Cable Network Duplicate MAC Address Detection via DHCP

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Cable networks face challenges in detecting duplicate media access controller (MAC) addresses across multiple cable network devices, leading to unauthorized service access and billing discrepancies, especially in systems with multiple CMTSs and regional networks.

Innovation Solution

A method is implemented to detect duplicate MAC addresses by forming MAC address/gateway interface address tuples, storing historical data in a central or distributed database, and comparing these tuples to identify and manage duplicate addresses, allowing for remedial responses to prevent unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a single CMTS is used to detect duplicate MAC addresses, then detection reliability is improved within that single network, but detection capability deteriorates across multiple regional networks

Engineering Contradiction:

Improveduplicate MAC address detection reliabilityVSAvoidcross-network detection capability

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent combines multiple CMTS instances into a unified detection system by having them all communicate with a shared DHCP server. The DHCP server consolidates MAC address registration data from all CMTSs, enabling cross-network duplicate detection while maintaining the modular CMTS architecture.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The DHCP server acts as an intermediary between multiple CMTSs, receiving MAC address registrations from any CMTS and performing centralized duplicate detection. This mediator approach allows CMTSs to remain independent while achieving coordinated duplicate detection across the entire cable network.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If MAC addresses are used as sole identifiers for network authentication, then authentication simplicity is improved, but security deteriorates due to potential MAC address duplication

Engineering Contradiction:

Improveauthentication simplicityVSAvoidnetwork security

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The system implements feedback by continuously monitoring MAC address registrations through the DHCP server and immediately detecting duplicates. When a duplicate MAC address is detected, the system provides feedback by denying network access to the duplicate device, thus maintaining security while using simple MAC address identifiers.

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

The system performs preliminary duplicate detection before granting network access. The DHCP server checks the MAC address against previously registered addresses before assigning IP addresses or permitting network connectivity, preventing unauthorized access before it can occur.

Inventive Principle:

Principle #10Preliminary action

3Measurement precision

If historical MAC address data is stored in a centralized database, then duplicate detection accuracy is improved across all networks, but system complexity increases

Engineering Contradiction:

Improveduplicate MAC address detection accuracyVSAvoiddata storage and management complexity

Core Design Contradiction:

Measurement precisionVSDevice complexity

Solution Approach 1:

The DHCP server performs multiple functions: it assigns IP addresses, manages DHCP leases, and detects duplicate MAC addresses. By making the DHCP server universal and multi-functional, the patent avoids adding separate dedicated hardware for duplicate detection, thus improving detection accuracy without proportionally increasing system complexity.

Inventive Principle:

Principle #6Universality (Multi-functionality)

4Reliability

If real-time duplicate MAC address detection is implemented, then prevention of unauthorized service access is improved, but processing time and system load increase

Engineering Contradiction:

Improveunauthorized access preventionVSAvoiddetection processing time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs duplicate detection as a preliminary action during the DHCP address assignment process, before the device gains full network access. This timing ensures real-time prevention of unauthorized access while minimizing processing overhead by leveraging the existing DHCP handshake sequence.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS7512969B2System and method for detecting and reporting cable network devices with duplicate media access control addresses

Publication Date: 2009.03.31 TIME WARNER CABLE ENTERPRISES LLC

AI summary

The detection of devices with duplicate media access controller (MAC) addresses in a cable network. A cable network device (CND) having a MAC address is connected by the cable network to a cable modem termination system (CMTS) having a gateway interface address. A centralized storage of historical cable modem MAC address/giaddr tuple data is used to identify CNDs that report duplicate MAC addresses. The cable network tracks the CND MAC address/giaddr tuple data of all CND requests that it receives and stores the MAC address/giaddr tuple data into a datastore (such as a database). When a CND seeks to access the network, the cable network looks into the datastore to determine whether the CND MAC address of the CND has previously been stored with a different associated giaddr, which would imply that there are multiple CNDs attached to different CMTSs where the CNDs share the same MAC address. If such duplication is detected, an appropriate remedial response is taken.