Verifiable and accurate service usage monitoring for intermediate networking devices

• US 8,547,872 B2
• Filed: 04/12/2012
• Issued: 10/01/2013
• Est. Priority Date: 01/28/2009
• Status: Active Grant

• Current Assignee: Headwater Research LLC (Greg Raleigh)
• Original Assignee: Headwater Partners I LLC (Greg Raleigh)
• Inventors: Raleigh, Gregory G.
• Primary Examiner(s): Huq, Obaidul
• Application Number:
  US13/445,180
• Publication Number:
  US 20120195223A1
• Time in Patent Office: 537 Days
• Field of Search: 370/229, 370/230, 370/241, 370/252, 370/351, 370/389, 370/395.1, 370/395.2, 370/395.21, 370/395.4, 370/395.42, 370/395.43
• US Class Current: 370/252
• CPC Class Codes: G06F 15/177 Initialisation or configuration control processor initialisation G06F9/4405
• CPC Class Codes: G06Q 10/06315 Needs-based resource requirements planning or analysis
• CPC Class Codes: G06Q 10/06375 Prediction of business process outcome or impact based on a proposed change
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/0207 Discounts or incentives, e.g. coupons or rebates
• CPC Class Codes: G06Q 30/0241 Advertisements
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: G06Q 30/0284 Time or distance, e.g. usage of parking meters or taximeters
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1407 Policy-and-charging control [PCC] architecture
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0876 Aspects of the degree of configuration automation
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 : Policy-based network configuration management
• CPC Class Codes: H04L 41/5003 : Managing SLA; Interaction between SLA and QoS
• CPC Class Codes: H04L 41/5025 : by proactively reacting to service quality change, e.g. by reconfiguration after service quality degradation or upgrade
• CPC Class Codes: H04L 41/5054 : Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components
• CPC Class Codes: H04L 47/20 : Traffic policing
• CPC Class Codes: H04L 47/2408 : for supporting different services, e.g. a differentiated services [DiffServ] type of service
• CPC Class Codes: H04L 51/046 : Interoperability with other network applications or services
• CPC Class Codes: H04L 63/0236 : Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0892 : by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/145 : avoiding end of session, e.g. keep-alive, heartbeats, resumption message or wake-up for inactive or interrupted session
• CPC Class Codes: H04L 67/306 : User profiles
• CPC Class Codes: H04L 67/34 : involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/51 : Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/55 : Push-based network services
• CPC Class Codes: H04L 67/564 : Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/63 : Routing a service request depending on the request content or context
• CPC Class Codes: H04L 9/32 : including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04M 15/00 : Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 15/49 : Connection to several service providers
• CPC Class Codes: H04M 15/58 : based on statistics of usage or network monitoring
• CPC Class Codes: H04M 15/61 : based on the service used
• CPC Class Codes: H04M 15/66 : Policy and charging system
• CPC Class Codes: H04M 15/80 : Rating or billing plans; Tariff determination aspects
• CPC Class Codes: H04M 15/8055 : Selecting cheaper transport technology for a given service
• CPC Class Codes: H04M 15/88 : Provision for limiting connection, or expenditure
• CPC Class Codes: H04M 2215/0188 : Network monitoring; statistics on usage on called/calling number
• CPC Class Codes: H04W 12/00 : Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/02 : Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/037 : of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 12/37 : Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 24/08 : Testing, supervising or monitoring using real traffic
• CPC Class Codes: H04W 28/02 : Traffic management, e.g. flow control or congestion control
• CPC Class Codes: H04W 28/0215 : based on user or device properties, e.g. MTC-capable devices services for machine-to-machine communication [M2M] or machine type communication [MTC] H04W4/70; wireless resource selection or allocation plan definition based on terminal or device properties H04W72/51
• CPC Class Codes: H04W 28/0268 : using specific QoS parameters for wireless networks, e.g. QoS class identifier [QCI] or guaranteed bit rate [GBR] negotiating SLA or negotiating QoS H04W28/24
• CPC Class Codes: H04W 28/12 : using signalling between network elements
• CPC Class Codes: H04W 4/02 : Services making use of location information
• CPC Class Codes: H04W 4/12 : Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 4/18 : Information format or content conversion, e.g. adaptation by the network of the transmitted or received information for the purpose of wireless delivery to users or terminals
• CPC Class Codes: H04W 4/20 : Services signaling; Auxiliary data signalling, i.e. transmitting data via a non-traffic channel
• CPC Class Codes: H04W 4/24 : Accounting or billing
• CPC Class Codes: H04W 4/50 : Service provisioning or reconfiguring
• CPC Class Codes: H04W 48/14 : using user query or user detection
• CPC Class Codes: H04W 48/16 : Discovering, processing access restriction or access information
• CPC Class Codes: H04W 72/0453 : Resources in frequency domain, e.g. a carrier in FDMA
• CPC Class Codes: H04W 8/02 : Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
• CPC Class Codes: H04W 8/18 : Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/20 : Transfer of user or subscriber data
• CPC Class Codes: H04W 84/04 : Large scale networks; Deep hierarchical networks
• CPC Class Codes: H04W 84/042 : Public Land Mobile systems, e.g. cellular systems
• CPC Class Codes: H04W 84/12 : WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 : adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals
• CPC Class Codes: H04W 88/08 : Access point devices
• CPC Class Codes: Y02P 90/80 : Management or planning

