Broadband and billing terms, explained

The three functions a network performs for each subscriber. Authentication proves who is connecting. Authorisation decides what that subscriber may use. Accounting records how much was used and for how long. Operators usually implement AAA with the RADIUS protocol.

A protocol defined in RFC 2865 and RFC 2866. A network access server, such as a BNG or a Wi-Fi controller, sends an access request to a RADIUS server, which replies with accept or reject and the attributes to apply, such as a speed. Accounting messages then report usage.

A RADIUS extension, described in RFC 5176, that lets the server send a message to the network access server while a session is live. It can change a subscriber's speed or policy while the session runs. A companion Disconnect message can end the session. Neither waits for the subscriber to reconnect.

A framework for authentication methods, widely used in enterprise Wi-Fi and carried over RADIUS. EAP-TLS checks a certificate on each side. EAP-TTLS and PEAP first build a TLS tunnel, then verify the user's credentials inside it. EAP-TLS needs the server to trust the authority that issued each client certificate; EAP-TTLS and PEAP need the client to trust the server certificate.

The edge device where subscriber sessions end and join the operator's core network. It authenticates sessions, usually through RADIUS, applies per-subscriber speed and policy, counts usage and often performs address translation. BNGs were traditionally hardware routers but can also run as software on standard servers.

Defined in RFC 2516. The subscriber's router or ONT dials a session to the BNG with a username and password, which the BNG checks through RADIUS. Because each subscriber has a session, an operator can count usage and change speeds line by line. It is common in fixed broadband.

A way of connecting subscribers without a dial-up style session. The subscriber's device obtains an address through DHCP, and the operator identifies the line from details such as the VLAN or the DHCP Option 82 circuit information. It suits networks that want simpler session handling than PPPoE.

A technique that lets many subscribers share a small pool of public IPv4 addresses by translating private addresses at the operator's edge. Because one public address serves many people, operators are usually required to log each translation to show who used an address and port at a given time.

An open-source set of libraries and drivers for fast packet processing on standard x86 servers. It lets software read and write network cards directly in user space instead of passing every packet through the operating system kernel, so a software gateway can handle heavy traffic without dedicated hardware.

A web page a Wi-Fi guest must pass before gaining internet access. The network redirects the first request to the portal, where the guest signs in with a one-time password or a voucher, or accepts terms. Once the portal approves the guest, the authentication server lets the session through.

A small operator that brings cable television or broadband to homes in a neighbourhood, often by buying bandwidth or services from a larger provider. In a partner network the LCO is usually the last tier, selling to subscribers and collecting their payments.

A code that grants access or credit without a named account. On public Wi-Fi a voucher may give a fixed time or data allowance. In prepaid broadband a voucher can add credit or renew a plan. Operators usually generate vouchers in batches, and each one is usually redeemed once.

A billing model in which the subscriber pays before using the service. A plan is bought or renewed for a period or an allowance, and service stops or is restricted when it ends. The operator collects revenue up front and needs no monthly invoice run for these customers.

A billing model in which the subscriber uses the service first and is billed afterwards, usually monthly. The operator runs a billing cycle that adds recurring and usage charges, applies tax and issues an invoice, then collects payment and follows up on overdue amounts.

Billing of several services for one customer on a single account and invoice, for example broadband, television and a static IP address. It replaces separate systems for each service, so the customer sees one balance and the operator applies one set of tax and payment rules.

The process of following up unpaid invoices. A dunning engine applies rules to send a sequence of reminders by SMS, email or WhatsApp, may restrict service after a grace period and records each step. The word comes from the old verb to dun, meaning to demand repayment.

The electronic generation of tax invoices that are registered on a tax authority's portal. Under India's GST system, eligible businesses submit invoice data to the Invoice Registration Portal, which returns an invoice reference number and a QR code that must appear on the invoice.

An Indian income-tax mechanism under which the payer deducts a set rate of tax from certain payments, such as commission, and deposits it with the government on the payee's behalf. The payee receives the net amount and a certificate, and later claims credit for the tax.

The book in which every financial transaction is posted as journal entries with debit and credit accounts. Its totals produce the trial balance and the financial statements. Billing systems feed it with invoices, payments and adjustments so finance teams can reconcile what customers owe.