Enterprise access control and accounting allocation for access networks

• US 10,080,250 B2
• Filed: 10/06/2016
• Issued: 09/18/2018
• Est. Priority Date: 01/28/2009
• Status: Active Grant

• Current Assignee: Headwater Research LLC (Greg Raleigh)
• Original Assignee: Headwater Research LLC (Greg Raleigh)
• Inventors: Raleigh, Gregory G., Raissinia, Alireza, Green, Jeffrey
• Primary Examiner(s): RUDY, ANDREW J
• Application Number:
  US15/287,603
• Publication Number:
  US 20170187839A1
• Time in Patent Office: 712 Days
• Field of Search: 709203, 709216-229, 4554141, 4554321, 4554561
• CPC Class Codes: H04L 12/1457 using an account
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 41/0823 characterised by the purposes of a change of settings, e.g. optimising configuration for enhancing reliability for optimising operational conditions of wireless networks H04W24/02
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04M 15/8033 location-dependent, e.g. business or home
• CPC Class Codes: H04W 4/24 Accounting or billing
• CPC Class Codes: H04W 76/12 Setup of transport tunnels

Abstract

Enterprise and consumer billing allocation for wireless communication device service usage activities is provided. In some embodiments, enterprise and consumer billing allocation for wireless communication device service usage activities includes monitoring a service usage activity of a wireless communication device, and determining an enterprise and consumer billing allocation for the monitored service usage activity. In some embodiments, enterprise and consumer billing allocation for wireless communication device service usage activities includes monitoring a service usage activity of a wireless communication device, and reporting the monitored service usage activity to a network element, in which the network element determines an enterprise and consumer billing allocation for the monitored service usage activity. In some embodiments, enterprise and consumer billing allocation for wireless communication device service usage activities includes providing a service design center for configuring an enterprise and consumer billing allocation of monitored service usage activities for a plurality of wireless communication devices associated with an enterprise account, and implementing the configured enterprise and consumer billing allocation for monitored service usage activities for the plurality of wireless communication devices associated with the enterprise account.

Claims

1. A method of operating a wireless end-user device, the method comprising:

storing secure policy information indicative of an application-specific execution environment policy and a configurable communication security policy;

based on the secure stored information indicative of an application-specific execution environment policy, allowing a first set of multiple device application instances to run only in a first secure application environment on the wireless end-user device, and allowing a second set of device application instances to run only outside of the first secure application environment; and

based on the secure stored information indicative of a configurable communication security policy, initiate a first secure tunnel to a network tunnel endpoint, and direct all network data communications to and from device application instances executing in the first secure application environment through the first secure tunnel.

2. The method of claim 1, wherein the configurable communication security policy defines a first configuration, which indicates that application instances in the second set of device application instances are not allowed to use the first secure tunnel, the method further comprising, based on the secure stored information indicative of a configurable communication security policy indicating the first configuration, directing all network data communications to and from device application instances executing outside of the first secure application environment through a network path outside of the first secure tunnel.