Automated device provisioning and activation

• US 8,639,935 B2
• Filed: 12/12/2012
• Issued: 01/28/2014
• Est. Priority Date: 01/28/2009
• Status: Active Grant

• Current Assignee: Headwater Research LLC (Greg Raleigh)
• Original Assignee: Headwater Partners I LLC (Greg Raleigh)
• Inventors: Raleigh, Gregory G.
• Primary Examiner(s): Arani, Taghi
• Assistant Examiner(s): PLECHA, THADDEUS J
• Application Number:
  US13/712,184
• Publication Number:
  US 20130125219A1
• Time in Patent Office: 412 Days
• Field of Search: 713/181, 709/202
• US Class Current: 713/181
• CPC Class Codes: G06F 15/177 Initialisation or configuration control processor initialisation G06F9/4405
• CPC Class Codes: G06Q 10/06315 Needs-based resource requirements planning or analysis
• CPC Class Codes: G06Q 10/06375 Prediction of business process outcome or impact based on a proposed change
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/0207 Discounts or incentives, e.g. coupons or rebates
• CPC Class Codes: G06Q 30/0241 Advertisements
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: G06Q 30/0284 Time or distance, e.g. usage of parking meters or taximeters
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1407 Policy-and-charging control [PCC] architecture
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0876 Aspects of the degree of configuration automation
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 : Policy-based network configuration management
• CPC Class Codes: H04L 41/5003 : Managing SLA; Interaction between SLA and QoS
• CPC Class Codes: H04L 41/5025 : by proactively reacting to service quality change, e.g. by reconfiguration after service quality degradation or upgrade
• CPC Class Codes: H04L 41/5054 : Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components
• CPC Class Codes: H04L 47/20 : Traffic policing
• CPC Class Codes: H04L 47/2408 : for supporting different services, e.g. a differentiated services [DiffServ] type of service
• CPC Class Codes: H04L 51/046 : Interoperability with other network applications or services
• CPC Class Codes: H04L 63/0236 : Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0892 : by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/145 : avoiding end of session, e.g. keep-alive, heartbeats, resumption message or wake-up for inactive or interrupted session
• CPC Class Codes: H04L 67/306 : User profiles
• CPC Class Codes: H04L 67/34 : involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/51 : Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/55 : Push-based network services
• CPC Class Codes: H04L 67/564 : Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/63 : Routing a service request depending on the request content or context
• CPC Class Codes: H04L 9/32 : including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04M 15/00 : Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 15/49 : Connection to several service providers
• CPC Class Codes: H04M 15/58 : based on statistics of usage or network monitoring
• CPC Class Codes: H04M 15/61 : based on the service used
• CPC Class Codes: H04M 15/66 : Policy and charging system
• CPC Class Codes: H04M 15/80 : Rating or billing plans; Tariff determination aspects
• CPC Class Codes: H04M 15/8055 : Selecting cheaper transport technology for a given service
• CPC Class Codes: H04M 15/88 : Provision for limiting connection, or expenditure
• CPC Class Codes: H04M 2215/0188 : Network monitoring; statistics on usage on called/calling number
• CPC Class Codes: H04W 12/00 : Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/02 : Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/037 : of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 12/37 : Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 24/08 : Testing, supervising or monitoring using real traffic
• CPC Class Codes: H04W 28/02 : Traffic management, e.g. flow control or congestion control
• CPC Class Codes: H04W 28/0215 : based on user or device properties, e.g. MTC-capable devices services for machine-to-machine communication [M2M] or machine type communication [MTC] H04W4/70; wireless resource selection or allocation plan definition based on terminal or device properties H04W72/51
• CPC Class Codes: H04W 28/0268 : using specific QoS parameters for wireless networks, e.g. QoS class identifier [QCI] or guaranteed bit rate [GBR] negotiating SLA or negotiating QoS H04W28/24
• CPC Class Codes: H04W 28/12 : using signalling between network elements
• CPC Class Codes: H04W 4/02 : Services making use of location information
• CPC Class Codes: H04W 4/12 : Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 4/18 : Information format or content conversion, e.g. adaptation by the network of the transmitted or received information for the purpose of wireless delivery to users or terminals
• CPC Class Codes: H04W 4/20 : Services signaling; Auxiliary data signalling, i.e. transmitting data via a non-traffic channel
• CPC Class Codes: H04W 4/24 : Accounting or billing
• CPC Class Codes: H04W 4/50 : Service provisioning or reconfiguring
• CPC Class Codes: H04W 48/14 : using user query or user detection
• CPC Class Codes: H04W 48/16 : Discovering, processing access restriction or access information
• CPC Class Codes: H04W 72/0453 : Resources in frequency domain, e.g. a carrier in FDMA
• CPC Class Codes: H04W 8/02 : Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
• CPC Class Codes: H04W 8/18 : Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/20 : Transfer of user or subscriber data
• CPC Class Codes: H04W 84/04 : Large scale networks; Deep hierarchical networks
• CPC Class Codes: H04W 84/042 : Public Land Mobile systems, e.g. cellular systems
• CPC Class Codes: H04W 84/12 : WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 : adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals
• CPC Class Codes: H04W 88/08 : Access point devices
• CPC Class Codes: Y02P 90/80 : Management or planning

