ITU-T Workshop on Multimedia Convergence Broadband Delivery and In-home Distribution Geneva, Switzerland 12 – 15 March 2002 Doug Jones Chief Architect, YAS Broadband Consultant to CableLabs®

Agenda Workshop Question Device Types –Access –Bridge –End-point Technology –Provisioning –Network Management –Quality of Service –Network address management –Security

Workshop Questions Overview of the different solutions, future evolution –e.g. broadband cable, DSL Minimum requirements to ensure inter- working and interoperability

Home Is Where The Net Is For the service provider, a converged network is –Common provisioning/management/security For the consumer, a converged applications means –Device-independence –Same “look and feel” –Ease of use, plug and play Mix of IP and MPEG Multiple technologies & services, one network Best in Class –security, provisioning, management –Voice, data, video

Broadband Advantages Capacity –Multiple Gigabits Interactivity –MPEG/IP (video, data, voice) Security –It’s not just technology, it’s a service –For the subscriber, and for the network operator Management –Providing end-to-end services

Service Opportunities Residential & Business (small and large)

Confederation with Other Work J.112 IPCablecom IETF DVB SCTE Many others, Etc. Should apply technology consistently

Home Networking Devices Modes of Operation Autonomous configuration by the user Configured by a service/network provider –provider can grant the user access to specific features and functions Should not constrain business models

Types of Networking IP services –VPNs, gaming, chat, e-commerce, etc. –Even in the presence of NAT and NAPT IETF RFC 3235: NAT-friendly application design guidelines Native MPEG services –Traditional digital video Analog video ? Home network should support all Difficult to choose a datalink technology Hide complexity from the user

Home Networking Architecture (Example) A = Access Point B = Home Bridge C = Client end-point N = Non-compliant end point A N N B N BC Home Network Home Network Home Network WAN (2-way, real time, interactive) LAN C Illustrate basic functions Secure provisioning & mgmt Not datalink specific

Access Device “Residential Gateway” MPEG Functions –Storage –Multiplexing –Rate transcoding IP functions –Dynamic Host Configuration Protocol (DHCP) –Network Address Translation (NAT) –Network Address Port Translation (NAPT) –Domain Name Service (DNS) –Firewall –Virus Checking A N N B N B C Home Network WANLAN C Home Network Home Network

Access (A) Device Embedded or Stand-Alone Standalone A-device connects externally to a home broadband access modem –E.g., a cable modem of DSL modem Embedded A-device is built into same physical enclosure as the modem Illustrates security concerns

Bridging Device interconnect different types of data links –Wired, wireless –Synchronous, asynchronous –E.g., 802.2, , HPNA™, HomeRF™, etc. QoS aware A N N B N B C Home Network WANLAN C Home Network Home Network

Compliant End-Device Terminates the managed domain –provisioning/management –QoS Want to keep light-weight, but.. –Still needs DHCP, FTP, and SNMP ? A N N B N B C Home Network WANLAN C Home Network Home Network

Non-Compliant End Device Devices connected to the Home LAN, but that do not meet the requirements They really cannot be dealt with, may not even know they are there A N N B N B C Home Network WANLAN C Home Network Home Network

Technology Discussions Provisioning Network Management Quality of Service Network address management Security

Trade-off’s In-use protocols –DHCP, TOD, TFTP, etc. –Could be perceived as heavy-weight Emerging protocols –Universal Plug and Play (UPnP) –Jini™ –Etc. Need to make proper technology choices

Provisioning Devices configurable over the WAN –Allows network provider to offer the service Standard methods –DHCP, TFTP, SNMP –Fit with existing back-end offices Security –Essential for stand-alone devices

Network Management SNMP is attractive due to security –SNMPv3 User-based Security Model (USM) RFC 2574 Privacy, authentication –SNMPv3 View-based Access Control Model (VACM) RFC 2575 Flexible view-based access –SNMP Coexistence RFC 2576 Allows VACM with any of SNMPv1/v2/v3 USM only with SNMPv3 But other protocols may be lighter weight –UPnP, Jini, etc. Security is Key !

Quality of Service Data link should support QoS –But can the specific data link be specified ? Upper layer mechanism to signal QoS, lower layer mechanism to implement it –E.g., upper layer such as RSVP or SIP/SDP –E.g., lower layer such as IEEE 802.1p or Subnet Bandwidth Manager (SBM, RFC 2814) Authenticated messaging

Network Address Management Dynamic Host Configuration Protocol (DHCP) –IPv4 and IPv6 Network Address Translation (NAT) Network Address Port Translation (NAPT) Domain Name Service Routing vs. Switching

Security For both service provider and user Privacy –Already in IPCablecom and J.112 –Needed in-home ? Datalink or application layer ? Authentication –Public Key Infrastructure Which certificate provider? Digital Rights Management

Summary ITU standard - Huge opportunity for service providers and equipment manufacturers Allow service providers to offer service Secure provisioning and management Tailor technology choice for in-home use

ITU-T Workshop on Multimedia Convergence Broadband Delivery and In-home Distribution Geneva, Switzerland 12 – 15 March 2002 Doug Jones Chief Architect, YAS Broadband Consultant to CableLabs®