Automated device provisioning and activation

• US 8,839,388 B2
• Filed: 03/02/2009
• Issued: 09/16/2014
• Est. Priority Date: 01/28/2009
• Status: Active Grant

• Current Assignee: Headwater Research LLC (Greg Raleigh)
• Original Assignee: Headwater Partners I LLC (Greg Raleigh)
• Inventors: Raleigh, Gregory G.
• Primary Examiner(s): RUDY, ANDREW J
• Application Number:
  US12/380,780
• Publication Number:
  US 20100192212A1
• Time in Patent Office: 2,024 Days
• Field of Search: 705/16, 705/22, 705/28, 705/30, 705/34, 705/40, 726/7, 726/2, 726/3, 726/6, 709/219, 709/226, 455/406, 455/414.1
• US Class Current: 726/7
• CPC Class Codes: G06F 15/177 Initialisation or configuration control processor initialisation G06F9/4405
• CPC Class Codes: G06Q 10/06315 Needs-based resource requirements planning or analysis
• CPC Class Codes: G06Q 10/06375 Prediction of business process outcome or impact based on a proposed change
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/0207 Discounts or incentives, e.g. coupons or rebates
• CPC Class Codes: G06Q 30/0241 Advertisements
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: G06Q 30/0284 Time or distance, e.g. usage of parking meters or taximeters
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1407 Policy-and-charging control [PCC] architecture
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0876 Aspects of the degree of configuration automation
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 : Policy-based network configuration management
• CPC Class Codes: H04L 41/5003 : Managing SLA; Interaction between SLA and QoS
• CPC Class Codes: H04L 41/5025 : by proactively reacting to service quality change, e.g. by reconfiguration after service quality degradation or upgrade
• CPC Class Codes: H04L 41/5054 : Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components
• CPC Class Codes: H04L 47/20 : Traffic policing
• CPC Class Codes: H04L 47/2408 : for supporting different services, e.g. a differentiated services [DiffServ] type of service
• CPC Class Codes: H04L 51/046 : Interoperability with other network applications or services
• CPC Class Codes: H04L 63/0236 : Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0892 : by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/145 : avoiding end of session, e.g. keep-alive, heartbeats, resumption message or wake-up for inactive or interrupted session
• CPC Class Codes: H04L 67/306 : User profiles
• CPC Class Codes: H04L 67/34 : involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/51 : Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/55 : Push-based network services
• CPC Class Codes: H04L 67/564 : Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/63 : Routing a service request depending on the request content or context
• CPC Class Codes: H04L 9/32 : including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04M 15/00 : Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 15/49 : Connection to several service providers
• CPC Class Codes: H04M 15/58 : based on statistics of usage or network monitoring
• CPC Class Codes: H04M 15/61 : based on the service used
• CPC Class Codes: H04M 15/66 : Policy and charging system
• CPC Class Codes: H04M 15/80 : Rating or billing plans; Tariff determination aspects
• CPC Class Codes: H04M 15/8055 : Selecting cheaper transport technology for a given service
• CPC Class Codes: H04M 15/88 : Provision for limiting connection, or expenditure
• CPC Class Codes: H04M 2215/0188 : Network monitoring; statistics on usage on called/calling number
• CPC Class Codes: H04W 12/00 : Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/02 : Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/037 : of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 12/37 : Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 24/08 : Testing, supervising or monitoring using real traffic
• CPC Class Codes: H04W 28/02 : Traffic management, e.g. flow control or congestion control
• CPC Class Codes: H04W 28/0215 : based on user or device properties, e.g. MTC-capable devices services for machine-to-machine communication [M2M] or machine type communication [MTC] H04W4/70; wireless resource selection or allocation plan definition based on terminal or device properties H04W72/51
• CPC Class Codes: H04W 28/0268 : using specific QoS parameters for wireless networks, e.g. QoS class identifier [QCI] or guaranteed bit rate [GBR] negotiating SLA or negotiating QoS H04W28/24
• CPC Class Codes: H04W 28/12 : using signalling between network elements
• CPC Class Codes: H04W 4/02 : Services making use of location information
• CPC Class Codes: H04W 4/12 : Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 4/18 : Information format or content conversion, e.g. adaptation by the network of the transmitted or received information for the purpose of wireless delivery to users or terminals
• CPC Class Codes: H04W 4/20 : Services signaling; Auxiliary data signalling, i.e. transmitting data via a non-traffic channel
• CPC Class Codes: H04W 4/24 : Accounting or billing
• CPC Class Codes: H04W 4/50 : Service provisioning or reconfiguring
• CPC Class Codes: H04W 48/14 : using user query or user detection
• CPC Class Codes: H04W 48/16 : Discovering, processing access restriction or access information
• CPC Class Codes: H04W 72/0453 : Resources in frequency domain, e.g. a carrier in FDMA
• CPC Class Codes: H04W 8/02 : Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
• CPC Class Codes: H04W 8/18 : Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/20 : Transfer of user or subscriber data
• CPC Class Codes: H04W 84/04 : Large scale networks; Deep hierarchical networks
• CPC Class Codes: H04W 84/042 : Public Land Mobile systems, e.g. cellular systems
• CPC Class Codes: H04W 84/12 : WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 : adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals
• CPC Class Codes: H04W 88/08 : Access point devices
• CPC Class Codes: Y02P 90/80 : Management or planning

