WO2005064879A1

WO2005064879A1 - Management session initiation with a customer premises device

Info

Publication number: WO2005064879A1
Application number: PCT/CA2004/002186
Authority: WO
Inventors: Frank Chan
Original assignee: Bce Inc.
Priority date: 2003-12-30
Filing date: 2004-12-22
Publication date: 2005-07-14

Abstract

A communication method for execution at a customer premises device, comprising detecting receipt of a command indicative of an intent of a management entity to initiate a management session, the command being a management session initiation command. Responsive to detecting receipt of the management session initiation command, an identifier for participating in a management session with the management entity is obtained. Also, a method for execution at a management entity, comprising obtaining a management address for a customer device and determining whether the management address is indicative of a an address capable of supporting a management session or an address incapable of supporting a management session. If the management address is indicative of an address incapable of supporting a management session, a command is sent to the customer device, causing it to obtain a management address capable of supporting a management session.

Description

MANAGEMENT SESSION INITIATION WITH A CUSTOMER PREMISES DEVICE

CROSS-REFERENCE TO RELATED APPLICATION

The present application is a continuation-in-part of a U.S. patent application to Frank Chan, Serial No. unknown, entitled "Subscriber Station", filed on December 3, 2004, hereby incorporated by reference herein.

FIELD OF THE INVENTION

The present invention relates generally to the field of telecommunications and, in particular, to methods and systems for initiating management sessions with customer premises devices.

BACKGROUND

Solving the "last-mile" problem has been an important part of providing ubiquitous, high-speed Internet access to business and residential customers ("subscribers") at their premises. Digital Subscriber Line ("DSL") and CATV Internet services are now well-entrenched means of solving the last-mile problem. A common feature of last-mile solutions is a switching station that has a gateway connected to the Internet via a backhaul, such as TI, T3, a virtual network or the like. The gateway interfaces the backhaul with the particular communication medium or channel used to deliver the Internet service to the subscriber premises.

In DSL (and its variants, commonly referred to xDSL), the switching station is typically a central office as commonly found in the public switched telephone network ("PSTN"), and the gateway is a Digital Subscriber Line Access Multiplexer ("DSLAM"). The communication medium is typically the traditional twisted pair of copper wires that run between the central office and subscriber premises, and normally connect to a plain old telephone service ("POTS") telephone in the subscriber premises. Where the subscriber is a DSL customer, the twisted pair of copper wires in the customer premises are also connected to a DSL modem, which in turn connects to the subscriber's computer. A data communication session can thus established between the subscriber's computer and a desired location on the Internet.

Problems with the foregoing arise when a subscriber loses, or believes to have lost, Internet connectivity. To troubleshoot this problem, it is common for the service provider to send a service technician to the subscriber premises. To verify Internet connectivity, the service technician can attempt to make their own Internet connection from the subscriber premises in order to assess whether a connectivity problem actually exists, and if so, to attempt to determine the nature of the problem. However, such use of service technicians can be wasteful, particularly where the technician discovers that no connectivity problem exists and that the subscriber's problems are in fact related to the subscriber's proprietary equipment, or other equipment located at the subscriber's premises.

With a view to overcoming these difficulties, the concept of a "management session" has arisen. The purpose of a management session is to troubleshoot a subscriber's modem from a conveniently located customer service center, thus eliminating the need to dispatch a service technician to the modem site. Such management sessions are typically run in parallel with the data communication session, and provide continuous monitoring of the modem in question.

However, a concern with the concept of a persistent (or "always-on") management session is the consumption of resources inside the modem needed to operate the management session, as well as the network resources necessary to maintain such session. Another concern with persistent management sessions is the creation of security loopholes. Specifically, a malicious individual interested in "fooling" the modem into believing that she/he is at the customer service center can study the behaviour of the communications exchanged during the management session and learn the appropriate messages to be used. As a result, malicious individuals can hack into residential modems and invade customer privacy.

Against this background, there is a need for improved techniques in the management of modems and other customer premises devices.

SUMMARY OF THE INVENTION

The present invention may be summarized according to a first broad aspect as a communication method for execution at a customer premises device. The method comprises detecting receipt of a command indicative of an intent of a management entity to initiate a management session, the command being a management session initiation command and, responsive to detecting receipt of the management session initiation command, obtaining an identifier for participating in a management session with the management entity.

The present invention may be summarized according to a second broad aspect as a customer premises device, comprising means for detecting receipt of a command indicative of an intent of a management entity to initiate a management session, the command being a management session initiation command; and means for obtaining an identifier for participating in a management session with the management entity in response to detecting receipt of the management session initiation command.

