Modems that block data transfers during safe mode of operation and related methods

[0002] The present invention relates to the field of communications in general and more particularly to cable modems and methods.

[0003] With the rise in popularity of the Internet, many users are accessing the Internet through the Public Switched Telephone Network (PSTN) over a modem connected to a telephone line in the user's home. Unfortunately, the bandwidth provided by home telephone lines may prove to be inadequate for some applications on the Internet. For example, some data sets provided by the Internet may be so large that it is difficult to transfer the data set over the telephone line in a given time so that the application operates in a real-time manner. In particular, current residential telephone modem technology may be limited to data rates on the order of 56 kilobaud (kb).

[0004] In an attempt to reduce the bandwidth problem associated with the telephone lines described above, there have been efforts to provide Internet service over coaxial cables used to provide cable TV. Accordingly, the user may access the Internet over the cable system using a cable modem to provide data rates of 42 megabaud or higher. Accessing the Internet via a cable system may involve initializing the cable modem each time the cable modem is turned on, during which the cable modem may register with the cable system. For example, when the user wishes to access the Internet, the user may turn on the cable modem which then registers with the cable system.

[0005] As the number of cable modems handled by the cable system increases, the time needed to register each cable modem may also increase thereby lengthening the registration time. For example, if hundreds of cable modems are used in a cable system, the registration time for a selected cable modem may be several minutes. Consequently, the user may wish to avoid turning the cable modem off in an effort to avoid the delay incurred by a lengthy registration process. For example, if the user turns the cable modem on just prior to accessing the Internet, the user may need to wait for the registration process to complete before gaining access to the Internet. Moreover, cable systems may also provide television and telephone service to a user's home such as by routing these services through the cable modem to the television and telephone. Accordingly, the user may desire that the cable modem be left on so as not to interrupt telephone or television service.

[0006] Unfortunately, leaving the cable modem turned on may decrease the security of the computer to which the cable modem is attached. In particular, the computer may be more susceptible to attack via the cable. For example, an unauthorized user may attempt to gain access to the computer via the cable. Moreover, because the cable provides relatively high bandwidth, relatively simple attacks, such as trying a large number of password combinations, may require only a short time to be successful. In view of the above, there exists a need to improve the security of cable modems used to access the Internet via cable systems.

[0007] Accordingly, the present invention may allow improvement in the security of cable modems by blocking access to the cable modem from the cable system while the cable modem is in safe mode. Blocking data transfers may allow the subscriber to leave the host system connected to the cable modem, thereby possibly avoiding the delay associated with the registration process while reducing the security threats posed by maintaining a physical connection to the cable modem.

[0008] It is, therefore, an object of the present invention to allow improvement in cable modems and methods.

[0009] It is another object of the present invention to allow improvement in the security of able modems and methods.

[0010] These and other objects are provided by blocking data transfers from a cable system to a cable modem addressed to a host system coupled to the cable modem during a safe mode of operation and providing the data transferred from the cable system to the addressed host system during a normal mode of operation. Blocking the data transfers addressed to a host system during the safe mode of operation may improve the security of the cable modem. In particular, while the cable modem operates in the safe mode of operation, unauthorized users will not be able to gain access to the host system via the cable system. Moreover, other services provided via the cable modem can be available while the cable modem operates in the safe mode. For example, telephone or television services may be unaffected by the safe mode of operation. Subscribers may, therefore, leave the cable modem and host turned on to avoid a lengthy registration process while reducing the likelihood of unauthorized access to the host system.

[0011] In another aspect of the present invention, multiple host systems can be coupled to the cable modem. Accordingly, the cable modem can provide a safe mode of operation for each host system coupled to the cable modem. In particular, the data transfer can include an address portion, and each of the host systems can be identified by a respective host address. Data transfers can be addressed to a selected host system using the respective host address. Therefore, data transfers addressed to a first host system can be blocked when the cable modem operates in a first safe mode of operation for the first host system, and data transfers addressed to a second host system can be blocked when the cable modem operates in a second safe mode of operation for the second host system.