Abstract

A non-transitory machine-readable storage medium storing program code for causing a processor to establish a plurality of links to a plurality of devices communicatively coupled to the processor, a particular link of the plurality of links supporting control-plane communications between the processor and a particular device of the plurality of devices over a wireless access network; receive a server message from a particular server of a plurality of servers communicatively coupled to the processor, the server message comprising message payload for delivery to the particular device; generate an encrypted message comprising the message payload and an identifier identifying a particular agent of a plurality of agents on the particular device; and send the encrypted message to the particular device over the particular link, wherein establishing the plurality of links comprises executing a link initialization sequence associating the particular link with a credential associated with the particular device.

Claims

1. A non-transitory computer-readable storage medium storing one or more machine-executable instructions that, when executed by one or more processors of a network system, cause the one or more processors to:

establish, in cooperation with an end-user device communicatively coupled to the network system over a set of one or more wireless access networks, a service control link between the network system and the end-user device, the service control link secured at least in part by at least one security protocol, the service control link for supporting control-plane communications between the one or more processors and the end-user device, the end-user device comprising two or more device agents, the two or more device agents including a particular device agent;

receive a server message from a particular server of a plurality of servers communicatively coupled to the one or more processors, the server message comprising a message payload, at least a portion of the message payload for delivery to the end-user device;

generate an encrypted message comprising the at least a portion of the message payload and an identifier identifying the particular device agent, the identifier configured to assist in delivering the at least a portion of the message payload to the particular device agent, the identifier distinguishing the particular device agent from all other device agents of the two or more device agents; and

send the encrypted message to the end-user device over the service control link,

wherein establishing the service control link between the network system and the end-user device comprises executing a link initialization sequence, the link initialization sequence associating the service control link with a credential associated with the end-user device.

2. The non-transitory computer-readable storage medium recited in claim 1, wherein executing the link initialization sequence comprises authenticating the end-user device, authorizing the end-user device to communicate with the one or more processors, activating the end-user device, or provisioning the end-user device or one or more network elements.

3. The non-transitory computer-readable storage medium recited in claim 1, wherein the credential associated with the end-user device is also associated with the particular device agent.

4. The non-transitory computer-readable storage medium recited in claim 1, wherein the credential associated with the end-user device is a first credential, and wherein executing the link initialization sequence comprises associating a second credential with the particular device agent.

5. The non-transitory computer-readable storage medium recited in claim 1, wherein, when executed by the one or more processors of the network system, the one or more machine-executable instructions further cause the one or more processors to determine whether the end-user device is active before sending the encrypted message to the end-user device over the service control link.

6. The non-transitory computer-readable storage medium recited in claim 1, wherein the credential associated with the end-user device comprises a certificate, a token, or a key.

7. The non-transitory computer-readable storage medium recited in claim 1, wherein, when executed by the one or more processors of the network system, the one or more machine-executable instructions further cause the one or more processors to update the credential associated with the end-user device.

8. The non-transitory computer-readable storage medium recited in claim 1, wherein, when executed by the one or more processors of the network system, the one or more machine-executable instructions further cause the one or more processors to receive a device message from the end-user-device.

9. The non-transitory computer-readable storage medium recited in claim 8, wherein the device message indicates an error condition associated with the encrypted message or the particular device agent.

10. The non-transitory computer-readable storage medium recited in claim 1, wherein the credential associated with the end-user device comprises a phone number, an identification number, a security signature, a security credential, a subscriber identity module (SIM) identifier, a mobile equipment identifier (MEID), an agent identifier, or a device identifier.

11. The non-transitory computer-readable storage medium recited in claim 1, wherein the service control link enables the particular server to push the at least a portion of the message payload to the end-user device.

12. The non-transitory computer-readable storage medium recited in claim 1, wherein the particular server comprises a service usage server, a policy management server, an access control integrity server, a network traffic analysis server, a beta test server, a service download control server, a billing event server, an activation server, a transaction server, an authentication server, or a content management server.

13. The non-transitory computer-readable storage medium recited in claim 1, wherein the at least a portion of the message payload comprises information associated with a service plan, a service usage, or a service cost.

14. The non-transitory computer-readable storage medium recited in claim 1, wherein the at least a portion of the message payload is based, at least in part, on a user preference.

15. The non-transitory computer-readable storage medium recited in claim 1, wherein the at least a portion of the message payload comprises at least an aspect of:

a service offer, an advertisement, or a transaction offer.

16. The non-transitory computer-readable storage medium recited in claim 1, wherein the at least a portion of the message payload comprises an instruction, a setting, a configuration, or a software update for the particular device agent.

17. The non-transitory computer-readable storage medium recited in claim 1, wherein the at least a portion of the message payload comprises information associated with software or a media file.

18. The non-transitory computer-readable storage medium recited in claim 1, wherein the at least a portion of the message payload comprises an indication that additional data or additional information is available to the particular device agent.

