Systems and methods for secure provisioning of consumer network services
View Patent ↗Provided are systems and methods for secure provisioning of consumer network services. For example, there is a broadband modem for secure provisioning of a network service, where the broadband modem includes a controller having an embedded memory. The controller is configured to enable an unmanaged interface of the broadband modem, to establish a subscription interface link over the enabled unmanaged interface, and to download, over the subscription interface link, a subscriber firmware enabling a managed interface corresponding to the network service. Power cycling the broadband modem erases the downloaded subscriber firmware and disables the managed interface.
1. A broadband modem for secure provisioning of a network service, the broadband modem comprising:
a controller including an embedded memory, the controller configured to:
enable an unmanaged interface of the broadband modem using a software stored in the embedded memory;
establish a subscription interface link over the enabled unmanaged interface using the software stored in the embedded memory; and
download, over the subscription interface link, a subscriber firmware enabling a managed interface corresponding to the network service;
wherein the broadband modem is exclusive of firmware for enabling the managed interface prior to the download, erases the downloaded subscriber firmware, and disables the managed interface upon a power cycle.
2. The broadband modem of claim 1 , wherein the subscriber firmware is stored in a volatile memory of the broadband modem.
3. The broadband modem of claim 1 , further comprising a flash memory module sized to store subscriber configuration data;
the controller being configured to establish the subscription interface link using at least a portion of the subscriber configuration data.
4. The broadband modem of claim 1 , wherein the subscription interface link comprises an interface link to a headend of an internet services provider;
the controller being configured to download at least a portion of the subscriber firmware from the headend.
5. The broadband modem of claim 1 , wherein the subscription interface link comprises an interface link to a headend of an internet services provider;
the controller being configured to download at least a portion of the subscriber firmware from a subscription server coupled to the headend.
6. The broadband modem of claim 1 , wherein the network service corresponds to multiple managed interfaces, and the downloaded subscriber firmware enables the multiple managed interfaces.
7. The broadband modem of claim 1 , wherein the managed interface comprises a broadband subscription interface.
8. The broadband modem of claim 1 , wherein the managed interface comprises a volatile memory interface.
9. The broadband modem of claim 1 , wherein the managed interface comprises a flash memory interface.
10. The broadband modem of claim 1 , wherein the managed interface comprises an interface selected from the group of a wired LAN interface, a wireless LAN interface, an attached storage device interface, a media interface and a telephony interface.
11. The broadband modem of claim 1 , wherein the unmanaged interface comprises an interface selected from the group of a DSL interface, a broadband cable interface and a wireless broadband interface.
12. A method for execution by a controller of a broadband modem for secure provisioning of a network service, the method situated in an embedded memory of the controller and comprising:
enabling an unmanaged interface of the broadband modem using a software stored in the embedded memory;
establishing an authenticated subscription interface link over the enabled unmanaged interface using the software stored in the embedded memory to authenticate the subscription interface link; and
downloading, over the authenticated subscription interface link, a subscriber firmware enabling a managed interface corresponding to the network service;
wherein the broadband modem erases the downloaded subscriber firmware and disables the managed interface upon a power cycle, and the broadband modem is exclusive of firmware for enabling the managed interface prior to the download.
13. The method of claim 12 , wherein establishing the subscription interface link comprises authenticating the subscription interface link using a flash memory module of the broadband modem that is sized to store subscriber configuration data.
14. The method of claim 12 , wherein the subscription interface link comprises an interface link to a headend of an internet services provider;
the method further comprising downloading at least a portion of the subscriber firmware from the headend.
15. The method of claim 12 , wherein the subscription interface link comprises an interface link to a headend of an internet services provider;
the method further comprising downloading at least a portion of the subscriber firmware from a subscription server separate from the headend.
16. The method of claim 12 , wherein the network service corresponds to multiple managed interfaces, and the downloaded subscriber firmware enables the multiple managed interfaces.
17. The method of claim 12 , wherein the managed interface comprises a broadband subscription interface.
18. The method of claim 12 , wherein the managed interface comprises an interface selected from the group of a wired LAN interface, a wireless LAN interface, an attached storage device interface, a media interface and a telephony interface.
19. The method of claim 12 , wherein the unmanaged interface comprises an interface selected from the group of a DSL interface, a broadband cable interface and a wireless broadband interface.