When a customer in your home is watching media on a television that receives a wireless signal from a terrestrial television station, channel changes occur quickly. Typically, channel changes occur in a second or less. In addition, when a customer is watching a channel on a television that receives a signal over a network cable, the channel changes are also very fast. As a result, customers expect relatively quick responses to channel change requests. As the number of media channels increases, it becomes even more difficult to ensure that channel changes remain fast for the client.

Not all media channels are the same. In addition to the obvious differences in programming and qualitative issues, as well as subjective differences, some channels are considered higher channels. The upper channels have a different cost structure for the client. This cost structure may take the form of a different subscription price per time period (per week or per month) or it may cost the viewer an additional charge for a single visualization. (Payment per vision for a specific event). The different top channels could be combined with the standard channels to create different packages or subscription levels. A combination of a set of channels is often called a service package and is sometimes called a subscription level. A service package can be a combination of any number of higher channels and standard channels. Some service packages may also not have video channels.

To ensure that they can charge amounts for service packages, service providers often use a service package validation system. For example, in the cable television industry this validation package is referred to as a conditional access system (CAS). Another example is a smart card that is often used by service providers that supply their packages over a satellite downlink. The validation of the service package is well established in the cable television industry, as well as in the satellite television industry. In cable television service packages, it is possible to quickly change channels (zapping) and validation can be done quickly in real time. However, service pack validation systems are less known in the telecommunications industry.

For media service providers to effectively use cable online access or wireless access to homes that is provided by a telephone company, a service package validation system is necessary. However, any service package validation system provided by a telephone company must process channel change requests as quickly as those of terrestrial television or cable television systems. For telephone operators, IP-based networks are a popular option for media communication to customers. Often, multicast media from a single source represents an effort to conserve the bandwidth of a core network. Internet multicast protocols are well defined as an international standard by the Internet Group Management Protocol (IGMP).

Although rapid channel changes can be made with IGMP protocols, it may not always be possible to make channel changes quickly when the client's request must first be authenticated and authorized. In the past, when media were distributed over an IP-based telephone carrier network using multicast procedures, authentication and authorization was processed separately by invoking explicit calls to an agent or authorization system at the request level. This process often added a significant delay in the response to customer channel change requests.

Figure 1 shows an overview of an exemplary system 100 for enabling a consumer to change / select the media channels with the 110A-F connection modules on an xDSL telephone line. The DSLAM 108A -C is coupled to the central network 112 and supports the xDSL telephone lines that are coupled to the respective local connection modules 110A -F. In another network (not shown), Program Guide Server 104 is coupled to a router 106 and a Billing and Subscriber Management Server 102.

In addition, the type of media that is provided by a channel may include, but is not limited to, video, graphics, images, music, text, talk shows, television shows, and the like.

In Figure 1, the consumer has requested / changed a channel from the connection module 110F. The channel request is received on an xDSL line by the DSLAM 108C and is transmitted to the Program Guide Server 104 over the core network 112 via the router 106. The Program Guide Server 104 processes the request by extracting a consumer identification number (ID) and other features of the application. The Program Guide Server 104 requests the Billing and Subscriber Management Server 102 to validate the consumer's channel request. The Billing and Subscriber Management Server 102 determines if the consumer is validated to receive the requested channel and sends a response to the Program Guide Server 104, which then allows or denies the change request based, at least in part, on The content of the validation response.

In addition, when the channel request is allowed, the Program Guide Server 104 will provide the means for the requested channel to the DSLAM 108C, which then supplies the requested channel means to the connection module 110F. Alternatively, if the request had been denied by the Program Guide Server 104, then the media is not provided to the DSLAM 108C that serves the consumer locally requesting a selected channel in the connection module 110F.

