Automated device provisioning and activation

• US 8,797,908 B2
• Filed: 05/16/2013
• Issued: 08/05/2014
• Est. Priority Date: 01/28/2009
• Status: Active Grant

• Current Assignee: Headwater Research LLC (Greg Raleigh)
• Original Assignee: Headwater Partners I LLC (Greg Raleigh)
• Inventors: Raleigh, Gregory G.
• Primary Examiner(s): BEHARRY, NOEL R
• Application Number:
  US13/896,065
• Publication Number:
  US 20130250768A1
• Time in Patent Office: 446 Days
• Field of Search: 370/252
• US Class Current: 370/252
• CPC Class Codes: G06F 15/177 Initialisation or configuration control processor initialisation G06F9/4405
• CPC Class Codes: G06Q 10/06315 Needs-based resource requirements planning or analysis
• CPC Class Codes: G06Q 10/06375 Prediction of business process outcome or impact based on a proposed change
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/0207 Discounts or incentives, e.g. coupons or rebates
• CPC Class Codes: G06Q 30/0241 Advertisements
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: G06Q 30/0284 Time or distance, e.g. usage of parking meters or taximeters
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1407 Policy-and-charging control [PCC] architecture
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0876 Aspects of the degree of configuration automation
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 : Policy-based network configuration management
• CPC Class Codes: H04L 41/5003 : Managing SLA; Interaction between SLA and QoS
• CPC Class Codes: H04L 41/5025 : by proactively reacting to service quality change, e.g. by reconfiguration after service quality degradation or upgrade
• CPC Class Codes: H04L 41/5054 : Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components
• CPC Class Codes: H04L 47/20 : Traffic policing
• CPC Class Codes: H04L 47/2408 : for supporting different services, e.g. a differentiated services [DiffServ] type of service
• CPC Class Codes: H04L 51/046 : Interoperability with other network applications or services
• CPC Class Codes: H04L 63/0236 : Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0892 : by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/145 : avoiding end of session, e.g. keep-alive, heartbeats, resumption message or wake-up for inactive or interrupted session
• CPC Class Codes: H04L 67/306 : User profiles
• CPC Class Codes: H04L 67/34 : involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/51 : Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/55 : Push-based network services
• CPC Class Codes: H04L 67/564 : Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/63 : Routing a service request depending on the request content or context
• CPC Class Codes: H04L 9/32 : including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04M 15/00 : Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 15/49 : Connection to several service providers
• CPC Class Codes: H04M 15/58 : based on statistics of usage or network monitoring
• CPC Class Codes: H04M 15/61 : based on the service used
• CPC Class Codes: H04M 15/66 : Policy and charging system
• CPC Class Codes: H04M 15/80 : Rating or billing plans; Tariff determination aspects
• CPC Class Codes: H04M 15/8055 : Selecting cheaper transport technology for a given service
• CPC Class Codes: H04M 15/88 : Provision for limiting connection, or expenditure
• CPC Class Codes: H04M 2215/0188 : Network monitoring; statistics on usage on called/calling number
• CPC Class Codes: H04W 12/00 : Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/02 : Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/037 : of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 12/37 : Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 24/08 : Testing, supervising or monitoring using real traffic
• CPC Class Codes: H04W 28/02 : Traffic management, e.g. flow control or congestion control
• CPC Class Codes: H04W 28/0215 : based on user or device properties, e.g. MTC-capable devices services for machine-to-machine communication [M2M] or machine type communication [MTC] H04W4/70; wireless resource selection or allocation plan definition based on terminal or device properties H04W72/51
• CPC Class Codes: H04W 28/0268 : using specific QoS parameters for wireless networks, e.g. QoS class identifier [QCI] or guaranteed bit rate [GBR] negotiating SLA or negotiating QoS H04W28/24
• CPC Class Codes: H04W 28/12 : using signalling between network elements
• CPC Class Codes: H04W 4/02 : Services making use of location information
• CPC Class Codes: H04W 4/12 : Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 4/18 : Information format or content conversion, e.g. adaptation by the network of the transmitted or received information for the purpose of wireless delivery to users or terminals
• CPC Class Codes: H04W 4/20 : Services signaling; Auxiliary data signalling, i.e. transmitting data via a non-traffic channel
• CPC Class Codes: H04W 4/24 : Accounting or billing
• CPC Class Codes: H04W 4/50 : Service provisioning or reconfiguring
• CPC Class Codes: H04W 48/14 : using user query or user detection
• CPC Class Codes: H04W 48/16 : Discovering, processing access restriction or access information
• CPC Class Codes: H04W 72/0453 : Resources in frequency domain, e.g. a carrier in FDMA
• CPC Class Codes: H04W 8/02 : Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
• CPC Class Codes: H04W 8/18 : Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/20 : Transfer of user or subscriber data
• CPC Class Codes: H04W 84/04 : Large scale networks; Deep hierarchical networks
• CPC Class Codes: H04W 84/042 : Public Land Mobile systems, e.g. cellular systems
• CPC Class Codes: H04W 84/12 : WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 : adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals
• CPC Class Codes: H04W 88/08 : Access point devices
• CPC Class Codes: Y02P 90/80 : Management or planning

