IPfonix logo

CURRENT KDC VERSIONS

  • Linux: 2014028
  • Solaris: 2014028
  • Windows: 2014028

KERBEROS

PacketCable™ and CableHome™ security is based on the popular single-sign-on Kerberos Protocol, which allows a client to access multiple services with only a single authenticated log-in.

OUR BUSINESS

IPfonix, Inc. produces Key Distribution Center (KDC) and related products for use in PacketCable™ and CableHome™ networks.

IPfonix, Inc. also provides consulting services, specializing in issues related to DOCSIS and PacketCable systems. Please contact us for more information.

Contact us       FAQs       About us


News

A new certificate-based attack has been shown to work successfully against some browsers, and, presumably, against at least some other certificate-checking software. This attack does not work against the IPfonix, Inc. KDC. Please contact us if you are interested in further details.



IPfonix, Inc. KDCs:

Support PacketCable 2.0

Run on inexpensive off-the-shelf PC-class hardware

Support millions of client devices off a single KDC

Support IPv6 networks

Implement a “pseudo-provisioning server” to allow MTAs to be deployed without a true PacketCable Provisioning Server present in the operator network

Implement PKCROSS for multi-realm deployments and secure inter-MSO VoIP calls

Fully support Dynamic Service Keying -- allows MSOs to add new devices to the core network securely and fully automatically

Are highly configurable to an MSO's specific needs

Closely track PacketCable, Euro-PacketCable, IPCablecom and CableHome specifications

Are designed from the ground up to be robust against attack

Include support for secure deployment of PacketCable Multimedia devices

Support the Online Certificate Status Protocol (OCSP, RFC 2560) for real-time checking of revocation status



Click on product below for more information

PacketCable KDC

CableHome KDC

PacketCable/CableHome KDC

CertBuilder

buildini


Third party libraries


Price List for MSO Deployments


Our principal product is a Key Distribution Center for:
We also have a product, CertBuilder, designed to help to create and check digital certificates for PacketCable and CableHome networks.

Our PacketCable KDCs now include support for dynamic service keys. Since this functionality is not yet included in the PacketCable security specification, here is an extract from our User Guide that describes how PacketCable servers can obtain dynamic service keys from an IPfonix, Inc. KDC.

The KDC throughput necessary to support a large PacketCable deployment (of a million or more MTAs) is often miscalculated. Here is a paper that describes what KDC throughput is actually necessary in deployed PacketCable networks, and here is a Web page showing the actual CPU load of an IPfonix, Inc. KDC while running on networks containing more than a million MTAs.

The KDC is almost certainly the least expensive MSO device -- in both software and hardware cost -- in a deployed PacketCable or CableHome network. We wish to take this opportunity to applaud publicly the PacketCable security team for designing a security architecture that permits MSOs to deploy highly-secure systems that allow single sign-on to multiple services at miniscule per-subscriber incremental cost.


We offer our congratulations to the following customers, who have achieved certification or qualification with products in certification waves conducted by CableLabs or Excentis:

PacketCable: Ambit, ARRIS, Askey, Asustek, BigBand Networks, C-Cor, Camiant, Cedar Point, Cisco, Hitron, Innomedia, Juniper, Motorola, Netgear, Nokia-Siemens, Nuera, Scientific Atlanta, Siemens, Sonus, Terayon, Thomson, Turbocomm, Toshiba, Zyxel

CableHome: Cisco, Scientific Atlanta

Euro-PacketCable: Alcatel, Ambit, ARRIS, Camiant, Cisco, Hitron, Motorola, Netgear, Scientific Atlanta, Siemens, Terayon, Thomson



RSS feed RSS feed RSS feed


Made with Bluefish