Methods and apparatus for machine-to-machine based communication service classes

• US 8,737,989 B2
• Filed: 08/29/2008
• Issued: 05/27/2014
• Est. Priority Date: 08/29/2008
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Luft, Achim
• Primary Examiner(s): Hua, Quan M
• Application Number:
  US12/231,095
• Publication Number:
  US 20100057485A1
• Time in Patent Office: 2,097 Days
• Field of Search: 455/411, 455/410, 455/405, 455/414.1, 455/456.1, 455/418, 455/426.2, 455/432.1, 455/435.1, 455/466, 726/27, 726/35, 726 1- 21, 726/26, 370328-338, 379/142.05, 379/142.06
• US Class Current: 455/432.3
• CPC Class Codes: H04L 43/10 Active monitoring, e.g. heartbeat, ping or trace-route
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 24/08 Testing, supervising or monitoring using real traffic
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities
• CPC Class Codes: H04W 88/18 Service support devices; Network management devices

Abstract

Methods and apparatus enabling a wireless network to provide differentiated services to a machine-to-machine (M2M) client. In one embodiment, the wireless network comprises a UMTS network, and the Home Location Register (HLR) entity identifies subscriptions as machine-to-machine (M2M) enabled devices based on flags or other descriptors associated with each M2M device, and imposes one or more rule sets (e.g., service restrictions) based on this identification. The classification of M2M devices within the HLR may optionally include additional capability or profile data for the M2M device (e.g. static, low mobility, low data activity, etc.). Various other network entities may use the M2M identification to modify the delivered data service, so as to optimize network resources. Furthermore, monitoring of M2M client behavior can be used to detect and notify the network operator of abnormal, fraudulent, or malicious activity. Business methods utilizing the aforementioned methods and apparatus are also disclosed.

Claims

1. A method for operating a wireless network, comprising:

receiving a wireless service request message from a client device;

determining, based on profile information associated with the client device, whether the client device is associated with a station category selected from a group of station categories that includes at least;

a first station category that corresponds to an ordinary subscriber, and

a second station category that corresponds to an automated apparatus subscriber,

wherein the profile information is derived from monitoring a pattern of activity of the client device for a predetermined period of time;

upon determining that the client device is associated with the second station category, assigning the second station category to the client device; and

implementing a plurality of operating rules that are based on the second station category and restrict a manner in which the wireless service is provided to the client device.

2. The method of claim 1, wherein at least one operating rule of the plurality of operating rules restricts the client device from performing a location update.

3. The method of claim 1, further comprising determining whether the client device has issued a location update request.

4. The method of claim 1, wherein at least one operating rule of the plurality of operating rules restricts the client device'"'"'s access to the wireless service based at least in part on a temporal parameter.

5. The method of claim 4, wherein the at least one operating rule restricts a number or a volume of data traffic communicated with the client device.

6. The method of claim 4, wherein the at least one operating rule allows data traffic to be initiated by the client device only during certain prescribed windows of time.

7. The method of claim 4, wherein the at least one operating rule restricts data traffic initiated by the client device to a certain amount per a particular unit of time.

8. The method of claim 1, wherein at least one operating rule of the plurality of operating rules restricts data traffic with the client device to a maximum value.

9. The method of claim 1, wherein at least one operating rule of the plurality of operating rules restricts the client device'"'"'s access to the wireless network based on a network traffic parameter.

10. The method of claim 9, wherein the network traffic parameter specifies an amount of data traffic that is permitted to pass through a source cell.

11. The method of claim 9, wherein the network traffic parameter specifies an amount of data traffic that is permitted to pass through a target cell.

12. The method of claim 1, wherein the wireless network comprises a Universal Mobile Telecommunications System (UMTS) cellular network.

13. A non-transitory computer-readable storage medium adapted to store a computer program, wherein the computer program, when executed by a processing device, causes the processing device to carry out steps that include:

receiving a wireless service request message from a client device;

determining, based on profile information associated with the client device, that the client device corresponds to an automated apparatus user type, wherein the profile information is derived from monitoring a pattern of activity of the client device for a predetermined period of time;

assigning the automated apparatus user type to the client device, wherein the automated apparatus user type is one of a plurality of user types that are different from one another;

implementing a set of operating rules for the client device wherein the set of operating rules is based at least in part on the automated apparatus user type;

determining that a violation of an operating rule from the set of operating rules has occurred and flagging the violation as a potential fraud; and

imposing connectivity restrictions on the client device wherein the set of operating rules.

14. The non-transitory computer-readable storage medium of claim 13, wherein the set of operating rules comprises a first operating rule that governs an operation of outgoing calls from the client device, and a second operating rule that governs an operation of incoming calls to the client device.

15. The non-transitory computer-readable storage medium of claim 13, wherein the set of operating rules comprises an operating rule that restricts the client device from accessing the wireless service based on a time parameter.