Abstract

Various embodiments are disclosed for a services policy communication system and method. In some embodiments, a communications device stores a set of device credentials for activating the communications device for a service on a network; and sends an access request to the network, the access request including the set of device credentials.

Claims

1. A system, comprising:

one or more processors of an end-user device configured to;

obtain a first set of one or more device credentials for activating a first group of one or more data services for the end-user device;

receive an indication of a user intention to access a first data service of the one or more data services on a first network;

send an access request to access the first data service, the access request identifying the first set of one or more device credentials;

await a response to the access request from a network element indicating whether billing associated with the first data service is provisioned for the end-user device; and

provide at least limited temporary access to the first data service before receiving the response from the network element; and

memory of the end-user device coupled to the one or more processors and configured to provide the one or more processors with instructions.

2. The system recited in claim 1, wherein the end-user device is a mobile communications device, and the first data service includes one or more Internet based services.

3. The system recited in claim 1, wherein the first set of one or more device credentials comprises permanent credentials, temporary credentials, or partial credentials.

4. The system recited in claim 1, wherein the first set of one or more device credentials comprises permanent credentials, temporary credentials, or partial credentials, and wherein the temporary credentials include a temporary phone number.

5. The system recited in claim 1, wherein the first set of one or more device credentials includes one or more of the following:

a temporarily assigned device identifier, a phone number, a device identification, a device security signature, a subscriber identity module (SIM), a device type identifier, an IP address, a MAC address, a device group, a device class, a device service owner, a service provider, a virtual service provider, a device manufacturer, a device distributor, a service distributor, one or more service processor settings or version, a user identification, a user type, a user group, and a user class.

6. The system recited in claim 1, wherein the first set of one or more device credentials identifies one or more provisioning actions.

7. The system recited in claim 1, wherein the end-user device is provisioned with the first set of one or more device credentials prior to a point of sale of the end-user device.

8. The system recited in claim 1, wherein the end-user device is provisioned with the first set of one or more device credentials after a point of sale of the end-user device and prior to an activation of the end-user device.

9. The system recited in claim 1, wherein the end-user device is provisioned with the first set of one or more device credentials at a time of manufacture, during distribution, at a point of sale, after a point of sale, or upon a first access request to the first network.

10. The system recited in claim 1, wherein the end-user device is associated with a first service plan based at least in part on the first set of one or more device credentials.

11. The system recited in claim 1, wherein the one or more processors of the end-user device are further configured to:

provision the end-user device for the first data service on the first network, based at least in part on the first set of one or more device credentials.

12. The system recited in claim 1, wherein the one or more processors of the end-user device are further configured to:

receive a second set of device credentials for provisioning the end-user device for the first data service on the first network.

13. The system recited in claim 1, wherein the one or more processors of the end-user device are further configured to:

receive a second set of device credentials for provisioning the end-user device for the first data service on the first network, wherein the first set of one or more device credentials comprises temporary credentials, and the second set of device credentials comprises permanent credentials.