The associated time measurements are as follows: TC - time for the consumer device (connection module) to send the request; TCD - transit time between the consumer and the DSLAM; TDP - transit time from the DSLAM to the Program Guide Server; TP - processing time in the program guide server; TPB - transit time between the program guide server and the Billing and Subscriber Data Processes server; To-processing time in the Billing and Subscriber Data Processor; PBP - transit time from B to P; TPD - transit time from P to D; TDC - transit time from D to C, TCS - time required by C to establish the actions taken as a result of the response. Therefore, the total time to complete the consumer's request is as follows:

Toriginal = TC + TCD + TDP + TP + TPB + TB + T + TPD + TDC + TCS

Alternatively, the program guide that is shown to the consumer could make available options that have been previously validated. Therefore, it can be assumed that any request that comes from the consumer is valid. For this case, the total time used is represented by the equation as follows:

Talternate = TC + TCD + TDC + TCS

In addition, there are two hypotheses in this equation. First, the DSLAM is multicast enabled or a multicast channel is available in the DSLAM. If the DSLAM is not multicast enabled, then the request must be propagated to the program guide server or the video ingestion point. In this case, the total time will be increased to TC + TCD + TDP + TP + TDC + TCS. Second, the program guide server can remotely control the consumer's device to send updated information without it being requested by the consumer's device.

The invention improves the above solutions, at least in two ways. First, each DSLAM is enabled for multicasting with an IGMP protocol. Second, consumer channel requests are validated locally in the DSLAM that serves a connection module.

Figure 2A shows an exemplary system 200, in which at least a part of the disadvantages in using DSLAM not for multicast 206A -C is illustrated. An exemplary system 200 allows the consumer to change / select the media channels with the connection modules 204 on an xDSL telephone line. The non-multicast-enabled DSLAM 206A -C is coupled to the central network 208 and supports xDSL telephone lines that are coupled to their respective local connection modules 204. In another network, a Program Guide Server is coupled to router 202 and a Billing and Subscriber Management Server. Although not shown, these servers function substantially in the same manner as explained in Figure 1.

The media performance of another network (not shown here) to the core network 208 at the point of media ingestion, that is, router 202, is directly proportional to the number of consumers requesting a channel in their junction boxes 204 on their respective DSLAM 206A -C. Even if two consumers served by the same DSLAM enabled not for multicast have requested the same channel, independent channels are established on each consumer's core network to view that channel. In this case, a separate channel must be established for each consumer request, for example, six connection modules coupled to a central network over DSLAM enabled not for multicasting would require a capacity of six channels on router 202, even if each module of connection would have requested the same channel.

An equation that expresses this relationship is as follows:

(Use of Central Network) DSL_NO MULTIDIFUSIÓN AM α Number of active consumers

Figure 2B illustrates an exemplary system in which each DSLAM is enabled for multicasting. An exemplary system 220 allows a consumer to change / select media channels with connection modules 224 on an xDSL telephone line. The multicast-enabled DSLAMs 226A -C are coupled to the central network 228, and support xDSL telephone lines that are coupled to their respective local connection modules 224. In another network (not shown), a Program Guide Server is coupled to a router and a Billing and Subscriber Management Server 222. Although not shown, these servers function substantially in the same manner as explained in Figure 1.

For this embodiment, there is no duplication of channel traffic over the central network 228. On the contrary, the multicast-enabled DSLAM terminates a connection for each channel in the central network 228 and then handles the multicast requests between the consumers (communication modules). connection 224) to those it serves locally. In this way, the performance at the point of media ingestion, that is, the router 222, and in the network core 228 is directly proportional to the amount of available channels. For example, if six connection modules are coupled to a central network over multicast-enabled DSLAMs and each connection module only requests one of two different channels, only a two-channel capacity on router 202 is required to provide the media to the connection modules 224.

An equation that expresses the operation of this embodiment is as follows:

(Use of Central Network) multicast _ DSLAM α Number of Available Channels

Typically, Number of active consumers »Number of Active Channels.

Figure 3 illustrates a combination of both first and second improvements provided by the invention. In particular, the second improvement allows consumer requests from a connection module to be validated (authenticated / authorized) in the DSLAM it serves locally, which is multicast enabled (supports the IGMP protocol). Subscriber information, billing information and additional information regarding consumers is stored locally in the multicast-enabled DSLAM. This information, in combination with a multicast facility in the DSLAM, allows a channel change request by a consumer. be evaluated quickly and if validated, almost immediately provides the media that are played on the requested channel.

