Service activation in a passive optical network (PON)

An Optical Line Terminal (2) connected to a Passive Optical Network provides a service to a Client device (1, 8) by receiving its hardware identity, as well as SIM-authentication information, from the Client device, and forwarding to the Authentication Server (3). After authentication of an end-user, a relationship is created between the Client device and the end-user. The OLT activates a service, based on service subscriptions associated with the end-user and on hardware-dependent service definitions associated with the Client device.

TECHNICAL FIELD

The present invention relates to a method for an Optical Line Terminal (OLT) connected to a Passive Optical Network (PON) of providing a service to a Client Device, and a method for a Client Device, connected to a Passive Optical Network (PON), of receiving a service from an Optical Line Terminal. The invention also relates to an Optical Line Terminal and to a Client Device.

BACKGROUND

Broadband access can be implemented by a fiber optical access network, e.g. a B-PON (Broadband Passive Optical Network or a G-PON (Gigabit-capable Passive Optical Network). A passive optical network (PON) does not use any electrically powered components to split the signal, and it comprises an OLT (Optical Line Terminal) located at the service provider's central office and providing an interface for the delivery of the services, e.g. telephony, Ethernet data or video, over the PON. The PON typically comprises one or more ONUs (Optical Network Units) or ONTs (Optical Network Terminations), which are connected to the OLT over an ODN (Optical Distribution Network), the ODN including optical fibers. Each ONT/ONU terminates the PON and converts the optical signals into electrical signals for delivery of the services to the end-user terminals, via a suitable user interface.

A so-called MDU (Multi-Dwelling Unit) is an ONU/ONT for multiple subscribers, e.g. for a number of apartments in an apartment building, and the MDU is provided with a suitable number of ports, such as e.g. 24. On the contrary, a Single Family Unit is an ONT/ONU adapted for a single household. An MDU is typically connected to a suitable number of CPEs (Customer Premises Equipments) located in each apartment via a Residential Gateway.

According to current standards, an ONU (Optical Network Unit) is a generic term for a device that terminates any one of the distributed (leaf) endpoints of an ODN, implements a PON protocol, and adapts PON PDU (PON Protocol Data Units) to subscriber service interfaces. In some contexts, an ONU implies a multiple-subscriber device, such as the above-mentioned MDU. An ONT (Optical Network Termination) may be defined as a single subscriber device that terminates any one of the distributed (leaf) endpoints of an ODN, implements a PON protocol, and adapts PON PDUs to subscriber service interfaces. Thus, an ONT may correspond to a CPE, as described above, and could be provided with an Integrated Residential Gateway.

Conventionally, the identity of the hardware equipment is used for identifying a CPE or an ONT, as well as for identifying the end-user and the services to which the end-user is subscribing. Further, only the hardware equipment is authenticated, and not the end-user. Since the authentication is based on the identity of the hardware equipment, and not on the identity of the end-user, a coupling exists between the hardware equipment and the end-user. Due to this coupling between the hardware equipment and the end-user/customer, the services will follow the equipment, instead of the end-user.

Accordingly, an activation of a service is typically connected to the activation of the equipment itself, i.e. an installation of an equipment and an activation of a service are typically performed in the same procedure. Thus, it is difficult for an end-user/customer to move a service from one location to another location without moving the equipment, or requiring a re-provisioning by the operator.

SUMMARY

It is an object of the embodiments described hereinafter to address at least some of the issues outlined above, and this object and others are achieved by the method and the arrangement according to the appended independent claims, and by the embodiments according to the dependent claims.

According to a first exemplary aspect, a method is provided for an Optical Line Terminal (OLT) connected to a Passive Optical Network (PON) of providing a service to a Client device. The method comprises the OLT discovering a Client device connected to the Passive Optical Network, and receives a hardware identity for authentication of the Client device. The OLT further receives SIM-authentication information from the Client device, and forwards to the Authentication Server for authentication of an end-user of the Client device. Next, the OLT creates a relationship between the Client device and the end-user, and activates a service for the client device, based on service subscriptions associated with the end-user and on hardware-dependent service definitions associated with the Client device.

The method may further comprise a provisioning of the service, the provisioning comprising configuring the service depending on the hardware of the Client device, the configuring being based on hardware-dependent service definitions associated with the Client device. Said hardware-dependent service definitions may be stored in the Optical Line Terminal.

Further, a communication channel may be established between the Client device and the OLT over an Optical Distribution Network.

The service subscriptions associated with the end-user may be received from the Authentication Server, or may alternatively be stored in the Optical Line Terminal.

