# US 2017/0289291 A1 · Providing user subscription nomadicity in wireline broadband networks > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2017/0289291 A1 - Document ID: US20170289291A1 - Status: Published application - Kind: A1 - Application number: 15/086,982 - Filed: 2016-03-31 - Published: 2017-10-05 - Earliest claimed: 2016-03-31 - Assignees: Juniper Networks, Inc. - Applicants: Juniper Networks, Inc. - Inventors: Avinash S; Sunil Madhaorao Gandhewar; Vidhya Bhushan Verma - Web page: https://patentgrep.com/patent/US20170289291A1 ## CPC - H04L 41/40: using virtualisation of network functions or resources, e.g. SDN or NFV entities - H04L 12/2869: {Operational details of access network equipments (admission control or resource allocation in access networks H04L12/5692)} - H04L 12/2898: {Subscriber equipments (DSL modems H04M11/062; cable modems H04L12/2801)} - H04L 12/4633: {Interconnection of networks using encapsulation techniques, e.g. tunneling} - H04L 41/08: Configuration management of networks or network elements (address allocation H04L61/50) - H04L 41/5054: Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components - H04L 41/5077: {wherein the managed service relates to simple transport services, i.e. providing only network infrastructure} - H04L 67/563: Data redirection of data network streams - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract In general, techniques are described for providing user nomadicity in wireline broadband networks. A network device positioned in a wireline broadband network comprising a processor and an interface may be configured to perform the techniques. The processor may be configured to execute a first virtual customer premises equipment to provide, to a first subscriber, access to the wireline broadband network from a first subscription point in accordance with a first subscription. The processor may also be configured to provide, to a second subscriber, access to the wireline broadband network from the first subscription point in accordance with a second subscription. The interface may be configured to forward, in accordance with the first subscription, traffic received from the first subscription point and associated with the first subscriber, and forward, in accordance with the second subscription, traffic received from the first subscription point and associated with the second subscriber. ## Claims ### Claim 1 A method comprising: executing, by a network device positioned in a wireline broadband network, a first virtual customer premises equipment to provide, to a first subscriber, access to the wireline broadband network from a first subscription point in accordance with a first subscription associated with the first subscriber and the first subscription point; providing, by the network device to a second subscriber, access to the wireline broadband network from the first subscription point in accordance with a second subscription associated with the second subscriber and a second subscription point; forwarding, by the network device in accordance with the first subscription, traffic received from the first subscription point and associated with the first subscriber; and forwarding, by the network device in accordance with the second subscription, traffic received from the first subscription point and associated with the second subscriber. ### Claim 2 (depends on 1) The method of claim 1, wherein providing access to the wireline broadband network for the second subscriber comprises executing a second virtual customer premises equipment for the second subscriber to provide the access to the wireline broadband network in accordance with the second subscription associated with the second subscription point. ### Claim 3 (depends on 1) The method of claim 1, wherein providing access to the wireline broadband network for the second subscriber comprises: executing a proxy virtual customer premises equipment for the second subscriber separate from the first virtual customer premises equipment executed for the first subscriber; and creating a tunnel from the proxy virtual customer premises equipment to a second virtual customer premises equipment for the second subscriber to provide the access to the wireline broadband network in accordance with the second subscription associated with the second subscription point. ### Claim 4 (depends on 1) The method of claim 1, wherein providing access to the wireline broadband network for the second subscriber comprises configuring the first virtual customer premises equipment associated with the first subscriber to: act as a proxy virtual customer premises equipment for the second subscriber; and create a tunnel from the proxy virtual customer premises equipment to a second virtual customer premises equipment for the second subscriber to provide the access to the wireline broadband network in accordance with the second subscription associated with the second subscription point. ### Claim 5 (depends on 4) The method of claim 4, wherein configuring the first virtual customer premises equipment associated with the first subscriber to act as the proxy virtual customer premises equipment for the second subscriber comprises: retrieving, during authentication of the second subscriber to access the wireline broadband network, information identifying the second virtual customer premises equipment; configuring the tunnel from the proxy virtual customer premises equipment to the second virtual customer premises equipment; and installing a firewall filter that directs all traffic from a device associated with the second subscriber through the tunnel to the second virtual customer premises equipment. ### Claim 6 (depends on 5) The method of claim 5, wherein the network device comprises a first network device that executes both the first virtual customer premises equipment and the proxy virtual customer premises equipment, and wherein a second network device executes the second virtual customer premises equipment. ### Claim 7 (depends on 5) The method of claim 5, further comprising: receiving, with the proxy virtual customer premises equipment, subscriber credentials associated with the second subscriber via an authentication portal served by the wireline broadband network; and initiating the authentication of the second subscriber based on the subscriber credentials. ### Claim 8 (depends on 5) The method of claim 5, further comprising receiving a change of authorization from a different network device authorizing the installation of the firewall filter as a result of authenticating subscriber credentials associated with the second subscriber. ### Claim 9 (depends on 1) The method of claim 1, wherein providing access to the wireline broadband network for the second subscriber comprises executing a second virtual customer premises equipment for the second subscriber to provide the access to the wireline broadband network in accordance with the second subscription associated with the second subscription point without establishing a tunnel to redirect traffic to a third virtual customer premises equipment executed to provide access to the wireline broadband network for the second subscription point. ### Claim 10 (depends on 9) The method of claim 9, wherein providing access to the wireline broadband network for the second subscriber comprises executing a second virtual customer premises equipment for the second subscriber to provide the access to the wireline broadband network from the first subscription point in accordance with the second subscription associated with the second subscription point concurrent to execution of a third virtual customer premises equipment executed to provide access to the wireline broadband network for the second subscription point. ### Claim 11 (depends on 9) The method of claim 9, wherein providing access to the wireline broadband network for the second subscriber comprises transferring execution of a second virtual customer premises equipment for the second subscriber to the network device so as to provide the access to the wireline broadband network