Abstract

Various embodiments are disclosed for a services policy communication system and method. In some embodiments, an intermediary networking device provides a service intermediary or intermediate connection between a network and one or more communications devices; implements a service policy set for assisting control of the intermediate networking device use of a service on the network, in which the service policy set includes one or more service policies, each policy being associated with either the intermediate networking device or a communications device; and monitors use of the service based on the service policy set; and in which the one or more of the communication devices include a service usage notification capability, and the implementation of the first service policy set is verified.

Claims

1. A system comprising:

a first end point device comprising;

one or more access network modems enabling the first end point device to communicate over at least a first wireless access network;

a local area network modem capable of communicating with one or more additional end point devices over a local area network; and

one or more device agents capable of implementing one or more device agent policies associated with an access network communication service plan over the first wireless access network, the one or more device agent policies for assisting in implementing one or more first access network usage accounting policies associated with the access network communication service plan, one or more first access network notification policies associated with the access network communication service plan, one or more first access network control policies associated with the access network communication service plan, or a combination of these;

a first service monitor capable of determining a first usage indication, the first usage indication providing a first indication of an intended, attempted, or successful communication over the first wireless access network by the first end point device; and

an integrity element capable of;

obtaining the first usage indication,

obtaining a second usage indication, the second usage indication providing a second indication of the intended, attempted, or successful communication over the first wireless access network by the first end point device,

evaluating the first usage indication and the second usage indication to determine whether a current access network communication service plan configuration is a correct access network communication service plan configuration, and

if it is determined that the current access network communication service plan configuration is not a correct access network communication service plan configuration, performing a corrective action.

2. The system of claim 1, wherein the integrity element is inaccessible to a user of the first end point device.

3. The system of claim 1, wherein the one or more device agents are capable of forwarding data between the access network modem and the local area network modem to provide a forwarding service to the one or more additional end point devices, and wherein the one or more device agent policies assist the one or more device agents in providing a forwarding service plan option to at least one of the one or more additional end point devices, the forwarding service plan option for presentation through a user interface of the at least one of the one or more additional end point devices.

4. The system of claim 3, wherein the first usage indication comprises an indication of an intended, attempted, or successful use of the forwarding service, and wherein the second usage indication indicates whether a user has selected the forwarding service plan option.

5. The system of claim 4, wherein evaluating the first usage indication and the second usage indication to determine whether a current access network communication service plan configuration is a correct access network communication service plan configuration comprises determining whether usage of the forwarding service is provided for by the access network communication service plan, and wherein the corrective action comprises:

obtaining a response to the forwarding service plan option, and

if the user response indicates acceptance of the forwarding service plan option, allowing the intended, attempted, or successful use of the forwarding service.

6. The system of claim 5, wherein obtaining the response to the forwarding service plan option comprises obtaining the response through the user interface of the at least one of the one or more additional end point devices.

7. The system of claim 3, wherein the one or more device agent policies comprise a control policy for restricting or not allowing usage of the forwarding service if the access network communication service plan does not provide for the usage of the forwarding service.

8. The system of claim 3, wherein the one or more device agent policies assist the one or more device agents in presenting an offer through a user interface of the first end point device, the offer for enabling the forwarding service.

