Satellite terminal IP radio MOCA link security

1. A method, comprising:

initializing, over an interfacility link (IFL) cable connecting an indoor unit of a satellite terminal and an outdoor Internet Protocol (IP) Radio of the satellite terminal, a communication link between the indoor unit and the outdoor IP Radio;

authenticating, using the indoor unit and the outdoor IP Radio, the communication link between the indoor unit and the outdoor IP Radio over the IFL cable; and

after authenticating the communication link, providing satellite internet service to the indoor unit via the outdoor IP Radio.

2. The method of claim 1 , wherein authenticating the communication link, comprises: authenticating, using one or more security keys stored at the indoor unit and the outdoor IP Radio, the communication link between the indoor unit and the outdoor IP Radio over the IFL cable.

3. The method of claim 2 , wherein:

the one or more security keys are generated by a network management system (NMS) of a satellite communications network; and

the method further comprises: after the one or more security keys are generated by the NMS, receiving and storing, at the outdoor IP Radio and the indoor unit, the one or more security keys.

4. The method of claim 3 , wherein receiving, at the outdoor IP Radio and the indoor unit, the one or more security keys, comprises:

receiving, at the outdoor IP Radio, a modulated and encoded signal transmitted over an outroute of the satellite communications network;

demodulating and decoding the signal at the outdoor IP Radio to extract the one or more security keys; and

transmitting, over the IFL cable, the one or more security keys from the outdoor IP Radio to the indoor unit.

5. The method of claim 3 , wherein storing, at the outdoor IP Radio and the indoor unit, the one or more security keys, comprises: storing, at the outdoor IP Radio and the indoor unit, the one or more security keys at a time that the satellite terminal is commissioned and installed.

6. The method of claim 1 , wherein authenticating the communication link, comprises:

pinging, over the IFL cable, using the outdoor IP Radio, the indoor unit;

in response to pinging the indoor unit, receiving, at the outdoor IP Radio, a response message from the indoor unit; and

confirming, at the outdoor IP Radio, using at least the response message, that the indoor unit is authorized to receive the satellite internet service via the outdoor IP Radio.

7. The method of claim 6 , wherein confirming, at the outdoor IP Radio, using at least the response message, that the indoor unit is authorized to receive the satellite internet service via the outdoor IP Radio, comprises: confirming, using at least the response message and one or more security keys stored at the outdoor IP Radio, that the indoor unit is authorized to receive the satellite internet service via the outdoor IP Radio.

8. The method of claim 1 , wherein authenticating the communication link, comprises: authenticating the communication link during power up of the indoor unit and the outdoor IP Radio.

9. The method of claim 1 , wherein authenticating the communication link, comprises: periodically authenticating the communication link between the indoor unit and the outdoor IP Radio.

10. The method of claim 1 , wherein the IFL cable is a coaxial cable.

11. A satellite terminal, comprising:

an indoor unit;

an outdoor Internet Protocol (IP) Radio;

one or more processors; and

one or more non-transitory computer-readable mediums having executable instructions stored thereon that, when executed by the one or more processors, cause the satellite terminal to perform operations, comprising:

initializing, over an interfacility link (IFL) cable connecting the indoor unit and the outdoor IP Radio, a communication link between the indoor unit and the outdoor IP Radio;

authenticating, using the indoor unit and the outdoor IP Radio, the communication link between the indoor unit and the outdoor IP Radio over the IFL cable; and

after authenticating the communication link, providing satellite internet service to the indoor unit via the outdoor IP Radio.

12. The satellite terminal of claim 11 , wherein authenticating the communication link, comprises: authenticating, using one or more security keys stored at the indoor unit and the outdoor IP Radio, the communication link between the indoor unit and the outdoor IP Radio over the IFL cable.

13. The satellite terminal of claim 12 , wherein:

the one or more security keys are generated by a network management system (NMS) of a satellite communications network; and

the operations further comprise: after the one or more security keys are generated by the NMS, receiving and storing, at the outdoor IP Radio and the indoor unit, the one or more security keys.

14. The satellite terminal of claim 13 , wherein receiving, at the outdoor IP Radio and the indoor unit, the one or more security keys, comprises:

receiving, at the outdoor IP Radio, a modulated and encoded signal transmitted over an outroute of the satellite communications network;

demodulating and decoding the signal at the outdoor IP Radio to extract the one or more security keys; and

transmitting, over the IFL cable, the one or more security keys from the outdoor IP Radio to the indoor unit.

15. The satellite terminal of claim 13 , wherein storing, at the outdoor IP Radio and the indoor unit, the one or more security keys, comprises: storing, at the outdoor IP Radio and the indoor unit, the one or more security keys at a time that the satellite terminal is commissioned and installed.

16. The satellite terminal of claim 11 , wherein authenticating the communication link, comprises:

pinging, over the IFL cable, using the outdoor IP Radio, the indoor unit;

in response to pinging the indoor unit, receiving, at the outdoor IP Radio, a response message from the indoor unit; and

confirming, at the outdoor IP Radio, using at least the response message, that the indoor unit is authorized to receive the satellite internet service via the outdoor IP Radio.

17. The satellite terminal of claim 16 , wherein confirming, at the outdoor IP Radio, using at least the response message, that the indoor unit is authorized to receive the satellite internet service via the outdoor IP Radio, comprises: confirming, using at least the response message and one or more security keys stored at the outdoor IP Radio, that the indoor unit is authorized to receive the satellite internet service via the outdoor IP Radio.

18. The satellite terminal of claim 11 , wherein authenticating the communication link, comprises: authenticating the communication link during power up of the indoor unit and the outdoor IP Radio; or periodically authenticating the communication link between the indoor unit and the outdoor IP Radio.

19. The satellite terminal of claim 11 , wherein the satellite terminal is a very small aperture terminal (VSAT).

20. An outdoor Internet Protocol (IP) Radio of a satellite terminal, the outdoor IP Radio comprising:

one or more processors; and

one or more non-transitory computer-readable mediums having executable instructions stored thereon that, when executed by the one or more processors, cause the outdoor IP Radio to perform operations, comprising:

initializing, over an interfacility link (IFL) cable connecting the outdoor IP Radio to an indoor unit of the satellite terminal, a communication link between the outdoor IP Radio and the indoor unit;

authenticating the communication link between the indoor unit and the outdoor IP Radio over the IFL cable; and

after authenticating the communication link, providing satellite internet service to the indoor unit.