According to a second exemplary aspect, a method is provided for a Client device of receiving a service provided by an Optical Line Terminal (OLT) connected to a Passive Optical Network. The method comprising the Client device connecting to the Passive Optical Network, and sends its hardware identity to the Optical Line Terminal for authentication of the Client device. Next, the Client device sends SIM-authentication information to the Optical Line Terminal, to be forwarded to an Authentication Server for authentication of an end-user of the Client device, and receives a service activated by the Optical Line Terminal. The service activation is based on service subscriptions associated with the end-user and on hardware-dependent service definitions associated with the Client device, the service activation further based on a relationship between the Client device and the end-user.

The Client device may further receive a SIM-card identifying an end-user, or install a Soft-SIM.

According to a third exemplary aspect, an Optical Line Terminal (OLT) is provided, the Optical Line Terminal being connectable to a Passive Optical Network, and being arranged to provide a service to a Client device of the Passive Optical Network. The Optical Line Terminal comprises a Receiving unit for receiving from a client device a hardware identity for authenticating a Client device, and SIM-authentication information for authenticating an end-user. The OLT further comprises a Sending unit for forwarding SIM-authentication information received from a Client device to an Authentication Server, a Binding unit for creating a relationship between a client device and an end-user, and a Service activating unit for activating a service to a Client device, based on a service subscription associated with an end-user, and on hardware-dependent service definitions associated with the Client device.

The Service activating unit of the OLT may be further arranged to provision a service by configuring a service depending on the hardware of the Client device, the configuring being based on said hardware-dependent service definitions associated with the Client device.

Further, the Receiving unit of the OLT may be arranged to receive service subscriptions associated with an end-user from an Authentication server.

The Optical Line Terminal may further comprise a Storage unit for storing service subscriptions associated with an end-user, and the hardware-dependent service definitions associated with a Client device.

According to a fourth exemplary aspect, a Client device is provided, the Client Device being connectable to a Passive Optical Network, and being arranged to receive a service provided by an Optical Line Terminal. The Client device comprises a Connection unit for connecting to the Passive Optical Network and sending its hardware identity to the Optical Line Terminal for authenticating the Client device. The Client device further comprises a Sending unit for sending SIM-authentication information for authenticating of an end-user of the Client device to the Optical Line Terminal, and a Service unit for receiving a service activated by the Optical Line Terminal. The activation is based on a service subscription associated with an end-user, and on hardware-dependent service definitions associated with a Client device, and further on a relationship created between the end-user and the Client device.

The Client Device may further comprise a SIM-card-receiving unit.

Said Client Device may be a Single Family Unit Optical Network Termination (SFU ONT), or a Customer Premises Equipment connected to a Multi-Dwelling Unit (MDU), wherein the Customer Premises Equipment is configured to communicate with the Optical Line Terminal over the Multi-Dwelling Unit.

An advantage with the embodiments is to “de-couple” an end-user from the hardware equipment, enabling a separation between the installation of the hardware equipment and an activation of a service.

DETAILED DESCRIPTION

In the following description, the invention will be described in more detail with reference to certain embodiments and to accompanying drawings. For purposes of explanation and not limitation, specific details are set forth, such as particular scenarios, techniques, etc., in order to provide a thorough understanding of the present invention. However, it is apparent to one skilled in the art that the present invention may be practised in other embodiments that depart from these specific details.

Moreover, those skilled in the art will appreciate that the functions and means explained herein below may be implemented using software functioning in conjunction with a programmed microprocessor or general purpose computer, and/or using an application specific integrated circuit (ASIC). It will also be appreciated that while the current invention is primarily described in the form of methods and devices, the invention may also be embodied in a computer program product as well as in a system comprising a computer processor and a memory coupled to the processor, wherein the memory is encoded with one or more programs that may perform the functions disclosed herein.

It is a concept of exemplary embodiments described hereinafter to use a SIM-card for identifying and authenticating an end-user of a Client Device, and to activate a service based on the service subscriptions of the authenticated end-user, and on hardware-dependent service definitions associated with the hardware identity of the Client device.

A Subscriber Identity Module (SIM) is commonly used in mobile telecommunication in order to identify a subscriber, and the services that are available to the subscriber. A SIM is typically stored on a device called a SIM-card, which is provided to the subscriber by an operator, and a SIM-card can be removably inserted into a mobile phone.

Alternatively, a SIM may be implemented as a so-called Soft-SIM, i.e. a software Subscriber Identity Module that can be installed e.g. in a mobile phone without requiring any hardware.

