Method for inverse port-based authentication

A method for operating a service node comprising:

• the service node initiating and forwarding an authentication request to a network node;
• the service node receiving a reply to the authentication request from the network node;
• the service node determining whether the network node is authentic;
• the service node allowing data to pass between the network interface and subscriber interface provided the network node is authentic;
• and
• a packet filter filters out downstream packets not associated with authenticating subscriber devices or authenticating the network node.

A tangible computer program product comprising:

• a memory for storing code portions for execution by a processor;
• a first code portion for initiating and forwarding an authentication request to a network node;
• a second code portion for receiving a reply to the authentication request from the network node;
• a third code portion for determining whether the network node is authentic;
• and
• a fourth code portion for allowing data to be passed between a network interface and a subscriber interface provided the network node is authentic;
• and
• comprising a fifth code portion for filtering out downstream packets not associated with authenticating subscriber devices or authenticating the network node.