The present invention may be summarized according to a third broad aspect as a data signal embodied in a carrier wave readable by a computing system and encoding instructions for performing a method at a customer premises device, the method comprising : detecting receipt of a command indicative of an intent of a management entity to initiate a management session, the command being a management session initiation command and, responsive to detecting receipt of the management session initiation command, obtaining an identifier for participating in a management session with the management entity.

The present invention may be summarized according to a fourth broad aspect as a communication method, comprising: at a first customer premises device, establishing a first management session with a management entity; the first customer premises device sending to a second customer premises device a command indicative of an intent of a management entity to initiate a second management session with the second customer premises device; responsive to detecting receipt of the command, the second customer premises device obtaining an identifier for participating in the second management session with the management entity.

The present invention may be summarized according to a fourth broad aspect as a method for execution at a management entity, comprising obtaining a management address for a customer device; determining whether the management address is indicative of an address capable of supporting a management session or an address incapable of supporting a management session; and, if the management address is indicative of an address incapable of supporting a management session, sending a command that causes the customer device to obtain a management address capable of supporting a management session.

The present invention may be summarized according to a fifth broad aspect as a data signal embodied in a carrier wave readable by a computing system and encoding instructions for performing a method at a management entity, the method comprising : obtaining a management address for a customer device; determining whether the management address is indicative of an address capable of supporting a management session or an address incapable of supporting a management session; and, if the management address is indicative of an address incapable of supporting a management session, sending a command that causes the customer device to obtain a management address capable of supporting a management session. The present invention may be summarized according to a sixth broad aspect as a system for establishing management sessions with customer devices, comprising: a management entity; an address server that maintains management addresses for respective ones of the customer devices; the management entity being operative for: querying the address server to obtain a management address for a particular one of the customer devices; determining whether the management address is indicative of an address capable of supporting a management session or an address incapable of supporting a management session; and, if the management address is indicative of an address incapable of supporting a management session, sending a command that causes the particular customer device to obtain a management address capable of supporting a management session.

These and other aspects and features of the present invention will now become apparent to those of ordinary skill in the art upon review of the following description of specific embodiments of the invention in conjunction with the accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

In the accompanying drawings:

Fig. 1 depicts a network architecture for delivering a data service to a customer premises device;

Fig. 2 depicts a management session between a management entity and a proxy agent residing in the customer premises device, in accordance with an embodiment of the present invention;

Fig. 3 is a flowchart representative of steps executed by the management entity in Fig. 2;

Fig. 4 depicts a table maintained by an address server in Fig. 2; Fig. 5 is a flowchart representative of steps executed by the proxy agent in Fig. 2 when acquiring a wake-up management address;

Fig. 6 is a flowchart representative of steps executed by the proxy agent in Fig. 2 when acquiring a normal management address;

Fig. 7 depicts a management session between a management entity and a proxy agent residing in the customer premises device, in accordance with an alternative embodiment of the present invention.

DETAILED DESCRIPTION OF EMBODIMENTS

Fig. 1 depicts a network architecture comprising a plurality of entities involved in delivering a telecommunications service to a customer of a telephone company (telco) 4. In one specific non-limiting embodiment, the telecommunications service may be access to a data network 2, which may comprise the Internet, without being limited thereto. In other non- limiting embodiments, the telecommunications service may be voice-over- packet telephony, while in still other cases, the telecommunications service may be the delivery of a digital television signal from a remote broadband source. At the customer premises 6, there is provided a residential gateway (RG) 8 which is connected to one or more appliances 10A, 10B such as a set top box (STB), an analog terminal adapter (ATA), a personal computer (PC), and so on. An in-home network may be used to interconnect the various appliances 10A, 10B to each other and/or to the RG 8.

The RG 8 exchanges signals with the telco 4 over a communication link 12. In the embodiment illustrated in Fig. 1, the communication link 12 is a standard copper twisted pair cable used customarily for telephony signals, while the signal being exchanged over the communication link is one which allows telephony-band signals and out-of-telephony-band signals to coexist. A non-limiting example of a general class of signals meeting these requirements is a digital subscriber line (DSL) signal. However, it should be understood that the nature of the communication link 12 and the format of the signal being exchanged over the communication link 12 is immaterial to the present invention. For example, in other embodiments, the communication link 12 may very well be a coaxial cable, an optical fiber or a wireless link. In the specific example of a wireless link, any modulation or transmission method could be used, including but not limited to code division multiple access (CDMA), 802.11, 802.16, Evolution Data Only (EvDO), Global System for Mobile Communications (GSM), and so on.