An overview of an exemplary system 300 for enabling a consumer to change / select the media channels with the OA-F connection modules 31 on an xDSL telephone line is illustrated in Figure 3. The 308A-C multicast enabled DSLAMs are coupled to the central network 312, and support xDSL telephone lines that are coupled to the respective local connection modules 310A -F. In another network, the Program Guide Server 20 304 is coupled to a router 306 and the Billing and Subscriber Management Server 302.

These servers operate in substantially the same manner as explained in Figure 1, except that the information necessary to validate is downloaded and the request to change the channel to each DSLAM is authorized prior to the request.

In this embodiment, a channel change request from the connection module 310F is propagated only to the DSLAM 308C that serves locally and that is enabled for multicasting.

In addition, central network 312 only has to provide one instance of each requested channel instead of separate channels for each validated and approved request.

Therefore, the total time for a channel change in the embodiment shown in Figure 3 can be expressed in an equation as follows:

NEW-PROCEDURE = TC + TCD + TDC + TCS

Although the total time to process a channel change request may sometimes be similar to some of the procedures disclosed above, the invention improves with respect to at least three vulnerabilities present in the above procedures. In the invention, the consumer / subscriber data used for authentication / validation is only downloaded to the DSLAM. The DSLAM is maintained and managed by the service provider, such as a telephone company. Consumers do not have access to this information or the administration interfaces for the DSLAM. Therefore, it is difficult to illegally modify or hack information for unauthorized access to media channels.

In contrast, the above procedures have downloaded the data used for authentication / validation and authorization for channel changes to a device, for example, a connection module, which resides in the consumer's premises, which may be vulnerable to piracy and / or unauthorized changes. In this case, an unscrupulous consumer (hacker) could apply hacking practices, such as sniffing channels. In channel sniffing, the hacker executes a program that issues seemingly valid channel change requests using the well-established multicast protocols in the hope that at least one of the requests specifies the correct set of channel identifiers. With enough time, the hacker could establish which are the correct channel identifiers. In addition, if the DSLAM is not validating the channel change requests, it is able to respond to any request that has the correct data in it. Therefore, channel sniffing attacks and the like can be reduced with the invention.

In addition, the above procedures were based on a consumer identifier stored in a device such as a connection module in the consumer's premises. This procedure is not safe, as this information can be falsified. In contrast, the invention provides authentication / validation of consumer information based on its access port in the DSLAM. Since the service provider maintains access port information, it is easier to securely associate a subscription package with a specific consumer location.

Figure 4 shows an overview 400 of an embodiment of the invention that includes at least two software components: an authentication module 402 that is executed in the IGMP protocol of the DSLAM enabled 414, in which in this module it authenticates 30 requests for consumer service, and an Operations Support System (OSS) 40S module that maintains the originality of the consumer authentication data stored in the DSLAM 414 and is in communication with a remote application that processes the authentication data for each DSLAM in a central network (not shown, but substantially similar to that of the system shown in Figure 3).

Figure 4 shows the DSLAM 414 receiving a request for a media channel (video) from the connection module (STB) 404 of the consumer in the form of a request for an IGMP protocol. In this example, monitor 406 is coupled to STB 404 to play media (video) files on the requested channel. In addition, the audio interface 412 is coupled to the STB 404 for the reproduction of audio signals on a requested channel.

Upon receipt of the channel change request, the DSLAM 414 analyzes it and uses an authentication module 402 to perform a search function in the authentication database 410 based on the IP address of the STB or a suitable consumer identifier , such as the port ID, and the multicast channel address provided in the content of the request. The consumer device identifier can be assumed to be valid and unique. In almost real time, this information is compared with an STB identifier (for example, a MAC address) and the media service profile information acquired by the DSLAM 402.

If the consumer is authorized to receive the requested channel, a copy of this channel will be provided to the STB 404 until such time as another channel is selected. In the event that the consumer has not yet subscribed to the requested channel, a generic denial of service message can be provided. Under most conditions, the transaction time for the STB to send the channel request and the response that must be returned by the DSLAM will be less than 250 milliseconds when the present invention is used.

