System and method for providing virtual user groups in a network environment

• US 9,003,489 B2
• Filed: 02/04/2010
• Issued: 04/07/2015
• Est. Priority Date: 02/04/2010
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Ballal, Dhiraj D., Subramanian, Saravanadas P., B R, Venkatesh Gota
• Primary Examiner(s): Kim, Jung
• Assistant Examiner(s): TRAN, TRI MINH
• Application Number:
  US12/700,208
• Publication Number:
  US 20110191826A1
• Time in Patent Office: 1,888 Days
• Field of Search: 726/4
• US Class Current: 726/4
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A method is provided in one example and includes communicating an access request to a network element, the access request is associated with network authentication relating to a subscriber. The method also includes receiving an access response that includes a profile associated with the subscriber. The profile can include a group attribute that defines the subscriber as being part of a group of subscribers sharing a network data plan, which defines a data allotment assigned to the group over a specified time interval. In more detailed embodiments, a unique data string sent by an Authentication, Authorization, and Accounting element is received, where the unique data string identifies a full set of subscribers belonging to the group. Data underutilization of a first subscriber is offset by data overutilization of a second subscriber, where a summation of the data underutilization and the data overutilization do not exceed the data allotment assigned.

Claims

1. A method, comprising:

communicating an access request from a general packet radio service support node (“

GGSN”

) to an authentication, authorization, and accounting (“

AAA”

) element, wherein the access request is associated with network authentication relating to a subscriber; and

receiving at the GGSN from the AAA element in response to the access request an access response that includes a profile associated with the subscriber, wherein the profile includes a group attribute that defines the subscriber as being part of a group of subscribers comprising a virtual user group sharing a network data plan that defines a data allotment assigned to the group over a specified time interval;

wherein the communicating and receiving occur during an attachment of the subscriber to a network to establish a communications session via the network; and

wherein the receiving includes receiving a unique data string sent by the AAA element, and wherein the unique data string identifies a full set of subscribers belonging to the virtual user group.

2. The method of claim 1, wherein data underutilization of a first subscriber of the group is offset by data overutilization of a second subscriber of the group, and wherein a summation of the data underutilization and the data overutilization do not exceed the data allotment assigned to the group.

3. The method of claim 1, wherein the group attribute identifies the subscriber as belonging to the group of subscribers by using a selected one of an International Mobile Subscriber Identity (IMSI), a Mobile Subscriber Integrated Services Digital Network Number (MSISDN), a user name, and an Internet protocol (IP) address of the subscriber.

4. The method of claim 1, wherein a first data threshold is defined for each subscriber of the group separately from the data allotment assigned to the group in the network data plan.

5. The method of claim 1, further comprising:

creating a group control block for data propagation associated with the group of subscribers, wherein individual network bearer paths are associated with the group control block; and

creating call detail records for data propagation associated with the group of subscribers.

6. The method of claim 1, wherein a rating group identifier is used to track intra-group data usage between the subscribers of the group independent of tracking of external communications involving entities outside of the group of subscribers.

7. Logic encoded in one or more non-transitory tangible media that includes code for execution and when executed by a processor operable to perform operations comprising:

communicating an access request from a general packet radio service support node (“

GGSN”

) to an authentication, authorization, and accounting (“

AAA”

) element, wherein the access request is associated with network authentication relating to a subscriber; and

receiving at the GGSN from the AAA element in response to the access request an access response that includes a profile associated with the subscriber, wherein the profile includes a group attribute that defines the subscriber as being part of a group of subscribers comprising a virtual user group sharing a network data plan that defines a data allotment assigned to the group over a specified time interval;

wherein the communicating and receiving occur during an attachment of the subscriber to a network to establish a communications session via the network; and

wherein the receiving includes receiving a unique data string sent by the AAA element, and wherein the unique data string identifies a full set of subscribers belonging to the virtual user group.

8. The logic of claim 7, wherein data underutilization of a first subscriber of the group is offset by data overutilization of a second subscriber of the group, and wherein a summation of the data underutilization and the data overutilization do not exceed the data allotment assigned to the group.

9. The logic of claim 7, wherein the group attribute identifies the subscriber as belonging to the group of subscribers by using a selected one of an International Mobile Subscriber Identity (IMSI), a Mobile Subscriber Integrated Services Digital Network Number (MSISDN), a user name, and an Internet protocol (IP) address of the subscriber.

10. The logic of claim 7, wherein a first data threshold is defined for each subscriber of the group separately from the data allotment assigned to the group in the network data plan.

11. The logic of claim 7, wherein a rating group identifier is used to track intra-group data usage between the subscribers of the group independent of tracking of external communications involving entities outside of the group of subscribers.

12. An apparatus, comprising:

a memory element configured to store data,

a processor operable to execute instructions associated with the data, and

a group module configured to;

communicate an access request from a general packet radio service support node (“

GGSN”

) to an authentication, authorization, and accounting (“

AAA”

) element, wherein the access request is associated with network authentication relating to a subscriber; and

receive at the GGSN from the AAA element in response to the access request an access response that includes a profile associated with the subscriber, wherein the profile includes a group attribute that defines the subscriber as being part of a group of subscribers comprising a virtual user group sharing a network data plan that defines a data allotment assigned to the group over a specified time interval;

wherein the communicating and receiving occur during an attachment of the subscriber to a network to establish a communications session via the network; and

wherein the receiving includes receiving a unique data string sent by the AAA element, and wherein the unique data string identifies a full set of subscribers belonging to the virtual user group.

13. The apparatus of claim 12, wherein data underutilization of a first subscriber of the group is offset by data overutilization of a second subscriber of the group, and wherein a summation of the data underutilization and the data overutilization do not exceed the data allotment assigned to the group.

14. The apparatus of claim 12, wherein the group attribute identifies the subscriber as belonging to the group of subscribers by using a selected one of an International Mobile Subscriber Identity (IMSI), a Mobile Subscriber Integrated Services Digital Network Number (MSISDN), a user name, and an Internet protocol (IP) address of the subscriber.

15. The apparatus of claim 12, wherein a first data threshold is defined for each subscriber of the group separately from the data allotment assigned to the group in the network data plan.

16. The apparatus of claim 12, wherein a rating group identifier is used to track intra-group data usage between the subscribers of the group independent of tracking of external communications involving entities outside of the group of subscribers.

17. The apparatus of claim 12, wherein the AAA element is

configured to interact with the group module and includes a profile database configured to maintain a plurality of unique data strings, which identify sets of subscribers belonging to a plurality of subscriber groups.