The network architecture of Fig. 1 also provides a broadband remote access server (BRAS) 14, which is basically a computing device acting as a gateway to the data network 2 for the customer. That is to say, the BRAS 14 is the initial point of contact for the RG 8 when accessing the data network 2. The BRAS 14 is connected to the data network 2 by a high- speed data link 16. The data network 2 itself leads to a variety of other servers and network entities. Shown in Fig. 1 are three such entities, namely a management entity 18, an address server 20 and a potential data session end point 22 (such as a web server or another BRAS). The role of each of these components will become apparent later on in this specification.

Since the BRAS 14 potentially serves a large number of customers, the signal exchanged between the BRAS 14 and the customer premises 6 may undergo multiplexing at one or more multiplexing stages 30 before being sent onto the communication link 12. An example of an architecture having a plurality of multiplexing stages 30 is one in which a first set of multiplexers is located at a central office or in proximity to the BRAS 14, with a second set of multiplexers being located deeper within the distribution infrastructure (e.g., on a street corner). One or more of these multiplexers may comprise a Digital Subscriber Line Access Multiplexer (DSLAM), which is a known device that links multiple customer DSL connections to a single high-speed line. In the illustrated embodiment, the management entity 18 and the address server 20 are shown as being connected to the BRAS 14 via the data network 2. However, it is envisaged that in other embodiments, either or both of the management entity 18 and the address server 20 could be connected directly to the BRAS 14 or may bypass the BRAS 14 and connect directly into one of the multiplexing stages 30.

Assuming that the signal being exchanged over the communication link 12 has a telephony-band portion and an out-of-telephony-band portion, the customer premises 6 may be equipped with a splitter, which sends the received signal to both a telephone 24 and a modem 82 at the customer premises 6. A filter 80 connected to the telephone 24 may provide filtering of the received signal, so that only the telephony-band portion reaches the telephone 24. Analogously, a filter (not shown) in the modem 82 may provide filtering of the received signal, so that only the modem 82 attempts demodulation of only the out-of-telephony-band portion. The modem 82 outputs a demodulated signal to the RG 8, which comprises various hardware and software, as well as an interface. This interface exchanges digital data with the appliances 10A, 10B in a suitable format, such as Ethernet, WiFi, etc. Individual data streams can be exchanged with individual appliances 10A, 10B on a point-to-point basis or via the in- home network described above.

In the opposite direction of travel, when a signal is received at one of the multiplexing stages 30, a splitter similar to the splitter at the customer premises 6 separates the telephony-band portion from the out-of- telephony-band portion. The telephony-band portion of the received signal is sent to the public switched telephone network (PSTN) 26, while the out-of-telephony-band portion of the received signal is processed by a modem, multiplexed with other processed out-of-telephony-band portions of other received signals, formatted (e.g., into an ATM signal) and sent to the BRAS 14.

Given the architecture described above, it is possible to establish data sessions between users of the appliances 10A, 10B and entities in the data network 2. For example, let the appliance 10B be a personal computer (PC) and let the potential data session end point 22 be a Web server. In this case, a data session 32 may be established between the PC 10B and the Web server 22 in order to allow a user of the PC 10B to exchange content with the Web server 22, with the telco 4 acting as the Internet service provider. It should be understood that the term "data session" as used herein is not limited to the exchange of a particular type of information, but rather is used to distinguish such a session from a "management session" as described herein below. The data session 32 may actually comprise an exchange of voice, video, email, computer files, text messages, etc., or any combination thereof. Moreover, the data session 32 may be established and maintained using a number of protocols residing at layer 3 or higher of the OSI model, including but not limited to Internet Protocol (IP), Interne Control Message Protocol (ICMP), Simple Object Access Protocol (SOAP), Transmission Control Protocol (TCP), User Datagram Protocol (UDP) and Hypertext Transfer Protocol (HTTP), for example.

In accordance with an embodiment of the present invention, and with reference now to Fig. 2, a "management session" 34 can be established between the management entity 18 and a "device to be managed". The management session 34 is useful for troubleshooting and other purposes, and is separate from the aforementioned data session 32 that may be ongoing between the data session endpoints (in this case 10B and 22). In this particular example, the "device to be managed" is the RG 8, although it is within the scope of the invention for the "device to be managed" to be located elsewhere (e.g., deeper) within the customer premises 6.

