Home-networking

CA 02403709 2004-12-23

76886-56

HOME-NETWORKING

TECHNICAL FIELD

This invention relates to connecting multiple home-networked client devices to a host system.

₅ BACKGROUND

An increasing number of households have more than one personal computing device.

As the number of personal computing devices within the home increases, there is a need and consumer demand for interconnectivity among these devices and for connectivity between these devices and host systems located outside of the home. For instance, in a household that includes more than one personal computing device, it may be desirable to enable connection between each device and an Internet Service Provider (ISP). It is possible to simply network several devices together in the home to enable interconnectivity among the devices and to enable a connection to outside host systems. However, with die devices networked together, the host system may recognize the entire network as a single device rather than recognizing the individual devices within the network or users of those individual devices.

Failing to recognize and thus distinguish the individual devices or individual users of the devices may prevent die host system from enforcing or enabling preferences and features otherwise distinguishable among individual devices or users, such as parental access controls. Similarly, without recognition of or distinction among devices and their users, die individual client devices and users of the client devices may not be able to access and receive back from the host certain host-maintained preferences, such as personal identification settings, personal web pages, account information, wallet information, and financial information.

CA 02403709 2004-12-23

76886-56

SUMMARY

In one aspect of the invention, there is provided a system for connecting multiple home-networked client devices to a host system, wherein the host system assigns independent Internet addresses to the home-networked client devices, the system comprising: a home gateway device which includes a communication device to communicate with the host system over a single communication tunnel established between the home gateway device and the host system; and multiple home-networked client devices connected to the home gateway device via a network and that communicate with the host system through the home gateway device over the single communication tunnel, wherein the system is configured to enable the host system to establish individual communication sessions with the multiple home-networked client devices over the single communication tunnel and to assign independent Internet addresses to the multiple homenetworked client devices.

In a second aspect, there is provided a method for connecting multiple home-networked client devices to a host system, wherein the host system assigns independent Internet addresses to the home-networked client devices, the method comprising: using the home gateway device to receive a request from at least one home-networked client device to communicate with the host system, wherein the home-networked client device is connected to the home gateway device via a network; using the home gateway device to establish communications with the host system over a single communication tunnel; using the home gateway device to establish with the host system an individual communication session over the single communication tunnel, wherein the individual communication session is based on an independent

CA 02403709 2004-12-23

76886-56

Internet address assigned by the host system to the homenetworked client device that requested to communicate with the host system; and using the home gateway device to process communications between the home-networked client device and the host system.

In a third aspect, there is provided a method for connecting multiple home-networked client devices to a host system, wherein the host system assigns independent Internet addresses to the home-networked client devices, the method comprising: using the host system to receive a request for an individual communication session with a home-networked client device; using the host system to establish communications with the home gateway device over a single communication tunnel; using the host system to establish with the home gateway device the individual communication session over the single communication tunnel, wherein establishing the individual communication session includes assigning by the host system an independent Internet address to the home-networked client device that requested to communicate with the host system; and communicating between the host system and the home-networked client device through the home gateway device over the individual communication session.

In one general embodiment, home-networked client devices are connected to a host system that assigns independent Internet addresses to the home-networked client devices using a home gateway device that is connected to the home-networked client devices through a network. The home gateway device, which may be physically located in a personal residence, generally includes a communication device to communicate with the host system

2a

CA 02403709 2004-12-23

76886-56 over a single communication tunnel established between the home gateway device and the host system. The home-networked client devices communicate with the host system through the home gateway device over the single communication tunnel. The system configuration enables the host system to establish individual communication sessions with the homenetworked client devices over the single communication tunnel and to assign independent Internet addresses to the home-networked client devices.

Implementations may include one or more of the following features. For example, the home gateway device and the home-networked client devices may be physically located in a personal residence. The personal residence may include a single family dwelling. The home-networked client devices may include wireless client devices that may he connected to the home gateway device through a wireless network such that the wireless client devices may operate outside of the personal residence.

The home-networked client devices may establish simultaneous individual communication sessions with the host system over the single communication tunnel. Each home-networked client device may be assigned an independent Internet address by the host system, which may include an Internet Service Provider.

The home gateway device may communicate with the home-networked client devices using a first protocol and may communicate with the host system using a second protocol. The first protocol and the second protocol may be the same protocol, or the second protocol may differ from the first protocol.

The home gateway device may include one or more modules that are structured and arranged to convert between the first protocol and the second protocol. The first protocol may include PPPoE and the second protocol may include L2TP. The home-networked client devices may be PPP enabled. The home gateway device may emulate a PPPoE access concentrator and an L2TP access concentrator. The communication device may include a modem, such as a cable modem, a satellite modem, or a DSL modem.

2b

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559

The home-networked client devices may include client devices having computer software that enables the client devices to interface with the home gateway and to communicate with the host system through the home gateway device, such that the host system is able to recognize independent client devices. The independent client devices may be recognized by the host system through the use of unique identifiers assigned to each of the client devices by the host system during the established communication session. The unique identifiers may be unique to the client devices and/or to users of the client devices. A unique identifier may include an independent Internet address, and also may include a unique identifier for a user of a client device combined with an independent Internet address assigned to the client device. In addition, a unique identifier may include a screen name for a user of the client devices.

When the user has a unique identifier that is combined with the independent Internet address assigned by the host system to the client device, the user may be enabled to access individual information maintained by the host system for that particular user. Additionally, the host system may be enabled to enforce host-based parental or other controls. Individual information maintained by the host system may include wallet information, calendar information, and personalized web page information.

The home gateway device may include a personal computer and/or a server. The network between the home gateway device and the home-networked client devices may include a wired network, a wireless network, and/or any combination of a wired and a wireless network. The network may include an Ethernet network.

