SYSTEM AND METHOD FOR PROVIDING VIRTUAL USER GROUPS IN A NETWORK ENVIRONMENT

• US 20110191826A1
• Filed: 02/04/2010
• Published: 08/04/2011
• Est. Priority Date: 02/04/2010
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Ballal, Dhiraj D., Subramanian, Saravanadas P., B.R, Venkatesh Gota
• Granted Patent: US 9,003,489 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A method is provided in one example and includes communicating an access request to a network element, the access request is associated with network authentication relating to a subscriber. The method also includes receiving an access response that includes a profile associated with the subscriber. The profile can include a group attribute that defines the subscriber as being part of a group of subscribers sharing a network data plan, which defines a data allotment assigned to the group over a specified time interval. In more detailed embodiments, a unique data string sent by an Authentication, Authorization, and Accounting element is received, where the unique data string identifies a full set of subscribers belonging to the group. Data underutilization of a first subscriber is offset by data overutilization of a second subscriber, where a summation of the data underutilization and the data overutilization do not exceed the data allotment assigned.

Claims

1. A method, comprising:

communicating an access request to a network element, wherein the access request is associated with network authentication relating to a subscriber; and

receiving an access response that includes a profile associated with the subscriber, wherein the profile includes a group attribute that defines the subscriber as being part of a group of subscribers sharing a network data plan that defines a data allotment assigned to the group over a specified time interval.

2. The method of claim 1, wherein the receiving includes receiving a unique data string sent by an Authentication, Authorization, and Accounting (AAA) element, and wherein the unique data string identifies a full set of subscribers belonging to the group.

3. The method of claim 1, wherein data underutilization of a first subscriber of the group is offset by data overutilization of a second subscriber of the group, and wherein a summation of the data underutilization and the data overutilization do not exceed the data allotment assigned to the group.

4. The method of claim 1, wherein the group attribute identifies the subscriber as belonging to the group of subscribers by using a selected one of an International Mobile Subscriber Identity (IMSI), a Mobile Subscriber Integrated Services Digital Network Number (MSISDN), a user name, and an Internet protocol (IP) address of the subscriber.

5. The method of claim 1, wherein a first data threshold is defined for each subscriber of the group separately from the data allotment assigned to the group in the network data plan.

6. The method of claim 1, further comprising:

creating a group control block for data propagation associated with the group of subscribers, wherein individual network bearer paths are associated with the group control block; and

creating call detail records for data propagation associated with the group of subscribers.

7. The method of claim 1, wherein a rating group identifier is used to track intra-group data usage between the subscribers of the group independent of tracking of external communications involving entities outside of the group of subscribers.

8. Logic encoded in one or more tangible media that includes code for execution and when executed by a processor operable to perform operations comprising:

communicating an access request to a network element, wherein the access request is associated with network authentication relating to a subscriber; and

receiving an access response that includes a profile associated with the subscriber, wherein the profile includes a group attribute that defines the subscriber as being part of a group of subscribers sharing a network data plan that defines a data allotment assigned to the group over a specified time interval.

9. The logic of claim 8, wherein the receiving includes receiving a unique data string sent by an Authentication, Authorization, and Accounting (AAA) element, and wherein the unique data string identifies a full set of subscribers belonging to the group.

10. The logic of claim 8, wherein data underutilization of a first subscriber of the group is offset by data overutilization of a second subscriber of the group, and wherein a summation of the data underutilization and the data overutilization do not exceed the data allotment assigned to the group.

11. The logic of claim 8, wherein the group attribute identifies the subscriber as belonging to the group of subscribers by using a selected one of an International Mobile Subscriber Identity (IMSI), a Mobile Subscriber Integrated Services Digital Network Number (MSISDN), a user name, and an Internet protocol (IP) address of the subscriber.

12. The logic of claim 8, wherein a first data threshold is defined for each subscriber of the group separately from the data allotment assigned to the group in the network data plan.

13. The logic of claim 8, wherein a rating group identifier is used to track intra-group data usage between the subscribers of the group independent of tracking of external communications involving entities outside of the group of subscribers.

14. An apparatus, comprising:

a memory element configured to store data,

a processor operable to execute instructions associated with the data, and

a group module configured to;

communicate an access request to a network element, wherein the access request is associated with network authentication relating to a subscriber; and

receive an access response that includes a profile associated with the subscriber, wherein the profile includes a group attribute that defines the subscriber as being part of a group of subscribers sharing a network data plan that defines a data allotment assigned to the group over a specified time interval.

15. The apparatus of claim 14, wherein the group module is further configured to receive a unique data string sent by an Authentication, Authorization, and Accounting (AAA) element, and wherein the unique data string identifies a full set of subscribers belonging to the group.

16. The apparatus of claim 14, wherein data underutilization of a first subscriber of the group is offset by data overutilization of a second subscriber of the group, and wherein a summation of the data underutilization and the data overutilization do not exceed the data allotment assigned to the group.

17. The apparatus of claim 14, wherein the group attribute identifies the subscriber as belonging to the group of subscribers by using a selected one of an International Mobile Subscriber Identity (IMSI), a Mobile Subscriber Integrated Services Digital Network Number (MSISDN), a user name, and an Internet protocol (IP) address of the subscriber.

18. The apparatus of claim 14, wherein a first data threshold is defined for each subscriber of the group separately from the data allotment assigned to the group in the network data plan.

19. The apparatus of claim 14, wherein a rating group identifier is used to track intra-group data usage between the subscribers of the group independent of tracking of external communications involving entities outside of the group of subscribers.

20. The apparatus of claim 14, further comprising:

an Authentication, Authorization, and Accounting (AAA) element configured to interact with the group module, wherein the AAA element includes a profile database configured to maintain a plurality of unique data strings, which identify sets of subscribers belonging to a plurality of subscriber groups.