Mobile content delivery via toll-free uniform resource locators

• US 9,973,340 B2
• Filed: 11/13/2015
• Issued: 05/15/2018
• Est. Priority Date: 11/13/2015
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Zhang, Gong, Huang, Jian, Kelly, Susan
• Primary Examiner(s): Armouche, Hadi S
• Assistant Examiner(s): Khan, Sher A
• Application Number:
  US14/941,106
• Publication Number:
  US 20170141923A1
• Time in Patent Office: 914 Days
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04M 15/09 Third party charged communications
• CPC Class Codes: H04M 15/8083 involving reduced rates or discounts, e.g. time-of-day reductions or volume discounts
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/24 Accounting or billing
• CPC Class Codes: H04W 84/042 Public Land Mobile systems, e.g. cellular systems

Abstract

A device associated with a cell tower in a Public Land Mobile Network receives, from a mobile device via a network, a uniform resource locator (URL) that is appended with a first signature generated at the mobile device using a private key of a public/private key pair associated with a toll-free campaign. The device obtains a public key of the public/private key pair, extracts the first signature from the URL, decrypts the first signature using the public key to obtain data, and encrypts the data using the private key to generate a second signature. The device compares the second signature with the first signature, denies toll-free network access to content associated with the URL when the second signature does not match the first signature, and designates data involved with accessing the content associated with the URL as being toll-free when the second signature matches the first signature.

Claims

1. A device, comprising:

a communication interface;

a memory storing instructions; and

a processing unit that executes the instructions to;

connect, via the communication interface, to a network,

intercept, from a mobile device via a cell tower serving the network, a content request destined for a content host device in the network, wherein the content request includes a uniform resource locator (URL) that is appended with a first signature generated at the mobile device using a first key of an asymmetric key pair associated with a toll-free data campaign,

obtain a second key of the asymmetric key pair,

extract the first signature from the URL,

decrypt the first signature using the second key to obtain a block of data,

encrypt the block of data using the first key to generate a second signature,

compare the second signature with the first signature,

deny toll-free network access to content associated with the URL when the second signature does not match the first signature,

determine, when the second signature matches the first signature, whether data transfer charged to the toll-free data campaign has reached a data transfer limit allocated to the toll-free data campaign,

meter, based on a determination that the data transfer limit has not been reached, data delivery associated with toll-free access of the content using the URL, and

charge, to the toll-free data campaign, the metered data delivery.

2. The device of claim 1, wherein the URL is further appended with a unique identifier associated with the toll-free data campaign.

3. The device of claim 1, wherein the communication interface is further configured to receive, from a network device via the network, a unique identifier associated with the toll-free data campaign and the first key that is further associated with the toll-free data campaign.

4. The device of claim 3, wherein the processing unit further executes the instructions to:

obtain, via the communication interface, the second key of the asymmetric key pair from a database using the received unique identifier associated with the toll-free data campaign.

5. The device of claim 1, wherein the network comprises a Public Land Mobile Network (PLMN) or a Satellite Mobile Network.

6. The device of claim 1, wherein the URL identifies a network location of the content host device.

7. The device of claim 1, wherein the device comprises a network processing unit (NPU) associated with a base station located in a Public Land Mobile Network (PLMN).

8. A non-transitory storage medium storing instructions executable by a computational device, wherein the instructions comprise instructions to cause the computational device to:

intercept, from a mobile device via a cell tower serving a network, a content request that is destined for a content host device in the network, wherein the content request includes a uniform resource locator (URL) that is appended with a first signature generated at the mobile device using a first key of asymmetric key pair that is associated with a toll-free data campaign;

extract the first signature from the URL;

validate the content request based on the extracted first signature;

determine, based on the validation of the content request, whether data transfer charged to the toll-free data campaign has reached a data transfer limit allocated to the toll-free data campaign;

meter, based on a determination that the data transfer limit has not been reached, data delivery associated with toll-free access of the content using the URL, and

charge, to the toll-free data campaign, the metered data delivery.

9. The non-transitory storage medium of claim 8, wherein the URL is further appended with a unique identifier associated with the toll-free data campaign.

10. The non-transitory storage medium of claim 8, wherein the instructions to validate the content request further comprise instructions to cause the computational device to:

obtain a second key of the asymmetric key pair,

decrypt the first signature using the second key to obtain a block of data,

encrypt the block of data using the first key to generate a second signature, and

compare the second signature with the first signature.

11. The non-transitory storage medium of claim 10, wherein a mobile user at the mobile device initiates the content request and wherein the instructions further comprise instructions to cause the computational device to:

deny toll-free network access to the content associated with the URL when the second signature does not match the first signature, and

designate data involved with accessing the content associated with the URL as being non-chargeable to the mobile user in the network when the second signature matches the first signature.

12. The non-transitory storage medium of claim 10, wherein the URL is further appended with a unique identifier associated with the toll-free data campaign and wherein the instructions to obtain the second key further comprise instructions to cause the computational device to:

obtain the second key of the asymmetric key pair from a database via the network using the unique identifier associated with the toll-free data campaign.

13. The non-transitory storage medium of claim 8, wherein the URL identifies a network location of the content host device.

14. A method comprising:

intercepting, by a device connected to a cell tower serving a network, a content request destined for a content host device in the network, wherein the content request includes a uniform resource locator (URL) that is appended with a first signature generated at a mobile device using a first key of an asymmetric key pair associated with a toll-free data campaign;

obtaining, by the device, a second key of the asymmetric key pair;

extracting, by the device, the first signature from the URL;

decrypting, by the device, the first signature using the second key to obtain a block of data;

encrypting, by the device, the block of data using the first key to generate a second signature;

comparing, by the device, the second signature with the first signature;

denying, by the device, toll-free network access to content associated with the URL when the second signature does not match the first signature;

determining, by the device, when the second signature matches the first signature, whether data transfer charged to the toll-free data campaign has reached a data transfer limit allocated to the toll-free data campaign;

metering, by the device and based on a determination that the data transfer limit has not been reached, data delivery associated with toll-free access of the content using the URL; and

charging, by the device to the toll-free data campaign, the metered data delivery.

15. The method of claim 14, wherein the URL is further appended with a unique identifier associated with the toll-free data campaign.

16. The method of claim 14, further comprising:

receiving, from a network device via the network, a unique identifier associated with the toll-free data campaign and the first key that is further associated with the toll-free data campaign.

17. The method of claim 16, further comprising:

obtaining, from a database via the network, the second key of the asymmetric key pair using the unique identifier associated with the toll-free data campaign.

18. The method of claim 14, wherein the network comprises a Public Land Mobile Network (PLMN) or a Satellite Mobile Network.

19. The method of claim 14, wherein the URL identifies a network location of the content host device.

20. The method of claim 14, wherein the device comprises a network processing unit (NPU) associated with a base station located in a Public Land Mobile Network (PLMN).