[0012] In a further aspect of the present invention, the cable modem can include a safe mode button wherein the safe mode of operation is invoked upon pushing the safe mode button. In another embodiment, the safe mode of operation can be invoked after the expiration of a timer that times an interval of inactivity at the host system. In a further embodiment, the cable modem can switch from the safe mode of operation to the normal mode of operation after activity is detected at the host system. In still another embodiment, the mode of operation is invoked on receipt of a command from the host system.

[0013] FIG. 1 is a block diagram of an embodiment of a cable system according to the present invention;

[0014] FIG. 2 is a block diagram of an embodiment of the cable modem 100 of FIG. 1; and

[0015] FIG. 3 is a flowchart that illustrates operations of a cable modem according to the present invention.

[0016] The present invention now will be described more fully hereinafter with reference to the accompanying drawings, in which preferred embodiments of the invention are shown. This invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. Like numbers refer to like elements throughout.

[0017] As will be appreciated by one of skill in the art, the present invention may be embodied as methods or devices. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects.

[0018] The present invention is also described using a flow chart illustration. It will be understood that each block of the flowchart illustration, and combinations of blocks in the flowchart illustration, can be implemented by computer program instructions. These program instructions may be provided to a processor within the cable modem, such that the instructions which execute on the processor create means for implementing the functions specified in the flowchart block or blocks. The computer program instructions may be executed by the processor to cause a series of operational steps to be performed by the processor to produce a computer implemented process such that the instructions which execute on the processor provide steps for implementing the functions specified in the flowchart block or blocks.

[0019] Accordingly, blocks of the flowchart illustration support combinations of means for performing the specified functions, combinations of steps for performing the specified functions and program instruction means for performing the specified functions. It will also be understood that each block of the flowchart illustration, and combinations of blocks in the flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or steps, or combinations of special purpose hardware and computer instructions. It will be understood that the term “coupled” as used herein to describe arrangements of devices includes arrangements wherein intervening devices are present between the coupled devices. For example, where a first device is described as coupled to a second device, the description will be understood to include other devices located between and coupled to the first and second devices.

[0020] FIG. 1 is a block diagram of an embodiment of a cable system according to the present invention. The cable system includes a Cable Modem Termination System or Cable Modem Terminal Server (CMTS) 140 and a plurality of cable modems 100. The CMTS 140 can provide services, such as television service, telephone service, and internet service, to subscribers of the cable system via cable modems 100 by transferring data over a cable 110, such as a coaxial cable. For example, a subscriber may access the Internet through the respective cable modem 100 from a host 125 such as a Personal Computer (PC).

[0021] The CMTS 140 manages the services provided to the respective subscribers in the cable system. For example, a first subscriber may receive television, telephone, and Internet services while a second subscriber may receive only Internet service. Moreover, different subscribers may receive a different quality of service. For example, a first subscriber may receive Internet service at relatively low bandwidth while a second subscriber may receive Internet service at relatively high bandwidth. Accordingly, the CMTS 140 transmits and receives data to and from the respective cable modems 100a-fat the rates associated with the respective subscribers. The CMTS 140 can also adjust parameters of the cable modems 100a-fused to transfer data such as phase timing, frequencies and power levels associated with the transfer of data between the respective cable modems 100a-fand the CMTS 140. For example, the CMTS 140 can monitor the timing and power levels of the data transferred from the respective cable modems 100a-fand instruct each cable modems 100a-fto adjust the timing and power level of the data transfer performed by the cable modems 100a-f.

[0022] In one embodiment, the Internet service provided by the CMTS 140 includes data transferred between the CMTS 140 and the cable modem 100avia the cable 110 at respective frequencies. For example, the subscriber may request information from the Internet, wherein data is transferred from the host 125 through the cable modem 100ato the CMTS 140 over the cable 110 at a first frequency. The CMTS 140 responds to the request for information by transferring the requested data from the CMTS 140 to the host 125 through the cable modem 100aover the cable 110 at a second frequency. In another embodiment, the request is transmitted via a telephone line which is not part of the cable system.

