Systems, methods, and devices for application aware access control for communication on a mobile network

• US 10,003,972 B2
• Filed: 09/23/2014
• Issued: 06/19/2018
• Est. Priority Date: 01/06/2014
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel IP Corporation (Intel Corporation)
• Inventors: Pinheiro, Ana Lucia A., Martinez Tarradell, Marta, Bangolae, Sangeetha L.
• Primary Examiner(s): Eng, George
• Assistant Examiner(s): Ahsan, Umair
• Application Number:
  US14/494,169
• Publication Number:
  US 20150195712A1
• Time in Patent Office: 1,365 Days
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 48/02 Access restriction performed under specific conditions
• CPC Class Codes: H04W 48/12 using downlink control channel
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A user equipment (UE) is configured to receive, from a network, a first access control message and a second access control message. The first access control message corresponds to a first access control service, and the second access control message corresponds to a second access control service. The first and second access control messages include access control information for controlling access to the network for at least one application on the UE. The UE is also configured to determine a combined access level for the at least one application based on the first and second access control messages and to limit access to wireless communications for the at least one application based on the combined access level.

Claims

1. A user equipment (UE) configured to:

receive, from a network, a first access control message and a second access control message, wherein the first access control message is for a Service Specific Access Control (SSAC) service and the second access control message is for an Access Class Barring (ACB) service;

determine a combined access level based on the first and second access control messages;

associate the combined access level with an application, wherein the combined access level corresponds with the ability of the application to access both services associated with the SSAC and services associated with the ACB; and

notify the application of the combined access level, wherein access to wireless communications for the application is limited according to the combined access level.

2. The UE of claim 1, wherein the first access control message indicates a first probability for barring and the second access control message indicates a second probability for barring and wherein the UE determines the combined access level by determining a combined probability based on the first probability and the second probability.

3. The UE of claim 1, wherein one or more of the first access control message and the second access control message indicate which applications of a list of applications are allowed to communicate over the network.

4. The UE of claim 1, wherein one or more of the first access control message and the second access control message indicate which categories in a list of application categories are allowed to communicate over the network.

5. The UE of claim 4, wherein the list of application categories comprises a preconfigured list of categories.

12. The UE of claim 2, wherein the combined access level is determined by multiplying the first probability by the second probability.

6. A method for application aware access control for communication on a mobile network, the method comprising:

receiving, by a user equipment (UE), a first access control message and a second access control message, wherein the first access control message is for a Service Specific Access Control (SSAC) service and the second access control message is for an Access Class Barring (ACB) service;

determining a combined access level based on the first and second access control messages;

associating the combined access level with an application, wherein the combined access level corresponds with the ability of the application to access both services associated with the SSAC and services associated with the ACB; and

notifying the application of the combined access level, wherein access to wireless communications for the application is limited according to the combined access level.

7. The method of claim 6, wherein one or more of the first access control message and the second access control message indicate which categories in a list of application categories are allowed to communicate over the mobile network.

8. The method of claim 7, wherein the list of application categories comprises a preconfigured list of categories.

9. The method of claim 7, wherein determining the combined access level comprises determining an application category to which the application corresponds.

10. The method of claim 6, wherein notifying the application of the combined access level comprises notifying the application of the combined access level in response to a change in the combined access level for the application.

11. The method of claim 6, wherein the first access control message indicates a first probability for barring and the second access control message indicates a second probability for barring and wherein the UE determines the combined access level by determining a combined probability based on the first probability and the second probability.

13. The method of claim 11, wherein the combined access level is determined by multiplying the first probability by the second probability.