9. The system of claim 8, wherein the one or more device agent policies assist the one or more device agents in:

obtaining a response to the offer through the user interface of the first end point device, and

if the response indicates that the user of the first end point device accepts the offer, configuring at least a portion of the one or more device agent policies to allow the at least one of the one or more additional end point devices to use the forwarding service.

10. The system of claim 1, wherein the one or more device agent policies assist the one or more device agents in routing or directing at least a portion of traffic from the first end point device to a particular network address, to a particular network destination, or over a particular route, path, or tunnel.

11. The system of claim 10, wherein the one or more device agent policies assist the one or more device agents in implementing the one or more first access network control policies associated with the access network communication service plan, and wherein the one or more first access network control policies assist in governing forwarding of data between the access network modem and the local area network modem to provide a forwarding service to the one or more additional end point devices, and wherein obtaining the first usage indication comprises determining that the one or more device agents are attempting to route or direct, or are successfully routing or directing, the at least a portion of traffic from the first end point device to the particular network address, to the particular network destination, or over the particular route, path, or tunnel, and wherein the second usage indication comprises an indication of whether a user has selected a forwarding service plan option.

12. The system of claim 11, wherein evaluating the first usage indication and the second usage indication to determine whether a current access network communication service plan configuration is a correct access network communication service plan configuration comprises determining that the first end point device is attempting to provide or is successfully providing the forwarding service to at least one of the one or more additional end point devices, and wherein the corrective action comprises restricting communication associated with the first end point device, restricting communication associated with the at least one of the one or more additional end point devices, providing a notification to the first end point device, providing a notification to the at least one of the one or more additional end point devices, modifying a setting on the first end point device, or a combination of these.

13. The system of claim 1, wherein the one or more device agents are capable of forwarding data between the access network modem and the local area network modem to provide a forwarding service to the one or more additional end point devices, and wherein the one or more device agent policies assist the one or more device agents in presenting a forwarding service plan option through a user interface of the first end point device.

14. The system of claim 13, wherein the first usage indication comprises an indication of an intended, attempted, or successful use of the forwarding service, and wherein the second usage indication indicates whether a user has selected the forwarding service plan option.

15. The system of claim 14, wherein evaluating the first usage indication and the second usage indication to determine whether a current access network communication service plan configuration is a correct access network communication service plan configuration comprises determining whether usage of the forwarding service is provided for by the access network communication service plan, and wherein the corrective action comprises:

obtaining a response to the forwarding service plan option, and

if the user response indicates acceptance of the forwarding service plan option, allowing the intended, attempted, or successful use of the forwarding service.

16. The system of claim 15, wherein obtaining the response to the forwarding service plan option comprises obtaining the response through the user interface of the first end point device.

17. The system of claim 13, wherein the one or more device agent policies comprise a control policy for restricting or not allowing usage of the forwarding service if the access network communication service plan does not provide for the usage of the forwarding service.

18. The system of claim 1, wherein the one or more device agent policies comprise a traffic control policy for controlling communications over the first wireless access network.

19. The system of claim 18, wherein controlling communications over the first wireless access network comprises limiting, re-routing, or re-directing communications over the first wireless access network.

20. The system of claim 18, wherein the first service monitor is within a network system communicatively coupled to the first end point device over the first wireless access network, and wherein the one or more device agents are capable of assisting in determining the second usage indication.

21. The system of claim 20, wherein evaluating the first usage indication and the second usage indication to determine whether a current access network communication service plan configuration is a correct access network communication service plan configuration comprises determining whether the first usage indication is consistent with the second usage indication, and wherein the corrective action comprises changing an accounting of a service usage, restricting access by the first end point device to the first wireless access network, conducting additional policy integrity analysis, notifying an administrator, notifying a user, or a combination of these.

22. The system of claim 18, wherein the first service monitor is within a network system communicatively coupled to the first end point device over the first wireless access network, and wherein the first usage indication comprises a first measure of usage of the first wireless access network, and wherein the second usage indication comprises a second measure of usage of the first wireless access network, the first and second measures taken at different times.