19. The non-transitory computer-readable storage medium recited in claim 1, wherein the at least a portion of the message payload is configured to cause the end-user device to present, through a user interface, information associated with the at least a portion of the message payload.

20. The non-transitory computer-readable storage medium recited in claim 1, wherein the server message is a first server message, and wherein the message payload is a first message payload, and wherein the identifier identifying the particular device agent is a first identifier, and wherein, when executed by the one or more processors of the network system, the one or more machine-executable instructions further cause the one or more processors to receive a second server message from the particular server or from another server of the plurality of servers communicatively coupled to the network system, the second server message comprising a second message payload, and wherein the encrypted message further comprises at least a portion of the second message payload and a second identifier configured to assist in delivering the at least a portion of the second message payload to a second device agent of the two or more device agents, the second device agent being the particular device agent or another device agent of the two or more device agents.

21. The non-transitory computer-readable storage medium recited in claim 1, wherein the server message is a first server message, and wherein the particular server is a first server, and wherein the message payload is a first message payload, and wherein the particular device agent is a first device agent, and wherein the encrypted message is a first encrypted message, and wherein the identifier is a first identifier, and wherein, when executed by the one or more processors of the network system, the one or more machine-executable instructions further cause the one or more processors to:

receive a second server message from the first server or from a second server of the plurality of servers communicatively coupled to the network system, the second server message comprising a second message payload, at least a portion of the second message payload for delivery to the end-user device;

generate a second encrypted message comprising the at least a portion of the second message payload and a second identifier configured to assist the end-user device in delivering the at least a portion of the second message payload to the first device agent or to a second device agent of the two or more device agents; and

send the second encrypted message to the end-user device over the service control link.

22. The non-transitory computer-readable storage medium recited in claim 1, wherein the service control link supports asynchronous transmissions by the network system.

23. The non-transitory computer-readable storage medium recited in claim 1, wherein the particular device agent comprises software.

24. The non-transitory computer-readable storage medium recited in claim 1, wherein, when executed by the one or more processors, the one or more machine-executable instructions further cause the one or more processors to:

trigger a transmission to maintain the service control link when a time since sending the encrypted message to the end-user device would otherwise cause the service control link to terminate.

25. The non-transitory computer-readable storage medium recited in claim 1, wherein sending the encrypted message to the end-user device comprises sending the encrypted message to the end-user device regardless of whether the particular device agent is active.

26. The non-transitory computer-readable storage medium recited in claim 1, wherein a transmission over the service control link is within an ambient service, the ambient service being provided at no cost to a user or a subscriber associated with the end-user device.

27. The non-transitory computer-readable storage medium recited in claim 1, wherein establishing, in cooperation with an end-user device communicatively coupled to the network system over a set of one or more wireless networks, a service control link between the network system and the end-user device comprises establishing the service control link in cooperation with a service control device link agent on the end-user device, the service control device link agent for delivering agent messages to at least the particular device agent.

28. The non-transitory computer-readable storage medium recited in claim 27, wherein the identifier is configured to assist the service control device link agent in generating an agent message for delivery to the particular device agent, the agent message comprising the at least a portion of the message payload.

29. A method performed by a network system, the method comprising:

establishing, in cooperation with an end-user device communicatively coupled to the network system over a set of one or more wireless access networks, a service control link between the network system and the end-user device, the service control link secured at least in part by at least one security protocol, the service control link for supporting control-plane communications between the network system and the end-user device, the end-user device comprising two or more device agents, the two or more device agents including a particular device agent;

receiving a server message from a particular server of a plurality of servers communicatively coupled to the network system, the server message comprising a message payload, at least a portion of the message payload for delivery to the end-user device;

generating an encrypted message comprising the at least a portion of the message payload and an identifier identifying the particular device agent, the identifier configured to assist in delivering the at least a portion of the message payload to the particular device agent, the identifier distinguishing the particular device agent from all other device agents of the two or more device agents; and

sending the encrypted message to the end-user device over the service control link,

wherein establishing the service control link between the network system and the end-user device comprises executing a link initialization sequence, the link initialization sequence associating the service control link with a credential associated with the end-user device.

30. A network system, comprising:

means for establishing, in cooperation with an end-user device communicatively coupled to the network system over a set of one or more wireless access networks, a service control link between the network system and the end-user device, the service control link secured at least in part by at least one security protocol, the service control link for supporting control-plane communications between the network system and the end-user device, the end-user device comprising two or more device agents, the two or more device agents including a particular device agent;

means for receiving a server message from a particular server of a plurality of servers communicatively coupled to the network system, the server message comprising a message payload, at least a portion of the message payload for delivery to the end-user device;

means for generating an encrypted message comprising the at least a portion of the message payload and an identifier identifying the particular device agent, the identifier configured to assist in delivering the at least a portion of the message payload to the particular device agent, the identifier distinguishing the particular device agent from all other device agents of the two or more device agents; and

means for sending the encrypted message to the end-user device over the service control link,

wherein establishing the service control link between the network system and the end-user device comprises executing a link initialization sequence, the link initialization sequence associating the service control link with a credential associated with the end-user device.