Further detail regarding the functionality of the management entity 18 and the RG 8, which enable eventual establishment of the management session 34, is now given with additional reference to Figs. 3-6. The underlying assumption is that the management entity 18 is desirous of establishing a management session with the RG 8. The RG 8 is known to the management entity 18 by a "customer identifier", examples of which include but are not limited to a global user identifier (GUID), MAC-ID, 1 serial number, etc. However, despite knowing the customer identifier of 2 the RG 8, the management entity 18 does not yet know how to address 3 messages destined for the RG 8, and the mere use of the customer 4 identifier of the RG 8 might not be recognized by other entities whose 5 participation is needed in order to route messages to the RG 8. 6 7 Accordingly, reference is now made to Fig. 3, which shows a flowchart 8 indicative of the decision logic executed by the management entity 18. At 9 step 302, the management entity 18 queries the address server 20 for a 10 "management address" of the RG 8. A "management address" can be one l i of two types, namely "normal" or "wake-up". This is now described with

12 reference to Fig. 4, which shows a table 400 that is maintained by the

13 address server 20. Specifically, the table 400 stores a plurality of records

14 corresponding to different customer devices, each indexed by the

15 aforementioned "customer identifier" of the corresponding customer

16 device. The record pertaining to a given customer device will include an

17 entry for a management address, as well as an entry for indicating the

18 type of management address (i.e., either "normal" or "wake-up"). When

19 the management entity 18 queries the address server 20, the

20 management entity 18 supplies the customer identifier of the RG 8, while

21 the address server 20 returns the management address, if any, as well as

22 the type of management address.

23

24 The similarities and differences between a normal management address

25 and a wake-up management address will now be described.

26

27 Both a normal management address and a wake-up management address

28 refer to addresses which can be used by the management entity 18 in

29 order to reach the device to be managed (in this case, the RG 8) using a

30 higher-layer protocol, which may reside at layer 3 or higher of the OSI

31 model. Examples of a suitable higher-layer protocol include but are not

32 limited to IP, ICMP, SOAP, TCP, UDP and HTTP.

33

34 If the management address of the customer premises device stored by the

35 table 400 is a "normal" management address, this means that the customer device is currently capable of supporting a management session with the management entity 18. Stated differently, a normal management address signifies an address that the RG 8 uses for conducting management sessions, and which is independent of any data session (such as data session 32) that may be supported by the RG 8. For example, if the RG 8 participates in the data session 32 using a certain IP address, its normal management address may be another IP address, which will be different from this certain IP address.

On the other hand, if the management address of the customer premises device stored by the table 400 is a "wake-up" management address, this means that the customer premises device 6 is currently incapable of supporting a management session with the management entity 18. Stated differently, a wake-up management address signifies an address that the RG 8 is using for other activities (such as supporting the data session 32), and which can therefore be used to reach the RG 8 to convey a simple message (such as a trigger), but which is not intended to be used for conducting more involved management activities. In fact, the wake-up management address is used to trigger the RG 8 to acquire a normal management address.

The manner in which the RG 8 becomes associated with a wake-up management address is now described with reference to Fig. 5. Specifically, let there be a data session 32 (see step 502) between data session endpoints 10B and 22, via the RG 8. The role of the RG 8 in this data session 32 may be to provide functionality such as network address translation, packet filtering, firewall, etc. In any event, for the purposes of the data session 32, the RG 8 will be associated with an address (e.g., an IP address) to which packets are sent, and from which these packets are forwarded, in the course of the data session 32. At step 504, a proxy agent 204 running in the RG 8 learns this IP address and, at step 506, the proxy agent 204 transmits it to the address server 20 (see step 506), where the IP address is stored in the table 400 as the "wake-up" management address for the RG 8 (see step 508). Knowledge of the RG's wake-up management address will allow the management entity 18 to reach the RG 8 even though there is no management session yet established between the management entity 18 and the RG 8. Returning now to the flowchart in Fig. 3, at step 304, the management entity 18 deterrnines whether the address server 20 has indeed returned some type of management address for the RG 8. If the answer is YES, then the management entity 18 proceeds to step 306, where the type of ' management address is ascertained. If the management address is a "normal" management address, then the management entity 18 knows the address to which it can send management-related information in view of establishing the management session 34. In this case, the management entity 18 proceeds to step 308, where a higher-layer management session 34 can be immediately established if desired. However, if the management address is found to be a "wake-up" management address, then the management entity 18 knows where it can reach the RG 8, but also knows that the RG 8 is not yet ready to exchange management-related information with the management entity 18. To this end, the management entity 18 proceeds to step 310, where the management entity 18 sends a command indicative of the management entity's intent to initiate a management session. This command, hereinafter referred to as a "management session initiation command" may be sent using a higher-layer protocol (e.g., IP, ICMP, SOAP, TCP, UDP, HTTP, etc.), since the RG 8 is known to be reachable using such higher-layer protocol (viz., at its wake-up management address). After sending the management session initiation command to the RG 8 using the higher-layer protocol, the management entity 18 returns to step 302, where it continues querying the address server 20, until it has finally received an indication that the RG 8 is associated with a normal management address. It should be mentioned that if step 304 led to the determination that no management address of any kind is associated with the RG 8, then the management entity 18 proceeds to step 312. This situation may arise if the RG 8 cannot be reached using a higher-layer protocol. In these circumstances, it may be suitable for the management entity 18 to attempt to communicate with the RG 8 using a lower-layer protocol (e.g., layer 1 or layer 2) in order to issue a management session initiation command. An example of the form of a lower-layer management session initiation command includes resetting, in accordance with a particular reset pattern (e.g., a predetermined number of times, within a predetermined time interval), a line card in one of the multiplexing stages 30 that is used to communicate with the RG 8. This can be referred to as a reset pattern. A more detailed description of the issuance of lower-layer commands is provided in the aforementioned U.S. patent application entitled "Subscriber Station", filed on December 3, 2004 and hereby incorporated by reference herein.

