Secured transport in remote MAC/PHY DAA architecture
AssigneeHarmonic, Inc.
InventorsAmir Leventer, Daniel Ginsburg
Life of this patent
Estimating the term…
Abstract
Exchanging encrypted packet payloads between a cable headend and a Remote MACPHY device. A single device executes a cable modem termination system (CMTS) implemented in software and not hardware. The software-implemented CMTS (i.e., a virtual CMTS) instantiates a tunnel to the Remote MACPHY device. The virtual CMTS encrypts the payloads of one or more packets and transmits those packets over the tunnel to the Remote MACPHY device. In similar fashion, the Remote MACPHY device may send packets with encrypted payloads to the virtual CMTS over the tunnel. In this way, encryption is not performed on a hop by hop basis, thereby allowing the payloads of packets to remain encrypted at all times during transmit through the tunnel.
Claims12
One or more non-transitory computer-readable storage mediums storing one or more sequences of instructions for exchanging encrypted packet payloads between a cable headend and a Remote MACPHY device, which when executed, cause:
- instantiating, from a single device executing a virtual cable modem termination system (CTMS) implemented in software and not hardware, a Layer 3 tunnel to said Remote MACPHY device;
- the virtual CMTS encrypting a payload of the packet and transmitting the packet with the encrypted payload over the Layer 3 tunnel to said Remote MACPHY device;
- and
- the virtual CMTS receiving, from said Remote MACPHY device, one or more packets over said Layer 3 tunnel, wherein said one or more packets each comprise payloads encrypted with subscriber encryption that were not decrypted at any point during transmit over said Layer 3 tunnel.
A system for exchanging encrypted packet payloads between a cable headend and a Remote MACPHY device, comprising:
- one or more processors;
- and
- one or more non-transitory computer-readable storage mediums storing one or more sequences of instructions, which when executed, cause:
- instantiating, from a single device executing a virtual cable modem termination system (CTMS) implemented in software and not hardware, a Layer 3 tunnel to said Remote MACPHY device;
- the virtual CMTS encrypting a payload of the packet and transmitting the packet with the encrypted payload over the Layer 3 tunnel to said Remote MACPHY device;
- and
- the virtual CMTS receiving, from said Remote MACPHY device, one or more packets over said Layer 3 tunnel, wherein said one or more packets each comprise payloads encrypted with subscriber encryption that were not decrypted at any point during transmit over said Layer 3 tunnel.
A method for exchanging encrypted packet payloads between a cable headend and a Remote MACPHY device, comprising:
- instantiating, from a single device executing a virtual cable modem termination system (CTMS) implemented in software and not hardware, a Layer 3 tunnel to said Remote MACPHY device;
- the virtual CMTS encrypting a payload of the packet and transmitting the packet with the encrypted payload over the Layer 3 tunnel to said Remote MACPHY device;
- and
- the virtual CMTS receiving, from said Remote MACPHY device, one or more packets over said Layer 3 tunnel, wherein said one or more packets each comprise payloads encrypted with subscriber encryption that were not decrypted at any point during transmit over said Layer 3 tunnel.
Dependencies are inferred from the claim text.