Abstract

A method and network system for obtaining, from a management entity, a service policy applicable to a device group managed by the management entity, the device group including a first device and a second device communicatively coupled to the network system over a wireless network, the service policy comprising a classification policy to assist in identifying traffic associated with one or more available service activities and a control policy to assist in controlling at least a portion of the traffic associated with the one or more available service activities; identifying data traffic over the wireless network associated with the first device; based on the classification policy, identifying first traffic associated with the one or more available service activities within the data traffic over the wireless network associated with the first device; and based on the control policy, controlling at least a portion of the first traffic.

Claims

1. A method performed by a network system, the method comprising:

obtaining, from a device-group management entity, at least a first portion of a device-group service policy applicable to a device group managed at least in part by the device-group management entity, the device-group management entity being different from a network system operator associated with the network system, the device group including a plurality of end-user devices communicatively coupled or capable of being communicatively coupled to the network system over a first wireless network, the plurality of end-user devices including a first end-user device and a second end-user device, the device-group service policy to be applied when any end-user device in the device group communicates or initiates communication over the first wireless network, the device-group service policy comprising;

a classification policy to assist in identifying traffic associated with one or more available service activities, the one or more available service activities being a subset of all service activities available over the first wireless network, the traffic associated with the one or more available service activities consisting of data traffic, and

a control policy to assist in controlling at least a portion of the traffic associated with the one or more available service activities;

identifying prospective, attempted, or successful data traffic over the first wireless network associated with the first end-user device;

based on at least a portion of the classification policy, identifying first traffic associated with the one or more available service activities within the prospective, attempted, or successful data traffic over the first wireless network associated with the first end-user device;

based on at least a portion of the control policy, controlling at least a portion of the first traffic associated with the one or more available service activities;

determining that the first end-user device is connected to a second wireless network;

identifying prospective, attempted, or successful data traffic over the second wireless network associated with the first end-user device; and

refraining from applying at least a second portion of the device-group service policy to at least a portion of the prospective, attempted, or successful data traffic over the second wireless network associated with the first end-user device, the at least a second portion of the device-group service policy being the same as or different from the at least a first portion of the device-group service policy.

2. The method of claim 1, wherein controlling the at least a portion of the first traffic associated with the one or more available service activities comprises controlling a background activity.

3. The method of claim 1, wherein the at least a portion of the first traffic associated with the one or more available service activities is associated with a particular service activity of the one or more available service activities.

4. The method of claim 3, wherein the particular service activity of the one or more available service activities is associated with an application, a network destination, a content type, a background activity, or a combination of these.

5. The method of claim 1, wherein controlling the at least a portion of the first traffic associated with the one or more available service activities comprises controlling all of the first traffic associated with the one or more available service activities.

6. The method of claim 1, wherein controlling the at least a portion of the first traffic associated with the one or more available service activities comprises restricting or allowing the at least a portion of the first traffic associated with the one or more available service.

7. The method of claim 1, further comprising:

identifying prospective, attempted, or successful data traffic over the first wireless network associated with the second end-user device;

based on the at least a portion of the classification policy, identifying second traffic associated with the one or more available service activities within the prospective, attempted, or successful data traffic over the first wireless network associated with the second end-user device; and

based on the at least a portion of the control policy, controlling at least a portion of the second traffic associated with the one or more available service activities.