After sending the management session initiation command to the RG 8 using the lower-layer protocol, the management entity 18 returns to step 302, where it continues querying the address server 20, until it has finally received an indication that the RG 8 is associated with a normal management address.

At this point in the description, it may be useful to describe for the reader's benefit how the RG 8 acquires a normal management address upon receipt of the aforementioned "management session initiation command". It will be recalled that such a command may be sent to the RG 8 by the management entity 18 using a lower-layer protocol (the NO branch of step 304) or a higher-layer protocol (the WAKE-UP branch of step 306). The actions of the RG 8 will now be described with reference to Fig. 6. It will be appreciated that the activities of the RG 8 may be performed by the proxy agent 204 in the RG 8. The proxy agent 204 is a functional entity that may be implemented in hardware and/or software, as appropriate.

At step 602, the proxy agent 204 receives and recognizes the aforementioned management session initiation command from the management entity 18. To this end, in order to detect a lower-layer command, for example, the modem 82 in the RG 8 may be equipped with suitable hardware, software and/or control logic for detecting a reset pattern of a line card used inside one of the multiplexing stages 30 to communicate with the modem 82. Alternatively, to detect specific information in a packet header or payload, the RG 8 may be equipped with an application layer gateway (ALG) or a stateful packet filter (SPF), with each packet arriving along the communication link 12 being read and interpreted by the proxy agent 204.

At step 604, the proxy agent 204 responds to receipt and recognition of the management session initiation command by establishing an initial session (e.g., an IP session) with the BRAS 14. The proxy agent 204 knows where to reach the BRAS 14 by consulting an internal table where the location information of the BRAS 14 is kept. As part of the establishment of the initial session with the BRAS 14, the RG 8 is assigned an IP address. At step 606, the proxy agent 204 forwards this IP address to the address server 20, along with (I) the customer identifier of the RG 8; and (II) an indication that the IP address is to be used as the normal management address for the RG 8. At step 608, the address server 20 stores the received information in the appropriate entries in the table 400.

In addition, the proxy agent 204 may transmit to the address server 20 other information regarding the initial session established with the BRAS 14. Also, the proxy agent 204 may transmit to the address server 20 a "validity time limit" associated with the IP address, which may be stored by the address server 20 in an additional field of the record associated with the RG 8. This "validity time limit" may be used to specify a maximum amount of time during which the address server 20 is to maintain the normal management address for the RG 8. Such a measure enhances security, since it prevents the establishment of a new management session (which may be false) on the basis of old information. In the absence of a specific validity time limit forwarded by the proxy agent 204 in the RG 8, the address server 20 may itself impose a default validity time limit whenever it receives a normal management address from a customer device (such as the RG 8). The above example has shown how a "management session" 34 can be established between the management entity 18 and the RG 8 at the customer premises 6. For this purpose, a management session initiation command is used to convey the management entity's intent to initiate the management session 34. The ensuing management session 34 is useful for troubleshooting and other purposes, and is separate from the data session 32 that may or may not be ongoing between the data session endpoints (in this case 10B and 22).

It will also be apparent that the management entity 18, which issues the management session initiation command, might be separated from the RG 8 (and from the "device being managed") by a data network 2. The management session initiation command causes the device being managed to acquire a normal management address, which is then used for management-related communications. Hence, the absence of lower- layer access to the device being managed does not preclude triggering a management session with that device.