23. The system of claim 22, wherein evaluating the first usage indication and the second usage indication to determine whether a current access network communication service plan configuration is a correct access network communication service plan configuration comprises:

determining a difference between the first measure and the second measure, and

comparing the difference to an expected or allowed difference, or to an expected range of differences.

24. The system of claim 23, wherein the evaluating the first usage indication and the second usage indication to determine whether a current access network communication service plan configuration is a correct access network communication service plan configuration further comprises determining if the difference exceeds a value, or determining if the difference is not within the expected range of differences, and wherein the corrective action comprises changing an accounting of a service usage, restricting access by the first end point device to the first wireless access network, conducting additional policy integrity analysis, notifying an administrator, notifying a user, or a combination of these.

25. The system of claim 24, wherein controlling communications over the first wireless access network comprises:

controlling a particular aspect of data communication;

controlling data communication during a period of time;

or a combination of these.

26. The system of claim 18, wherein controlling communications over the first wireless access network comprises controlling a particular aspect of data usage, the particular aspect of data usage comprising:

traffic of a particular content type;

traffic associated with a particular network destination, network end point, network address, URL, website, or server;

traffic associated with a particular traffic route, traffic path, traffic re-direction, or traffic tunnel;

traffic associated with a particular network type;

traffic associated with an ambient service;

or a combination of these.

27. The system of claim 18, wherein controlling communications over the first wireless access network comprises controlling a background activity or a background download of the first end point device.

28. The system of claim 18, wherein controlling communications over the first wireless access network comprises controlling traffic associated with a category of data usage, the category of data usage comprising video content, streaming content, music content, a voice-over-Internet-protocol (VOIP) communication, or a combination of these.

29. The system of claim 18, wherein controlling communications over the first wireless access network comprises controlling traffic associated with a particular application program on the first end point device or on at least one of the one or more additional end point devices.

30. The system of claim 18, wherein controlling communications over the first wireless access network comprises controlling traffic associated with an ambient service, the ambient service associated with a sponsor entity, the sponsor entity responsible for subsidizing at least a portion of usage of the first wireless access network associated with the ambient service, the sponsor entity being an entity other than a subscriber associated with the first end point device.

31. The system of claim 30, wherein controlling traffic associated with the ambient service comprises restricting the traffic associated with the ambient service to one or more application servers, websites, or network destinations associated with the ambient service.

32. The system of claim 30, wherein the access network communication service plan is a first service plan, and wherein the first end point device further comprises a user interface, and wherein controlling traffic associated with the ambient service comprises allowing access to one or more network elements capable of providing one or more service plan selection options to the first end point device, and wherein the one or more device agents are further capable of:

presenting at least one of the one or more service plan selection options through the user interface, the at least one of the one or more service plan selection options offering a second service plan,

obtaining a user selection through the user interface, and

sending an indication of the user selection to a network system communicatively coupled to the first end point device over the first wireless access network.

33. The system of claim 32, wherein the second service plan provides for one or more additional access permissions that are greater than one or more initial permissions provided by the first service plan.

34. The system of claim 32, wherein the second service plan provides for access to a data service, a voice service, a text service, or a combination of these.

35. The system of claim 18, wherein the one or more access network modems enable the first end point device to communicate over a second wireless access network, and wherein the second wireless access network is a home network, and wherein the first wireless access network is a roaming network, and wherein controlling communications over the first wireless access network comprises controlling traffic over the roaming network.

36. The system of claim 18, wherein controlling communications over the first wireless access network comprises routing or directing at least an aspect of a particular service activity to a particular traffic path, the particular traffic path comprising a particular traffic route, a particular traffic tunnel, a particular network address, a particular network end point, a particular URL, a particular network domain, or a combination of these.

37. The system of claim 36, wherein obtaining the first usage indication comprises detecting the intended, attempted, or successful communication over the particular traffic path.

38. The system of claim 36, wherein obtaining the second usage indication comprises obtaining a traffic aspect by inspecting one or more packets or communication flows associated with the intended, attempted, or successful communication over the particular traffic path.

39. The system of claim 38, wherein evaluating the first usage indication and the second usage indication to determine whether a current access network communication service plan configuration is a correct access network communication service plan configuration comprises determining whether the traffic aspect is consistent with the particular service activity, and wherein the corrective action comprises implementing or modifying a control policy to control or restrict communication associated with the first end point device or the one or more additional end point devices;

notifying a user;

assisting in notifying a user;

implementing a service plan option;

modifying an accounting associated with the service plan;

conducting further analysis of a policy implementation;

notifying an administrator;

assisting in notifying an administrator;

or a combination of these.