In one implementation, the home gateway device may include a dynamic host configuration protocol module and an L2TP access concentrator. The home-networked client devices may communicate with the home gateway device using the dynamic host configuration protocol module. The home gateway device and the home-networked client devices may communicate over the network using DHCP, and the home-networked client devices may be assigned a single address that is used in communications with the home gateway device and the host system. The single communication tunnel established between the home gateway device and the host system may be established over a broadband network. The dynamic host configuration module may be configured to facilitate communications between the host system and the home-networked client devices to enable the host system to

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559 enforce host-based parental controls. The assignment of unique addresses to the homenetworked client devices may be performed upon bootup of the client devices.

In one implementation, the home gateway device may include a network address translation module. The network address translation module may include a port-based or an address-based network address translation module. The home gateway device may communicate with the home-networked client devices using TCP/IP, and with the host system using L2TP. The network address translation module may interface with the homenetworked client devices and the host system to route communications between the host system to the home-networked client devices by translating independent Internet addresses assigned by the host system to the home-networked client devices and local addresses belonging to the home-networked client devices that are used on the network between the home gateway device and the home-networked client devices. The multiple home-networked client devices are typically recognized by the host system as independent client devices through the use of unique identifiers.

These general and specific aspects may be implemented using a system, a method, or a computer program, or any combination of systems, methods, and computer programs.

Other features and advantages will be apparent from the description and drawings, and from the claims.

DESCRIPTION OF DRAWINGS Fig. 1 is a block diagram of a home networking system.

Fig. 2 is a block diagram of a client device of the system of Fig. 1.

Fig. 3 is a block diagram of a host system of the system of Fig. 1.

Fig. 4 is a block diagram of an implementation of the home networking system of

Fig· 1.

Fig. 5 is a block diagram of the home networking system of Fig. 1 illustrating one protocol implementation.

Fig. 6 is a block diagram of the components which may be included in a client device of the system of Fig. 1.

Fig. 7 is block diagram of the components which may be included in a home gateway device of the system of Fig. 1.

Fig. 8 is a more detailed block diagram of the home gateway device of Fig. 7.

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559

Fig. 9a is a flow chart of a process used to enable a home network.

Fig. 9b is a flow chart of a process used to enable a home network.

Figs. 10a-lOd are block diagrams of a protocol enabling communication between the components of the home networking system.

Fig. 11 is a block diagram of the home gateway device including a NAT module.

Fig. 12 is a block diagram of the home networking system using a NAT module.

Fig. 13 is a block diagram of the home gateway device including a DHCP module.

Fig. 14 is a flow chart of a process used to enable a home network.

Like reference symbols in the various drawings indicate like elements.

DETAILED DESCRIPTION

Referring to Fig. 1, a home networking system 100 typically includes multiple homenetworked client devices 105 (client devices) connected through a network 110 to each other and to a home gateway device 115. The home gateway device 115 typically connects to the host system 130 through a communication device 120 over communication links 125. The home networking system 100 enables the client devices 105 to communicate with the host system 130 through the home gateway device 115 using the single communication device 120. The client devices 105, the home gateway device 115, and the communication device 120 may be physically located in a personal residence, as indicated by the dashed lines shown in Fig. 1.

The home networking system 100 enables the host system 130 to assign unique identifiers (e.g., independent Internet addresses) to each of the client devices 105 through the home gateway device 115 over a single communication link 125 established between the home gateway device 115 and the host system 130. The home networking system 100 also enables the client devices 105 to access information maintained by the host system 130 for a particular client device 105 or a particular individual user of the client devices 105. hi addition, the home networking system 100 enables the host system 130 to maintain and enforce individual preferences associated with a particular client device 105 or a user of the client devices 105 through using the host-assigned unique identifiers and/or some combination of the host-assigned unique identifiers with other identifiers (e.g., login name, account number, screen name, and password).

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559

The client devices 105 and the home gateway device 115 typically are located in a physical place that enables the home gateway device 115 to network with the client devices 105. In one implementation, for example, the home gateway device 115 is physically located in a personal residence (e.g., a single-family dwelling, a house, a townhouse, an apartment, or a condominium). The client devices 105 may be physically located such that communications over the network 110 with the home gateway device 115 are enabled and maintained. For instance, when the home gateway device 115 is physically located in a personal residence, the client devices 105 also may be physically located in the personal residence. However, the location of the home gateway device 115 in the personal residence does not preclude one or more of the client devices 105 from being networked to the home gateway device 115 from a remote location. Nor does it preclude use of one or more of the client devices 105 from outside of the personal residence or communication by those devices with the host system 130 through the home gateway device 115. For instance, the client devices 105 may include one or more portable computing devices that may be taken outside of the personal residence and still remain connected to the home gateway device 115 located within the personal residence through a wireless network 110.

The client devices 105 may include one or more general-purpose computers (e.g., personal computers), one or more special-purpose computers (e.g., devices specifically programmed to communicate with tire home gateway device 115 and/or the host system 130), or a combination of one or more general-purpose computers and one or more special-purpose computers. Other examples of client devices 105 include a workstation, a server, an appliance (e.g., a refrigerator, a microwave, and an oven), an intelligent household device (e.g., a thermostat, a security system, an HVAC system, and a stereo system), a device, a component, other physical or virtual equipment, or some combination of these elements capable of responding to and executing instructions within the system architecture.

Referring to Fig. 2, components of a client device 205 are shown to illustrate one possible implementation of the client devices 105 of Fig. 1. The client device 205 may include a general-purpose computer 240 having an internal or external storage 242 for storing data and programs such as an operating system 244 (e.g., DOS, Windows™, Windows 95™, Windows 98™, Windows 2000™, WindowsNT™, OS\2 and Linux) and one or more application programs. Examples of application programs include authoring applications 246 (e.g., wordprocessing, database programs, spreadsheet programs, and graphic programs)

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559 capable of generating documents or other electronic content; client applications 248 (e.g:, AOL client, COMPUSERVE client, AIM client, AOL TV client, and ISP client) capable of communicating with other computer users, accessing various computer resources, and viewing, creating, or otherwise manipulating electronic content; and browser applications 250 (e.g., Netscape's Navigator and Microsoft's Internet Explorer) capable of rendering standard Internet content.