14. The system recited in claim 1, wherein the one or more processors of the end-user device are further configured to:

provision the end-user device for the first data service on the first network based on communications with a network provisioning function to receive provisioning information based at least in part on the first set of one or more device credentials.

15. The system recited in claim 1, wherein the one or more processors of the end-user device are further configured to:

provision the end-user device for the first data service on the first network based on communications with a network provisioning function to receive provisioning information based at least in part on the first set of one or more device credentials, wherein the network provisioning function is provided by an activation server.

16. The system recited in claim 1, wherein the one or more processors of the end-user device are further configured to:

provision the end-user device for the first data service on the first network based on communications with a network provisioning function to receive provisioning information based at least in part on the first set of device credentials, wherein the provisioning information includes a second set of device credentials.

17. The system recited in claim 1, wherein the one or more processors of the end-user device are further configured to:

send an activation request to the first network to activate the end-user device for the first data service on the first network, the activation request including the first set of one or more device credentials.

18. The system recited in claim 1, wherein the one or more processors of the end-user device are further configured to:

send an activation request to the first network to activate the end-user device for the first data service on the first network, the activation request including the first set of one or more device credentials; and

send activation tracking service information to a billing server, wherein the activation tracking service information is based at least in part on the first set of one or more device credentials.

19. The system recited in claim 1, wherein the one or more processors of the end-user device are further configured to:

associate the end-user device with a service account based at least in part on the first set of one or more device credentials, wherein the service account is a permanent service account or a temporary service account.

20. The system recited in claim 1, wherein the one or more processors of the end-user device are further configured to:

associate the end-user device with a service account based at least in part on the first set of one or more device credentials, wherein the service account is a reactivated service account that was previously suspended.

21. The system recited in claim 1, wherein the one or more processors of the end-user device are further configured to:

suspend the end-user device upon an expiration of a period of time of inactivity.

22. The system recited in claim 1, wherein the one or more processors of the end-user device are further configured to:

suspend the end-user device upon an expiration of a period of time of inactivity; and

send a reactivation request to access the first data service after the expiration of the period of time of inactivity.

23. The system recited in claim 1, wherein the one or more processors of the end-user device are further configured to:

suspend the end-user device upon an expiration of a period of time of inactivity; and

send a reactivation request to access the first data service after the expiration of the period of time of inactivity using a second set of device credentials.

24. A method, comprising:

storing a first set of one or more device credentials in a storage of an end-user device, the one or more device credentials for activating a first group of one or more services for the end-user device;

receiving an indication of a user intention to access a first data service of the one or more data services on the first network;

sending an access request to access the first data service, the access request identifying the first set of one or more device credentials;

awaiting a response to the access request from a network element indicating whether billing associated with the first data service is provisioned for the end-user device; and

providing at least limited temporary access to the first data service before receiving the response from the network element.

25. A computer program product, the computer program product being embodied in a computer readable storage medium and comprising computer instructions for:

storing a first set of one or more device credentials in a storage of an end-user device, the one or more device credentials for activating a first group of one or more services for the end-user device;

receiving an indication of a user intention to access a first data service of the one or more data services on the first network;

sending an access request to access the first data service, the access request identifying the first set of one or more device credentials;

awaiting a response to the access request from a network element indicating whether billing associated with the first data service is provisioned for the end-user device; and

providing at least limited temporary access to the first data service before receiving the response from the network element.

26. A system, comprising:

a processor of a network device configured to;

receive an access request from a first end-user device, the access request identifying a first set of device credentials and a first data service;

initiating a first set of actions to activate billing for the first data service for the first end-user device; and

before completing the first set of actions, set a plurality of access control settings to activate at least limited temporary access by the first end-user device to the first data service on the first network in response to the access request, thereby providing user access to the first data service with reduced delay; and

a memory of the network device coupled to the processor and configured to provide the processor with instructions.

27. The system recited in claim 26, wherein the network device is in communication with the first network, and the network device includes one or more of the following:

an activation server;

a billing system;

an authentication, authorization and accounting (AAA) system;

a gateway;

a router;

a switch;

a network server;

a device that generates, aggregates, manages or stores charge data records (CDRs);

a base station controller; and

a base station.