from the first subscription point in accordance with the second subscription associated with the second subscription point ### Claim 12 (depends on 1) The method of claim 1, wherein the network device comprises one of a service gateway and a broadband network gateway. ### Claim 13 A network device positioned in a wireline broadband network, comprising: one or more processors configured to execute a first virtual customer premises equipment to provide, to a first subscriber, access to the wireline broadband network from a first subscription point in accordance with a first subscription associated with the first subscriber and the first subscription point, and provide, to a second subscriber, access to the wireline broadband network from the first subscription point in accordance with a second subscription associated with the second subscriber and a second subscription point; and one or more interfaces configured to forward, in accordance with the first subscription, traffic received from the first subscription point and associated with the first subscriber, and forward, in accordance with the second subscription, traffic received from the first subscription point and associated with the second subscriber. ### Claim 14 (depends on 13) The network device of claim 13, wherein the one or more processors are configured to execute a second virtual customer premises equipment for the second subscriber to provide the access to the wireline broadband network in accordance with the second subscription associated with the second subscription point. ### Claim 15 (depends on 13) The network device of claim 13, wherein the one or more processors are configured to: execute a proxy virtual customer premises equipment for the second subscriber separate from the first virtual customer premises equipment executed for the first subscriber; and create a tunnel from the proxy virtual customer premises equipment to a second virtual customer premises equipment for the second subscriber to provide the access to the wireline broadband network in accordance with the second subscription associated with the second subscription point. ### Claim 16 (depends on 13) The network device of claim 13, wherein the one or more processors are configured to configure the first virtual customer premises equipment associated with the first subscriber to: act as a proxy virtual customer premises equipment for the second subscriber; and create a tunnel from the proxy virtual customer premises equipment to a second virtual customer premises equipment for the second subscriber to provide the access to the wireline broadband network in accordance with the second subscription associated with the second subscription point. ### Claim 17 (depends on 16) The network device of claim 16, wherein the one or more processors are configured to: retrieve, during authentication of the second subscriber to access the wireline broadband network, information identifying the second virtual customer premises equipment; configure the tunnel from the proxy virtual customer premises equipment to the second virtual customer premises equipment; and install a firewall filter that directs all traffic from a device associated with the second subscriber through the tunnel to the second virtual customer premises equipment. ### Claim 18 (depends on 17) The network device of claim 17, wherein the network device comprises a first network device that executes both the first virtual customer premises equipment and the proxy virtual customer premises equipment, and wherein a second network device executes the second virtual customer premises equipment. ### Claim 19 (depends on 17) The network device of claim 17, wherein the one or more processors are further configured to: receive, with the proxy virtual customer premises equipment, subscriber credentials associated with the second subscriber via an authentication portal served by the wireline broadband network; and initiate the authentication of the second subscriber based on the subscriber credentials. ### Claim 20 (depends on 17) The network device of claim 17, wherein the one or more interfaces are further configured to receive a change of authorization from a different network device authorizing the installation of the firewall filter as a result of authenticating subscriber credentials associated with the second subscriber. ### Claim 21 (depends on 13) The network device of claim 13, wherein the one or more processors are configured to execute a second virtual customer premises equipment for the second subscriber to provide the access to the wireline broadband network in accordance with the second subscription associated with the second subscription point without establishing a tunnel to redirect traffic to a third virtual customer premises equipment executed to provide access to the wireline broadband network for the second subscription point. ### Claim 22 (depends on 21) The network device of claim 21, wherein the one or more processors are configured to execute a second virtual customer premises equipment for the second subscriber to provide the access to the wireline broadband network from the first subscription point in accordance with the second subscription associated with the second subscription point concurrent to execution of a third virtual customer premises equipment executed to provide access to the wireline broadband network for the second subscription point. ### Claim 23 (depends on 21) The network device of claim 21, wherein the one or more processors are configured to transfer execution of a second virtual customer premises equipment for the second subscriber to the network device so as to provide the access to the wireline broadband network from the first subscription point in accordance with the second subscription associated with the second subscription point ### Claim 24 (depends on 13) The network device of claim 13, wherein the network device comprises one of a service gateway and a broadband network gateway. ### Claim 25 A non-transitory computer-readable storage medium having stored thereon instructions that, when executed, cause one or more processors of a network device positioned in the wireline broadband network to: execute a first virtual customer premises equipment to provide, to a first subscriber, access to the wireline broadband network from a first subscription point in accordance with a first subscription associated with the first subscriber and the first subscription point; provide, to a second subscriber, access to the wireline broadband network from the first subscription point in accordance with a second subscription associated with the second subscriber and a second subscription point; forward, in accordance with the first subscription, traffic received from the first subscription point and associated with the first subscriber; and forward, in accordance with the second subscription, traffic received from the first subscription point and associated with the second subscriber. ### Claim 26 A network system comprising: a wireline broadband network configured to provide access to a public network; and a network device positioned in the wireline broadband network, the network device comprising: one or more processors configured to execute a first virtual customer premises equipment to provide, to a first subscriber, access to the wireline broadband network from a first subscription point in accordance with a first subscription associated with the first subscriber and the first subscription point, and provide, to a second subscriber, access to the wireline broadband network from the first subscription point in accordance with a second subscription associated with the second subscriber and a second subscription point; and one or more interfaces configured to forward, in accordance with the first subscription, traffic received from the first subscription point and associated with the first subscriber, and forward, in accordance with the second subscription, traffic received from the first subscription point and associated with the second subscriber.