The general-purpose computer 240 also includes a central processing unit (CPU) 252 for executing instructions in response to commands from a client controller. In one implementation, the client controller includes one or more of the application programs installed on the internal or external storage 242 of the general-purpose computer 240. hi another implementation, the client controller includes application programs externally stored in and executed by one or more devices external to the general-purpose computer 240.

The general-purpose computer 240 typically will include a communication device 254 for sending and receiving data. One example of the communication device 254 is a modem. Other examples include a transceiver, a set-top box, a communication card, an xDSL modem (e.g., ADSL, CDSL, DSL Lite, HDSL, IDSL, RADSL, SDSL, UDSL, and VDSL), a cable modem, a satellite modem, a satellite dish, and an antenna, or another network adapter capable of transmitting and receiving data over a network through a wired or wireless data pathway.

In addition to or as an alternative to the communication device 254, the generalpurpose computer 240 may include a network interface card (NIC) 256, which may provide a dedicated, full-time connection to a network. Examples of NIC types include ISA, EISA, PCMCIA, PCI, Sbus, MCA, NuBus, and USB, which may support various types of networks, buses and connectivities.

The general-purpose computer 240 also may include a television (TV) tuner 258 for receiving television programming in the form of broadcast, satellite, and/or capable TV signals. As a result, the client devices 205 can selectively and/or simultaneously display network content received by the communication device 254 and television programming content received by the TV tuner 258.

The general-purpose computer typically will include an input/output interface 260 to enable a wired or wireless connection to various peripheral devices. Examples of peripheral devices include, but are not limited to, a mouse 262, a mobile phone 264, a personal digital

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559 assistant (PDA) 266, a keyboard 268, a display monitor 270 with or without a touch screen input, and/or a remote control 272 for receiving information from and rendering information to subscribers. Other examples may include voice recognition and synthesis devices (not shown).

Although devices such as a mobile telephone 264, a PDA 266, and a TV remote control 272 may be considered peripheral with respect to the general-pufpose computer 240, in another implementation, such devices may themselves include the functionality of the general-purpose computer and may operate as a stand-alone client device 205. For example, the mobile phone 264 or the PDA 266 may include computing and networking capabilities, and may function as the client device 205.

Referring again to Fig. 1, the client devices 105 typically are connected to one another and to the home gateway device 115 through a network 110, such as a Local Area Network (LAN). The network 110 may include a wired and/or a wireless network. For instance, one or more of the client devices 105 may be connected to the home gateway device 115 via a wired network 110 and, at the same time, one or more other client devices 105 may be connected to the home gateway device 115 via a wireless network 110.

Examples of types of networks 110 include a token ring, an Ethernet, a Fast Ethernet, a Gigabit Ethernet, HomePNA, and powerline networking.

As mentioned above, the client devices 105 access and communicate with the host system 130 through the home gateway device 115. For example, the home gateway device 115 may include a general-purpose computer (e.g., personal computer), or a special-purpose computer. Other examples ofthe home gateway device 115 may include a workstation, a server, a device, a component, other physical or virtual equipment, or some combination thereof capable of responding to and executing instructions in the manner defined to function as the home gateway device.

The home gateway device 115 may include internal or external storage for storing data and programs as described above with respect to the client devices 105, such as an operating system, application programs, client applications, and browser applications. In addition to these programs and applications, the home gateway device 115 may include one or more special modules and programs (e.g., a Network Address Translation module, a PPPoE Access Concentrator module, an L2TP Access Concentrator module, a dialer module, and a DHCP module) or combinations of these modules and programs designed to allow the

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559 home gateway device 115 to communicate with the client devices 105 over the network 110 and to facilitate communications between the client devices 105 with the host system 130 through the home gateway device 115. Additionally or alternatively, the home gateway device 115 may be embodied as part of a client device 105 with the functionality to perform as the home gateway device 115.

The home gateway device 115 typically includes or has access to a communication device 120. Examples of the communication device 120 may include the communication devices described above with respect to the communication device 254 in Fig. 2.

Additionally or alternatively, the home gateway device 115 typically includes a network interface card such as described above with respect to the network interface card 256 in Fig.

2.

The home gateway device 115 typically communicates with the host system 130 through communication links 125. The communication linlcs 125 typically include a delivery network making a direct or indirect communication between the home gateway device 115 and the host system 130, irrespective of physical separation. Examples of a delivery network include the Internet, the World Wide Web, WANs, LANs, analog or digital wired and wireless telephone networks (e.g., PSTN, ISDN, and xDSL), radio, television, cable, satellite, and/or any other delivery mechanism for carrying data.

Referring to Fig. 3, components of a host system 330 are shown to illustrate one possible implementation of the host system 130 of Fig. 1. The host system 330 typically includes one or more host devices 360. The host devices 360 may include hardware components and/or software components, such as one or more general-purpose computers (e.g., personal computers), one or more special-purpose computers (e.g., devices specifically programmed to communicate with the home gateway device 115 and/or the client devices 105), or a combination of one or more general-purpose computers and one or more specialpurpose computers. Other examples of host devices 360 include a workstation, a server, a component, a device, other physical or virtual equipment, or some combination of these elements that is capable of responding to and executing instructions within the system architecture.

