Mobile device management

• US 9,125,057 B2
• Filed: 12/19/2014
• Issued: 09/01/2015
• Est. Priority Date: 01/17/2012
• Status: Active Grant

• Current Assignee: Kajeet, Inc.
• Original Assignee: Kajeet, Inc.
• Inventors: Neal, Daniel John, Weintraub, Ben Julian
• Primary Examiner(s): Ajayi, Joel
• Application Number:
  US14/577,616
• Publication Number:
  US 20150140969A1
• Time in Patent Office: 256 Days
• Field of Search: 455/411
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04M 1/72463 to restrict the functionality of the device
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data

Abstract

Methods and systems are disclosed for reducing fraud, waste, and abuse of devices associated with government or business programs. Devices are authenticated based on a first set of data collected from the device, and if authenticated, may be permitted to send or receive service requests based on a second set of data that identifies the user, includes data about the user, identifies the service and/or identifies eligibility criteria. Devices may also be subject to eligibility requirements instituted before, during or after a service request is performed that determine the eligibility of the device and/or the user of the device. Devices may also be subject to filtering requirements administered before or during a service request. Devices may also be subject verification before, during or after one or more service requests.

Claims

1. A computing device comprising:

one or more processors configured to obtain a first set of data from a device for storage in a non-transitory memory to authenticate the device for access to one or more communication/data networks, and when the device is authenticated the one or more processors being further configured to obtain a second set of data for storage in the non-transitory memory to determine an eligibility status for the device to utilize one or more third party wireline, wireless or broadband services utilizing the one or more communication/data networks at a reduced cost rate, the second set of data including real-time user input data and data associated with an eligibility rule that is not based on the real-time user input data and is based on financial information about a user, the eligibility rule received from an entity responsible for administering the third party services, and upon determining the eligibility status the one or more processors being further configured to permit a service request that utilizes the one or more communication/data networks.

2. The computer device as recited in claim 1, wherein some data, but not all data, in the first set of data and some data in the second of data are the same.

3. The computer device as recited in claim 1, wherein the first set of data includes data identifying the device.

4. The computer device as recited in claim 1, wherein the second set of data includes one or more of data indicative of an identity of the user, a voice of the user, an image of the user, or information other than an identity of the user.

5. The computer device as recited in claim 1, wherein the second set of data includes data indicative of the service.

6. The computer device as recited in claim 1, wherein the second set of data identifies whether the user is violating any terms of use of the third party services.

7. The computer device as recited in claim 1, wherein the eligibility status is determined before permitting the service request.

8. The computer device as recited in claim 1, wherein the eligibility status is determined during the service request.

9. The computer device as recited in claim 1, wherein the third party services are provided by a first entity and the eligibility status is determined a second entity.

10. The computer device as recited in claim 9, wherein the first entity is a national government and the second entity is a regional government.

11. The computer device as recited in claim 1, wherein the second set of data identifies a physical location of the device at the time of the service request.

12. The computer device as recited in claim 1, wherein the one or more processors are further configured to send a message to the device before permitting the service request.

13. The computer device as recited in claim 12, wherein the user of the device is prevented from skipping, forwarding or bypassing the message.

14. The computer device as recited in claim 1, wherein the one or more processors are further configured to obtain a third set of data for storage in the non-transitory memory to filter the service request after the service request has been permitted.

15. The computer device as recited in claim 14, wherein the one or more processors are configured to filter the service request by blocking the service request, or blocking data to be transmitted to the device per the service request.

16. The computer device as recited in claim 1, wherein the one or more processors are configured to send a message to the device if the service request has been filtered.

17. The computer device as recited in claim 1, wherein the one or more processors are contained within a service manager.

18. The computer device as recited in claim 17, wherein the service manager is within the one or more communication/data networks.

19. The computer device as recited in claim 17, wherein the service manager is within the device.

20. A method for regulating a device, comprising the steps of:

obtaining a first set of data from the device;

authenticating the device for access to one or more communication/data networks based on the first set of data;

when the device is authenticated, obtaining a second set of data;

determining an eligibility status based on the second set of data for the device to utilize one or more third party wireline, wireless or broadband services for utilizing the one or more communication/data networks at a reduces cost rate, the second set of data including real-time user input data and data associated with an eligibility rule that is not based on the real-time user input data and is based on financial information about a user, the eligibility rule received from by an entity responsible for administering the third party services; and

upon determining the eligibility status, determining whether to permit a service request that utilizes the one or more communication/data networks.