Wireless device with application data flow tagging and network stack-implemented network access policy

• US 9,532,161 B2
• Filed: 12/22/2015
• Issued: 12/27/2016
• Est. Priority Date: 01/28/2009
• Status: Active Grant

• Current Assignee: Headwater Research LLC (Greg Raleigh)
• Original Assignee: Headwater Partners I LLC (Greg Raleigh)
• Inventors: Raleigh, Gregory G.
• Primary Examiner(s): RUDY, ANDREW J
• Application Number:
  US14/979,233
• Publication Number:
  US 20160112821A1
• Time in Patent Office: 371 Days
• Field of Search: 455/405, 455/406, 455/414.1, 455/432.1, 455/552.1, 370/229, 370/230, 370/351, 726 2- 7
• US Class Current: 1/1
• CPC Class Codes: G06F 15/177 Initialisation or configuration control processor initialisation G06F9/4405
• CPC Class Codes: G06Q 10/06315 Needs-based resource requirements planning or analysis
• CPC Class Codes: G06Q 10/06375 Prediction of business process outcome or impact based on a proposed change
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/0207 Discounts or incentives, e.g. coupons or rebates
• CPC Class Codes: G06Q 30/0241 Advertisements
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: G06Q 30/0284 Time or distance, e.g. usage of parking meters or taximeters
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1407 Policy-and-charging control [PCC] architecture
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0876 Aspects of the degree of configuration automation
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 : Policy-based network configuration management
• CPC Class Codes: H04L 41/5003 : Managing SLA; Interaction between SLA and QoS
• CPC Class Codes: H04L 41/5025 : by proactively reacting to service quality change, e.g. by reconfiguration after service quality degradation or upgrade
• CPC Class Codes: H04L 41/5054 : Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components
• CPC Class Codes: H04L 47/20 : Traffic policing
• CPC Class Codes: H04L 47/2408 : for supporting different services, e.g. a differentiated services [DiffServ] type of service
• CPC Class Codes: H04L 51/046 : Interoperability with other network applications or services
• CPC Class Codes: H04L 63/0236 : Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0892 : by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/145 : avoiding end of session, e.g. keep-alive, heartbeats, resumption message or wake-up for inactive or interrupted session
• CPC Class Codes: H04L 67/306 : User profiles
• CPC Class Codes: H04L 67/34 : involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/51 : Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/55 : Push-based network services
• CPC Class Codes: H04L 67/564 : Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/63 : Routing a service request depending on the request content or context
• CPC Class Codes: H04L 9/32 : including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04M 15/00 : Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 15/49 : Connection to several service providers
• CPC Class Codes: H04M 15/58 : based on statistics of usage or network monitoring
• CPC Class Codes: H04M 15/61 : based on the service used
• CPC Class Codes: H04M 15/66 : Policy and charging system
• CPC Class Codes: H04M 15/80 : Rating or billing plans; Tariff determination aspects
• CPC Class Codes: H04M 15/8055 : Selecting cheaper transport technology for a given service
• CPC Class Codes: H04M 15/88 : Provision for limiting connection, or expenditure
• CPC Class Codes: H04M 2215/0188 : Network monitoring; statistics on usage on called/calling number
• CPC Class Codes: H04W 12/00 : Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/02 : Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/037 : of the control plane, e.g. signalling traffic
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 12/37 : Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 24/08 : Testing, supervising or monitoring using real traffic
• CPC Class Codes: H04W 28/02 : Traffic management, e.g. flow control or congestion control
• CPC Class Codes: H04W 28/0215 : based on user or device properties, e.g. MTC-capable devices services for machine-to-machine communication [M2M] or machine type communication [MTC] H04W4/70; wireless resource selection or allocation plan definition based on terminal or device properties H04W72/51
• CPC Class Codes: H04W 28/0268 : using specific QoS parameters for wireless networks, e.g. QoS class identifier [QCI] or guaranteed bit rate [GBR] negotiating SLA or negotiating QoS H04W28/24
• CPC Class Codes: H04W 28/12 : using signalling between network elements
• CPC Class Codes: H04W 4/02 : Services making use of location information
• CPC Class Codes: H04W 4/12 : Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 4/18 : Information format or content conversion, e.g. adaptation by the network of the transmitted or received information for the purpose of wireless delivery to users or terminals
• CPC Class Codes: H04W 4/20 : Services signaling; Auxiliary data signalling, i.e. transmitting data via a non-traffic channel
• CPC Class Codes: H04W 4/24 : Accounting or billing
• CPC Class Codes: H04W 4/50 : Service provisioning or reconfiguring
• CPC Class Codes: H04W 48/14 : using user query or user detection
• CPC Class Codes: H04W 48/16 : Discovering, processing access restriction or access information
• CPC Class Codes: H04W 72/0453 : Resources in frequency domain, e.g. a carrier in FDMA
• CPC Class Codes: H04W 8/02 : Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
• CPC Class Codes: H04W 8/18 : Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/20 : Transfer of user or subscriber data
• CPC Class Codes: H04W 84/04 : Large scale networks; Deep hierarchical networks
• CPC Class Codes: H04W 84/042 : Public Land Mobile systems, e.g. cellular systems
• CPC Class Codes: H04W 84/12 : WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 : adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals
• CPC Class Codes: H04W 88/08 : Access point devices
• CPC Class Codes: Y02P 90/80 : Management or planning

Abstract

A wireless end-user device has WWAN and WLAN modems. A memory stores a WWAN network access policy specific to data traffic usage and/or attempted usage by a first software application but not a second software application. An application service interface agent identifies network data traffic flows with respective tag information that associates a responsible one of a plurality of software applications with each identified network data traffic flow. One or more elements of a network stack then use the tag information to identify a network data traffic flow associated with the first software application, the one or more elements applying the network access policy to the identified network data traffic flow.

