Secure multicast flow

A network device for routing multiple data flows from data servers to end user devices, the device comprising:

• means for receiving a request data transmission unit (DTU) from an end user device, said request DTU requesting a specific data flow for said end user device;
• means for extracting identification data from said request DTU, said identification data identifying said end user device and said specific data flow;
• means for transmitting a query regarding an authentication of said request DTU to a policy server capable of authenticating said request DTU based on at least a portion of said identification data, said query containing said at least a portion of said identification data;
• means for receiving a response from said policy server, said response being related to said query;
• and
• means for routing said specific data flow to said end user device, wherein said network device allows or prevents access to said specific data flow by said end user device based on whether said request DTU is legitimate.

Computer readable media having encoded thereon a computer software product comprising:

• a software module for receiving a request data transmission unit (DTU) from an end user device, said request DTU requesting a specific data flow for said end user device;
• a software module for extracting identification data from said request DTU, said identification data identifying said end user device and said specific data flow;
• a software module for determining if said request DTU is legitimate based on at least a portion of said identification data;
• and
• a software module for allowing a transmission of said specific data flow to said end user device.

A method of authenticating an end user device capable of coupling to a network, the method comprising:

• a) receiving a data transmission unit (DTU) from said end user device, said DTU containing identification data identifying said end user device and specific data to which said end user device is supposed to have access;
• b) extracting said identification data from said DTU;
• and
• c) determining if said end user device is entitled to access said specific data based on at least a portion of said identification data and a set of predetermined business rules.