Enhanced policy capabilities for mobile data services

• US 8,543,698 B2
• Filed: 05/21/2012
• Issued: 09/24/2013
• Est. Priority Date: 03/07/2008
• Status: Active Grant

• Current Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Original Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Inventors: Hu, Q. James, Eng, Douglas, Figurelle, Terry, Britt, Michael, McKnight, Jie
• Primary Examiner(s): VU, VIET DUY
• Application Number:
  US13/476,943
• Publication Number:
  US 20120297044A1
• Time in Patent Office: 491 Days
• Field of Search: 709/217, 709/219, 709/223, 709/224, 709/225, 709/227, 709/228, 709/229, 709/250
• US Class Current: 709/225
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1403 Architecture for metering, charging or billing
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04W 4/24 Accounting or billing

Abstract

A system and method for a mobile data access network to make policy control and charging decisions based on domain name queries. A mobile device sends a query about a domain name associated with a service a user of the mobile device wishes to engage. The access network carries the domain name query from a mobile device to a domain name server. The access network detects the domain name query and copies the queried domain name. The access network uses the queried domain name to make an incomplete policy decision. The policy decision is incomplete because one or more service data flow filters in the decision lack addresses for providers of the service. The access network detects a response to the domain name query and copies a service provider address from the response. The access network uses the service provider address to complete the policy decision.

Claims

1. A method for making a policy decision based on a domain name query, comprising:

detecting, by a processor of a policy enforcement engine, the domain name query for a domain name sent by a mobile device to a domain name server;

sending, by the processor, a request to a policy server for making an incomplete policy decision based on the domain name;

detecting, by the processor, a domain name response sent from the domain name server to the mobile device, the domain name response including an address for a service provider associated with the domain name that is queried;

completing, by the processor, the policy decision by using the address for the service provider to add service provider address information to the incomplete policy decision; and

applying, by the processor, the policy decision to a service data flow between the mobile device and the service provider.

2. The method of claim 1, wherein the making the incomplete policy decision further comprises making a policy decision with a service data flow filter that lacks the service provider address information, where the service provider address information comprises the address of the service provider address.

3. The method of claim 1, wherein the making the incomplete policy decision further comprises making a policy decision with a service data flow filter that lacks service provider address information, where service provider address information comprises a regular expression based on the address of the service provider.

4. The method of claim 1, wherein the detecting the domain name query further comprises examining packets passing through an access gateway and detecting packets that have header destination addresses that match a regular expression based on a destination address for the domain name server.

5. The method of claim 1, wherein the policy enforcement engine is in an access gateway.

6. The method of claim 1, wherein the making the incomplete policy decision is performed by the policy server.

7. A non-transitory computer-readable medium storing a plurality of instructions which, when executed by a processor of a policy enforcement engine, cause the processor to perform operations for making a policy decision based on a domain name query, the operations comprising:

detecting the domain name query for a domain name sent by a mobile device to a domain name server;

sending a request to a policy server for making an incomplete policy decision based on the domain name;

detecting a domain name response sent from the domain name server to the mobile device, the domain name response including an address for a service provider associated with the domain name that is queried;

completing the policy decision by using the address for the service provider to add service provider address information to the incomplete policy decision; and

applying the policy decision to a service data flow between the mobile device and the service provider.

8. The non-transitory computer-readable medium of claim 7, wherein the making the incomplete policy decision further comprises making a policy decision with a service data flow filter that lacks the service provider address information, where the service provider address information comprises the address of the service provider address.

9. The non-transitory computer-readable medium of claim 7, wherein the making the incomplete policy decision further comprises making a policy decision with a service data flow filter that lacks service provider address information, where service provider address information comprises a regular expression based on the address of the service provider.

10. The non-transitory computer-readable medium of claim 7, wherein the detecting the domain name query further comprises examining packets passing through an access gateway and detecting packets that have header destination addresses that match a regular expression based on a destination address for the domain name server.

11. The non-transitory computer-readable medium of claim 7, wherein the policy enforcement engine is in an access gateway.

12. The non-transitory computer-readable medium of claim 7, wherein the making the incomplete policy decision is performed by the policy server.

13. An apparatus for making a policy decision based on a domain name query, comprising:

a processor of a policy enforcement engine; and

a computer-readable medium storing a plurality of instructions which, when executed by the processor, cause the processor to perform operations, the operations comprising;

detecting the domain name query for a domain name sent by a mobile device to a domain name server;

sending a request to a policy server for making an incomplete policy decision based on the domain name;

detecting a domain name response sent from the domain name server to the mobile device, the domain name response including an address for a service provider associated with the domain name that is queried;

completing the policy decision by using the address for the service provider to add service provider address information to the incomplete policy decision; and

applying the policy decision to a service data flow between the mobile device and the service provider.

14. The apparatus of claim 13, wherein the making the incomplete policy decision further comprises making a policy decision with a service data flow filter that lacks the service provider address information, where the service provider address information comprises the address of the service provider address.

15. The apparatus of claim 13, wherein the making the incomplete policy decision further comprises making a policy decision with a service data flow filter that lacks service provider address information, where service provider address information comprises a regular expression based on the address of the service provider.

16. The apparatus of claim 13, wherein the detecting the domain name query further comprises examining packets passing through an access gateway and detecting packets that have header destination addresses that match a regular expression based on a destination address for the domain name server.