28. The system recited in claim 26, wherein the network device is an activation server in communication with the first network.

29. The system recited in claim 26, wherein the network device is in communication with a device credential database.

30. The system recited in claim 26, wherein the network device is in communication with a plurality of central provider networks for activating the first end-user device.

31. The system recited in claim 26, wherein the first end-user device is a mobile communications device, and the first data service includes one or more Internet based services.

32. The system recited in claim 26, wherein the first set of device credentials are permanent credentials, temporary credentials, or partial credentials.

33. The system recited in claim 26, wherein the first set of device credentials are permanent credentials, temporary credentials, or partial credentials, and wherein the temporary credentials include a temporary phone number.

34. The system recited in claim 26, wherein the first set of device credentials include one or more of the following:

a temporarily assigned device identifier, a phone number, a device identification, a device security signature, a subscriber identity module (SIM), a device type identifier, an IP address, a MAC address, a device group, a device class, a device service owner, a service provider, a virtual service provider, a device manufacturer, a device distributor, a service distributor, one or more service processor settings or version, a user identification, a user type, a user group, and a user class.

35. The system recited in claim 26, wherein the first set of device credentials include one or more provisioning actions.

36. The system recited in claim 26, wherein the first end-user device is provisioned with the first set of device credentials prior to a point of sale of the first end-user device.

37. The system recited in claim 26, wherein the first end-user device is provisioned with the first set of device credentials after a point of sale of the first end-user device and prior to activation of the first end-user device.

38. The system recited in claim 26, wherein the first end-user device is provisioned with the first set of device credentials at a time of manufacture, during distribution, at a point of sale, after a point of sale, or upon an access request to the first data network.

39. The system recited in claim 26, wherein the processor of the network device is further configured to:

verify the first set of device credentials.

40. The system recited in claim 26, wherein the processor of the network device is further configured to:

set a plurality of access control settings in one or more of the following;

a billing system;

an authentication, authorization and accounting (AAA) system;

a gateway;

a router;

a switch;

a network server;

a device that generates, aggregates, manages or stores charge data records (CDRs);

a base station controller; and

a base station.

41. The system recited in claim 26, wherein the processor of the network device is further configured to:

set a plurality of service controls to prepare for activation of the first end-user device in one or more of the following;

a billing system;

an authentication, authorization and accounting (AAA) system;

a gateway;

a router;

a switch;

a network server;

a device that generates, aggregates, manages or stores charge data records (CDRs);

a base station controller; and

a base station.

42. The system recited in claim 26, wherein the processor of the network device is further configured to:

set a plurality of service controls to prepare for activation of the first end-user device for the first data service on the first network, based at least in part on the first set of device credentials.

43. The system recited in claim 26, wherein the processor of the network device is further configured to:

set a plurality of service controls to prepare for activation of the first end-user device for the first data service on the first network, based at least in part on the first set of device credentials, wherein the plurality of service controls include one or more service profiles for the first end-user device stored in an authentication, authorization and accounting (AAA) function for the first network.

44. The system recited in claim 26, wherein the processor of the network device is further configured to:

associate the first end-user device with one or more provisioning requirements based at least in part on the first set of device credentials.

45. The system recited in claim 26, wherein the processor of the network device is further configured to:

associate the first end-user device with one or more provisioning actions based at least in part on the first set of device credentials, wherein the first set of device credentials are temporary credentials, and wherein the first set of device credentials are shared by a second end-user device.

46. The system recited in claim 26, wherein the processor of the network device is further configured to:

associate the first end-user device with one or more provisioning actions based at least in part on the first set of device credentials; and

perform one or more provisioning actions prior to an activation of the first end-user device.

47. The system recited in claim 26, wherein the processor of the network device is further configured to:

associate the first end-user device with one or more provisioning actions based at least in part on the first set of device credentials; and

send to the first end-user device a second set of device credentials for provisioning the first end-user device for the first data service on the first network.

48. The system recited in claim 26, wherein the processor of the network device is further configured to:

associate the first end-user device with one or more provisioning actions based at least in part on the first set of device credentials; and

send to the first end-user device a second set of device credentials for provisioning the first end-user device for the first data service on the first network, wherein the first set of device credentials are temporary credentials, and the second set of device credentials are permanent credentials.