As implied above, consumer channel privileges are cached in multicast-enabled DSLAM 414. In one embodiment, the invention may provide an SNMP interface to allow the OSS 40S application to maintain the accuracy of this information. This embodiment may keep the information based on STB to STB. Changes to this information can be supported at runtime, and this information can be stored in a hash table to keep information recovery rates expedited.

Since the OSS component is typically located remotely, it could provide updates to DSLAMs based on a subscription change for each consumer. In most circumstances, a service provider will want to propagate DSLAM subscription changes in the core network almost in real time. Therefore, when a consumer requests a new subscription of a channel or the removal of an existing one, the OSS can immediately provide changes to a DSLAM in the core network that is serving the consumer's STB locally. It is understood that the remote OSS application may send service change messages based on SNMP requests to DSLAMs for processing.

In one embodiment, the OSS module and / or its remote application can be written in the programming language "JAVA" for execution in the JAVA runtime virtual t environment. In another embodiment, the DSLAM-based implementation of the authentication module is encoded in the programming language C and executed in the DSLAM operating system.

Figure 5 illustrates an overview 500 of the actions that are executed by the authentication module. Moving from a start block, the process advances to block 502 in which a DSLAM-based authentication module analyzes a channel change request (IGMP protocol request) that is received from a locally served connection module in a consumer facilities The process continues to block 504 in which the authentication module performs a search function in a database of subscribers that are stored in the DSLAM that serves the connection module locally. The process advances to decision block 506 in which the determination is made as to whether the channel request is approved by the authentication module based, at least in part, on the consumer privileges included in the database of subscriber stored locally. If it is negative, the process jumps to a final block and reprocesses other actions.

However, if the determination in decision block 506 is true, then the process advances to block 508, in which the authentication module receives asynchronously the updates of the subscriber base provided by the OSS module. Then the process moves to a final block and returns to perform other actions.

Figure 6 shows an overview 600 of the actions that are performed by the OSS module. Moving from a start block, the process advances to block 602 in which the OSS module maintains asynchronously each subscriber database that is stored locally in a DSLAM. The process is directed to block 604 in which the OSS module provides subscriber updates to each subscriber database based on the DSLAM, in which the characteristics of the media services are added, modified or deleted. The process continues to block 606 in which the OSS module asynchronously audits the subscriber data stored in the subscriber database in each DSLAM. Then the process moves to a final block and returns to perform other actions.

Figure 7 shows a schematic overview of an exemplary connection module (STB) 700. Power supply 720 provides the electrical power for the operation of each component included in the STB

700. Bus 710 allows signals to be shared among several components, including Read and Write Memory (RAM) 702, Write Once Memory (ROM) 704, audio interface 706, output interface 708, the storage interface 716, the controller 714 and the xDSL 712 interface. The programs and data to control the operation of the STB 700 can be stored in RAM 702, ROM 704 and / or storage device 718, which is coupled to the storage interface 716. Although not shown, the xDSL 712 interface is also coupled over an xDSL loop to a DSLAM that serves locally. Audio interface 706 may be used to play and / or record at least the audio media included in a channel.

5 read by the operator / consumer.

The video interface 708 is used to produce video output signals included in a channel selected by the operator / consumer. Video signals produced as output can be provided in any of several formats known for playback on a display device such as a monitor, screen, television and the like.

10 Figure 8 illustrates a schematic overview of an exemplary DSLAM 800. The central network interface 806 is used to communicate with substantially the same central network as explained above and subsequently. Several connection modules (see Figure 7) can be served over the xDSL 802 interface, which is coupled to the local xDSL loops for each consumer. Authentication module 810 performs substantially the same actions as explained above and subsequently and is in communication with the 802 interface

15 xDSL, system controller 812, subscriber database 814, and access module 808 to the media channel. Together, the operation and interaction of each of the DSLAM 800 components enable multicast functionality and local authentication of consumer channel change requests as explained before and after.

Claims (22)

one.