It should be appreciated that the device being managed may be the RG 8 itself or a device that is deeper within the customer premises 6. Accordingly, assume that a management session is to be established between the management entity 18 and a device that is deeper within the customer premises 6 than the RG 8. In this embodiment, a revised table in the address server 20 stores information not only regarding the device to be managed, but also regarding the RG to which that device is connected. Thus, for example, in respect of the PC 10B, the revised table in the address server 20 would maintain a record comprising (I) a field for the management address of the PC 10B; (II) a field for the type of management address of the PC 10B; and (III) a field for the customer identifier of the associated RG 8.

Meanwhile, a proxy agent running in the PC 10B listens for an IP address being used by the PC 10B in the course of conducting sessions with the outside world, and transmits this address to the address server 20 as its wake-up management address. However, it will be noted that when the PC 10B communicates its wake-up management address to the address server 20, this will be done through the RG 8. Therefore, on the way, the packets will be encapsulated / by the RG 8 (running a process called network address translation - NAT) and a new header will be placed on them. Thus, the address server 20 will gain knowledge of the RG 8 associated with the PC 10B by reading the headers of the received packets, while it will gain knowledge of the management address information about the PC 10B by reading the payloads of the received packets. This allows the address server 20 to complete the record corresponding to the PC 10B in the revised table.

Now, consider that the management entity 18 wishes to establish a management session with the PC 10B. Firstly, the management entity 18 provides the customer identifier of the PC 10B to the address server 20, which then consults the revised table and obtains the management address of the PC 10B and the customer identifier of the RG 8. Clearly, there are a number of possibilities, which result in different courses of action by the management entity 18.

A first possibility is that the PC 10B will have a normal management address associated with it. The management entity 18 then begins a management session by sending packets destined for the PC 10B via the RG 8. Since the RG 8 is running NAT, the PC 10B behind the RG 8 will be reachable using a non-routable IP address that is internal to the LAN at the customer premises 6.

A second possibility is that the PC 10B will have a wake-up management address, which may correspond to the IP address currently being used by the PC 10B in an ongoing data session with the endpoint 22. The end goal here is to issue a higher-layer management session initiation command to the PC 10B from the RG 8. This can be done by establishing a management session with the RG 8 and causing the RG 8 to send a higher-layer management session initiation command to the PC 10B. Once the PC 10B receives the management session initiation command, it proceeds in the manner previously described with reference to Fig. 6, 1 namely, by obtaining a normal management address and transmitting it to 2 the address server 20 along with its customer identifier. The difference in 3 this case is that the normal management address will be assigned by the 4 RG 8 (and not the BRAS 14). 5 6 A third possibility is that the PC 10B will not have any wake-up 7 management address associated with it, although it will be known that the 8 PC 10B is reachable via the RG 8. Here again, a management session is 9 established with the RG 8 and the RG 8 is instructed to send a 10 management session initiation command to the PC 10B. However, the l i management session initiation command in this particular case will be a

12 lower-layer command, because the PC 10B does not have a wake-up

13 management address.

14

15 It should be understood that the present invention is not limited to a DSL

16 environment but rather can be used in a wide variety of other

17 environments. For example, with reference to Fig. 7, consider the case of

18 a generic communication system (e.g., cable or Internet), in which there

19 is an IP-enabled head-end 714, connected to an IP-enabled customer

20 premises equipment 708 by a distribution network 702. One of ordinary 1 skill in the art will readily appreciate that a management session 734 2 between the management entity 18 and the IP-enabled customer 3 premises equipment 708 can be triggered in a manner similar to that 4 which has been described above, and separately from any data session 5 732 in which the IP-enabled customer premises equipment 708 might be 6 participating. Specifically, the IP-enabled customer premises equipment 7 708 is capable of responding to a higher-layer management session 8 initiation command to acquire a normal management IP address. Thus, a 9 management session can be triggered using a higher-layer protocol 0 without needing to resort to lower-layer techniques that might not be 1 available over the distribution network 702. 2 3 In addition, those skilled in the art will readily recognize that further 4 variations may be made in order to apply the teachings of the present 5 invention in order to achieve improvement in conducting management sessions on an IP-enabled device in a wireless environment, such as city- wide WiFi (e.g., WiMax), EVDO, etc.

Those skilled in the art will appreciate that in some embodiments, the functionality of the proxy agents 204, the management entity 18 and the address server 20 may be implemented as pre-programmed hardware or firmware elements (e.g., application specific integrated circuits (ASICs), electrically erasable programmable read-only memories (EEPROMs), etc.), or other related components. In other embodiments, these entities may be implemented as an arithmetic and logic unit (ALU) having access to a code memory (not shown) which stores program instructions for the operation of the ALU. The program instructions could be stored on a medium which is fixed, tangible and readable directly by the proxy agents 204, the management entity 18 and the address server 20, (e.g., removable diskette, CD-ROM, ROM, or fixed disk), or the program instructions could be stored remotely but transmϊttable to these entities via a modem or other interface device (e.g., a communications adapter) connected to a network over a transmission medium. The transmission medium may be either a tangible medium (e.g., optical or analog communications lines) or a medium implemented using wireless techniques (e.g., microwave, infrared or other transmission schemes).