A conventional SIM-card comprises a unique serial number, a unique number identifying the end-user, e.g. an IMSI (International Mobile Subscriber Identity), as well as security authentication and ciphering information, temporary information related to the local network, and a list of the services that are available to the subscriber.

Presently, SIM-cards come in three different sizes and packages, in order to be inserted into different devices. More specifically, the term SIM is used in GSM (Global System for Mobile Communication), while the equivalent term USIM (Universal Subscription Identity Module) may be used in the UMTS (Universal Mobile Telecommunication System), and the term R-UIM (Removable User Identity Module) in the CDMA (Code Division Multiple Access). Even though different terms could be used in different technologies for subscriber identifying modules with similar functionality as a SIM, the generic term SIM will be used hereinafter for a Subscriber Identity Module, which in different mobile phone technologies may have different names, as explained above.

A Client Device, according to one exemplary embodiment, corresponds to a single family unit (SFU) ONT provided with a SIM-card. However, other exemplary embodiments are applicable to a Multi Dwelling Unit (MDU), but then the SIM-card will be inserted in a CPE (Customer Premises Equipment) installed in the customer location and connected to the MDU. Thus, an ONT or a CPE is installed at a customer location, with an optical fibre connected by the installer (or by the end-user). The end-user subscribes to services from an operator, and the operator has sent a SIM-card to the end-user for service activation.

According to another exemplary embodiment, the SIM-card is a Soft-SIM that is installed in an ONT or in a CPE.

FIG. 1schematically illustrates a first exemplary PON-architecture for authentication of an end-user, in which the Client device corresponds to an SFU ONT1, and the SIM-card is a hardware-SIM. The ONT is installed at the customer location, and an end-user9is able to insert a SIM-card6received from the operator into the ONT, when he/she wishes to receive a service. The architecture further comprises an OLT2with communicates with the ONT over an ODN5(Optical Distribution Network), and with an Authentication Server3, e.g. over an Ethernet4.

First, the end-user9inserts the received SIM Card into the ONT. After power-on, the ONT will connect to the PON and start the physical (lower) layer of authentication, which is technology-specific and differs between the different PON-technologies. However, the basic part of this physical authentication is to make the OLT2aware of the presence of a new ONT, and to negotiate the necessary physical layer settings, such that the ONT is able to identify itself in order to access subscribed services. The ONT identifies itself with its hardware identity, which may be a serial number, a MAC address or some other unique hardware identifier.

Thus, the OLT2will discover that a new ONT1is connected to the ODN5, and will receive the hardware identity of the ONT, which also identifies the type of hardware equipment. A service definition exists for each particular type of hardware equipment, which describes how different services, e.g. Data, VoIP (Voice over the Internet Protocol) or IPTV (Internet Protocol Television) are provisioned for the equipment. Those hardware-dependent service definitions are typically stored in the OLT, and such a service definition is applied when the OLT activates a service and provisions the service to the ONT.

When the OLT is aware of the new ONT, it will establish a management channel for communication, which allows for end-user authentication communication with an Authentication Server.

According to an exemplary embodiment, the end-user authentication uses a standardized protocol, e.g. the conventional EAP (Extensible Authentication Protocol) encapsulated according to the IEEE 802.1X-standard, also known as EAPOL (Extensible Authentication Protocol over a Local Area Network). A conventional 802.1X authentication involves three parties, i.e. an 802.1X supplicant, an 802.1X authenticator, and an authentication server. The 802.1X supplicant is hosted in a Client device that wishes to attach to the network.

The 802.1X authenticator may be hosted in an OLT, and acts as a security guard to a protected network. The 802.1X supplicant, i.e. the Client device, is not allowed access through the authenticator to the protected side of the network until the supplicant's identity has been validated and authorized. The authenticator forwards the credentials to an authentication server for verification of the supplicant. An authentication between the 802.1X supplicant, i.e. the Client Device, and the authentication server is completed with the help of the authenticator who relays the messages. The 802.1X may for example be used on a Layer 2 (MAC) level, wherein the ONT does not need any IP address. According to an alternative exemplary embodiment, both the 802.1X supplicant and the 802.1X authenticator are hosted in the ONT, together with a Radius or Diameter Client, which are communicating with the OLT on a Layer 3 (IP) level.