8. The method of claim 1, wherein controlling the at least a portion of the first traffic associated with the one or more available service activities comprises restricting traffic associated with at least a particular service activity of the one or more available service activities for a subset of one or more devices in the device group, the subset of one or more devices including the first end-user device.

9. The method of claim 8, wherein restricting traffic associated with the at least a particular service activity of the one or more available service activities for a subset of one or more devices in the device group comprises:

limiting an amount of service usage associated with the at least a particular service activity by the subset of one or more devices in the device group, throttling a rate of service usage associated with the at least a particular service activity by the subset of one or more devices in the device group, or preventing service usage associated with the at least a particular service activity by the subset of one or more devices in the device group.

10. The method of claim 1, wherein the control policy is based on a type of the first wireless network, a time of day, a location, or a combination of these.

11. The method of claim 1, wherein the control policy is based on an aspect of the one or more available service activities, the aspect of the one or more available service activities being an application associated with a particular service activity of the one or more available service activities, a network communication end point associated with the particular service activity of the one or more available service activities, a content type of the particular service activity of the one or more available service activities, or a combination of these.

12. The method of claim 1, wherein obtaining, from the device-group management entity, the at least a portion of the device-group service policy comprises receiving a user input for establishing at least an aspect of the device-group service policy through a user interface communicatively coupled to the network system.

13. The method of claim 1, wherein obtaining, from the device-group management entity, the at least a portion of the device-group service policy comprises receiving a user input for establishing at least an aspect of the device-group service policy from one of the plurality of end-user devices in the device group.

14. The method of claim 1, wherein the device-group management entity is an entity associated with a family service account, a user of at least one of the plurality of end-user devices, or an entity that is financially responsible for at least a portion of usage of the first wireless network associated with the device group.

15. The method of claim 1, wherein the device-group management entity is a virtual service provider or an enterprise administrator associated with an enterprise service account.

16. The method of claim 1, wherein obtaining, from the device-group management entity, the at least a portion of the device-group service policy comprises receiving a user input for establishing at least an aspect of the device-group service policy from a virtual service provider terminal.

17. The method of claim 1, further comprising at least assisting in presenting a notification associated with at least one of the one or more available service activities, wherein the notification provides a service usage measure associated with at least a particular service activity of the one or more available service activities.

18. The method of claim 1, wherein the first wireless network comprises a cellular network or a roaming network, and the second wireless network comprises a wireless fidelity (WiFi) network or a home network.

19. The method of claim 1, further comprising:

obtaining a first usage measure and a second usage measure, the first usage measure comprising a first measure of usage of a particular service activity of the one or more available service activities by the first end-user device, and the second usage measure comprising a second measure of usage of the particular service activity by the first end-user device; and

generating an aggregate usage measure based on the first usage measure and the second usage measure,

and wherein controlling the at least a portion of the first traffic associated with the one or more available service activities comprises controlling traffic associated with the particular service activity based on the aggregate usage measure.

20. The method of claim 1, further comprising:

obtaining a first usage measure and a second usage measure, the first usage measure comprising a measure of usage of a first service activity of the one or more available service activities by the first end-user device, and the second usage measure comprising a measure of usage of a second service activity of the one or more available service activities by the first end-user device; and

generating an aggregate usage measure based on the first usage measure and the second usage measure,

and wherein controlling the at least a portion of the first traffic associated with the one or more available service activities comprises controlling the first traffic associated with the one or more available service activities based on the aggregate usage measure.

21. The method of claim 1, wherein at least an aspect of the device-group service policy is based on a type of the first wireless network.

22. The method of claim 1, wherein controlling the at least a portion of the first traffic associated with the one or more available service activities comprises allowing, dropping, blocking, throttling, buffering, delaying, quarantining, or traffic shaping the at least a portion of the first traffic associated with the one or more available service activities, or modifying a quality-of-service of the at least a portion of the first traffic associated with the one or more available service activities.

23. The method of claim 1, wherein controlling the at least a portion of the first traffic associated with the one or more available service activities comprises directing, routing, or tunneling the at least a portion of the first traffic associated with the one or more available service activities.

24. The method of claim 1, wherein the device-group service policy comprises a first portion and a second portion, and further comprising:

sending the second portion to a service processor on the first end-user device.

