Verifiable service policy implementation for intermediate networking devices

• US 8,799,451 B2
• Filed: 03/02/2009
• Issued: 08/05/2014
• Est. Priority Date: 01/28/2009
• Status: Active Grant

• Current Assignee: Headwater Research LLC (Greg Raleigh)
• Original Assignee: Headwater Partners I LLC (Greg Raleigh)
• Inventors: Raleigh, Gregory G.
• Primary Examiner(s): SALL, EL HADJI MALICK
• Application Number:
  US12/380,773
• Publication Number:
  US 20100191846A1
• Time in Patent Office: 1,982 Days
• Field of Search: 709/224, 709/203, 709/217, 709/239, 455/404.2, 455/899
• US Class Current: 709/224
• CPC Class Codes: G06F 15/177 Initialisation or configuration control processor initialisation G06F9/4405
• CPC Class Codes: G06Q 10/06315 Needs-based resource requirements planning or analysis
• CPC Class Codes: G06Q 10/06375 Prediction of business process outcome or impact based on a proposed change
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/0207 Discounts or incentives, e.g. coupons or rebates
• CPC Class Codes: G06Q 30/0241 Advertisements
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: G06Q 30/0284 Time or distance, e.g. usage of parking meters or taximeters
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1407 Policy-and-charging control [PCC] architecture
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0876 Aspects of the degree of configuration automation
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 : Policy-based network configuration management
• CPC Class Codes: H04L 41/5003 : Managing SLA; Interaction between SLA and QoS
• CPC Class Codes: H04L 41/5025 : by proactively reacting to service quality change, e.g. by reconfiguration after service quality degradation or upgrade
• CPC Class Codes: H04L 41/5054 : Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components
• CPC Class Codes: H04L 47/20 : Traffic policing
• CPC Class Codes: H04L 47/2408 : for supporting different services, e.g. a differentiated services [DiffServ] type of service
• CPC Class Codes: H04L 51/046 : Interoperability with other network applications or services
• CPC Class Codes: H04L 63/0236 : Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0892 : by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/145 : avoiding end of session, e.g. keep-alive, heartbeats, resumption message or wake-up for inactive or interrupted session
• CPC Class Codes: H04L 67/306 : User profiles
• CPC Class Codes: H04L 67/34 : involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/51 : Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/55 : Push-based network services
• CPC Class Codes: H04L 67/564 : Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/63 : Routing a service request depending on the request content or context
• CPC Class Codes: H04L 9/32 : including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04M 15/00 : Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 15/49 : Connection to several service providers
• CPC Class Codes: H04M 15/58 : based on statistics of usage or network monitoring
• CPC Class Codes: H04M 15/61 : based on the service used
• CPC Class Codes: H04M 15/66 : Policy and charging system
• CPC Class Codes: H04M 15/80 : Rating or billing plans; Tariff determination aspects
• CPC Class Codes: H04M 15/8055 : Selecting cheaper transport technology for a given service
• CPC Class Codes: H04M 15/88 : Provision for limiting connection, or expenditure
• CPC Class Codes: H04M 2215/0188 : Network monitoring; statistics on usage on called/calling number
• CPC Class Codes: H04W 12/00 : Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/02 : Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/037 : of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 12/37 : Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 24/08 : Testing, supervising or monitoring using real traffic
• CPC Class Codes: H04W 28/02 : Traffic management, e.g. flow control or congestion control
• CPC Class Codes: H04W 28/0215 : based on user or device properties, e.g. MTC-capable devices services for machine-to-machine communication [M2M] or machine type communication [MTC] H04W4/70; wireless resource selection or allocation plan definition based on terminal or device properties H04W72/51
• CPC Class Codes: H04W 28/0268 : using specific QoS parameters for wireless networks, e.g. QoS class identifier [QCI] or guaranteed bit rate [GBR] negotiating SLA or negotiating QoS H04W28/24
• CPC Class Codes: H04W 28/12 : using signalling between network elements
• CPC Class Codes: H04W 4/02 : Services making use of location information
• CPC Class Codes: H04W 4/12 : Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 4/18 : Information format or content conversion, e.g. adaptation by the network of the transmitted or received information for the purpose of wireless delivery to users or terminals
• CPC Class Codes: H04W 4/20 : Services signaling; Auxiliary data signalling, i.e. transmitting data via a non-traffic channel
• CPC Class Codes: H04W 4/24 : Accounting or billing
• CPC Class Codes: H04W 4/50 : Service provisioning or reconfiguring
• CPC Class Codes: H04W 48/14 : using user query or user detection
• CPC Class Codes: H04W 48/16 : Discovering, processing access restriction or access information
• CPC Class Codes: H04W 72/0453 : Resources in frequency domain, e.g. a carrier in FDMA
• CPC Class Codes: H04W 8/02 : Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
• CPC Class Codes: H04W 8/18 : Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/20 : Transfer of user or subscriber data
• CPC Class Codes: H04W 84/04 : Large scale networks; Deep hierarchical networks
• CPC Class Codes: H04W 84/042 : Public Land Mobile systems, e.g. cellular systems
• CPC Class Codes: H04W 84/12 : WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 : adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals
• CPC Class Codes: H04W 88/08 : Access point devices
• CPC Class Codes: Y02P 90/80 : Management or planning