[0023] It will be understood by those of skill in the art, that the data transfers between the CMTS 140 and the cable modem 100amay be performed according to standards known in the art. For example, data transfers between the CMTS 140 and the cable modem 100amay be performed using a Time Division Multiple Access (TDMA) technique wherein data is transmitted and received over the cable 110 in predefined time-slots. Standards for the transfer of data in cable systems are discussed in the Data Over Cable System Interface Specification (DOCSIS).

[0024] When the cable modem 100ais turned on, the cable modem 100aperforms an initialization sequence wherein the cable modem 100aregisters with the cable system. In particular, the cable modem 100atransfers an identifier to the CMTS 140 that identifies the cable modem 100awithin the cable system. Accordingly, the CMTS 140 can communicate with the selected cable modem 100ausing the cable modem's respective identifier.

[0025] During registration, the CMTS 140 performs ranging of each of the cable modems 100a-fregistered to adjust for the propagation delay of that data transferred, to adjust the proper power level of the data transfer, and to determine the quality of service provided to the subscriber. If telephone service is provided to the subscriber via the cable system, the registration process can also include the determination of parameters for the telephone service.

[0026] After registration, the CMTS 140 provides services to the subscriber via the respective cable modem 100a. In operation, services are provided by data transfers between the CMTS 140 and the cable modem 100a. In particular, data is transferred from the CMTS 140 to a selected cable modem 100ausing the identifier that identifies the selected cable modem 100ain the cable system. In operation, the data transfer to the selected cable modem 100a, includes the identifier which matches the identifier of the selected cable modem 100a. For example, if the selected cable modem 100ahas an associated identifier of 800, a data transfer including an identifier of 800 will be accepted by the selected cable modem 100a. A data transfer can include information and/or a command directed to the selected cable modem 100a.

[0027] FIG. 2 is a block diagram of an embodiment of the cable modem 100 of FIG. 1. Data is transferred between the CMTS 140 and the cable modem 100 by a Media Access Controller (MAC) 105 coupled to the cable 110. The MAC 105 accepts data transfers from the CMTS 140 if the identifier included in the data transfer matches the identifier of the cable modem 100. The data transfer can include information intended for a first host 125, a second host 130, a telephone 107, the cable modem 100, or other device accessed via the cable modem 100. For example, the data transfer may include information intended for the first host 125 in response to a request made by the first host 125 or a range command for the cable modem 100 to transfer timed information to the CMTS 140. The functions provided by the MAC 105 may be provided by software running on processor 115 or by hardware and/or software separate from the processor. While the processor, media access controller, host interface controller, and telephone interface controller of FIG. 2 are illustrated as separate blocks, it will be understood that one or more of these portions of the modem or sub-portions thereof, can be implemented using combined hardware and/or software.

[0028] The data transfer may include an address specifying which device coupled to the cable modem 100 is the destination of the data transfer. For example, if the data transfer is intended for the second host 130, the address included in the data transfer identifies the second host 130 as the destination. Although not shown, the MAC 105 may be coupled to a Radio Frequency (RF) tuner that modulates and demodulates the data included in the data transfers. For example, data transfers to the CMTS 140 may be modulated and transferred over a first channel on the cable 110. The RF tuner demodulates the data transferred from the CMTS 140 over a second channel on the cable 110.

[0029] A processor 115 coordinates operations of the cable modem 100 within the cable system to provide the selected services to the subscriber. According to the present invention, data transfers to addressed hosts are blocked by the processor 115 during a safe mode of operation and not blocked by the processor 115 during a normal mode of operation. Moreover, blocking can be performed on a per host basis. For example, in one embodiment, data transfers addressed to the first host 125 are blocked while data transfers addressed to the second host 130 are received and provided to the second host 130. Moreover, data transfers including commands for the cable modem 100 or addressed to devices other than the hosts are unaffected by the safe mode of operation. For example, a ranging command issued to the cable modem 100 during safe mode of operation is accepted and responded to by the MAC 105.

