Protected premises network apparatus and methods
Apparatus and methods for enabling protected premises networking capabilities. In one embodiment, the premises network is a Multimedia over Coaxial Alliance (MoCA) network, and is secured by a requirement that devices use a password or key to access the network. The password may be given only to authorized devices. Information regarding a device may be utilized to associate the device with a particular premises network, and provide a password to authorized devices. The password is unique to the premises in one variant by being derived from a subscriber account. At least one of the devices requesting access to the premises network may comprise a gateway device. A home network utilizing existing coaxial cable in the premises is created between a plurality of authorized devices each receiving the password.
1. For use in a content delivery network, a premises network-capable device, comprising:
a network interface for communication with said content delivery network;
at least one premises interface for communication with a plurality of devices within a premises network;
a storage entity; and
a digital processor apparatus configured to execute at least one client application thereon, said application configured to, when executed:
receive at least one entitlement message from a network controller disposed at a content delivery network headend, said entitlement message informing said premises network-capable device that said premises network-capable device is entitled to services on said premises network;
in response to said receipt of said entitlement message, send a request for a premises network password to a server disposed at the content delivery network headend;
receive said premises network password from said server, said received premises network password comprising one or more restrictions associated therewith;
identify at least two devices of said plurality of devices within said premises network which are also entitled to receive services on said premises network; and
transmit said premises network password to said identified at least two devices, said transmission enabling communication to be established within said premises network between said identified at least two devices;
wherein said communication established within said premises network enables media content and associated metadata to be shared between said identified at least two devices for a certain duration via said premises network, said certain duration based at least in part on said one or more restrictions;
wherein said received premises network password comprises a password generated by said server via use of at least user account information as seed information for an algorithm, said user account information associated with at least one of said identified at least two devices.
2. The premises network-capable device of claim 1 , wherein said premises network comprises a Multimedia over Coaxial Alliance (MoCA)-compliant network utilizing coaxial cable.
3. The premises network-capable device of claim 1 , wherein said network interface comprises an radio frequency (RF) tuner apparatus.
4. The premises network-capable device of claim 1 , wherein said entitlement message comprises a server address where said password is located, said request being sent to said server address.
5. The premises network-capable device of claim 1 , wherein said request for said premises network password comprises information uniquely identifying said premises network-capable device.
6. The premises network-capable device of claim 5 , wherein said information uniquely identifying said premises network-capable device comprises a media access control (MAC) address of said premises network-capable device.
7. The premises network-capable device of claim 1 , wherein said received entitlement message is issued in response to a negotiation sequence between said premises network-capable device and said content delivery network initiated by detection of said premises network-capable device on said premises network.
8. A server apparatus disposed at a content distribution network headend, the server apparatus comprising:
a network interface;
a storage apparatus; and
a processor apparatus in data communication with said network interface and said storage apparatus, said processor apparatus configured to execute at least a software application thereon, said software application configured to:
receive, from a premises-capable device in communication with said network interface, a password request to gain access to a premises network;
utilize information in said password request to:
verify that said premises-capable device is entitled to access said premises network; and
query a first database for user account information associated with said premises-capable device;
utilize said user account information to query a second database for a password;
when said query of said second database does not return said password, use at least said user account information as seed information for an algorithm configured to generate said password, said password comprising one or more restrictions associated therewith; and
transmit said password to said premises-capable device via said network interface;
in response to an identification of at least two devices within said premises network which are also entitled to access said premises network, cause transmission of said password to said identified at least two devices, thereby enabling said identified at least two devices to access said premises network and to share content with one another for a certain duration via the premises network, said certain duration based at least in part on said one or more restrictions.
9. The server apparatus of claim 8 , wherein said first database comprises a database associated with a billing system of said content distribution network.
10. The server apparatus of claim 8 , wherein said second database comprises a database associated with a broadcast provisioning system of said content distribution network.
11. A method of operating a premises device, the method comprising:
placing said premises device in data communication with a premises network, at least one component of said premises network being in communication with a content distribution network;
substantially in response to said act of placing, causing said premises device to automatically:
receive at least one entitlement message from a network controller disposed at a headend of said content distribution network, said entitlement message configured to inform said premises device that said premises device is entitled to services on said premises network;
in response to said receipt of said entitlement message, send a request for a security to a server disposed at said headend of said content delivery network;
receive said security information from said content distribution network, said security information comprising one or more restrictions associated therewith;
utilize said security information to gain access to one or more features of said premises network; and
determine that another premises device is in communication with said premises network, said determination comprising a detection of said another premises device via a physical connection; and
upon authentication of said another premises device, transmit said security information to said another premises device, said transmission configured to enable said premises device to share content and associated metadata with said another premises device for a certain duration via the premises network, said certain duration based at least in part on said one or more restrictions;
wherein said security information comprises a password generated by a server apparatus via use of at least user account information as seed information for an algorithm, said user account information associated with at least said premises device.
12. The method of claim 11 , further comprising causing, substantially in response to said act of placing, said premises device to obtain a network address on said premises network.
13. The method of claim 12 , wherein said network address on said premises network comprises an address generated via network address translation (NAT).
14. The method of claim 12 , wherein said premises network comprises a trusted network.
15. The method of claim 11 , wherein said detection via said physical connection comprises placing a signal or sensing a voltage at a pin or terminal of a connector connecting said premises device to said another premises device.
16. The method of claim 11 , wherein said detection via said physical connection comprises a wireless negotiation or exchange between said premises device and said another premises device.
17. A non-transitory computer-readable apparatus comprising media configured to store a computer program thereon, said computer program comprising a plurality of instructions which are configured to, when executed by a processor apparatus:
receive at least one entitlement message from a network controller disposed at a content delivery network headend, said entitlement message configured to indicate that a premises network-capable device is entitled to services on a premises network;
in response to said receipt of said entitlement message, send a request for a premises network password to a server disposed at said content delivery network headend;
receive said premises network password from said server, said received premises network password comprising one or more restrictions associated therewith;
identify at least two client devices within said premises network which are also entitled to receive services on said premises network; and
transmit said premises network password to said identified at least two devices, said transmission enabling communication to be established within said premises network between said identified at least two devices;
wherein said communication established within said premises network enables media content and associated metadata to be shared between said identified at least two devices for a certain duration via said premises network, said certain duration based at least in part on said one or more restrictions; and
wherein said received premises network password comprises a password generated by said server via use of at least user account information as seed information for an algorithm, said user account information associated with said identified at least two devices.
18. The non-transitory computer-readable apparatus of claim 17 , wherein said request for said premises network password comprises information uniquely identifying said premises network-capable device.
19. The non-transitory computer-readable apparatus of claim 18 , wherein said information uniquely identifying said premises network-capable device comprises a media access control (MAC) address of said premises network-capable device.
20. The non-transitory computer-readable apparatus of claim 17 , wherein said received entitlement message is issued in response to a negotiation sequence between said premises network-capable device and said content delivery network initiated by detection of said premises network-capable device on said premises network.
21. The non-transitory computer-readable apparatus of claim 17 , further comprising causing said premises network-capable device to obtain a network address on said premises network, wherein said network address on said premises network comprises an address generated via network address translation (NAT).
22. The non-transitory computer-readable apparatus of claim 17 , wherein said premises network comprises a Multimedia over Coaxial Alliance (MoCA)-compliant network utilizing coaxial cable.