Method and device for policy-based control of radio

• US 10,484,927 B2
• Filed: 03/03/2015
• Issued: 11/19/2019
• Est. Priority Date: 12/29/2006
• Status: Active Grant

• Current Assignee: Shared Spectrum Company
• Original Assignee: Shared Spectrum Company
• Inventors: McHenry, Mark Allen, Perich, Filip, Tenhula, Peter
• Primary Examiner(s): Lu, Zhiyu
• Application Number:
  US14/636,328
• Publication Number:
  US 20150189572A1
• Time in Patent Office: 1,722 Days
• Field of Search: None
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04W 28/04 Error control
• CPC Class Codes: H04W 48/02 Access restriction performed under specific conditions
• CPC Class Codes: H04W 74/085 collision avoidance
• CPC Class Codes: H04W 8/245 from a network towards a terminal

Abstract

A device is disclosed that includes software components for executing actions and for controlling the device in order to conform to specified policies. The device includes a controller to deny or permit execution of actions. The controller monitors and interrupts execution of device'"'"'s actions in order to determine whether an action violates a policy, policy rules, or if the action is prohibited by a policy. The controller also manages policies defined for the device. Each policy is translated into a language understandable by the controller and stored on the device. Each policy can be updated or changed dynamically. Additionally, each policy can securely be updated or changed remotely.

Claims

1. A method for policy-based control of a device, the method comprising:

generating an action on a device comprising a policy controller, the action comprising an instruction to transmit a radio signal from the device;

collecting device state information for the device, the device state information describing one or more frequency states available for operation of the device in a radio frequency network;

receiving, by the device and during continuous operation of the device, updated policy data relevant to the device from a source external to the device;

based upon the updated policy data and subsequent to sending at least one prior radio signal transmission by the device within the radio frequency network, modifying, by the device and during continuous operation of the device, an existing policy configuration of the device to generate a modified policy;

selecting one or more policies based upon the device state information, the one or more policies including the modified policy;

evaluating the one or more policies related to the action;

determining that transmission of the radio signal by the device is an allowable action according to the policies; and

controlling execution of the action on the device with a policy enforcer of the controller according to the one or more policies, by controlling a radio to transmit or receive the radio signal.

2. The method of claim 1, further comprising determining that a precondition to performing the allowable action, the precondition being set by the policies, has been met.

3. The method of claim 1, wherein the step of controlling execution of the action on the device includes controlling execution of the action by the controller according to the device state information.

4. The method of claim 1, wherein the policies comprise a policy specified by a regulatory agency.

5. The method of claim 1, further comprising:

determining that a first state of the device is a pre-approved state according to the selected one or more policies; and

operating the device in the first device state.

6. The method of claim 1, wherein the device state information comprises an operational configuration of at least one component of the device selected from the group consisting of:

a transmitter, a receiver, a signal detector, a location detector, a time detector, an owner of the device, and a certification.

7. The method of claim 6, wherein the operational configuration comprises at least one item selected from the group consisting of:

a power of a transmitter, a frequency at which a transmitter is set, a frequency range within which a transmitter operates, a time, a location, and a history of collected decisions received from one or more detectors.

18. The method of claim 1, further comprising:

subsequent to the step of controlling the execution of the action on the device with the controller according to the one or more policies, receiving, by the device, further updated policy data;

based upon the further updated policy data, modifying at least another existing policy configuration of the device to generate an additional modified policy; and

controlling execution of an additional action on the device with the controller according to the additional modified policy.

8. A method of configuring a radio for communication, the method comprising:

constructing a request to identify an available frequency spectrum, the request including network environment information;

comparing the request to a transmission frequency constraint described in a spectrum access policy;

based on the comparison, identifying at least one candidate transmission frequency;

translating the at least one candidate transmission frequency to at least one corresponding device state;

configuring the radio for transmission at the candidate transmission frequency by placing the radio in the corresponding device state; and

during continuous operation of the radio;

executing a first command by the radio to transmit at the first candidate transmission frequency;

receiving updated policy data from an external source;

based upon the updated policy data and subsequent to executing the first command to transmit at the first candidate transmission frequency, modifying the spectrum access policy to generate a modified spectrum access policy; and

responsive to a determination that a second command to be executed by the radio is not allowed by the modified spectrum access policy, preventing execution of the second command by the radio by interrupting the second command.

9. The method of claim 8, further comprising monitoring the candidate transmission frequency for non-cooperative signals, wherein the step of identifying the at least one candidate transmission frequency for transmission is further based on an absence of interfering non-cooperative signals at the candidate transmission frequency.

10. The method of claim 8, wherein the radio comprises a detector, the method further comprising configuring the detector to receive at the candidate transmission frequency.

11. The method of claim 8, wherein the request identifies a potential frequency transmission range based on measured frequency used within the potential frequency range.

12. The method of claim 8, wherein the policy defines a regulatory requirement for the candidate transmission frequency or a requirement for the candidate transmission frequency set by an operator of the radio.

13. The method of claim 8, further comprising verifying at least one of:

the authorization of a sender of the updated policy data to issue the updated policy data; and

the authenticity of the identity of the sender.

19. The method of claim 8, further comprising:

identifying a missing parameter required to evaluate the request; and

adding a constraint, based on the missing parameter, to the request.

14. A device comprising:

a tuner capable of transmitting at a plurality of frequencies;

an optimizer configured to send a command to the tuner instructing the tuner to transmit within a selected frequency spectrum;

a policy manager configured to receive updated policy data and, during operation of the tuner within the selected frequency spectrum, modify a policy restricting the frequencies at which the tuner is allowed to transmit and

a controller, operating on the device, configured to operate the device to enforce the policy restricting the frequencies at which the tuner is allowed to transmit, the controller further comprising;

a database storing the policy;

a conformance reasoner configured to determine whether the command is allowed by the policy; and

a policy enforcer configured to interrupt commands sent by the optimizer that violate the policy as determined by the conformance reasoner.

15. The device of claim 14, the controller further comprising a policy manager configured to validate a proposed modification of the policy.

16. The device of claim 15, the policy manager further configured to:

maintain a plurality of configuration modes, each configuration mode representing a set of policies applied to the device when the configuration mode is active; and

provide an interface to allow an operator of the device to query the state of each configuration mode and to change the active configuration mode to one of the plurality of configuration modes.

17. The device of claim 15, wherein the policy defines regulatory requirements or requirements for the candidate transmission frequency set by an operator of the device.