Thus, according to an exemplary embodiment, an 802.1X Authenticator, hosted in the OLT, initiates the authentication procedure towards an 802.1X Supplicant, which is hosted in the ONT. When the 802.1X Supplicant hosted in the ONT answers the initial identity request, the answer is forwarded by the 802.1X Authenticator, hosted in the OLT, to a Radius/Diameter Client, which is also hosted in the OLT.

According to a further exemplary embodiment, the Radius/Diameter Client communicates with a Radius/Diameter Server hosted in the Authentication Server3for authenticating the end-user indentified by the SIM. However, the Authentication Server could alternatively be a GSM HLR (Home Location Registry) using the conventional SS7 signalling, or any other authentication server that comprises user authentication information. The authentication of the end-user is performed by a conventional iterative message exchange that requires relaying of multiple messages.

When the authentication is completed, the authentication server answers with an authentication accept message, which will be detected by the OLT, thereby informing the OLT that the end-user is authorized to receive a service, and enabling the OLT to detect the binding between the end-user and the hardware equipment, i.e. a Client device (ONT). Based on this binding detection, the OLT establishes a connection between the end-user identity and the hardware equipment identity.

Further, when the end-user is authenticated, the services connected to this user is also known to the OLT, either received from the Authentication server, or retrieved from a local user account storage in the OLT. Since the hardware equipment identity is also known to the OLT, and a relationship has been created between the end-user and the hardware equipment, the OLT is able to generate provisioning information for service activation, based on the services to which the end-user is subscribing, and the type of hardware equipment used by the end-user, as discovered at the connection of the ONT.

Since the provisioning is hardware-dependent, the hardware identity, which also indicates the equipment type, is important for the provisioning, and the services belonging to a particular end-user are converted by the OLT into a hardware-dependent configuration used for the service activation and provisioning.

Thus, when both the end-user and the corresponding hardware equipment are known to the OLT, the OLT is able to retrieve the end-user service subscription definition and the corresponding hardware-dependent service definition, and apply a service provisioning that is suitable for the hardware equipment, i.e. the Client device (ONT) that is currently used by the end-user. The provisioning of the ONT to activate the service is performed over the ODN, based on the PON technology.

Apparently, the services that are available to the end-user are de-coupled from any hardware dependencies until the moment of the service activation, at which moment the identity of the end-user and the identity of the hardware equipment are combined to form a hardware-dependent configuration. Thus, if the end-user moves to another house, which is provided with another type of hardware equipment, no changes are needed in the service subscription definition for the end-user. A hardware-dependent service definition only have to be defined once for a specific type of hardware equipment, which will have no impact to the end-user service subscription definitions.

This procedure is illustrated schematically in the exemplary signalling diagram inFIG. 2, in which a SIM-card is inserted in the ONT1, in step21. When the ONT is powered-on and connected to the ODN, the OLT2will discover the presence of the ONT, and a physical layer-authentication of the ONT will be performed between the ONT and the OLT, by a sequence of signals indicated by S2. After the authentication, the hardware identity of the ONT is known by the OLT, in step22, and the OLT will establish a communication channel to the ONT, in signal S4, for authentication of the end-user. The authentication of the end-user is performed by a communication between the ONT, the OLT and the Authentication Server5, as indicated by signals S5and S6, and as explained in more detail above.

After the authentication of the end-user, the OLT is able to detect the binding between the identity of the end-user and of the corresponding hardware equipment (i.e. the ONT) used by the end-user, in step23, and establish a connection between the two. By means of this connection, and by retrieving the services available to the end-user, the OLT is able to activate a service, in step24, and provide to the ONT.

FIG. 3schematically illustrates a second exemplary PON-architecture for authentication of an end-user, comprising an MDU7shared by multiple users, and connected to several CPEs. One of the CPEs8is installed at the location of the end-user9, and a SIM-card6received from the operator can be inserted into the CPE by the end-user. The architecture further comprises an OLT2with communicates with the MDU7over an ODN5, and with an Authentication Server3over a suitable network4, e.g. an Ethernet.

Thus, this second exemplary embodiment shows a corresponding scenario, using the same mechanisms as in the above-described first embodiment, but adapted to a Multi Dwelling Unit (MDU) connected to a CPE.

In this second embodiment, each port of the MDU represent an end-user, and therefore the MDU is able to control the access on each port.