25. The method of claim 1, further comprising:

obtaining an accounting of a first wireless network usage associated with the traffic associated with the one or more available service activities; and

allocating at least a portion of the accounting to an account associated with an entity that is financially responsible for at least a portion of usage of the first wireless network associated with the device group.

26. A method performed by a network system, the method comprising:

obtaining, from a device-group management entity, at least a portion of a first device-group service policy applicable to a device group managed at least in part by the device-group management entity, the device-group management entity being different from a network system operator associated with the network system, the device group including a plurality of end-user devices communicatively coupled or capable of being communicatively coupled to the network system over a first wireless network, the plurality of end-user devices including a first end-user device and a second end-user device, the first device-group service policy to be applied when any end-user device in the device group communicates or initiates communication over the first wireless network, the first device-group service policy comprising;

a first classification policy to assist in identifying traffic associated with one or more available service activities, the one or more available service activities being a subset of all service activities available over the first wireless network, the traffic associated with the one or more available service activities consisting of data traffic, and

a first control policy to assist in controlling at least a portion of the traffic associated with the one or more available service activities;

obtaining, from the device-group management entity, at least a portion of a second device-group service policy applicable to the device group, the second device-group service policy comprising a second classification policy and a second control policy, the second device-group service policy being different from the first device-group service policy;

identifying prospective, attempted, or successful data traffic over the first wireless network associated with the first end-user device;

based on at least a portion of the first classification policy, identifying first traffic associated with the one or more available service activities within the prospective, attempted, or successful data traffic over the first wireless network associated with the first end-user device;

based on at least a portion of the first control policy, controlling at least a portion of the first traffic associated with the one or more available service activities;

determining that the first end-user device is connected to a second wireless network;

identifying prospective, attempted, or successful data traffic over the second wireless network associated with the first end-user device;

based on at least a portion of the second classification policy, identifying second traffic associated with the one or more available service activities within the prospective, attempted, or successful data traffic over the second wireless network associated with the first end-user device; and

based on at least a portion of the second control policy, controlling at least a portion of the second traffic associated with the one or more available service activities.

27. The method of claim 26, wherein controlling the at least a portion of the first traffic associated with the one or more available service activities or controlling the at least a portion of the second traffic associated with the one or more available service activities comprises controlling a background activity.

28. The method of claim 26, wherein the at least a portion of the first traffic associated with the one or more available service activities or the at least a portion of the second traffic associated with the one or more available service activities is associated with a particular service activity of the one or more available service activities.

29. The method of claim 28, wherein the particular service activity of the one or more available service activities is associated with an application, a network destination, a content type, a background activity, or a combination of these.

30. The method of claim 26, wherein controlling the at least a portion of the first traffic associated with the one or more available service activities or controlling the at least a portion of the second traffic associated with the one or more available service activities comprises controlling all of the first traffic associated with the one or more available service activities.

31. The method of claim 26, wherein controlling the at least a portion of the first traffic associated with the one or more available service activities or controlling the at least a portion of the second traffic associated with the one or more available service activities comprises restricting or allowing the at least a portion of the first traffic associated with the one or more available service activities.

32. The method of claim 26, wherein controlling the at least a portion of the first traffic associated with the one or more available service activities or controlling the at least a portion of the second traffic associated with the one or more available service activities comprises restricting traffic associated with at least a particular service activity of the one or more available service activities for a subset of one or more devices in the device group, the subset of one or more devices including the first end-user device.

33. The method of claim 32, wherein restricting traffic associated with the at least a particular service activity of the one or more available service activities for a subset of one or more devices in the device group comprises:

limiting an amount of service usage associated with the at least a particular service activity by the subset of one or more devices in the device group, throttling a rate of service usage associated with the at least a particular service activity by the subset of one or more devices in the device group, or preventing service usage associated with the at least a particular service activity by the subset of one or more devices in the device group.

34. The method of claim 26, wherein the first control policy is based on a type of the first wireless network, a time of day, a location, or a combination of these.

35. The method of claim 26, wherein the second control policy is based on a type of the second wireless network, a time of day, a location, or a combination of these.

