States for breakout appliance in a mobile data network

A mobile data network comprising:

• a plurality of basestations, each basestation communicating with a corresponding antenna that transmits and receives radio signals to and from user equipment, wherein the plurality of basestations are part of a radio access network that communicates with a core network in the mobile data network, each basestation comprising:
• a breakout appliance connected to a NodeB in the basestation and connected to an upstream computer system, the breakout appliance comprising:
• a system controller that controls function of the breakout appliance;
• a service processor that monitors the breakout appliance and provides control functions for the breakout appliance;
• a security subsystem that provides secure access to keys stored in a non-volatile memory;
• and
• a telco breakout system that comprises:
• a first service mechanism that defines an existing first data path in the radio access network for non-broken out data, defines a second data path for broken out data, identifies first data corresponding to first user equipment received from a corresponding basestation as data to be broken out, sends the first data on the second data path, and forwards other data that is not broken out on the first data path, wherein the first service mechanism provides a plurality of services with respect to internet protocol (IP) data sent to the first user equipment in response to an IP data request in the first data from the first user equipment;
• wherein the service processor defines a plurality of states for the breakout appliance, each state defining a different set of steps, wherein the plurality of states comprises:
• a manufacturing state that initializes the security subsystem and writes the keys to the security subsystem;
• a tampered state that inhibits booting of the system controller and the telco breakout system;
• a production state that allows the telco breakout system to send the first data on the second data path during normal operation of the breakout appliance;
• a testing state that allows the breakout appliance to be tested after tampering or failure, and when the breakout appliance passes a plurality of health tests, initializing the security subsystem, writing the keys to the security subsystem, and changing the state to the production state;
• and
• an end of life state that erases keys in the security subsystem and erases at least one block of executable code in the breakout appliance.