Mobile device management

• US 8,918,080 B2
• Filed: 01/17/2013
• Issued: 12/23/2014
• Est. Priority Date: 01/17/2012
• Status: Active Grant

• Current Assignee: Kajeet, Inc.
• Original Assignee: Kajeet, Inc.
• Inventors: Neal, Daniel John, Weintraub, Ben Julian
• Primary Examiner(s): Ajayi, Joel
• Application Number:
  US13/744,342
• Publication Number:
  US 20130183937A1
• Time in Patent Office: 705 Days
• Field of Search: 455/411
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04M 1/72463 to restrict the functionality of the device
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data

Abstract

Methods and systems are disclosed for reducing fraud, waste, and abuse of devices associated with government or business programs. Devices are authenticated based on a first set of data collected from the device, and if authenticated, may be permitted to send or receive service requests based on a second set of data that identifies the user, includes data about the user, identifies the service and/or identifies eligibility criteria. Devices may also be subject to eligibility requirements instituted before, during or after a service request is performed that determine the eligibility of the device and/or the user of the device. Devices may also be subject to filtering requirements administered before or during a service request. Devices may also be subject verification before, during or after one or more service requests.

Claims

1. A computing device comprising:

one or more processors configured to obtain a first set of data from a device for storage in a non-transitory memory to authenticate the device for access to one or more communication/data networks, and when the device is authenticated the one or more processors being further configured to obtain a second set of data for storage in the non-transitory memory to determine an eligibility status for the device to utilize a third party subsidized service that pays for at least part of a cost of utilizing the one or more communication/data networks, the second set of data including real-time user input data and data associated with an eligibility rule that is not based on the real-time user input data, the eligibility rule being determined by an entity responsible for administering the third party subsidized service, and upon determining the eligibility status the one or more processors being further configured to permit a service request that utilizes the one or more communication/data networks.

2. The computer device as recited in claim 1, wherein the first set of data and the second of data are the same.

3. The computer device as recited in claim 1, wherein the first set of data includes data identifying the device.

4. The computer device as recited in claim 1, wherein the second set of data includes data identifying a user of the device.

5. The computer device as recited in claim 4, wherein the second set of data identifies the user.

6. The computer device as recited in claim 5, wherein the second set of data identifies the voice of the user.

7. The computer device as recited in claim 5, wherein the second set of data includes a picture of the user.

8. The computer device as recited in claim 4, wherein the second set of data identifies data about the user other than an identity of the user.

9. The computer device as recited in claim 1, wherein the second set of data includes data about the service.

10. The computer device as recited in claim 9, wherein the second set of data identifies the service.

11. The computer device as recited in claim 9, wherein the second set of data identifies whether the user is violating any terms of use of the service.

12. The computer device as recited in claim 1, wherein the eligibility status is determined before permitting the service request.

13. The computer device as recited in claim 1, wherein the eligibility status is determined during the service request.

14. The computer device as recited in claim 1, wherein the service is provided by a first entity and the eligibility status is determined a second entity.

15. The computer device as recited in claim 14, wherein the first entity is a national government and the second entity is a regional government.

16. The computer device as recited in claim 1, wherein the second set of data identifies a physical location of the device at the time of the service request.

17. The computer device as recited in claim 1, wherein the one or more processors are further configured to send a message to the device before permitting the service request.

18. The computer device as recited in claim 17, wherein a user of the device is prevented from skipping, forwarding or bypassing the message.

19. The computer device as recited in claim 1, wherein the one or more processors are further configured to obtain a third set of data for storage in the non-transitory memory to filter the service request after the service request has been permitted.

20. The computer device as recited in claim 19, wherein the one or more processors are configured to filter the service request by blocking the service request.

21. The computer device as recited in claim 19, wherein the one or more processors are configured to filter the service request by blocking data to be transmitted to the device per the service request.

22. The computer device as recited in claim 19, wherein the one or more processors are configured to send a message to the device if the service request has been filtered.

23. The computer device as recited in claim 1, wherein the one or more processors are contained within a service manager.

24. The computer device as recited in claim 23, wherein the service manager is within the one or more communication/data networks.

25. The computer device as recited in claim 23, wherein the service manager is within the device.

26. A method for regulating a device, comprising the steps of:

obtaining a first set of data from the device;

authenticating the device for access to one or more communication/data networks based on the first set of data;

when the device is authenticated, obtaining a second set of data;

determining an eligibility status based on the second set of data for the device to utilize a third party subsidized service that pays for at least part of a cost of utilizing the one or more communication/data networks, the second set of data including real-time user input data and data associated with an eligibility rule that is not based on the real-time user input data, the eligibility rule being determined by an entity responsible for administering the third party subsidized service; and

upon determining the eligibility status, determining whether to permit a service request that utilizes the one or more communication/data networks.

27. The method as recited in claim 26, wherein the first set of data and the second of data are the same.

28. The method as recited in claim 26, wherein the first set of data includes data identifying the device.

29. The method as recited in claim 26, wherein the second set of data includes data identifying a user of the device.

30. The method as recited in claim 29, wherein the second set of data identifies the user.

31. The method as recited in claim 30, wherein the second set of data identifies the voice of the user.

32. The method as recited in claim 30, wherein the second set of data includes a picture of the user.

33. The method as recited in claim 29, wherein the second set of data identifies data about the user other than an identity of the user.

34. The method as recited in claim 26, wherein the second set of data includes data about the service.

35. The method as recited in claim 34, wherein the second set of data identifies the service.

36. The method as recited in claim 34, wherein the second set of data identifies whether the user is violating any terms of use of the service.

37. The method as recited in claim 26, wherein the eligibility status is determined before permitting the service request.

38. The method as recited in claim 26, wherein the eligibility status is determined during the service request and the step of permitting the service request includes the step of continuing to permit the service request.

39. The method as recited in claim 26, wherein the service is provided by a first entity and the eligibility status is determined a second entity.

40. The method as recited in claim 39, wherein the first entity is a national government and the second entity is a regional government.

41. The method as recited in claim 26, wherein the second set of data identifies a physical location of the device at the time of the service request.

42. The method as recited in claim 26, further comprising the step of sending a message to the device before permitting the service request.

43. The method as recited in claim 42, further comprising the step of preventing the message from being skipped, forwarded or bypassed.

44. The method as recited in claim 26, further comprising the steps of obtaining a third set of data and filtering the service request after the service request has been permitted based on the third set of data.

45. The method as recited in claim 44, wherein the step of filtering the service request includes the step of blocking the service request.

46. The method as recited in claim 44, wherein the step of filtering the service request includes blocking data to be transmitted to the device per the service request.

47. The method as recited in claim 44, wherein the step of filtering includes the step of sending a message to the device if the service request has been filtered.