40. The system of claim 39, wherein the corrective action comprises notifying a user or assisting in notifying a user, and wherein notifying a user or assisting in notifying a user comprises assisting in offering a service plan option associated with the particular service activity.

41. The system of claim 36, wherein the second usage indication comprises an indication of a user preference either accepting or declining a service plan option associated with the particular service activity.

42. The system of claim 41, wherein determining, based on the first usage indication and the second indication, whether the one or more device agents are operating in accordance with the one or more device agent policies comprises determining if the user preference declines the service plan option associated with the particular service activity, and wherein the corrective action comprises implementing or modifying a control policy to control or restrict communication associated with the first end point device or the one or more additional end point devices;

notifying a user;

assisting in notifying a user;

implementing a service plan option;

modifying an accounting associated with the service plan;

conducting further analysis of a policy implementation;

notifying an administrator;

assisting in notifying an administrator;

or a combination of these.

43. The system of claim 1, wherein the one or more device agents are capable of implementing the first service monitor, and wherein the one or more device agent policies comprise a monitoring policy enabling the one or more device agents to monitor attempted or successful communication over the first wireless access network and to generate the first usage indication, and wherein the first usage indication comprises a first record associated with the attempted or successful communication over the first wireless access network.

44. The system of claim 43, wherein the second usage indication comprises a second record associated with the attempted or successful communication over the first wireless access network, and wherein evaluating the first usage indication and the second usage indication to determine whether a current access network communication service plan configuration is a correct access network communication service plan configuration comprises determining whether the first record and the second record are consistent with the one or more device agents correctly applying the monitoring policy.

45. The system of claim 44, wherein the corrective action comprises changing a service usage accounting, restricting access to the access network communication service plan over the first wireless access network, conducting further analysis of a policy integrity, notifying an administrator, notifying a user, or a combination of these.

46. The system of claim 44, further comprising a second service monitor, the second service monitor being within a network system communicatively coupled to the first end point device over the first wireless access network, and wherein the second service monitor is capable of generating the second record.

47. The system of claim 43, wherein the monitoring policy enables the one or more device agents to monitor attempted or successful communication over the first wireless access network associated with a particular service activity less than all available service activities.

48. The system of claim 1, wherein the first end point device further comprises a user interface, and wherein the one or more device agent policies comprise a notification policy for assisting the one or more device agents in presenting, through the user interface, information about a usage of the access network communication service plan or a service plan selection option to allow usage of the access network communication service plan.

49. The system of claim 48, wherein the first usage indication comprises an indication of an attempted or successful usage of the access network communication service plan.

50. The system of claim 48, wherein the first usage indication comprises a user selection for enabling access to the access network communication service plan.

51. The system of claim 48, wherein the second usage indication comprises a user acknowledgment or a user selection obtained through the user interface.

52. The system of claim 51, wherein evaluating the first usage indication and the second usage indication to determine whether a current access network communication service plan configuration is a correct access network communication service plan configuration comprises determining whether the user acknowledgment indicates that a user acknowledges usage of the access network communication service or the user selection indicates that the user selects a service plan option enabling access to the access network communication service plan.

53. The system of claim 52, wherein the corrective action comprises restricting or not allowing access to the access network communication service, notifying a user of the first end point device, or a combination of these if the user acknowledgment indicates that the user does not acknowledge usage of the access network communication service or the user selection does not indicate that the user selects a service plan option enabling access to the access network communication service plan.

54. The system of claim 1, wherein the one or more device agent policies assist the one or more device agents in tagging a traffic flow associated with a particular service activity of a plurality of service activities available to the first end point device.

55. The system of claim 54, wherein the first usage indication comprises a record of the tagged traffic flow associated with the particular service activity.

56. The system of claim 54, wherein the second usage indication comprises a record of an attempted or successful communication that is not tagged.

57. The system of claim 54, wherein the second usage indication comprises an indication of whether a user accepts or declines a service plan option associated with the particular service activity.