49. The system recited in claim 26, wherein the processor of the network device is further configured to:

associate the first end-user device with one or more provisioning actions based at least in part on the first set of device credentials; and

send to the first end-user device a second set of device credentials for provisioning the first end-user device for the first data service on the first network, wherein the first set of device credentials are temporary credentials, and the second set of device credentials are permanent credentials, and wherein the first set of device credentials are recycled for later use by a second end-user device.

50. The system recited in claim 26, wherein the processor of the network device is further configured to:

associate the first end-user device with one or more provisioning actions based at least in part on the first set of device credentials, wherein the first set of device credentials is shared by a second end-user device.

51. The system recited in claim 26, wherein the processor of the network device is further configured to:

provision the first end-user device for the first data service on the first network by providing provisioning information based at least in part on the first set of device credentials.

52. The system recited in claim 26, wherein the processor of the first end-user device is further configured to:

provision the first end-user device for the first data service on the first network by providing provisioning information based at least in part on the first set of device credentials, wherein the network device includes an activation server or is in communication with the activation server.

53. The system recited in claim 26, wherein the processor of the first end-user device is further configured to:

provision the first end-user device for the first data service on the first network by providing provisioning information based at least in part on the first set of device credentials, wherein the provisioning information includes a second set of device credentials.

54. The system recited in claim 26, wherein the processor of the network device is further configured to:

receive an activation request of the first end-user device for the first data service on the first network, the activation request including the first set of device credentials.

55. The system recited in claim 26, wherein the processor of the network device is further configured to:

receive an activation request for the first end-user device for the first data service on the first network, the activation request including the first set of device credentials; and

activate the first end-user device for the first data service on the first network, based at least in part on the first set of device credentials.

56. The system recited in claim 26, wherein the processor of the network device is further configured to:

receive an activation request for the first end-user device for the first data service on the first network, the activation request including the first set of device credentials;

activate the first end-user device for the first data service on the first network, based at least in part on the first set of device credentials; and

send activation tracking service information to a billing server, wherein the activation tracking service information is based at least in part on the first set of device credentials.

57. The system recited in claim 26, wherein the processor of a network device is further configured to:

associate the first end-user device with a service account based at least in part on the first set of device credentials, wherein the service account is a permanent service account or a temporary service account.

58. The system recited in claim 26, wherein the processor of a network device is further configured to:

associate the first end-user device with a service account based at least in part on the first set of device credentials, wherein the service account is a reactivated service account that was previously suspended.

59. The system recited in claim 26, wherein the processor of a network device is further configured to:

associate the first end-user device with a service plan based at least in part on the first set of device credentials.

60. The system recited in claim 26, wherein the processor of the network device is further configured to:

suspend the first end-user device upon an expiration of a period of time of inactivity.

61. The system recited in claim 26, wherein the processor of the network device is further configured to:

suspend the first end-user device upon an expiration of a period of time of inactivity; and

redirect the first end-user device to a reactivation request to access the first data service after the expiration of the period of time of inactivity.

62. The system recited in claim 26, wherein the processor of the network device is further configured to:

suspend the first end-user device upon an expiration of a period of time of inactivity; and

redirect the first end-user device to a reactivation request to access the first data service after the expiration of the period of time of inactivity, wherein the reactivation request is based at least in part on a second set of device credentials.

63. A method, comprising:

receiving an access request from a first end-user device, the access request identifying a first set of device credentials;

initiating a first set of actions to activate billing for a first data service for the first end-user device; and

before completing the first set of actions, setting a plurality of access control settings to activate at least a limited temporary access by the first end-user device for the first data service on a first network in response to the access request, thereby providing user access to the first data service with reduced delay.

64. A computer program product, the computer program product being embodied in a computer readable storage medium and comprising computer instructions for:

receiving an access request from a first end-user device, the access request identifying a first set of device credentials;

initiating a first set of actions to activate billing for a first data service for the first end-user device; and

before completing the first set of actions, setting a plurality of access control settings to activate at least a limited temporary access by the first end-user device for the first data service on a first network in response to the access request, thereby providing user access to the first data service with reduced delay.