16. The non-transitory computer-readable storage medium of claim 13, wherein at least one operating rule in the set of operating rules restricts data traffic with the client device to a maximum value.

17. The non-transitory computer-readable storage medium of claim 13, wherein at least one operating rule in the set of operating rules restricts the client device'"'"'s access to the wireless service based on a network traffic parameter.

18. The non-transitory computer-readable storage medium of claim 17, wherein the network traffic parameter specifies an amount of data traffic that is permitted to pass through a source cell or a target cell.

19. The non-transitory computer-readable storage medium of claim 13, wherein at least one operating rule in the set of operating rules restricts data traffic initiated by the client device to a fixed amount per a unit of time.

20. The non-transitory computer-readable storage medium of claim 13, wherein the wireless service is provided by a cellular wireless network compliant with Universal Mobile Telecommunications System (UMTS), and the automated apparatus user type comprises a machine-to-machine (M2M) user type.

21. The non-transitory computer-readable storage medium of claim 13, wherein the profile information is stored by a wireless network that provides the wireless service, and is at least partly constructed based on anecdotal observations of the pattern of activity of the client device.

22. The non-transitory computer-readable storage medium of claim 13, wherein the computer program, when executed by a processing device, further causes the processing device to carry out a step that involves causing the client device to perform location updates only during one or more prescribed periods of time.

23. An apparatus for use in a wireless network, comprising:

a digital processor;

at least one network interface in data communication with the digital processor; and

a memory storing at least one computer program, wherein the at least one computer program includes instructions that are configured to comprising instructions which when executed by the digital processor, cause the apparatus to;

receive a wireless service request message from a client device;

monitor a pattern of activity of the client device for a predetermined period of time to derive profile information associated with the client device;

determine, based on the profile information associated with the client device, whether the client device is associated with a station category selected from a group of station categories that includes at least;

a first station category that corresponds to an ordinary subscriber, and

a second station category that corresponds to an automated apparatus subscriber;

upon determining that the client device is associated with the second station category, assign the second station category to the client device; and

implement a plurality of operating rules that are based on the second station category and restrict a manner in which the wireless service is provided to the client device.

24. The apparatus of claim 23, wherein the wireless network comprises a Universal Mobile Telecommunications System (UMTS) wireless network, and the apparatus comprises a home location register (HLR) apparatus.

25. The apparatus of claim 23, wherein at least one operating rule of the plurality of operating rules is intended to facilitate detection of surreptitious use or service theft on an account associated with the client device.

26. A method for operating a wireless network, the method comprising:

receiving a wireless service request message from a client device;

determining, based on profile information associated with the client device, that the client device corresponds to an automated apparatus user type, wherein the profile information is derived from monitoring a pattern of activity of the client device for a predetermined period of time;

assigning the automated apparatus user type to the client device, wherein the automated apparatus user type is one of a plurality of user types that are different from one another;

implementing a set of operating rules for the client device, wherein the set of operating rules is based at least in part on the automated apparatus user type; and

determining that a violation of an operating rule from the set of operating rules has occurred and flagging the violation as a potential fraud; and

restricting data traffic with the client device to a maximum value.

27. The method of claim 26, wherein the network comprises a Universal Mobile Telecommunications System (UMTS) wireless network.

28. The method of claim 26, wherein at least one operating rule in the set of operating rules is intended to facilitate detection of surreptitious use or service theft on an account associated with the client device.

29. The method of claim 26, wherein the set of operating rules includes an operating rule that restricts the client device from accessing the wireless service based on a time parameter.

30. The method of claim 26, wherein the set of operating rules comprises an operating rule that restricts the client device from accessing the wireless network based on a network traffic parameter.

31. The method of claim 30, wherein the network traffic parameter comprises an amount of data traffic that is allowed to pass through one of a source cell or a target cell.

32. A method for governing an operation of a client device in a wireless network, comprising:

receiving a wireless service request message from the client device;

determining, based on profile information associated with the client device, that the client device corresponds to an automated apparatus user type, wherein the profile information is derived from monitoring a pattern of activity of the client device for a predetermined period of time;

assigning the automated apparatus user type to the client device, wherein the automated apparatus user type is one of a plurality of user types that different from one another;

implementing a set of operating rules for the client device, wherein the set of operating rules is based at least in part on the automated apparatus user type;

determining that a violation of an operating rule from the set of operating rules has occurred and flagging the violation as a potential fraud; and

imposing connectivity restrictions on the client device.

33. The method of claim 32, wherein the set of operating rules comprises at least one operating rule that governs an operation of outgoing calls from the client device, and at least one operating rule that governs an operation of incoming calls to the client device.

34. The method of claim 32, wherein at least one of the operating rules in the set of operating rules restricts data traffic initiated by the client device to a fixed amount per a unit of time.

35. The method of claim 32, wherein the wireless network comprises a cellular wireless network compliant with Universal Mobile Telecommunications System (UMTS), and the automated apparatus user type comprises a machine-to-machine (M2M) user type.