Claims

1. A wireless end-user device comprising:

a wireless wide area network (WWAN) modem to communicate data for Internet service activities between the device and at least one WWAN, when configured for and connected to the WWAN;

a wireless local area network (WLAN) modem to communicate data for Internet service activities between the device and at least one WLAN, when configured for and connected to the WLAN;

memory configured to store a WWAN network access policy to be applied when the wireless end-user device communicates or attempts to communicate over the at least one WWAN, the WWAN network access policy comprising one or more first policy instructions associated with a first software application of a plurality of software applications resident on the device, and not with a second software application of the plurality of software applications; and

one or more processors configured to implement

an application service interface agent to identify network data traffic flows with respective tag information, the tag information associating a responsible one of the plurality of software applications with each identified network data traffic flow,

a network stack to provide the plurality of software applications with Internet data access through the WWAN and WLAN modems, the network stack comprising elements including

a network service Application Programming Interface (API) accessible by the plurality of software applications to request Internet service activities,

an Internet Protocol (IP) socket management function to manage IP sockets for the requested Internet service activities, and

respective modem drivers for the WWAN and WLAN modems,

at least one of the network stack elements accessing the tag information to identify a first network traffic flow that is associated with the first software application, the at least one of the network stack elements applying the one or more first policy instructions to the first network traffic flow.

2. The wireless end-user device recited in claim 1, further comprising a policy control agent to manage a high-level network access policy, the policy control agent generating the first policy instructions according to the high-level network access policy.

3. The wireless end-user device recited in claim 1, at least one of the network stack elements configured to augment the tag information for a given flow with flow-specific assignment information, the flow-specific assignment information including at least one of an application layer protocol associated with the flow, a transport layer protocol associated with the flow, and IP socket information associated with the flow.

4. The wireless end-user device recited in claim 3, wherein the at least one of the network stack elements is configured to use the flow-specific assignment information to identify one or more downstream packets that are part of the first network traffic flow.

5. The wireless end-user device recited in claim 1, wherein the network stack is implemented in a kernel space of a device operating system.

6. The wireless end-user device recited in claim 1, wherein the at least one of the network stack elements applying the one or more first policy instructions to the first network traffic flow is configured to apply a firewall service policy to block the first network traffic flow through the WWAN.

7. The wireless end-user device recited in claim 6, wherein the firewall service policy is applied to block the first network traffic flow when the connected WWAN is a roaming network and to pass the first network traffic flow when the connected WWAN is a home network.

8. The wireless end-user device recited in claim 1, wherein the at least one of the network stack elements applying the one or more first policy instructions to the first network traffic flow is configured to apply a notification policy that presents a notification to a user of the device, the notification related to the first software application'"'"'s use or attempted use of the WWAN modem to communicate data for Internet service activities.

9. The wireless end-user device recited in claim 1, wherein the at least one of the network stack elements applying the one or more first policy instructions to the first network traffic flow is configured to apply a service monitor policy that counts data usage related to the first software application'"'"'s use of the WWAN modem to communicate data for Internet service activities.

10. The wireless end-user device recited in claim 9, further comprising a user interface, and wherein the one or more first policy instructions are configured to assist at least one device agent in:

determining an accounting for data usage related to the first software application'"'"'s use of the WWAN modem to communicate data for Internet service activities, and

presenting, through the user interface, a notification comprising information about the data usage.

11. The wireless end-user device recited in claim 9, wherein the one or more first policy instructions are further configured to assist the at least one device agent in:

obtaining a user input from the user interface, the user input comprising an indication of a restriction on the data usage allowed for the first software application, and

implementing the restriction.

12. The wireless end-user device recited in claim 11, wherein the restriction is configured to prevent Internet data communication that is associated with the first software application over the WWAN.

13. The wireless end-user device recited in claim 11, wherein the restriction is configured to assist in limiting a first service activity aspect that is non-critical to a user of the wireless end-user device.

14. The wireless end-user device recited in claim 1, wherein the first and second software applications each comprise one of a user software program, an operating system software program, an operating system software component or system function, or a firmware component or system function.

15. The wireless end-user device recited in claim 1, wherein the one or more processors are further configured to obtain the one or more first policy instructions from a network element.

16. The wireless end-user device recited in claim 1, the at least one of the network stack elements accessing the tag information comprising the IP socket management function.

17. The wireless end-user device recited in claim 1, the at least one of the network stack elements accessing the tag information comprising a policy implementation agent.

18. The wireless end-user device recited in claim 1, the at least one of the network stack elements accessing the tag information comprising an IP queuing and routing element.

19. The wireless end-user device recited in claim 1, the at least one of the network stack elements accessing the tag information comprising a modem firewall element.