Cable modem anti-cloning
Methods, systems, and computer readable media can be operable to facilitate the encryption of a device identifier using an identification property of a Soc. A unique identifier of a cable modem may be encrypted using a unique key or other unique property of a SoC associated with the cable modem. When an authentication process is initiated at the cable modem, the encrypted unique identifier of the cable modem may be decrypted using the unique key or other unique property of the SoC, thereby producing the unique identifier of the cable modem. The decrypted unique identifier of the cable modem may be output from the cable modem to an upstream controller during the authentication process. In embodiments, an obfuscation key may be used to encrypt and decrypt the unique identifier of the cable modem, and the obfuscation key may be generated using a unique identifier of the SoC.
1. A cable modem for use with an upstream controller, said cable modem comprising:
a memory; and
a processor configured to execute instructions stored in the memory to:
retrieve a unique identifier associated with the cable modem;
retrieve a seed associated with a component of the cable modem;
produce an encrypted identifier by using the seed to produce an encryption key to encrypt the unique identifier;
store the encrypted identifier in said memory;
conduct an authentication process including: performing decryption using the seed to produce a decryption key to decrypt the stored encrypted identifier to yield the unique identifier, and using the unique identifier to authorize the cable modem with the upstream controller.
2. The cable modem of claim 1 , wherein the unique identifier is a MAC address of the cable modem.
3. The cable modem of claim 1 , wherein the unique identifier is a private key.
4. The cable modem of claim 3 , wherein the private key is associated with a cable modem device certificate containing a media access control address associated with the cable modem.
5. The cable modem of claim 1 , wherein the component is a system-on-a-chip associated with the cable modem.
6. The cable modem of claim 1 , wherein the component is a flash memory of the cable modem.
7. The cable modem of claim 1 , wherein the upstream controller comprises a cable modem termination system.
8. The cable modem of claim 1 , wherein the authentication process includes sending a baseline privacy interface plus authorization request message.
9. A method comprising:
retrieving a unique identifier associated with a cable modem;
retrieving a seed associated with a component of the cable modem;
producing an encrypted identifier by using the seed to produce an encryption key to encrypt the unique identifier;
storing the encrypted identifier in memory in the cable modem;
conducting an authentication process at the cable modem including: performing decryption using the seed to produce a decryption key to decrypt the stored encrypted identifier to yield the unique identifier, and using the unique identifier to authorize the cable modem with an upstream controller.
10. The method of claim 9 , wherein the unique identifier is a MAC address of the cable modem.
11. The method of claim 9 , wherein the unique identifier is a private key.
12. The method of claim 11 , wherein the private key is associated with a cable modem device certificate containing a media access control address associated with the cable modem.
13. The method of claim 9 , wherein the component is a system-on-a-chip associated with the cable modem.
14. The method of claim 9 , wherein the component is a flash memory of the cable modem.
15. The method of claim 9 , wherein the upstream controller comprises a cable modem termination system.
16. The method of claim 9 , wherein the authentication process includes sending a baseline privacy interface plus authorization request message.
17. One or more non-transitory computer readable media having instructions operable to cause one or more processors to perform operations comprising:
retrieving a unique identifier associated with a cable modem;
retrieving a seed associated with a component of the cable modem;
producing an encrypted identifier by using the seed to produce an encryption key to encrypt the unique identifier;
storing the encrypted identifier in memory in the cable modem;
conducting an authentication process at the cable modem including: performing decryption using the seed to produce a decryption key to decrypt the stored encrypted identifier to yield the unique identifier, and using the unique identifier to authorize the cable modem with an upstream controller.
18. The one or more non-transitory computer readable media of claim 17 , wherein the unique identifier is a MAC address of the cable modem.
19. The one or more non-transitory computer readable media of claim 17 , wherein the unique identifier is a private key.
20. The one or more non-transitory computer readable media of claim 19 , wherein the private key is associated with a cable modem device certificate containing a media access control address associated with the cable modem.
21. The one or more non-transitory computer readable media of claim 17 , wherein the component is a system-on-a-chip associated with the cable modem.
22. The one or more non-transitory computer readable media of claim 17 , wherein the component is a flash memory of the cable modem.
23. The one or more non-transitory computer readable media of claim 17 , wherein the upstream controller comprises a cable modem termination system.
24. The one or more non-transitory computer readable media of claim 17 , wherein the authentication process includes sending a baseline privacy interface plus authorization request message.