This procedure according to this second embodiment is illustrated schematically in the exemplary signalling diagram inFIG. 4, in which the Client device corresponds to a CPE8located at the location of the end-user, the CPE connected to a MDU7. The SIM-card is inserted in the CPE8, in step41. When the CPE is powered-on and connected to the MDU via the ODN, the OLT2will discover the presence of the CPE, and a physical layer-authentication of the CPE will be performed between the MDU and OLT by a sequence of signals indicated by S2. After the authentication, the hardware identity of the CPE is known by the OLT, in step22, and the OLT will establish a communication channel to the CPE over the MDU, in signal S4, for authentication of the end-user. The authentication of the end-user is performed by a communication between the CPE, the MDU, the OLT and the Authentication Server3, as indicated by signals S5and S6, and as explained in more detail above. After the authentication of the end-user, the OLT is able to detect the binding between the identity of the end-user and of the corresponding hardware equipment (i.e. the CPE) used by the end-user, in step23, and establish a connection between them. By means of this connection, and by retrieving the services available to the end-user, the OLT is able to activate a service, in step24, and provide to the CPE, over the MDU.

FIG. 5is a flow diagram illustrating exemplary embodiments of a method for an OLT. In step51, the OLT receives the hardware identity of a Client Device connected to the PON, after discovery of the Client Device. After establishing a communication channel to the Client Device for authentication of the end-user, the OLT receives authentication information from a SIM-card of the Client Device, in step52, and forwards to the Authentication Server. After the authentication of the end-user, the OLT knows the identity of the end-user, and the hardware identity of the Client device, and establishes a relationship between them, in step53, based on a detected binding. Since the relationship is known to the OLT, the OLT is able to activate a service based on service subscription definitions associated with the end-user, and on hardware-dependent service definitions associated with the client device, in step54, and provide to the Client Device, based on a hardware-dependent configuration.

The provisioning may comprise a configuring of the service depending on the hardware of the Client device, the configuring being based on hardware-dependent service definitions that may be stored in the OLT.

The service subscription definitions may be received from the Authentication server, or stored in the OLT.

FIG. 6is a flow diagram illustrating an exemplary embodiment of a method for a Client Device. In step61, the Client Device connects to the PON, and sends the hardware identity to the OLT. After the establishment of a communication channel, the Client Device sends authentication information from a SIM-card to the OLT for authentication of the end-user, in step62, to be forwarded to the Authentication Server by the OLT. After the authentication of the end-user, the OLT knows the identity of the end-user, and the hardware identity of the Client device, and establishes a relationship between them, based on a detected binding. Thus, the OLT is able to activate a service based on service subscription definitions associated with the end-user, and on hardware-dependent service definitions associated with the client device. Then, in step63, the Client Device receives a service, the service activated and provisioned by the OLT.

FIG. 7schematically illustrates an OLT, according to exemplary embodiments. A typical OLT (Optical Line Terminal) provides an interface between the services from the operator, such as e.g. telephony, data and video, and the PON, and the OLT is located at the service provider. The illustrated OLT comprises a Receiving unit71for receiving a hardware identity from a discovered Client Device, as well as information from a SIM-card for identifying and authentication of the end-user. The OLT also comprises a Sending unit72for forwarding SIM-information for authenticating the end-user to an Authentication Server, and a Binding unit73, connected to the Receiving unit72, for creating a relationship between a received hardware identity of a Client device and an authenticated end-user. Further, the illustrated OLT comprises an Activation unit74, connected to the Sending unit72and the Binding unit73, for activating a service and providing to the Client Device, based on service subscriptions associated with the authenticated end-user, and on hardware-dependent service definitions associated with the Client Device.

The Receiving unit71may also be arranged to receive service subscription associated with an end-user from an Authentication server.

According to an exemplary embodiment, the OLT further comprises a Storage unit75for storing service subscription definitions relating to the service subscriptions of end-users, and/or hardware-dependent service definitions, the Storage unit being connected to the Activation unit74.

FIG. 8schematically illustrates an embodiment of the OLT, which is an alternative way of disclosing the embodiment illustrated inFIG. 7. The OLT2comprises a processing unit81which may be a single unit or a plurality of units. Furthermore, the OLT2comprises at least one computer program product82in the form of a non-volatile memory, e.g. an EEPROM (Electrically Erasable Programmable Read-Only Memory), a flash memory or a disk drive. The computer program product82comprises a computer program83, which comprises code means which when run on the OLT2causes the processing unit81in the OLT to perform the steps of the procedures described earlier in conjunction withFIG. 5.

Hence, in the embodiments illustrated inFIG. 7, the code means in the computer program83of the OLT2comprises a receiving module83a, a sending module83b, a binding module83c, and an activation module83d. The modules83a-83dessentially perform the steps of the flow inFIG. 5to emulate the OLT described inFIG. 7. In other words, when the different modules83a-83dare run on the processing unit81, they correspond to the units71,72,73and74ofFIG. 7, which are further explained above in connection with the description text associated withFIG. 7.

