Charter Communications Operating, LLC

Cheryl Warne

Christopher J Teague

Shane B Newberg

Timothy C Bleidorn

Venkata Ramana Divvi

Loay O Kreishan

Tim Bleidorn

The present invention relates to methods and apparatus for providing services in high density deployments using dynamic assignment Virtual Local Area Network (VLAN) stacking during client device authentication. An exemplary method includes the steps of: receiving wirelessly, by a first Access Point (AP), a first authentication request message including first user equipment device identification information from a first user equipment device; generating, by the first AP, a second message based on the first authentication request message, the second message including the first user equipment device identification information and location information for the first AP; transmitting, by first AP, the second message to a first server; and receiving in response to the second message, by the first AP, a third message, said third message including dynamically assigned stacked VLAN information including a first Service-VLAN Identifier and a first Customer-VLAN Identifier dynamically assigned to the first user equipment device.

Methods and apparatus for implementing VLAN stacking for seamless roaming in high density wireless networks

According to one configuration, a wireless access service provider selects and assigns a particular authentication option amongst multiple different authentication options to an entity such as a wireless access point or a sub-network supported by the wireless access point. When a communication device attempts to use the corresponding wireless access point provided by the wireless access service provider, a wireless access gateway receives information from the wireless access point indicating the particular authentication option assigned to authenticate the communication device. The wireless access gateway communicates the notification of the particular authentication option to an authentication manager, which provides the wireless access gateway with network address information indicating a captive portal in which to authenticate the communication device. The wireless access gateway then uses the network address information to redirect the communication device to the captive portal, which is then used to authenticate the communication device. to access the Internet.

Multi-option authentication portal implementation in a network environment

Systems, methods, and devices for performing targeted filtering of network traffic generated by user equipment (UE) devices connected to a customer premise equipment (CPE) device in a communication system that includes a distributed residential gateway. A network server may determine that the communication system includes a UE device that is compromised, misconfigured, or operating outside normal communication parameters, identify the UE device, determine an Internet protocol (IP) address or a media access control (MAC) address of the identified UE device, generate a quarantine request message that includes the IP address or the MAC address of the identified UE device in response to determining that the preconfigured virtual local area network access control list (VACL) on the CPE lists source IP addresses from which the CPE will filter outbound traffic, and send the generated quarantine request message to a bridged residential gateway (BRG) associated with the CPE device.

System and method for remotely filtering network traffic of a customer premise device

Systems, methods, and devices for instantiating both a private network service (PrNS) gateway virtual network function (VNF) and a public network service (PuNS) gateway VNF for a user equipment (UE) device that is associated with a PrNS and communicatively attached a public WiFi network allow users to access the same set of feature-rich network services (including layer 2 services) when connected through a public hotspot WiFi network as when connected through a home or local area network WiFi network.

System and method to deliver converged public and private network services over disparate access mediums within a single market

Automatic local gateway router backup of a network gateway router is disclosed. A local gateway router communicatively coupled to a local subnet determines that a network gateway router that serves as a default gateway router for the local subnet has stopped responding. The local gateway router and the network gateway router are configured to communicate with one another via a tunnel implemented by a tunneling protocol. In response to determining that the network gateway router has stopped responding, automatically switching, by the local gateway router, from a tunneling mode to a routing mode, such that the local gateway router becomes the default gateway router for the local subnet.

Automatic local gateway router backup of a network gateway router

Systems, methods, and devices for performing targeted filtering of network traffic generated by user equipment (UE) devices connected to a customer premise device (CPE) in a communication system that includes a distributed residential gateway. A broadband network gateway may be configured to identify a UE device in a local area network (LAN) associated with the CPE that is compromised, misconfigured, or operating outside normal communication parameters. The broadband network gateway may send a dynamic host configuration protocol (DHCP) force renew message via a wide area network (WAN) to the identified UE device in the LAN, generate a DHCP offer message that presents a new Internet protocol (IP) address assignment that is within a range of IP addresses included in a layeraccess list, and send the generated DHCP offer message to the UE device to quarantine the UE device.

Growing community of inventors

Lone Tree, CO, United States of America

Cheryl Warne