More specifically, a host device 360 within the host system 330 may include a login server for enabling access by subscribers and routing communications between other systems (e.g., client devices 105 and the home gateway device 115 from Fig. 1) and other elements of

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559 the host system 330. The host system 330 also may include various host complexes such as an OSP (Online Service Provider) host complex 370 and an IM (Instant Messaging) host complex 380. To enable access to these host complexes by subscribers, the client devices (e.g., 105 from Fig. 1) and the home gateway device (e.g., 115 from Fig. 1) may include communication software such as an OSP client application and an IM client application. The OSP and IM communication software applications are designed to facilitate the subscriber's interactions with the respective services and, in particular, may provide access to some or all of the services available within the respective host complexes. For example, Instant Messaging allows a subscriber to use the IM client application to view whether particular subscribers (buddies) are online, exchange instant messages with particular· subscribers, participate in group chat rooms, trade files such as pictures, invitations or documents, find other subscribers with similar interests, get customized news and stock quotes, and search the Web.

Typically, the OSP host complex 370 supports different services, such as email, discussion groups, chat, news services, and Internet access. The OSP host complex 370 generally is designed with an architecture that enables the machines within the OSP host complex 370 to communicate with each other, and to employ certain protocols (i.e., standards, formats, conventions, rules, and structures) to enable the transfer of data. The OSP host complex 370 ordinarily employs one or more OSP protocols and custom dialing engines to enable access by selected client applications. The OSP host complex 370 may define one or more specific protocols for each service based on a common, underlying proprietary protocol.

The IM host complex 380 may be independent of the OSP host complex 370, and may support instant messaging services irrespective of a subscriber's network or Internet access. Thus, the IM host complex 380 may be configured to allow subscribers to send and receive instant messages, whether or not they have access to any particular ISP. The IM host complex 380 may support associated services, such as administrative matters, advertising, directory services, chat, and interest groups related to the instant messaging. The IM host complex 380 has an architecture that enables all of the machines within the IM host complex to communicate with each other. To transfer data, the IM host complex 380 employs one or more standard or exclusive IM protocols.

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559

The host system 330 may include one or more gateways that comiect and therefore link complexes, such as the OSP host complex gateway 375 and the IM host complex gateway 385. The OSP host complex gateway 375 and the IM host complex gateway 385 may directly or indirectly link the OSP host complex 370 with the IM host complex 380 through a wired or wireless pathway. Ordinarily, when used to facilitate a link between complexes, the OSP host complex gateway 375 and the EM host complex gateway 385 are privy to information regarding a protocol anticipated by a destination complex, which enables any necessary protocol conversion to be performed incident to the transfer of data from one complex to another. For instance, the OSP host complex 370 and IM host complex 380 may use different protocols such that transferring data between the complexes requires protocol conversion by or at the request of the OSP host complex gateway 375 and/or the IM host complex gateway 385.

In one implementation, the host system 130 may maintain information related to the client devices 105 or to a user of the client devices 105. For example, such information may include parental control settings, wallet settings, personal web pages, instant messaging user lists, and any other type of personal settings or features or information associated with a particular client device 105 or a user of client device 105. In this implementation, it may be important to enable recognition of or distinction between different client devices 105 and/or users accessing the host system so that the stored information is not rendered useless, or worse yet, inaccurately applied.

Fig. 4 shows several implementations and possible combinations of devices and systems used within the home networking system 420. The client devices 405, the network 410, the home gateway device 415, the communication devices 420, the communication links 425, and the host system 430 typically correspond to their respective elements 105, 110, 115, 120,125, and 130 illustrated in Fig. 1. The elements in Fig. 4, which have corresponding elements in Fig. 1, are not meant to limit the scope of the elements previously described with respect to Fig. 1, but instead are merely some possible examples of these elements.

Examples of client devices 405 may include, but are not limited to, a personal computer with a Windows™ operating system 405a, a personal computer with a Linux™ based operating system 405b, a Macintosh™ personal computer 405c, a television set-top box 405d, a PDA 405e, and an intelligent home appliance 405f. As described above with

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559 respect to Fig. 1, the client devices 405 are connected through a network 410 to the home gateway device 415.

The home gateway device 415 typically includes a communication device 420. Examples of the communication device 420 may include a satellite modem 420a, an analog modem 420b, a cable modem 420c, and an xDSL modem 420d. The home gateway device 415 uses the communication device 420 to communicate through communication links 425 with the host system 430. The communication links 425 may include various types of communication delivery systems that correspond to the type of communication device 420 being used. For example, if the home gateway device 415 includes a satellite modem 420a, then the communications from the client devices 405 and the home gateway device 415 may be delivered to the host system 430 using a satellite dish 425a and a satellite 425b. The analog modem 420b may use one of several communications links 425, such as the satellite dish 425a and satellite 425b, the Plain Old Telephone Service (POTS) 425c, and the Cable Modem Termination System (CMTS) 425d. The cable modem 420c typically uses the

CMTS 425d to deliver and receive communications from the host system 430. The xDSL modem 420d typically delivers and receives communications with the host system 430 through a Digital Subscriber Line Access Multiplexer (DSLAM) 425e and an Asynchronous Transfer Mode (ATM) network 425f.

The home networking system 400 may use various protocols to communicate between the client devices 405 and the home gateway device 415 and between the home gateway device 415 and the host system 430. For example, a first protocol may be used to communicate between the client devices 405 and the home gateway device 415, and a second protocol may be used to communicate between the home gateway device 415 and the host system 430. In one implementation, the first protocol and the second protocol may be the same. In another implementation, the first protocol and the second protocol may be different. The home gateway device 415 may include different hardware and/or software modules to implement different home networking system protocols. Various implementations and alternatives to the home networking system architecture are discussed below.

