End User Device That Secures an Association of Application to Service Policy With an Application Certificate Check

• US 20190132736A1
• Filed: 05/10/2018
• Published: 05/02/2019
• Est. Priority Date: 01/28/2009
• Status: Active Grant

• Current Assignee: Headwater Research LLC (Greg Raleigh)
• Original Assignee: Headwater Research LLC (Greg Raleigh)
• Inventors: Raleigh, Gregory G., Lavine, James, Green, Jeffrey
• Granted Patent: US 10,716,006 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/75 Indicating network or usage conditions on the user display
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]

Abstract

Network service provisioning is described. Network service provisioning to a device includes a mechanism for ensuring that network services are available based upon one or more of appropriate traffic control, billing, and notification policies. Ensuring that the policies are properly enforced on a device is a focus of this paper. The enforcement policies can be on the device or in the network.

Claims

1. An end user device comprising:

one or more modems configured to connect to one or more access networks including at least a first access network,

one or more device agents configured to;

store a first application program and a first access network service policy associated with the application program, the first access network service policy comprising;

information about a first application credential associated with the first application program,

first device agent instructions configured to govern at least an aspect of attempted or actual first access network communication activity associated with the first application program,

perform the following operations in any order;

implement the first device agent instructions to govern the at least an aspect of attempted or actual first access network communication activity associated with the first application program,

utilize the information about the first application credential to perform a first application configuration check and if the first application configuration check does not pass, then take an action.