Secured transport in remote MAC/PHY DAA architecture
Exchanging encrypted packet payloads between a cable headend and a Remote MACPHY device. A single device executes a cable modem termination system (CMTS) implemented in software and not hardware. The software-implemented CMTS (i.e., a virtual CMTS) instantiates a tunnel to the Remote MACPHY device. The virtual CMTS encrypts the payloads of one or more packets and transmits those packets over the tunnel to the Remote MACPHY device. In similar fashion, the Remote MACPHY device may send packets with encrypted payloads to the virtual CMTS over the tunnel. In this way, encryption is not performed on a hop by hop basis, thereby allowing the payloads of packets to remain encrypted at all times during transmit through the tunnel.
1. One or more non-transitory computer-readable storage mediums storing one or more sequences of instructions for exchanging encrypted packet payloads between a cable headend and a Remote MACPHY device, which when executed, cause:
instantiating, from a single device executing a virtual cable modem termination system (CTMS) implemented in software and not hardware, a Layer 3 tunnel to said Remote MACPHY device;
the virtual CMTS encrypting a payload of the packet and transmitting the packet with the encrypted payload over the Layer 3 tunnel to said Remote MACPHY device; and
the virtual CMTS receiving, from said Remote MACPHY device, one or more packets over said Layer 3 tunnel, wherein said one or more packets each comprise payloads encrypted with subscriber encryption that were not decrypted at any point during transmit over said Layer 3 tunnel.
2. The one or more non-transitory computer-readable storage mediums of claim 1 , wherein said Remote MACPHY device is an Optical Line Terminal (OLT) element in a Passive Optical Network (PON).
3. The one or more non-transitory computer-readable storage mediums of claim 1 , wherein said Remote MACPHY device is in a 4G Radio Access Network (RAN) network or a 5G broadband cellular network.
4. The one or more non-transitory computer-readable storage mediums of claim 1 , wherein the single device is a Commercial-Off-the-Shelf (COTS) computer.
5. A system for exchanging encrypted packet payloads between a cable headend and a Remote MACPHY device, comprising:
one or more processors; and
one or more non-transitory computer-readable storage mediums storing one or more sequences of instructions, which when executed, cause:
instantiating, from a single device executing a virtual cable modem termination system (CTMS) implemented in software and not hardware, a Layer 3 tunnel to said Remote MACPHY device;
the virtual CMTS encrypting a payload of the packet and transmitting the packet with the encrypted payload over the Layer 3 tunnel to said Remote MACPHY device; and
the virtual CMTS receiving, from said Remote MACPHY device, one or more packets over said Layer 3 tunnel, wherein said one or more packets each comprise payloads encrypted with subscriber encryption that were not decrypted at any point during transmit over said Layer 3 tunnel.
6. The system of claim 5 , wherein said Remote MACPHY device is an Optical Line Terminal (OLT) element in a Passive Optical Network (PON).
7. The system of claim 5 , wherein said Remote MACPHY device is in a 4G Radio Access Network (RAN) network or a 5G broadband cellular network.
8. The system of claim 5 , wherein the single device is a Commercial-Off-the-Shelf (COTS) computer.
9. A method for exchanging encrypted packet payloads between a cable headend and a Remote MACPHY device, comprising:
instantiating, from a single device executing a virtual cable modem termination system (CTMS) implemented in software and not hardware, a Layer 3 tunnel to said Remote MACPHY device;
the virtual CMTS encrypting a payload of the packet and transmitting the packet with the encrypted payload over the Layer 3 tunnel to said Remote MACPHY device; and
the virtual CMTS receiving, from said Remote MACPHY device, one or more packets over said Layer 3 tunnel, wherein said one or more packets each comprise payloads encrypted with subscriber encryption that were not decrypted at any point during transmit over said Layer 3 tunnel.
10. The method of claim 9 , wherein said Remote MACPHY device is an Optical Line Terminal (OLT) element in a Passive Optical Network (PON).
11. The method of claim 9 , wherein said Remote MACPHY device is in a 4G Radio Access Network (RAN) network or a 5G broadband cellular network.
12. The method of claim 9 , wherein the single device is a Commercial-Off-the-Shelf (COTS) computer.