Remotely configurable device agent for packet routing

• US 8,948,025 B2
• Filed: 04/18/2014
• Issued: 02/03/2015
• Est. Priority Date: 01/28/2009
• Status: Active Grant

• Current Assignee: Headwater Research LLC (Greg Raleigh)
• Original Assignee: Headwater Partners I LLC (Greg Raleigh)
• Inventors: Raleigh, Gregory G., Rightmyer, Rob, Kudelin, Vladislav
• Primary Examiner(s): RUDY, ANDREW J
• Application Number:
  US14/256,593
• Publication Number:
  US 20140226496A1
• Time in Patent Office: 291 Days
• Field of Search: 709/223, 709/224, 709/239, 709/242, 714/4.11, 726/7, 726/26, 370/349, 370/351, 370/232, 370/234, 370/249, 370/250, 455/405, 455/406, 455/414.1, 455/414.3, 705/223, 705/224, 705/239, 705/242
• US Class Current: 370/250
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 50/10 Services
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/5041 characterised by the time relationship between creation and deployment of a service
• CPC Class Codes: H04L 41/5045 Making service definitions prior to deployment
• CPC Class Codes: H04L 41/5054 Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components
• CPC Class Codes: H04L 45/306 Route determination based on the nature of the carried application
• CPC Class Codes: H04L 47/803 Application aware
• CPC Class Codes: H04L 47/824 Applicable to portable or mobile terminals
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 69/24 Negotiation of communication capabilities
• CPC Class Codes: H04W 4/24 Accounting or billing
• CPC Class Codes: H04W 4/50 : Service provisioning or reconfiguring
• CPC Class Codes: H04W 48/14 : using user query or user detection
• CPC Class Codes: H04W 72/29 : between an access point and the access point controlling device
• CPC Class Codes: H04W 72/53 : based on regulatory allocation policies
• CPC Class Codes: H04W 8/18 : Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/24 : Transfer of terminal data
• CPC Class Codes: H04W 80/04 : Network layer protocols, e.g. mobile IP [Internet Protocol]

Abstract

A method performed by a first client-side device agent, instantiated on a hardware device that is configured to connect to a data-handling network via associated device circuitry, comprising receiving configuration data in the form of non-executable data, configuring the first client-side device agent such that the first client-side device agent has a first configuration specifying a first application on the hardware device, monitoring substantially in real-time a flow of packets between the of applications and a server-side device, selecting packets based on their association with the application, modifying or appending packet header information for the selected packets, and transmitting modified or appended packets configured such that they are routed based on the modified or appended packet header information.

Claims

1. A method performed by a mobile device agent, instantiated on a mobile device that is configured to connect to a wireless access network, the method comprising:

monitoring, a flow of packets comprising one or more packets associated respectively with each of a plurality of applications capable of executing on a processor on the mobile device so as to cause the generation of the associated packets for forwarding over the wireless access network;

for at least a first subset traffic flow of the monitored flow of packets the subset traffic flow associated with a first strict subset of the applications,

directing the first subset traffic flow to a first network element reachable through the wireless access network, the first network element having a destination address differing from a destination address specified in the packets as generated, and

providing side information to a second network element reachable through the wireless access network, the side information comprising an identifier associated with one or more of the first strict subset of the applications that are associated with respective portions of the first subset traffic flow; and

for at least a second subset traffic flow of the monitored flow of packets not associated with the first strict subset of the applications, forwarding packets in the second subset traffic flow over the wireless access network without directing them to the first network element.

2. The method of claim 1, wherein the first strict subset of the applications is associated with a set of rules enabled by the mobile device agent, the set of rules specifying the first strict subset and the first network element the method further comprising classifying packets in the monitored flow of packets according to the set of rules to determine which of the packets are in the first subset traffic flow.

3. The method of claim 1, further comprising providing a user of the mobile device with information indicating that a service is active the service comprising the directing of the first subset traffic flow and providing of side information.

4. The method of claim 1, wherein the first network element and the second network element are the same network element.

5. The method of claim 4, wherein providing side information to the second network element comprises modifying at least one packet in the first subset traffic flow with side information identifying at least a type of the application or the application that is associated with the packet.

6. The method of claim 1, wherein providing side information to the second network element comprises communicating the side information over a dedicated control channel, a standard network connection, a secure network connection, or a secure tunnel.

7. The method of claim 1, wherein the second subset traffic flow of the monitored flow of packets is associated with a second strict subset of the applications, and wherein forwarding packets in the second subset traffic flow over the wireless access network without directing them to the first network element comprises directing the packets in the second subset traffic flow to a third network element reachable through the wireless access network, the third network element having a destination address differing from a destination address specified in the packets as generated and differing from the destination address of the first network element.

8. The method of claim 7, further comprising providing side information to a fourth network element reachable through the wireless access network, the side information comprising an identifier associated with one or more of the second strict subset of the applications that are associated with respective portions of the second subset traffic flow.

9. The method of claim 8, wherein the second network element and the fourth network element are the same network element.

10. The method of claim 8, wherein providing side information to the fourth network element comprises modifying at least one packet in the second subset traffic flow with side information identifying at least a type of the application or the application that is associated with the packet.