PPPoE

Referring to Fig. 5, the elements 505, 510, 515, 520, 525, and 530 typically correspond to the respective elements 105, 110, 115, 120,125, and 130 ofFig. 1 and to

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559 respective elements 405,410,415,420,425, and 430 of Fig. 4. In one implementation, the client devices 505 communicate through the network 510 with the home gateway device 515 using Point-to-Point Protocol over Ethernet (PPPoE). The home gateway device 515 communicates with the host system 530 through the communication device 520 over communication links 525. For communications between the client devices 505 and the host system 530, the home gateway device 515 strips off the ”oE” header from the PPPoE traffic used by the client devices 505, encapsulates the PPP traffic in Layer Two Tunneling Protocol (L2TP), then encapsulates the L2TP traffic in User Datagram Protocol (UDP), and passes on the encapsulated PPP communications to the host system 530. This architecture enables multiple client devices 505 to communicate simultaneously with the host system 530 over a single communication tunnel established between the home gateway device 515 and the host system 530 while allowing the host system 530 to recognize independent Internet addresses with respect to each of the client devices 505. This architecture also enables a one-to-one mapping of a PPPoE session to an L2TP session.

Referring to Fig. 6, in one implementation, the client device 605 may include one or more hardware and/or software modules, such as, for example, a client application 602, a TCP/IP interface module 604, a TCP/IP protocol implementation module 606, a PPP protocol implementation module 608, a PPP WAN driver SHIM module 612, a PPPoE protocol module 613, a real-time operating system (OS) 614, a protocol interface module 616, a standard Ethernet device driver interface module 618, and a standard Ethernet hardware adapter 620. The client device may use one or more of these modules to facilitate communications with other devices (e.g., the home gateway device 515 and the host system 530 through the home gateway device 515 from Fig. 5).

For example, the client application 602 may generate a request to initiate communications with the home gateway device (e.g., 515 from Fig. 5) and send outbound traffic (e.g., TCP/IP traffic going from the client device 605 to the home gateway device 515 from Fig. 5). The request may pass from the client application 602 through the TCP/IP interface module 604, which may allow for simultaneous support of multiple protocols between the client application level (e.g., User mode or Ring 3) and an operating system level (e.g., Kernel mode or Ring 0), and ultimately to the TCP/IP protocol implementation module 606. The TCP/IP protocol implementation module 606 typically operates in conjunction with the PPP protocol implementation module 608 and the PPP WAN driver

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559

SHIM module 612 to prepare and encapsulate the traffic in a protocol (e.g., encapsulate the TCP/IP traffic in PPP).

The real-time OS 614 may manage real-time interprocess communications between various protocols (e.g., between PPPoE and L2TP and between user and Kernel mode modules), including buffer management and task scheduling. The PPPoE protocol module 613 may add a header (e.g., an Ethernet header and a PPPoE header) to the traffic (e.g., TCP/IP traffic encapsulated in PPP) to enable the home gateway device (e.g., 515 from Fig.

5) to identify the particular client device 605 from which the traffic is originating. Thus, the traffic may be considered PPPoE. More specifically, in one example, the header may include o address information learned during the PPPoE discovery stage, which is discussed in more detail below, and may append the oE header to the PPP encapsulated traffic. The real-time OS 614 typically calls the protocol interface module 616, which is typically bound to a Network Interface Card (NIC) (e.g., 256 from Fig. 2) and allows for the exchange of traffic between the NIC and the PPPoE protocol module 613. The traffic then is typically communicated to the home gateway device using the NIC, the standard Ethernet driver module 618, and the Ethernet adapter 620.

For inbound traffic (e.g., PPP traffic coming from the home gateway device to the client device 605), received traffic from the standard Ethernet driver module 618 is indicated to the protocol interface module 616. The PPPoE protocol module 613 receives the traffic from the protocol interface module 616 via the real-time OS 614. The PPPoE protocol module 613 strips off any header from the traffic (e.g., removing the oE header from the PPPoE traffic) and passes the traffic to the PPP WAN driver SHIM module 612. The PPP WAN driver SHIM module 612 then passes the traffic to the PPP protocol implementation module 608 for delivery to the TCP/IP protocol implementation module 606. The client application 602 receives traffic from the TCP/IP implementation module 606 via the TCP/IP interface module 604.

Referring to Fig. 7, in one implementation, the home gateway device 715 may include a PPPoE access concentrator 717, an L2TP access concentrator 719, and a dialer module 721. The home gateway device 715 uses L2TP to tunnel the PPP traffic from each client PPPoE session to the host system. A single L2TP tunnel is established between the home gateway device and the host system to carry multiple PPP sessions because L2TP provides a method to multiplex multiple PPP sessions within a single tunnel (e.g., multiple L2TP sessions).

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559

Thus, in this implementation, a first protocol is used between the client devices and the home gateway device 715, and a second protocol is used between the home gateway device 715 and the host system to enable individual communication sessions between the client devices and the host system. In particular, the first protocol includes PPPoE and the second protocol includes L2TP. The dialer module 721 may be configured with a unique identifier (e.g., a login name combined with a password) that enables the host system to identify the home gateway device 715.

Fig. 8 shows a more detailed block diagram of an exemplary home gateway device 815. In this implementation, the PPPoE access concentrator 817 and the L2TP access concentrator 819 include hardware and/or software which may be operated as user mode/Ring 3 applications.

The home gateway device 815 includes the PPPoE access concentrator 817 that enables communications with the client devices (e.g., 505 from Fig. 5). The PPPoE access concentrator 817 is capable of handling multiple, simultaneous PPP sessions with the PPPoE enabled client devices 505. Enabling each client device with its own PPP session permits the client device to receive its own unique identifier from the host system. The unique identifier may include, for example, an Internet address.

When the home gateway device 815 communicates with the client devices 505, a standard ethemet driver 823 is used to exchange Ethernet frames between the home gateway device 815 and the client devices 505. The home gateway device 815 employs a standard protocol driver 823 that, in conjunction with the real-time operating system (OS) 825, allows the exchange of Ethemet traffic from the client devices 505 with the PPPoE access concentrator 817. The protocol driver 823 binds to Ethemet driver 827 to facilitate the exchange of traffic between the home gateway device 815 and the PPPoE access concentrator 817. The real-time OS 825 typically provides the interprocess communication capability between protocol driver 823 and PPPoE access concentrator 817. When the home gateway device includes more than one Ethemet driver 827, the PPPoE access concentrator 817 uses the PPPoE discovery phase to identify which particular Ethemet driver 823 will be used to exchange traffic with a particular client device 505.

