Apparatus and methods for device authorization in a premises network
Apparatus and methods for enabling protected premises networking capabilities. In one embodiment, a white list of devices authorized to access a premises network and a black list of device not authorized to access a premises network are utilized. The black and white lists may be stored at a database in communication with an authorization manager or may be stored at the manager itself. When a client device is connected to a premise, the manager determines, based on the premises and/or device identity, whether the device is entitled to access. The authorization manager makes this determination based on whether the device is on the white or black list. If the device is on neither list, the manager may add the device to the white list upon appropriate verification. The manager may also facilitate removal of a device from the white list to the black list upon request or automatically.
1. A method of providing access to a premises network disposed within a user's premises, the method comprising:
receiving an address configured to identify at least one client device and a subscriber account number configured to identify at least one premises network to which said at least one client device is connected;
updating one or more lists of devices to add thereto said address and said account number;
receiving a request for access to said at least one premises network from said at least one client device; and
in response to said request, granting or denying access to said at least one premises network to said at least one client device.
2. The method of claim 1 , wherein said address identifying said at least one client device comprises a Media Access Control (MAC) address associated with said at least one client device.
3. The method of claim 2 , wherein said request comprises at least said MAC address associated with said at least one client device and said subscriber account number.
4. The method of claim 1 , wherein said one or more lists comprises at least a white list of authorized devices, and a black list of unauthorized devices.
5. The method of claim 4 , further comprising searching said white list and said black list using at least said address configured to identify said at least one client device and said at least one premises network.
6. The method of claim 5 , wherein said act of granting or denying access is based at least in part on whether said at least one client device is found on said white or said black list.
7. The method of claim 4 , wherein said act of updating further comprises apprising at least one headend billing entity of an addition of said at least one client device to said white list of authorized devices for said at least one premises network.
8. The method of claim 7 , further comprising verifying said address configured to identify said at least one client device and said at least one premises network, said verifying comprising comparing said address configured to identify said at least one client device and said at least one premises network with subscriber information stored at said at least one headend billing entity.
9. The method of claim 1 , wherein said act of granting access to said at least one premises network comprises presenting said at least one client device with a user interface for accessing data and content.
10. The method of claim 9 , wherein said user interface for accessing data and content comprises an electronic programming guide (EPG).
11. The method of claim 1 , wherein said act of denying access to said at least one premises network comprises presenting said at least one client device a message indicating a reason for said denial of access.
12. The method of claim 1 , wherein said premises network comprises a Multimedia over Coax Alliance (MoCA)-compliant home network.
13. Consumer premises equipment (CPE) for providing access to a premises network with a plurality of client devices connected thereto, said CPE comprising:
an interface to a content delivery network disposed substantially off the user's premises;
at least one back-end interface;
a storage apparatus configured to store a first list of authorized ones of said plurality of client devices identified by an address or subscriber account number thereof, and a second list of unauthorized ones of said plurality of client devices identified by an address or subscriber account number thereof; and
at least one processing entity configured to run at least one program thereon, said program comprising a plurality of instructions configured to, when executed:
receive a request for access from one of said plurality of client devices;
evaluate said first and second lists to determine whether said one of said plurality of client devices is authorized to access said premises network;
when said one of said plurality of client devices is authorized to access said premises network, grant access thereto; and
when said one of said plurality of client devices is not authorized to access said premises network, deny access thereto.
14. The CPE of claim 13 , wherein said at least one back end interface comprises an interface to said plurality of client devices in said premises network.
15. The CPE of claim 13 , wherein said plurality of instructions are further configured to, when executed search said first and second lists for said address or subscriber account number corresponding to said individual one of said plurality of client devices, said search being used to determine whether said one of said plurality of client devices is authorized to access said premises network.
16. The CPE of claim 15 , wherein:
when said address or subscriber account number corresponding to said one of said plurality of client devices is not present in any of said first and second lists, said plurality of instructions further configured to, when executed,
add said address or subscriber account number corresponding to said one of said plurality of client devices to said second list.
17. The CPE of claim 13 , wherein said at least one program comprises a distributed application having at least one component thereof configured to run at a headend entity of said content delivery network.
18. The CPE of claim 13 , wherein said interface to said content delivery network comprises a radio frequency (RF) interface, and said premises network comprises a Multimedia over Coax Alliance (MoCA)-compliant premises network.
19. A computer readable apparatus comprising a plurality of instructions configured to provide access to a premises network, said premises network having a plurality of client devices connected thereto, said plurality of instructions configured to, when executed on a processing apparatus:
store one or more lists of authorization information at an entity of said premises network, said authorization information comprising an address or subscriber account number associated to individual ones of said plurality of client devices;
receive a request for access to said premises network from one of said plurality of client devices, said request comprising said address or subscriber account number associated to said one of said plurality of client devices and said premises network;
determine whether said one of said plurality of client devices is authorized to access said premises network based at least in part on an evaluation of said address or subscriber account number with respect to said one or more lists;
when it is determined that said one of said plurality of client devices is authorized to access said premises network, grant access thereto; and
when it is determined that said one of said plurality of client devices is not authorized to access said premises network, deny access thereto.
20. The apparatus of claim 19 , wherein said one or more lists of said authorization information each comprises information indicating whether said individual ones of said plurality of client devices are authorized or not authorized to access said premises network.
21. The apparatus of claim 19 , further comprising a distributed application having at least one component thereof configured to run at a headend entity of a content delivery network in communication with said premises network.
22. The apparatus of claim 21 , wherein said communication to said content delivery network occurs via a radio frequency (RF) interface at said premises network, and said premises network comprises a Multimedia over Coax Alliance (MoCA) compliant premises network.
23. The apparatus of claim 19 , wherein said authorization information comprises a Media Access Control (MAC) address associated with said one of said plurality of client devices.
24. The apparatus of claim 19 , wherein said access to said premises network is granted occurs via delivery of a user interface configured to enable access to data and content to said one of said plurality of client devices.