A procedure for enabling access of a subscriber terminal (204) served by an access node (206A -206C), in which the access node (206A -206C) is connected to a central network (208) carrying a plurality of media channels and in which the subscriber terminal is connected to the access node (206A -206C) over a respective local loop data connection, characterized in that the access node (206A -206C) is enabled with multicast capabilities and multiple subscribers authorized to access the same media channel are granted multicast access to a single instance of that channel in response to a request by the subscriber to access a media channel transported by the central network.

2.

A method as claimed in claim 1, wherein the access node determines locally whether the subscriber is authorized to access the media channel, and in the case of a positive determination, provides the media channel to the subscriber terminal. .

3.

A method as claimed in claim 2, wherein the access node determines if the subscriber is authorized by comparing the access information provided with the access control information relevant to the subscriber terminal.

Four.

A method as claimed in claim 3, wherein said access control information is maintained in the access node and downloaded to said access node before a request by the media access subscriber.

5.

A method as claimed in claim 3, wherein said access control information includes subscriber and billing information that is updated in the access node each time there is a change in the status of the access control. of the subscriber's terminals.

6.

A method as claimed in claim 5, wherein the subscriber and billing information is provided in the format of a hash table.

7.

A method as claimed in claims 5 or 6, wherein the subscriber and billing information is updated using a remote process.

8.

A method as claimed in any one of claims 1 to 7, wherein the access node is enabled for multicasting with the IGMP protocol.

9.

A method as claimed in any one of claims 1 to 8, wherein the local loop data connection is an xDSL connection established on a telephone line.

10.

A method as claimed in any one of claims 1 to 9, wherein the media channel incorporates video, IP data, text, voice.

eleven.

A method as claimed in any one of claims 1 to 10, wherein the request is a channel change request that specifies the media channel.

12.

A method as claimed in any one of claims 1 to 11, wherein the case of the media channel is provided to the central network through a router coupled to another network.

13.

An access node (206A -206C) to enable a plurality of subscriber terminals served by the access node (206A -206C) over respective local loop data connections to access the data provided in the available media channels in a central network (208), comprising an access module (808) to the media channel for communicating with the central network through a network interface (806); a subscriber interface (802) to communicate with a subscriber terminal over a local loop data connection, a system controller (812) to control the operation of the access node, characterized in that the access node (206A - 206C) is enabled with multicast capabilities, in which multiple subscribers authorized to access the same media channels are provided, multicast access to a single instance of that channel in response to a subscriber's request to access the media channel transported by the central network (208).

14.

An access node as claimed in claim 13, wherein said access node further comprises an authentication module (810) to authenticate a subscriber request to access a media channel transported by the central network by accessing a database (814) that stores access control information.

fifteen.

An access node as claimed in claim 13, wherein the database is located in the access node.

16.

An access node as claimed in claims 14 or 15, wherein the database is updated with access control information to the database prior to a request by the subscriber for access to a media channel.

17.

An access node as claimed in claim 16, wherein the access control information is updated by means of an operation support system module (408), provided in the core network (208).

18.

An access node as claimed in any one of claims 13 to 17, the access node being enabled with a protocol for IGMP multicasting.

19.

An access node as claimed in any one of claims 11 to 16, wherein the subscriber network interface multiplexes a plurality of local loop connections, each local loop connection coupling a respective subscriber to the access node.

twenty.

A system for enabling a plurality of subscriber terminals to access the data provided on available media channels in a central network (208), comprising a plurality of access nodes (206A -206C) connected to the central network, and a plurality of local loop data connections between subscriber terminals (204) and access nodes (206A -206C), wherein each access node comprises a media channel access module (808) that communicates with the core network through a network interface (806); a subscriber interface (802) that communicates with a subscriber terminal over a local loop data connection; a system controller (812) to control the operation of the access node (206A -206C), which is characterized in that each access node (206A -206C) is enabled with multicast capabilities which is granted to multiple subscribers authorized to access the same media channel multicast access a single instance of that channel in response to a request from the subscriber to access a media channel transported by the central network.

twenty-one.

A system as claimed in claim 20, wherein the access node further comprises an authentication module (810) for the authentication of a subscriber request to access a media channel transported by the central network ( 208) by accessing a database (814) that stores access control information.

22

A system as claimed in claim 20, further comprising a remote operating and support server (408) for maintaining the information stored in the database.