The L2TP access concentrator module 819 within the home gateway device 815 uses

UDP over IP to exchange L2TP traffic with the host system (e.g., 530 from Fig. 5) using the standard TCP/IP module 829. When connectivity needs to be established with the host

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559 system 530, the dialer module 821 establishes connectivity to the host system 530 prior to the exchange of L2TP traffic between the L2TP access concentrator module 819 and the host system 530. Additionally, the dialer module 821 may calculate the host system 530 address, allowing the home gateway device 815 the potential to add a static route to the host system

530 in the home gateway device 815 routing table. This may prevent a new default route from interfering with the tunnel traffic between the home gateway device 815 and the host system 530. The real-time OS 825 may be used to provide interprocess communications between the PPPoE access concentrator 817 and the L2TP access concentrator module 819. Additionally or alternatively, the PPPoE access concentrator 817 and the L2TP access concentrator module 819 may be combined within the same module, as indicated by the dashed lines 840.

Fig. 9a illustrates one implementation of a process for enabling communications between a client device and the host system, through the home gateway device. The client device typically initiates an action that indicates its desire to communicate with the host system, for example, by launching an application (e.g., a browser or a client application) or by sending a command and/or a request.

It is determined whether communications are established between the client device and the home gateway device (step 901a). If communications are not already established between the client device and the home gateway device (step 901a), then the client device and the home gateway device establish communications (steps 901-905). The client device and the home gateway device may, for example, establish communications using PPPoE (steps 901-905).

Once communications are established between the client device and the home gateway device (steps 901-905) or if communications between the client device and the home gateway device were already established (step 901a), then it is determined whether communications are established between the home gateway device and the host system (step 907a). If communications are not already established between the home gateway device and the host system (step 907a), then the home gateway device activates the home gateway dialer module (steps 907 and 909). The home gateway device then establishes communications with the host using the home gateway dialer module (steps 911-915). The home gateway device may, for example, establish communications using L2TP by setting up an L2TP tunnel over which multiple, individual L2TP sessions may be .established.

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559

Once communications are established between the home gateway device and the host system (steps 911-915) or if communications between the home gateway device and the host system were already established (step 907a), then the home gateway device establishes a communication session for the client device to communicate with the host system (steps 917925). The communication session may, for example, include an L2TP session created over the established L2TP tunnel. Thus, the client device and the host system are enabled to communicate over the established communication session (step 927).

More particularly, one specific implementation of the process shown by Fig. 9a is described with respect to Fig. 9b. Referring to Fig. 9b, a client device initiates a communication with the host system by initiating the PPPoE discovery phase. Discovery starts with a broadcast of the PPPoE Active Discovery Initiation (PADI) packet from the client device to the home gateway device (step 901). If the gateway device is present and the server software is running, the home gateway device responds with a directed ethemet frame containing a PPPoE Active Discovery Offer (PADO) packet (step 903). The client device typically responds to the PADO packet with a PPPoE Active Discovery Request (PADR) packet (i.e., a directed ethernet frame using the server's media access control (MAC) address as the destination address) (step 905).

When the home gateway device receives the PADR packet, an L2TP tunnel is needed to the host system to enable the client device to begin sending PPP traffic, which will end up being tunneled through the L2TP session to the host system. The L2TP tunnel typically is created between the home gateway device and an LNS, which is a component of the host system. When the home gateway device receives the PADR packet, a dialer module within the home gateway device is triggered to send a command to establish a connection with the host system (step 907). The connection type is based on the client device's configuration of the configurable home gateway dialer. For example, the home gateway dialer may support various types of connections such as, dial-up modem, xDSL, cable, satellite, and any other type of connection. One process of establishing connections using or through the home gateway dialer is discussed further below.

Once the dialer is connected (step 909), the home gateway device begins sending messages to the host system to create the L2TP tunnel. The process of creating the L2TP tunnel begins with the Start-Control-Request (SCCRQ) message (step 911). The LNS responds with a Start-Control-Connection-Reply (SCCRP) message (step 913). The SCCRP

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559 message indicates the LNS is able to bring up and establish the L2TP tunnel. The tunnel establishment is complete when the home gateway device sends a Start-Control-ConnectionConnected (SCCCN) message (step 915).

At or about the same time that the home gateway device sends the SCCCN message, the home gateway device also sends a PPPoE Active Discovery Session-confirmation (PADS) message to the client device (step 917). The PADS message indicates to the client device that it may begin sending PPP traffic to the host system. When the home gateway device receives PPP traffic from the client device (step 919), the home gateway device opens an L2TP session across the L2TP tunnel that was just created between the home gateway o device and the host system.

The L2TP session is initiated when the home gateway device sends an incoming call request (ICRQ) (step 921). The LNS within the host system responds with an incoming call reply (ICRP) (step 923). Finally, the home gateway device completes the handshake by sending an incoming call connected (ICCN) message (step 925). At that point, PPP traffic is tunneled by the home gateway device for an end-to-end exchange between the client device and the host system (step 927). Thus, PPPoE is used to deliver the PPP traffic from the client device to the home gateway device. More particularly, the PPPoE traffic is sent to the PPPoE access concentrator (817 from Fig. 8) within the home gateway device (815 from Fig. 8). The home gateway device 815 strips off the PPPoE header leaving the PPP traffic. The home gateway device 815 then replaces the PPPoE header with a valid L2TP session header so that the original PPP traffic is sent in the L2TP tunnel to the host system via the L2TP access concentrator (819 from Fig. 8). Multiple L2TP sessions may be established simultaneously over the same L2TP tunnel.