Abstract

A first end-user device comprising one or more modems enabling the first end-user device to communicate with a network system over a first network and with one or more other end-user devices over a second network, the first network comprising a wireless access network, and at least one processor configured to provide a forwarding service to the one or more other end-user devices, the forwarding service for forwarding first traffic between the one or more other end-user devices and the network system, implement a first service policy for assisting in control of the first traffic, implement a second service policy for assisting in control of second traffic associated with access by the first end-user device to a service over the first network, wherein the second service policy differs from the first service policy, and monitor or identify successful use or attempted use of the forwarding service.

Claims

1. A first end-user device capable of operating as an intermediate networking device, the first end-user device comprising:

one or more modems enabling the first end-user device to communicate with a network system over a first network and with one or more other end-user devices over a second network, the first network comprising a wireless access network;

at least one processor configured to execute one or more instructions that, when executed by the at least one processor, cause the at least one processor to;

provide a forwarding service to the one or more other end-user devices, the forwarding service for forwarding first traffic between the one or more other end-user devices and the network system,

implement a first service policy, the first service policy for assisting in control of the first traffic,

implement a second service policy, the second service policy for assisting in control of second traffic, the second traffic associated with access by the first end-user device to one or more services over the first network, wherein the second service policy differs from the first service policy, and

monitor or identify successful use or attempted use of the forwarding service; and

memory coupled to the at least one processor and configured to provide the at least one processor with the one or more instructions.

2. The first end-user device of claim 1, wherein the first service policy assists in controlling whether the first end-user device is authorized to provide the forwarding service to the one or more other end-user devices.

3. The first end-user device of claim 1, wherein the first network comprises a 2G network, a 3G network, a 4G network, or a Wi-Fi network.

4. The first end-user device of claim 1, wherein the second network comprises a Wi-Fi network, a Bluetooth network, a USB network, an Ethernet network, a FireWire network, or a near field communication network.

5. The first end-user device of claim 1, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to:

identify one or more network types over which the first end-user device is authorized to act as the intermediate networking device.

6. The first end-user device of claim 1, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to set a traffic speed.

7. The first end-user device of claim 1, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to notify a user when the first end-user device is authorized to provide the forwarding service.

8. The first end-user device of claim 1, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to notify a user whether the first end-user device is authorized to provide the forwarding service when the first network comprises a roaming network.

9. The first end-user device of claim 1, wherein the first service policy is based on whether the first network comprises a home network or a roaming network.

10. The first end-user device of claim 1, wherein provide the forwarding service to the one or more other end-user devices comprises:

a first device of the one or more other end-user devices or a particular user of the first device,

based on the identification of the first device or the particular user of the first device, provide the forwarding service with a first characteristic to the first device, and

provide the forwarding service with a second characteristic to a second device of the one or more other end-user devices.

11. The first end-user device of claim 1, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to notify a user when one of the one or more other end-user devices attempts to use or succeeds in using the forwarding service.

12. The first end-user device of claim 1, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to modify a policy setting based on the monitored or identified successful use or attempted use of the forwarding service.