11. The method of claim 1, wherein forwarding packets in the second subset traffic flow over the wireless access network without directing them to the first network element comprises forwarding them to the wireless access network with a destination address identical to the destination address specified in the packets as generated.

12. The method of claim 11, further comprising providing side information to a fourth network element reachable through the wireless access network, the side information comprising an identifier associated with one or more of the applications that are associated with respective portions of the second subset traffic flow.

13. The method of claim 1, wherein the first strict subset of the applications is associated with a transaction-based service.

14. The method of claim 1, wherein the first network element is a proxy server associated with the first strict subset of the applications.

15. The method of claim 1, further comprising receiving data from a network element, and in response changing at least one association between an application in the plurality of applications and the first strict subset of the applications.

16. A mobile device comprising:

a modem configurable to connect to a wireless access network;

a processor and a plurality of stored applications capable of execution on the processor so as to cause the generation of associated packets for forwarding over the wireless access network; and

a device agent configured to

monitor a flow of packets comprising one or more packets associated respectively with each of the plurality of applications when executing on the processor,

for at least a first subset traffic flow of the monitored flow of packets, the subset associated with a first strict subset of the applications,

direct the first subset traffic flow to a first network element reachable through the wireless access network, the first network element having a destination address differing from a destination address specified in the packets as generated, and

provide side information to a second network element reachable through the wireless access network, the side information comprising an identifier associated with one or more of the first strict subset of the applications that are associated with respective portions of the first subset traffic flow, and

for at least a second subset traffic flow of the monitored flow of packets not associated with the first strict subset of the applications, forward packets in the second subset traffic flow over the wireless access network without directing them to the first network element.

17. The device of claim 16, wherein the first strict subset of the applications is associated with a set of rules enabled by the device agent, the set of rules specifying the first strict subset and the first network element, the device agent further configured to classify packets in the monitored flow of packets according to the set of rules to determine which of the packets are in the first subset traffic flow.

18. The device of claim 16, the device agent further configured to provide a user of the mobile device with information indicating that a service is active, the service comprising the device agent active to direct the first subset traffic flow and provide the side information.

19. The device of claim 16, wherein the first network element and the second network element are the same network element.

20. The device of claim 19, wherein the device agent configured to provide side information to the second network element comprises the device agent configured to modify at least one packet in the first subset traffic flow with side information identifying at least a type of the application or the application that is associated with the packet.

21. The device of claim 16, wherein the device agent configured to provide side information to the second network element comprises the device agent configured to communicate the side information over a dedicated control channel, a standard network connection, a secure network connection, or a secure tunnel.

22. The device of claim 16, wherein the second subset traffic flow of the monitored flow of packets is associated with a second strict subset of the applications, and wherein the device agent configured to forward packets in the second subset traffic flow over the wireless access network without directing them to the first network element comprises the device agent configured to direct the packets in the second subset traffic flow to a third network element reachable through the wireless access network, the third network element having a destination address differing from a destination address specified in the packets as generated and differing from the destination address of the first network element.

23. The device of claim 22, the device agent further configured to provide side information to a fourth network element reachable through the wireless access network, the side information comprising an identifier associated with one or more of the second strict subset of the applications that are associated with respective portions of the second subset traffic flow.

24. The device of claim 23, wherein the device agent configured to provide side information to the fourth network element comprises the device agent configured to modify at least one packet in the second subset traffic flow with side information identifying at least a type of the application or the application that is associated with the packet.

25. The device of claim 16, wherein the device agent configured to forward second packets in the second subset traffic flow over the wireless access network without directing them to the first network element comprises the device agent configured to forward the second packets over the wireless access network with a destination address identical to the destination address specified in the packets as generated.

26. The device of claim 25, the device agent further configured to provide side information to a fourth network element reachable through the wireless access network, the side information comprising an identifier associated with one or more of the applications that are associated with respective portions of the second subset traffic flow.

27. The device of claim 16, wherein the first strict subset of the applications is associated with a transaction-based service.

28. The device of claim 16, wherein the first network element is a proxy server associated with the first strict subset of the applications.

29. The device of claim 16, the device agent further configured to receive data from a network element, and in response to change at least one association between an application in the plurality of applications and the first strict subset of the applications.

30. An apparatus comprising a non-transitory computer-readable medium containing computer instructions that, when executed or interpreted by at least one processor on a mobile device that is configured to connect to a wireless access network, cause the at least one processor to perform a method comprising:

monitoring a flow of packets comprising one or more packets associated respectively with each of a plurality of applications capable of executing on a processor on the mobile device so as to cause the generation of associated packets for forwarding over the wireless access network;

for at least a first subset traffic flow of the monitored flow of packets, the subset traffic flow associated with a first strict subset of the applications,

directing the first subset traffic flow to a first network element reachable through the wireless access network, the first network element having a destination address differing from a destination address specified in the packets as generated, and

providing side information to a second network element reachable through the wireless access network, the side information comprising an identifier associated with one or more of the first strict subset of the applications that are associated with respective portions of the first subset traffic flow; and

for at least a second subset traffic flow of the monitored flow of packets not associated with the first strict subset of the applications, forwarding packets in the second subset traffic flow over the wireless access network without directing them to the first network element.