Fig. 10a illustrates a more detailed discussion of protocols that may be used to enable communications between the client devices (not shown), the home gateway device 1015, and the host system 1030. After the client device initiates the PPP discovery phase with the home gateway device 1015, the home gateway device 1015 initiates communications with the host system 1030. The home gateway device 1015, as discussed above, may use a communication device 1020, such as a modem (e.g., analog modem or dial-up modem), a cable modem, a satellite modem, or a DSL modem, to communicate with the host system 1030. The dialer module within the home gateway device 1015 (e.g., dialer module 821 of Fig. 8) initiates communications with host system 1030 by making a call to an L2TP enabled

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559

POP (Point of Presence), which may or may not reside within the host system 1030. Specifically, the dialer module initiates a call with an L2IP access concentrator (LAC) 1032, which is located within the POP and which may or may not reside within the host system 1030 (step 1000-1 of Fig. 10a).

Referring to Fig. 10b, following the call from the dialer module to the LAC 1032, PPP is typically partially negotiated through the dialer module's dial-up network connection to the LAC 1032 (step 1000-2 of Fig. 10b). The PPP Link Control Protocol (LCP) layer is negotiated and the process of authentication starts by communicating a login sequence from the home gateway device 1015 to the LAC 1032.

Referring to Fig. 10c, the LAC 1032 notifies the L2TP Network Server (LNS) 1036, which typically is a component of the host system 1030, that a login sequence and authentication process has been initiated by the home gateway device 1015. The LAC 1032 may conduct a radius lookup to identify a particular LNS with which to communicate. The LNS then restarts LCP negotiation with the dialer module (step 1000-3a of Fig. 10c). After renegotiating LCP, as illustrated by Fig. 10c, the LNS 1036 and the dialer module negotiate authentication and Internet Protocol Control Protocol (IPCP) (step 1000-3b of Fig. 10c).

Referring to Fig. lOd, for the LNS 1036 to complete this PPP negotiation, the POP's LAC 1032 first creates a tunnel 1038, and then starts a session over that tunnel. Once the tunnel 1038 is established, the home gateway device 1015 creates its own tunnel to the LNS 1036, as illustrated in Fig. lOd. As shown, an end-to-end PPP session 1040 is established between the home gateway device 1015 and the LNS 1036 which is over the LAC/LNS L2TP tunnel 1038. Thereafter, for each client device that requests connection to the host system 1030, the home gateway device 1015 will open a new L2TP session over its established tunnel 1040.

During the connectivity process between the dialer module within the home gateway device 1015 and the host system 1030, the host system 1030 assigns the dialer module a unique identifier, such as an assigned Internet protocol address. The dialer module typically includes software code to perform this function. For instance, the dialer module may be configured with a unique identifier which allows the dialer module access to the host system 1030 through an authentication process. The unique identifier may include a screen name and an associated password.

CA 02403709 2002-09-16

WO 01/71977

PCT/USOI/08559

Network Address Translation

Referring to Fig. 11, in another implementation, the home gateway device 1115 may include an L2TP access concentrator 1119 to communicate with the host system, a Network Address Translator (NAT) module 1121 that facilitates communications with the client devices, and a TCP/IP module 1123. The home gateway device 1115, which includes the NAT module 1121, enables the host system to assign independent Internet addresses associated with each home-networked client device over a single communication tunnel that is established between the home gateway device and the host system, hi one implementation, the home gateway device 1115 uses the NAT module 1121 to map the host-assigned addresses to local addresses associated with each client device. This enables the client devices or a user of the client devices to access individual information maintained by the host system. This also enables the host system to enforce host-based controls (e.g., parental controls) for each individual client device and/or a user of each client device.

As described above, the home gateway device 1115 typically establishes a connection with the host system using the L2TP access concentrator 1119. The L2TP access concentrator 1119 establishes the L2TP tunnel with the LNS in the host system, as described above with respect to Figs. 10a-lOd.

In one implementation, the home gateway device 1115 may assign the client devices local addresses to identify and facilitate individual communications between the home gateway device 1115 and the client devices. The home gateway device may include a

Dynamic Host Configuration Protocol (DHCP) module 1127, which may assign the local addresses (e.g., local IP addresses) to the client devices. The client devices typically include a DHCP client module (e.g., Windows™ DHCP), which may seek a local address from the home gateway device 1115 (e.g., at startup or at some other time). The DHCP module 1127 also may assign the home gateway device 1115 as the default route for each client device.

I

Additionally or alternatively, the client devices may be configured with manually assigned local addresses (e.g., static IP addresses) that are recognized by and made known to the home gateway device 1115. The home gateway device 1115 functions to map the locally assigned addresses between the client devices and the home gateway device 1115 to the host system assigned addresses between the host system and the client devices. In this manner, the host system is capable of recognizing the individual client device that is communicating with the host system.

GA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559

Referring to Fig. 12, the client devices 1205 typically include software that enables generation of IP traffic from the client devices 1205 to an outside entity. The client device 1205 attempts to communicate with the host system 1230. The attempt generates IP traffic fiom the client device 1205 to the host system 1230. Information included within the IP traffic typically includes a destination address specifying a location within the host system 1230. The client device 1205 may be configured to route traffic destined for the host system 1230 or traffic destined outside of the home local network 1210 to a default routing table. Thus, the traffic destined for the host system 1230 is sent to the home gateway device 1215. The home gateway device 1215 typically examines the traffic from the client devices 1205 and monitors for traffic from a new source. When the home gateway device 1215 recognizes traffic destined for the host system 1230 from a new source, the home gateway device 1215 establishes communications with the host system 1230, for example, by creating an L2TP tunnel with an LNS (not shown) and obtains an IP address for the home gateway device 1215. In this manner, the home gateway device 1215 and the host system 1230 establish the

L2TP tunnel over the communication links 1225.