13. The first end-user device of claim 1, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to:

obtain a service usage measurement providing an indication of usage of the forwarding service by the one or more other end-user devices.

16. The first end-user device of claim 1, wherein the first network comprises a cellular network and the second network comprises a Wi-Fi network.

17. The first end-user device of claim 1, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to:

detect a network connection change by the first end-user device, and

in response to detecting the network connection change by the first end-user device, modify at least an aspect of the first service policy or at least an aspect of the second service policy.

18. The first end-user device of claim 1, wherein the first service policy or the second service policy is based on a geographic location of the first end-user device.

19. The first end-user device of claim 1, wherein the first service policy or the second service policy is based on a time of day or a time period.

20. The first end-user device of claim 1, wherein the first service policy or the second service policy is based on a network capacity or congestion.

21. The first end-user device of claim 1, wherein the first service policy or the second service policy is based on a quality of service.

22. The first end-user device of claim 1, wherein the first service policy or the second service policy is based on a type of the first network or the second network.

23. The first end-user device of claim 1, wherein the first service policy or the second service policy is based on an aspect of a hardware element that provides the first network or the second network.

24. The first end-user device of claim 1, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to:

identify one or more network destinations for which the first end-user device is authorized to provide the forwarding service.

25. The first end-user device of claim 1, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to:

identify one or more applications for which the first end-user device is authorized to provide the forwarding service.

26. The first end-user device of claim 1, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to:

identify the one or more other end-user devices.

27. The first end-user device of claim 1, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to:

limit a number of the one or more other end-user devices authorized to use the forwarding service.

28. The first end-user device of claim 1, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to:

identify a traffic type, an application type, a service type, or a content type for which the first end-user device is authorized to provide the forwarding service.

29. The first end-user device of claim 1, wherein implement the first service policy comprises throttle or restrict the first traffic.

30. The first end-user device of claim 1, wherein implement the first service policy comprises impose a limit on the first traffic or establish an allowance for the first traffic.

31. The first end-user device of claim 1, wherein the first service policy is based on a limit or allowance, the limit limiting at least an aspect of usage of the forwarding service, the allowance allowing a specified amount of the forwarding service.

32. The first end-user device of claim 31, wherein the limit or allowance is based on a user preference.

33. The first end-user device of claim 31, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to:

determine, based on the monitored or identified successful use or attempted use of the forwarding service, that the usage of the forwarding service has reached the limit or allowance, and

based on the determination that the usage of the forwarding service has reached the limit or allowance, modify the first service policy to throttle or restrict the first traffic.

34. The first end-user device of claim 31, wherein the second service policy is not based on the limit or allowance.

35. The first end-user device of claim 31, wherein the limit or allowance is a first limit or allowance, and wherein the second service policy is based on a second limit or allowance.

36. The first end-user device of claim 1, wherein implement the first service policy comprises limit a number of the one or more other end-user devices allowed to use the forwarding service.

37. The first end-user device of claim 1, wherein the first service policy comprises a first control policy, and wherein the second service policy comprises a second control policy.

38. The first end-user device of claim 1, wherein:

implement the first service policy comprises apply a first control to the first traffic, and

implement the second service policy comprises apply a second control to the second traffic.

39. The first end-user device of claim 1, wherein:

implement the first service policy comprises apply a first control to the first traffic, and

implement the second service policy comprises do not apply the first control to the second traffic.

40. The first end-user device of claim 1, wherein:

implement the first service policy comprises direct the first traffic to a first virtual or logical channel, and

implement the second service policy comprises direct the second traffic to a second virtual or logical channel.

41. The first end-user device of claim 1, wherein:

implement the first service policy comprises direct the first traffic to a first end-point or server, and

implement the second service policy comprises direct the second traffic to a second end-point or server.

42. The first end-user device of claim 1, wherein implement the first service policy comprises send information to at least a portion of the one or more other end-user devices, the information for assisting the at least a portion of the one or more other end-user devices to control their usage of the forwarding service.

43. The first end-user device of claim 1, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to cause information to be sent to the network system, the information comprising a measure of usage of the forwarding service.

44. The first end-user device of claim 1, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to cause information to be sent to the network system, the information being associated with usage of the forwarding service.

