End user device that secures an association of application to service policy with an application certificate check

• US 9,973,930 B2
• Filed: 05/20/2016
• Issued: 05/15/2018
• Est. Priority Date: 01/28/2009
• Status: Active Grant

• Current Assignee: Headwater Research LLC (Greg Raleigh)
• Original Assignee: Headwater Research LLC (Greg Raleigh)
• Inventors: Raleigh, Gregory G., Lavine, James, Green, Jeffrey
• Primary Examiner(s): RUDY, ANDREW J
• Application Number:
  US15/160,520
• Publication Number:
  US 20170078886A1
• Time in Patent Office: 725 Days
• Field of Search: 726 1, 726 3, 726 5, 726 7
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/75 Indicating network or usage conditions on the user display
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]

Abstract

A wireless end-user device receives application credential information and associated device agent instructions from a network element. The device communicates with a network element to perform an application credential check for a device application. When the application credential check indicates a correct correspondence between the device application and the application credential information, a device agent applies the device agent instructions to an attempted or actual use of a wireless network by the device application, for instance to allow, restrict, measure, etc., the application'"'"'s use according to the policy.

Claims

1. A wireless end-user device comprising:

one or more wireless modems to communicate Internet data with at least a first wireless access network;

a non-transitory memory to store service policy data comprising

first application credential information, associated respectively with a first device application, and

first device agent instructions, associated respectively with the first application credential information; and

one or more device agents configured to

receive the first application credential information and at least a portion of the first device agent instructions from a network element reachable via one or more of the wireless modems,

communicate with a network element reachable via one or more of the wireless modems to perform an application credential check for the first device application, and

based on the application credential check indicating a correct correspondence between the first device application and the first application credential information, apply the at least a portion of the first device agent instructions to an attempted or actual use of the first wireless access network for Internet data communication by the first device application.