Although the code means in the embodiment disclosed above in conjunction withFIG. 8are implemented as computer program modules which when run on the OLT2causes the node to perform the steps described above in conjunction withFIG. 5, one or more of the code means may in alternative embodiments be implemented at least partly as hardware circuits.

FIG. 9illustrates schematically an exemplary Client Device, according to exemplary embodiments, and the Client Device may be an SFU ONT, or alternatively a CPE connected to an MDU. Conventionally, the ONTs and MDUs are connectable to an OLT over an ODN, and terminate the PON by converting the optical signals into electrical signals for providing services to the end-user. Both an ONT and a CPE are normally adapted to be located at the customer premises, such as e.g. in a home of the end-user. The MDU connected to the CPE is provided with a large number of ports, e.g. 24, in order to provide services to several end-users, and the MDU may be located e.g. in an apartment building.

The illustrated Client device comprises a Connection unit92for connecting to the PON, and sending its hardware identity to the OLT. The Client Device also comprises a Sending unit93for sending information from a SIM-card to the OLT for authentication of the end-user, and a Service unit94for receiving a service activated and provisioned by the OLT.

According to a further embodiment, the Client Device comprises a SIM-receiving unit91for receiving a SIM-card inserted by the end-user. According to another embodiment (not illustrated inFIG. 9) the Client Device is adapted to install a Soft-SIM (Software Subscriber Identity Module), instead of receiving a hardware SIM-card.

The Client Device may correspond to a single family unit ONT, or to a CPE connected to a MDU.

FIG. 10schematically illustrates an embodiment of the Client Device, which is an alternative way of disclosing the embodiment illustrated inFIG. 9. The Client Device1comprises a processing unit101which may be a single unit or a plurality of units. Furthermore, the Client Device1comprises at least one computer program product102in the form of a non-volatile memory, e.g. an EEPROM (Electrically Erasable Programmable Read-Only Memory), a flash memory or a disk drive. The computer program product102comprises a computer program103, which comprises code means which when run on the Client Device1causes the processing unit101in the Client Device to perform the steps of the procedures described earlier in conjunction withFIG. 6.

Hence, in the embodiments illustrated inFIG. 9, the code means in the computer program103of the Client Device1comprises a connection module103a, a sending module103b, and a service module103c. The code means may thus be implemented as computer program code structured in computer program modules. The modules103a-103cessentially perform the steps of the flow inFIG. 6to emulate the Client Device1described inFIG. 9. In other words, when the different modules103a-103care run on the processing unit101, they correspond to the units92,93and94ofFIG. 9, which are further explained above in connection with the description text associated withFIG. 9.

Although the code means in the embodiment disclosed above in conjunction withFIG. 10are implemented as computer program modules which when run on the Client Device1causes the node to perform the steps described above in conjunction withFIG. 6, one or more of the code means may in alternative embodiments be implemented at least partly as hardware circuits.

Thus, as implied above, it should be noted that the OLT2, as illustrated inFIGS. 7 and 8, and the Client Device1, as illustrated inFIGS. 9 and 10, may be implemented by physical or logical entities using software functioning in conjunction with a programmed microprocessor or general purpose computer, and/or using an application specific integrated circuit (ASIC). They may further include suitable internal and external storage devices, as well as appropriate communication interfaces, including hardware and software capable of performing the necessary modulating, coding, filtering and the like, as well as demodulating and decoding to process such signals.

It is an advantage with the embodiments that the hardware equipment is “de-coupled” from the subscriber, enabling the operator to install the hardware equipment in advance, and to activate the service later. Further, the installed hardware equipment may remain in a building when a customer leaves the operator or move to a new location, rather than requiring a re-installation.

When an end-user/customer starts subscribing to a service, he/she will receive a SIM card from an operator, and can activate the service simply by inserting the SIM-card into a previously installed device, or by installing a Soft-SIM. Thus, the service activation and the hardware installation do not have to be performed at the same time.

Further, since the hardware equipment is disconnected from the end-user identity, and the hardware equipment and the end-user are authenticated separately, the network operator does not have to be the same as the service provider.

However, the above mentioned and described embodiments are only given as examples and should not be limiting to the present invention. Other solutions, uses, objectives, and functions within the scope of the invention as claimed in the accompanying patent claims should be apparent for the person skilled in the art.