45. The first end-user device of claim 1, wherein the first service policy or the second service policy is dependent on whether the first network comprises a roaming network.

46. The first end-user device of claim 1, wherein the first service policy is dependent on whether the second network comprises a roaming network.

47. The first end-user device of claim 1, wherein the first service policy or the second service policy is dependent on whether the first network is associated with a cost.

48. The first end-user device of claim 1, wherein the first service policy is dependent on whether the second network is associated with a cost.

49. The first end-user device of claim 1, wherein the first network comprises a roaming network, and wherein implement the first service policy comprises restrict or block the first traffic.

50. The first end-user device of claim 1, wherein an aspect of the second service policy differs from the aspect of the first service policy when the first network comprises a roaming network.

51. The first end-user device of claim 1, wherein an aspect of the second service policy differs from the aspect of the first service policy when the first network is associated with a cost.

52. The first end-user device of claim 1, further comprising a user interface, and wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to cause a notification to be presented through the user interface.

53. The first end-user device of claim 52, wherein the notification is based on the monitored or identified successful use or attempted use of the forwarding service or of the one or more services.

54. The first end-user device of claim 52, wherein the notification comprises a warning.

55. The first end-user device of claim 52, wherein the notification comprises information about an offer or an option.

56. The first end-user device of claim 52, wherein the notification comprises an offer to enable or activate the forwarding service.

57. The first end-user device of claim 52, wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to obtain a response to the notification.

58. The first end-user device of claim 57, wherein the response to the notification comprises an acknowledgment.

59. The first end-user device of claim 57, wherein the response to the notification comprises an indication of a response to an offer.

60. The first end-user device of claim 57, wherein the response to the notification comprises an indication of a selection of an option.

61. The first end-user device of claim 57, wherein the response to the notification comprises a directive to enable or activate the forwarding service.

62. The first end-user device of claim 1, further comprising a user interface, and wherein, when executed by the at least one processor, the one or more instructions further cause the at least one processor to obtain a user input through the user interface.

63. The first end-user device of claim 62, wherein the user input comprises an acknowledgment.

64. The first end-user device of claim 62, wherein the user input comprises an indication of an intention to activate or select a service offer or a service plan.

65. The first end-user device of claim 62, wherein the user input comprises a directive to enable or activate the forwarding service.

66. The first end-user device of claim 62, wherein the user input comprises a directive to change at least an aspect of the first service policy or the second service policy.

67. The first end-user device of claim 62, wherein the user input comprises a directive to change at least an aspect of the first service policy independently of the second service policy.

68. The first end-user device of claim 62, wherein the user input comprises a directive to change at least an aspect of the second service policy independently of the first service policy.

69. The first end-user device of claim 62, wherein the user input comprises an indication of a limit on a number of the one or more other end-user devices authorized to use the forwarding service.

14. A computer program product embodied in a non-transitory computer readable storage medium and comprising computer instructions for causing one or more processors of a first end-user device to:

provide a forwarding service to one or more other end-user devices communicatively coupled to the first end-user device over a first network, the forwarding service for forwarding first traffic between the one or more other end-user devices and a network system communicatively coupled to the first end-user device over a second network, the second network comprising a wireless access network;

implement a first service policy, the first service policy for assisting in control of the first traffic;

implement a second service policy, the second service policy for assisting in control of second traffic, the second traffic associated with access by the first end-user device to one or more services over the second network, wherein the second service policy differs from the first service policy; and

monitor or identify successful use or attempted use of the forwarding service.

15. A method performed by a first end-user device capable of operating as an intermediate networking device, the method comprising:

providing a forwarding service to one or more other end-user devices communicatively coupled to the first end-user device over a first network, the forwarding service for forwarding first traffic between the one or more other end-user devices and a network system communicatively coupled to the first end-user device over a second network, the second network comprising a wireless access network;

implementing a first service policy, the first service policy for assisting in control of the first traffic;

implementing a second service policy, the second service policy for assisting in control of second traffic, the second traffic associated with access to the first end-user device to one or more services over the second network, wherein the second service policy differs from the first service policy; and

monitoring or identifying successful use or attempted use of the forwarding service.