36. The method of claim 26, wherein the first control policy or the second control policy is based on an aspect of the one or more available service activities, the aspect of the one or more available service activities being an application associated with a particular service activity of the one or more available service activities, a network communication end point associated with the particular service activity of the one or more available service activities, a content type of the particular service activity of the one or more available service activities, or a combination of these.

37. The method of claim 26, wherein obtaining, from the device-group management entity, the at least a portion of the first device-group service policy comprises receiving a user input for establishing at least an aspect of the first device-group service policy through a user interface communicatively coupled to the network system.

38. The method of claim 26, wherein obtaining, from the device-group management entity, the at least a portion of the second device-group service policy comprises receiving a user input for establishing at least an aspect of the second device-group service policy through a user interface communicatively coupled to the network system.

39. The method of claim 26, wherein obtaining, from the device-group management entity, the at least a portion of the first device-group service policy comprises receiving a user input for establishing at least an aspect of the first device-group service policy from one of the plurality of end-user devices in the device group.

40. The method of claim 26, wherein obtaining, from the device-group management entity, the at least a portion of the second device-group service policy comprises receiving a user input for establishing at least an aspect of the second device-group service policy from one of the plurality of end-user devices in the device group.

41. The method of claim 26, wherein the device-group management entity is an entity associated with a family service account, a user of at least one of the plurality of end-user devices, or an entity that is financially responsible for at least a portion of usage of the first or second wireless network associated with the device group.

42. The method of claim 26, wherein the device-group management entity is a virtual service provider or an enterprise administrator associated with an enterprise service account.

43. The method of claim 26, wherein obtaining, from the device-group management entity, the at least a portion of the first device-group service policy comprises receiving a user input for establishing at least an aspect of the first device-group service policy from a virtual service provider terminal.

44. The method of claim 26, wherein obtaining, from the device-group management entity, the at least a portion of the second device-group service policy comprises receiving a user input for establishing at least an aspect of the second device-group service policy from a virtual service provider terminal.

45. The method of claim 26, further comprising at least assisting in presenting a notification associated with at least one of the one or more available service activities, wherein the notification provides a service usage measure associated with at least a particular service activity of the one or more available service activities.

46. The method of claim 26, further comprising:

obtaining a first usage measure and a second usage measure, the first usage measure comprising a first measure of usage of a particular service activity of the one or more available service activities by the first end-user device, and the second usage measure comprising a second measure of usage of the particular service activity by the first end-user device; and

generating an aggregate usage measure based on the first usage measure and the second usage measure,

and wherein controlling the at least a portion of the first traffic associated with the one or more available service activities or controlling the at least a portion of the second traffic associated with the one or more available service activities comprises controlling traffic associated with the particular service activity based on the aggregate usage measure.

47. The method of claim 26, further comprising:

obtaining a first usage measure and a second usage measure, the first usage measure comprising a measure of usage of a first service activity of the one or more available service activities by the first end-user device, and the second usage measure comprising a measure of usage of a second service activity of the one or more available service activities by the first end-user device; and

generating an aggregate usage measure based on the first usage measure and the second usage measure,

and wherein controlling the at least a portion of the first traffic associated with the one or more available service activities comprises controlling the first traffic associated with the one or more available service activities based on the aggregate usage measure, or controlling the at least a portion of the second traffic associated with the one or more available service activities comprises controlling the second traffic associated with the one or more available service activities based on the aggregate usage measure.

48. The method of claim 26, wherein at least an aspect of the first device-group service policy is based on a type of the first wireless network.

49. The method of claim 26, wherein at least an aspect of the second device-group service policy is based on a type of the second wireless network.

50. The method of claim 26, wherein controlling the at least a portion of the first traffic associated with the one or more available service activities comprises allowing, dropping, blocking, throttling, buffering, delaying, quarantining, or traffic shaping the at least a portion of the first traffic associated with the one or more available service activities, or modifying a quality-of-service of the at least a portion of the first traffic associated with the one or more available service activities.

51. The method of claim 26, wherein controlling the at least a portion of the second traffic associated with the one or more available service activities comprises allowing, dropping, blocking, throttling, buffering, delaying, quarantining, or traffic shaping the at least a portion of the second traffic associated with the one or more available service activities, or modifying a quality-of-service of the at least a portion of the first traffic associated with the one or more available service activities.