Also, it should be noted that although the management entity 18 and the address server 20 have been shown as separate functional entities, this is not to imply that a physical separation between these two entities is required. In fact, the management entity 18 and the address server 20 may be collocated and may even reside in the same machine as different parts of a common software program, for example.

While specific embodiments of the present invention have been described and illustrated, it will be apparent to those skilled in the art that numerous modifications and variations can be made without departing from the scope of the invention as defined in the appended claims.

Claims

WHAT IS CLAIMED IS:

1. A communication method for execution at a customer premises device, comprising: - detecting receipt of a command indicative of an intent of a management entity to initiate a management session, the command being a management session initiation command; - responsive to detecting receipt of the management session initiation command, obtaining an identifier for participating in a management session with the management entity.

2. The method defined in claim 1, wherein the management session initiation command is sent over a layer of the open systems interconnect (OSI) model no higher than layer 2.

3. The method defined in claim 1, wherein the management session initiation command is issued by an entity connected to the customer premises device over a communication link and having control of signaling over the communication link.

4. The method defined in claim 3, wherein the management session initiation command is encoded as a specific reset pattern of a line card used to communicate with the customer premises device.

5. The method defined in claim 1, wherein the management session initiation command is sent over at least one layer of the OSI model that is higher than layer 2.

6. The method defined in claim 5, wherein the management session initiation command is sent over at least one layer of the OSI model that is higher than layer 3.

7. The method defined in claim 1, wherein a data session is supported between a first data session endpoint and a second data session endpoint via the customer premises device, the data session comprising an exchange of packets between the first and second data session endpoints, wherein the command to initiate a management session is comprised in at least one packet inserted amongst the packets sent by one of the data session endpoints under the data session.

8. The method defined in claim 7, wherein detecting receipt of the management session initiation command comprises using an application layer gateway or stateful packet filter to read packets received from said one of the data session endpoints.

9. The method defined in claim 7, wherein the other one of the data session endpoints is one of a set top box, a personal computer and an analog terminal adapter.

lO.The method defined in claim 7, wherein the customer premises device is the other one of the data session endpoints.

ll.The method defined in claim 10, wherein the customer premises device is a residential gateway.

12. The method defined in claim 1, wherein the customer premises device is IP-enabled.

13.The method defined in claim 1, wherein the customer premises device is a cable modem.

14.The method defined in claim 7, wherein the customer premises device is neither of the data session endpoints.

15.The method defined in claim 7, wherein the data session complies with at least one of the protocols in the group consisting of IP, ICMP, SOAP, TCP, UDP and HTTP.

16.The method defined in claim 1, wherein obtaining an identifier for participating in a management session with the management entity comprises: - establishing an initial session with an entity connected between the customer premises device and the management entity; - obtaining the identifier in the course of establishing the initial session.

17.The method defined in claim 16, the identifier being a management session identifier, wherein obtaining the management session identifier in the course of establishing the initial session is performed in response to providing a customer identifier to the entity connected between the customer premises device and the management entity, the customer identifier identifying the customer premises device.

lδ.The method defined in claim 17, wherein the customer identifier comprises at least one of a telephone number, a MAC ID, a Global Unique Identifier (GUID) or a serial number associated with the customer premises device.

lθ.The method defined in claim 18, wherein the entity connected between the customer premises device and the management entity is a broadband remote access server.

20.The method defined in claim 18, wherein the entity connected between the customer premises device and the management entity is a cable modem head-end.

21.The method defined in claim 18, wherein the entity connected between the customer premises device and the management entity is an IP- enabled head-end.

22.The method defined in claim 17, further comprising forwarding the management session identifier and the customer identifier to an address server.

23.The method defined in claim 22, further comprising forwarding a time limit to the address server, the time limit being representative of a time during which the identifier is valid.

24,The method defined in claim 22, wherein the address server is adapted » to provide the management session identifier to the management entity in response to a query.

25.The method defined in claim 24, further comprising receiving the management session initiation command at an address associated with the customer premises device.

26.The method defined in claim 25, further comprising becoming aware of the address associated with the customer premises device during a prior data session established between a first data session endpoint and a second data session endpoint via the customer premises device.

27.The method defined in claim 26, further comprising providing the address associated with the customer premises device to the address server.

28.The method defined in claim 27, wherein the address associated with the customer premises device to the address server is an Internet Protocol (IP) address.