58. The system of claim 54, wherein evaluating the first usage indication and the second usage indication to determine whether a current access network communication service plan configuration is a correct access network communication service plan configuration comprises determining whether traffic is being properly tagged, and wherein the corrective action comprises changing a service usage accounting, restricting access to the first wireless access network, conducting further analysis of policy integrity, notifying an administrator, notifying a user, or a combination of these.

59. The system of claim 54, wherein evaluating the first usage indication and the second usage indication to determine whether a current access network communication service plan configuration is a correct access network communication service plan configuration comprises detecting an attempted or successful communication associated with the particular service activity and determining whether the service plan provides for the particular service activity.

60. The system of claim 54, wherein the corrective action comprises causing a notification to be sent to the first end point device or presented through a user interface of the first end point device, the notification offering a service plan option associated with the particular service activity.

61. The system of claim 1, wherein the one or more device agent policies assist the one or more device agents:

to route or re-direct traffic over a particular physical or logical channel c to a particular network destination;

to detect a communication attempt, determine that the communication attempt is outside of a current service plan policy associated with the access network communication service plan, and present an acknowledgment request or a service plan option through a user interface of the first end point device;

to limit communication by the first end point device;

to monitor and report information about a classification of communication;

to identify and tag a classification of service activity;

or a combination of these.

62. The system of claim 61, wherein the corrective action comprises:

implementing or modifying a policy to control or restrict communication associated with the first end point device or the one or more additional end point devices;

causing a notification to be sent to the first end point device or to at least one of the one or more additional end point devices;

assisting in causing the notification to be presented through a user interface of the first end point device or through a user interface of at least one of the one or more additional end point devices;

implementing a service plan option;

modifying a service plan accounting;

conducting further analysis of a policy implementation;

causing an administrator notification to be sent or presented to an administrator;

or a combination of these.

63. The system of claim 62, wherein the one or more device agents are capable of obtaining at least a portion of the one or more device agent policies from a network element communicatively coupled to the first end point device over the first wireless access network or from a device memory that is pre-configured based on a user preference or based on a provisioning operation during a manufacture, distribution, sale, or activation of the first end point device.

64. The system of claim 62, further comprising a service authentication element, and wherein the one or more device agents are further capable of obtaining a device credential and providing the device credential to the service authentication element over a secure communication channel.

65. The system of claim 1, wherein the one or more access network modems enable the first end point device to communicate over a second wireless access network, and wherein the one or more device agents are further capable of:

determining whether the first end point device is connected to the first wireless access network or the second wireless access network,

if the first end point device is connected to the first wireless access network, implementing the one or more device agent policies, and

if the first end point device is connected to the second wireless access network, not implementing at least an aspect of the one or more device agent policies.

66. The system of claim 65, wherein not implementing at least an aspect of the one or more device agent policies comprises assisting in implementing one or more second access network usage accounting policies associated with the access network communication service plan, one or more second access network notification policies associated with the access network communication service plan, one or more second access network control policies associated with the access network communication service plan, or a combination of these.

67. The system of claim 66, wherein:

the one or more first access network usage accounting policies associated with the access network communication service plan differ in at least an aspect from the one or more second access network usage accounting policies associated with the access network communication service plan,

the one or more first access network notification policies associated with the access network communication service plan differ in at least an aspect from the one or more second access network notification policies associated with the access network communication service plan,

the one or more first access network control policies associated with the access network communication service plan differ in at least an aspect from the one or more second access network control policies associated with the access network communication service plan,

or a combination of these.

68. The system of claim 65, wherein not implementing at least an aspect of the one or more device agent policies comprises not assisting in implementing at least one of the one or more first access network usage accounting policies associated with the access network communication service plan, at least one of the one or more first access network notification policies associated with the access network communication service plan, or at least one of the one or more first access network control policies associated with the access network communication service plan.

69. The system of claim 65, wherein not implementing at least an aspect of the one or more device agent policies comprises:

determining a modified one or more device agent policies by modifying at least an aspect of the one or more device agent policies, and

implementing the modified one or more device agent policies.

70. The system of claim 65, wherein the first wireless access network is a roaming network, and the second wireless access network is a home network.

71. The system of claim 65, wherein the first wireless access network is a 3G or 4G cellular network, and the second wireless access network is a WiFi network.