[0030] In one embodiment, the safe or normal mode of operation is selected using software that maintains a safe mode flag that is set to one of a safe mode state or a normal state flag to indicate the selected mode of operation. For example, the flag can be set to the safe mode state to indicate the safe mode of operation and set to the normal mode state to indicate the normal mode of operation. In one embodiment, the mode of operation is selected by pressing a safe mode button 108 on the housing of the cable modem 100a. The safe mode button 108 can be a momentary switch that causes the processor 115 to toggle the mode of operation.

[0031] In another embodiment, the mode of operation is selected via a command issued by the host. For example, the subscriber may cause a command to be issued to the cable modem 100 whereupon the cable modem 100achanges the mode of operation. In still another embodiment, the mode of operation is selected based on a level of activity at the host. For example, the safe mode of operation can be selected after a period of inactivity at the first host 125 is observed over a predetermined time interval. The cable modem 100acan resume the normal mode of operation upon the resumption of activity at the first host 125. Accordingly, the mode of operation can be selected based on the subscriber's use of the host coupled to the cable modem 100a. Moreover, the cable modem 100aneed not be located near the subscriber for the mode of operation to be selected. For example, the cable modem 100 may be located in the basement of the subscriber's home while the host is located in the subscriber's home office.

[0032] A Host Interface Controller (HIC) 135 provides the data received by the processor 115 to the addressed host and provides data from the host to the processor 115 for transfer to the CMTS 140. The HIC 135 can be a controller suitable for interfacing to at least one host, such as an Ethernet controller, Universal Serial Bus (USB) or other type of interface known to those of skill in the art.

[0033] A telephone interface 116 provides telephone data from a telephone 107, such a Data Telephone Equipment (DTE), to the processor 115 and provides data transferred from the CMTS 140 to the telephone 107. As described above, data transfers to the telephone 107 from the CMTS 140 are unaffected by safe mode of operation.

[0034] FIG. 3 is a flowchart illustrating operations of a cable modem 100 according to the present invention. According to FIG. 3, the cable modem 100 performs initialization upon being turned on or reset (block 300). The processor 115 reads the stored value of the safe mode flag to determine which mode of operation is selected (block 305) and resets a host inactivity timer that indicates the elapsed time since host activity was last detected.

[0035] If the safe mode flag indicates that safe mode of operation is selected (block 310) for host 115, the processor determines if data transfers from the CMTS 140 to host 125 are currently enabled (block 320). If data transfers are not enabled (block 320) to the host 125, the processor 115 waits for host activity to be detected (block 340) at host 125. Otherwise, if data transfers are currently enabled (block 320) to host 125, the processor 115 disables data transfers (block 335) and then waits for host activity at host 125 to be detected (block 340).

[0036] The cable modem 100 continues to operate in the safe mode of operation until host activity is detected at host 125 whereupon the safe mode flag is cleared and the host inactivity timer is reset (block 345), or until a safe mode button is pushed (block 350) thereby changing the safe mode of operation to the normal mode of operation (block 360) and resetting the host inactivity timer.

[0037] When the normal mode of operation is enabled (block 310), due to the commencement of activity at the host 125 (block 345) or by pressing the safe mode button (block 360), the processor determines if data transfers from the CMTS 140 are currently disabled (block 315). If data transfers are disabled (block 315), the processor 115 enables data transfers and waits for the host inactivity timer to expire (block 330). Otherwise the processor 115 waits for the host inactivity timer to expire (block 330).

[0038] The cable modem 100 continues to operate in the normal mode of operation until the host inactivity timer expires (block 330) whereupon the safe mode flag is set, or until the safe mode button is pushed (block 350) thereby changing the normal mode of operation to safe mode of operation (block 360).

[0039] In the drawings and specification, there have been disclosed typical preferred embodiments of the invention and, although specific terms are employed, they are used in a generic and descriptive sense only and not for purposes of limitation, the scope of the invention being set forth in the following claims.