Feature management of a communication device
First Claim
1. A method for controlling a computing device associated with a plan shared between a plurality of computing devices that include the computing device, the method comprising:
- using an enforcing function executing only on a first server in communication with a first packet-based network, wherein the first packet-based network is in communication with the plurality of computing devices, and wherein the first server includes a first processor and memory;
using a deciding function executing only on a second server in communication with a second packet-based network, wherein the second server includes a second processor and memory, wherein the first packet-based network is in communication with but is separate from the second packet-based network, wherein the first server is separate from the second server, and wherein the second server operates outside the first packet-based network,wherein the first processor and memory are configured to;
in response to a request from the computing device to initiate a data session to access a feature or function,query an authentication agent, separate from the second server, to validate the request from the computing device based on an identifier of the mobile device and a subscription status, andupon validation of the request from the computing device, obtain an IP address for the data session and send a request to the second server to allow the computing device to use the feature or function,wherein, when the validation of the request is denied, terminate or redirect the data session and notify the mobile device;
wherein the second processor and memory are configured to;
in response to the request from the first server to allow the computing device to use the feature or function,generate a real-time decision to grant or deny the request based on a policy stored at the second server, the policy configured to control features and functions that may be performed by the computing device, wherein the features and functions include one or more features or functions that require service units allocated to the plan or allocated to an allowance associated with the computing device and communication services that are partially or fully subject to restriction, andwherein the features and functions are provided by a service provider that operates on the first packet-based network;
allocate a first amount of the service units into the plan and a second amount of the service units into the allowance; and
automatically and without interaction by a user, decrement a specified number of the service units from either the first amount or the second amount, wherein the specified number is based on the use of the feature or function by the computing device after the request was granted, and wherein the automatic decrement is based on a rule stored at the second server, wherein the rule is configured to automatically determine when the specified number is to be decremented from the first amount or the second amount;
wherein the first server is configured to;
receive the decision from the second server and enforce the decision by sending instructions to at least the service provider; and
send data indicative of an action that is consistent with the decision over the first packet-based network.
2 Assignments
0 Petitions
Accused Products
Abstract
A system and method for the real-time management of a device, and more particularly to the establishment and enforcement of policies or rules associated with the feature or functions that may be performed with the device, such as making and receiving calls, exchanging data, playing games and music, sending and receiving email, accessing web sites, and paying for goods and services. If a child or employee is using the device, there may be a need to regulate how that device can be used and to determine who will pay for what goods or services. In addition to providing all of the features associated with a device, service providers need to be able to establish and enforce rules (policies) regulating how and when that device can be used and who will pay for a good or service requested by the user of the device.
196 Citations
18 Claims
-
1. A method for controlling a computing device associated with a plan shared between a plurality of computing devices that include the computing device, the method comprising:
-
using an enforcing function executing only on a first server in communication with a first packet-based network, wherein the first packet-based network is in communication with the plurality of computing devices, and wherein the first server includes a first processor and memory; using a deciding function executing only on a second server in communication with a second packet-based network, wherein the second server includes a second processor and memory, wherein the first packet-based network is in communication with but is separate from the second packet-based network, wherein the first server is separate from the second server, and wherein the second server operates outside the first packet-based network, wherein the first processor and memory are configured to; in response to a request from the computing device to initiate a data session to access a feature or function, query an authentication agent, separate from the second server, to validate the request from the computing device based on an identifier of the mobile device and a subscription status, and upon validation of the request from the computing device, obtain an IP address for the data session and send a request to the second server to allow the computing device to use the feature or function, wherein, when the validation of the request is denied, terminate or redirect the data session and notify the mobile device; wherein the second processor and memory are configured to; in response to the request from the first server to allow the computing device to use the feature or function, generate a real-time decision to grant or deny the request based on a policy stored at the second server, the policy configured to control features and functions that may be performed by the computing device, wherein the features and functions include one or more features or functions that require service units allocated to the plan or allocated to an allowance associated with the computing device and communication services that are partially or fully subject to restriction, and wherein the features and functions are provided by a service provider that operates on the first packet-based network; allocate a first amount of the service units into the plan and a second amount of the service units into the allowance; and automatically and without interaction by a user, decrement a specified number of the service units from either the first amount or the second amount, wherein the specified number is based on the use of the feature or function by the computing device after the request was granted, and wherein the automatic decrement is based on a rule stored at the second server, wherein the rule is configured to automatically determine when the specified number is to be decremented from the first amount or the second amount; wherein the first server is configured to; receive the decision from the second server and enforce the decision by sending instructions to at least the service provider; and send data indicative of an action that is consistent with the decision over the first packet-based network. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. A system for managing policies associated with a computing device, the system comprising:
-
a first server including a first processor and memory comprising first instructions that, when executed by the first processor and memory, cause the first server to; receive, at the first server in communication with a first packet-based network, a request to permit the computing device to initiate a data session to interact with a second computing device associated with a contact, wherein the first packet-based network is in communication with a plurality of remote computing devices including the computing device and the second computing device, in response to the request, query an authentication agent, separate from a second server, to validate the request to permit the computing device to interact with the second computing device, based on an identifier of the computing device and a subscription status, and upon validation of the request, obtain an IP address for the data session and send the request to the second server in communication with a second packet-based network, wherein, when the validation of the request is denied, terminate or redirect the request, and notify the computing device; the second server including a second processor and memory, wherein the first packet-based network is in communication with but is separate from the second packet-based network, wherein the first server is separate from the second server, and wherein the second server operates outside the first packet-based network, the second server comprising second instructions that, when executed by the second processor and memory, cause the second server to; in response to receiving the request from the first server, access a policy stored at the second packet-based network, the policy configured to control whether the computing device can interact with the second computing device; access, on the second packet-based network, one or more stored contacts associated with the plurality of remote computing devices that the computing device is allowed to interact with independently of the policy; determine whether to allow or disallow the interaction with the second computing device based only on the policy and the one or more stored contacts and communicate the determination to the first server; wherein the first instructions further cause the first server to enforce the determination to avow or disallow the interaction by communicating instructions through the first packet-based network and communicating an indication of the determination to avow or disallow the interaction to at least one of the computing device and the second computing device; and wherein when the interaction is allowed, the second server being further configured to automatically determine whether service units associated with the interaction are deducted from service units assigned to an allowance only based on a rule that is configured to automatically make the deduction determination, the allowance associated with the computing device, wherein the rule is configurable to decrement service units from the allowance only at the second server based on the interaction. - View Dependent Claims (13, 14, 15, 16, 17, 18)
-
Specification