29.The method defined in claim 22, wherein the management entity and the address server are collocated.

30.The method defined in claim 1, further comprising participating in the management session upon being contacted at said identifier by the management entity.

31.The method defined in claim 30, wherein the management session complies with at least one of the protocols in the group consisting of IP, ICMP, SOAP, TCP, UDP and HTTP.

32.The method defined in claim 30, wherein said identifier is an Internet Protocol (IP) address.

33.The method defined in claim 1, wherein the management session initiation command is issued by an entity connected to the customer premises gateway via a data network.

34. A proxy agent adapted to implement the method of claim i. ;

35. A customer premises device, comprising: - means for detecting receipt of a command indicative of an intent of a management entity to initiate a management session, the command being a management session initiation command; - means for obtaining an identifier for participating in a management session with the management entity in response to detecting receipt of the management session initiation command.

36. A data signal embodied in a carrier wave readable by a computing system and encoding instructions for performing a method at a customer premises device, the method comprising: - detecting receipt of a command indicative of an intent of a management entity to initiate a management session, the command being a management session initiation command; - responsive to detecting receipt of the management session initiation command, obtaining an identifier for participating in a management session with the management entity.

37.A communication method, comprising: - at a first customer premises device, establishing a first management session with a management entity; - the first customer premises device sending to a second customer premises device a command indicative of an intent of a management entity to initiate a second management session with the second customer premises device; - responsive to detecting receipt of the command, the second customer premises device obtaining an identifier for participating in the second management session with the management entity.

38.The method defined in claim 37, wherein the first customer premises device sending the command to the second customer premises device is effected over no layer of the open systems interconnect (OSI) model that is higher than layer 2.

39.The method defined in claim 37, wherein the first customer premises device sending the command to the second customer premises device is effected over at least one layer of the open systems interconnect (OSI) model that is higher than layer 2.

40.The method defined in claim 37, wherein the second customer premises device obtaining an identifier for participating in a management session with the management entity comprises: - the second customer premises device establishing an initial session with an entity connected between the second customer premises device and the management entity; and - the second customer premises device obtaining said identifier in the course of establishing the initial session.

41. The method defined in claim 40, wherein the entity connected between the second customer premises device and the management entity is the first customer premises device.

42.The method defined in claim 41, further comprising the second customer premises device forwarding said identifier and a customer identifier to an address server via the first customer premises device, the customer identifier identifying the second customer premises device.

43.The method defined in claim 42, further comprising the first customer premises device performing network address translation on communications exchanged between the second customer premises device and the management entity.

44.The method defined in claim 43, the second customer premises device being one of a set top box, an analog terminal adapter and a personal computer.

45.The method defined in claim 43, the first customer premises device being a residential gateway.

46.The method defined in claim 43, the first customer premises device being a cable modem.

47.A method for execution at a management entity, comprising: - obtaining a management address for a customer device; - determining whether the management address is indicative of an address capable of supporting a management session or an address incapable of supporting a management session; - if the management address is indicative of an address incapable of supporting a management session, sending a command that causes the customer device to obtain a management address capable of supporting a management session.

48.The method defined in claim 47, further comprising: - if the management address is indicative of an address capable of supporting a management session, conducting a management session with the customer device.

49.The method defined in claim 48, wherein obtaining a management address for the customer device comprises querying an address server.

50.The method defined in claim 49, the customer device being a first customer device, wherein sending a command that causes the first customer device to obtain a management address capable of supporting a management session is effected through a second customer device associated with the first customer device.

51. The method defined in claim 47, the customer device being a first customer device, wherein sending a command that causes the first customer device to obtain a management address capable of supporting a management session is effected under a prior management session established with a second customer device connected between the management entity and the first customer device.

52. A management entity adapted to implement the method of claim 47.

53. A data signal embodied in a carrier wave readable by a computing system and encoding instructions for performing a method at a management entity, the method comprising : - obtaining a management address for a customer device; - determining whether the management address is indicative of an address capable of supporting a management session or an address incapable of supporting a management session; - if the management address is indicative of an address incapable of supporting a management session, sending a command that causes the customer device to obtain a management address capable of supporting a management session.

54. A system for establishing management sessions with customer devices, comprising: - a management entity; - an address server that maintains management addresses for respective ones of the customer devices; - the management entity being operative for: - querying the address server to obtain a management address for a particular one of the customer devices; - determining whether the management address is indicative of an address capable of supporting a management session or an address incapable of supporting a management session; - if the management address is indicative of an address incapable of supporting a management session, sending a command that causes the particular customer device to obtain a management address capable of supporting a management session.