After the L2TP tunnel has been established, the home gateway device 1215 and the host system 1230 establish an L2TP session over the L2TP tunnel, which is associated with the client device 1205 requesting access to the host system 1230. Once the L2TP session is established, the host system 1230 assigns the home gateway device 1215 an IP address for that particular L2TP session. The home gateway device 1215 maps the host-assigned IP address to the client device 1205 local address, thus allowing communications between the client device 1205 and the host system 1230 to occur using an independent host-assigned Internet address. The home gateway device 1215 will continue mapping the Internet address provided by the host system 1230 to the client device's 1205 local address as long as the

L2TP session remains connected.

For example, as shown in Fig. 12, if the client device A 1205 has a local address of 10.0.0.2 and the address assigned by host system 1205 to client device A is 10.2.114.13, then the home gateway device 1215 maps 10.0.0.2 with 10.2.114.13. From the client's perspective, the home gateway device 1215 replaces the source IP address from client device

A (10.0.0.2) with a valid host-assigned address (10.2.114.13) for all of client device A's 1205 outbound traffic. For inbound traffic, the home gateway device 1215 replaces the destination address (10.2.114.13) with (10.0.0.2) and then forwards the traffic on the network 1210

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559 between the home gateway device 1215 and the client devices to client device A 1205. Thus, a one-to-one mapping exists between IP address 10.0.0.2 and 10.2.114.13. From the perspective of the host system 1230, the host system 1230 recognizes client device A 1205 as 10.2.114.13.

The network address translation mapping scheme enables the host system 1230 to provide the client device access to information maintained by the host system for that particular client device. The mapping scheme also enables the user of the client device 1205 to access user specific information maintained by the host system 1230. Such information maintained by the host system 1230 may include, for example, parental control settings, wallet settings, and personal web page settings.

Additionally, the network address translation module within the home gateway device 1215 enables the home gateway device 1215 to use this mapping scheme for multiple client devices 1205 over the single communication tunnel 1225 (e.g., by establishing multiple L2TP sessions over the single L2TP tunnel). The home gateway device 1215 may process the mapping scheme for many unique addresses that the home gateway device 1215 senses over the network 1210 between the client devices 1205 and the home network device 1215. Additionally or alternatively, the home gateway device 1215 may limit the number of simultaneous L2TP sessions it allows.

In this implementation, the client devices typically are TCP/IP enabled and may use various software components (e.g., Microsoft™ TCP/IP stack) that enable TCP/IP communications. When using a NAT module within the home gateway device 1215, the client devices 1205 may not need to be PPP enabled.

Dynamic Host Configuration Protocol

Referring to Fig. 13, in another implementation, the home networking system may be implemented using a home gateway device 1315, which includes a Dynamic Host Configuration Protocol (DHCP) module 1327 that enables the host system to recognize individual client devices (505 from Fig. 5). The home gateway device 1315 also includes an L2TP access concentrator 1319 and a TCP/IP module 1323, which facilitate communications with the host system (530 from Fig. 5).

In this implementation, the home gateway device 1315 and the host system 530 typically communicate over a broadband communications link (e.g., xDLS, satellite, and

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559 cable) (525 from Fig. 5) such that a continuous connection between the home gateway device 1315 and the host system 530 is possible.

Referring to Fig. 14, in one example, when a client device 505 that is DHCP capable is started (step 1405) and a determination is made as to whether a connection between the home gateway device 1315 and the host system 530 is already established (step 1410). If the connection is already established, the client device 505 is assigned an independent Internet address by the host system 530 (step 1415). The host-assigned independent address may function as both a local address for use on the network (510 from Fig. 5) between the client device 505 and the home gateway device 1315, and as an external address for use between the client device 505 and the host system 530. Multiple DHCP-capable client devices 505 may receive independent Internet addresses from the host system 530 using tire single communication tunnel 525 between the home gateway device 1315 and the host system 530.

If the connection between the home gateway device 1315 and the host system 530 is not already established (step 1410), then the starting of the client device 505 triggers the home gateway device 1315 to establish a continuous connection with the host system 530 (step 1420). Once the connection between the home gateway device 1315 and the host system 530 is established, the host system 530 assigns the client device 505 the independent IP address (step 1415).

The described systems, methods, and techniques may be implemented in digital electronic circuitry, computer hardware, firmware, software, or in combinations of these elements. Apparatus embodying these techniques may include appropriate input and output devices, a computer processor, and a computer program product tangibly embodied in a machine-readable storage device for execution by a programmable processor. A process embodying these techniques may be perfonned by a programmable processor executing a program of instructions to perform desired functions by operating on input data and generating appropriate output. The techniques may be implemented in one or more computer programs that are executable on a programmable system including at least one programmable processor coupled to receive data and instructions from, and to transmit data and instructions to, a data storage system, at least one input device, and at least one output device. Each computer program may be implemented in a high-level procedural or object-oriented programming language, or in assembly or machine language if desired; and in any case, the language may be a compiled or interpreted language. Suitable processors include, by way of

CA 02403709 2002-09-16

WO 01/71977

PCT/US01/08559 example, both general and special purpose microprocessors. Generally, a processor will receive instructions and data from a read-only memory and/or a random access memory. Storage devices suitable for tangibly embodying computer program instructions and data include all forms of non-volatile memory, including by way of example semiconductor memory devices, such as Erasable Programmable Read-Only Memory (EPROM),

Electrically Erasable Programmable Read-Only Memory (EEPROM), and flash memory devices; magnetic disks such as internal hard disks and removable disks; magneto-optical disks; and Compact Disc Read-Only Memory (CD-ROM). Any of the foregoing may be supplemented by, or incorporated in, specially-designed ASICs (application-specific integrated circuits).

A number of implementations have been described. Nevertheless, it will be understood that various modifications may be made without departing from the spirit and scope of the claims. For example, advantageous results still could be achieved if steps of the disclosed techniques were performed in a different order and/or if components in the disclosed systems were combined in a different manner and/or replaced or supplemented by other components. Accordingly, other implementations are within the scope of the following claims.