52. The method of claim 26, wherein controlling the at least a portion of the first traffic associated with the one or more available service activities comprises directing, routing, or tunneling the at least a portion of the first traffic associated with the one or more available service activities.

53. The method of claim 26, wherein controlling the at least a portion of the second traffic associated with the one or more available service activities comprises directing, routing, or tunneling the at least a portion of the second traffic associated with the one or more available service activities.

54. The method of claim 26, wherein the first device-group service policy or the second device-group service policy comprises a first portion and a second portion, and further comprising:

sending the second portion to a service processor on the first end-user device.

55. The method of claim 26, further comprising:

obtaining an accounting of a first or second wireless network usage associated with the traffic associated with the one or more available service activities; and

allocating at least a portion of the accounting to an account associated with an entity that is financially responsible for at least a portion of usage of the first or second wireless network associated with the device group.

56. A network system comprising:

one or more user interfaces configured to accept, from a device-group management entity, at least a first portion of a device-group service policy applicable to a device group managed at least in part by the device-group management entity, the device-group management entity being different from a network system operator associated with the network system, the device group including a plurality of end-user devices communicatively coupled or capable of being communicatively coupled to the network system over a first wireless network, the plurality of end-user devices including a first end-user device and a second end-user device, the device-group service policy to be applied when any end-user device in the device group communicates or initiates communication over the first wireless network, the device-group service policy comprising;

a classification policy to assist in identifying traffic associated with one or more available service activities, the one or more available service activities being a subset of all service activities available over the first wireless network, the traffic associated with the one or more available service activities consisting of data traffic, and

a control policy to assist in controlling at least a portion of the traffic associated with the one or more available service activities; and

one or more network elements configured to;

identify prospective, attempted, or successful data traffic over the first wireless network associated with the first end-user device,

based on at least a portion of the classification policy, identify first traffic associated with the one or more available service activities within the prospective, attempted, or successful data traffic over the wireless network associated with the first end-user device,

based on at least a portion of the control policy, control at least a portion of the first traffic associated with the one or more available service activities,

determine that the first end-user device is connected to a second wireless network,

identify prospective, attempted, or successful data traffic over the second wireless network associated with the first end-user device, and

refrain from applying at least a second portion of the device-group service policy to at least a portion of the prospective, attempted, or successful data traffic over the second wireless network associated with the first end-user device, the at least a second portion of the device-group service policy being the same as or different from the at least a first portion of the device-group service policy.

57. A network system comprising:

one or more user interfaces configured to;

accept, from a device-group management entity, at least a portion of a first device-group service policy applicable to a device group managed at least in part by the device-group management entity, the device-group management entity being different from a network system operator associated with the network system, the device group including a plurality of end-user devices communicatively coupled or capable of being communicatively coupled to the network system over a first wireless network, the plurality of end-user devices including a first end-user device and a second end-user device, the first device-group service policy to be applied when any end-user device in the device group communicates or initiates communication over the first wireless network, the first device-group service policy comprising;

a first classification policy to assist in identifying traffic associated with one or more available service activities, the one or more available service activities being a subset of all service activities available over the first wireless network, the traffic associated with the one or more available service activities consisting of data traffic, and

a first control policy to assist in controlling at least a portion of the traffic associated with the one or more available service activities, and

accept, from the device-group management entity, at least a portion of a second device-group service policy applicable to the device group, the second device-group service policy comprising a second classification policy and a second control policy, the second device-group service policy being different from the first device-group service policy; and

one or more network elements configured to;

identify prospective, attempted, or successful data traffic over the first wireless network associated with the first end-user device,

based on at least a portion of the first classification policy, identify first traffic associated with the one or more available service activities within the prospective, attempted, or successful data traffic over the first wireless network associated with the first end-user device,

based on at least a portion of the first control policy, control at least a portion of the first traffic associated with the one or more available service activities,

determine that the first end-user device is connected to a second wireless network,

identify prospective, attempted, or successful data traffic over the second wireless network associated with the first end-user device,

based on at least a portion of the second classification policy, identify second traffic associated with the one or more available service activities within the prospective, attempted, or successful data traffic over the second wireless network associated with the first end-user device, and

based on at least a portion of the second control policy, control at least a portion of the second traffic associated with the one or more available service activities.