Back to results
US 10,764,284 B2Granted
Method and system for dynamic data flow enforcement
AssigneeVerizon Patent and Licensing Inc.
InventorsMarc Chiaverini, Barry F. Hoffner, Richard Tom, Gregory Femec
Life of this patent
Estimating the term…
Abstract
A method, a device, and a non-transitory storage medium are described in which destination device identifiers associated with network devices are subject to a validation process before an end device attempts to establish a communication session with a network device. Based on an outcome of the validation process, a data flow subsequently established by the end device may be subject to a rule provided under a data usage plan subscribed to by the end device or another rule.
Claims20
A method comprising:
- storing, by a network device of a core network, a rule pertaining to data usage of an application of an end device and a data service subscription, wherein the network device is a packet data network gateway or a user plane function;
- establishing, by the network device based on the rule, a communication session between the application of the end device and an application server associated with the data service subscription;
- receiving, by the network device from the application of the end device during the communication session, a first request to authenticate a first destination device identifier of a first network device that is selected by the application server and communicated to the end device via the network device, wherein the first network device is an advertisement server;
- storing, by the network device in response to the receiving, the first destination device identifier;
- transmitting, by the network device and to a second network device, the first request in response to the storing of the first destination device identifier;
- determining, by the network device subsequent to the transmitting, whether the first destination device identifier is valid under the data usage;
- receiving, by the network device and from the application of the end device, a second request to establish a first communication session with the first network device subsequent to determining that the first destination device identifier is valid;
- and
- enforcing, by the network device and in response to the receiving of the second request, the rule.
6 more elements
A network device comprising:
- a communication interface;
- a memory, wherein the memory stores instructions;
- and
- a processor, wherein the processor executes the instructions to:
- store in the memory, a rule pertaining to data usage of an application of an end device and a data service subscription, wherein the network device is a packet data network gateway or a user plane function of a core network;
- establish, via the communication interface based on the rule, a communication session between the application of the end device and an application server associated with the data service subscription;
- receive, via the communication interface from the application of the end device during the communication session, a first request to authenticate a first destination device identifier of a first network device that is selected by the application server and communicated to the end device via the network device, wherein the first network device is an advertisement server;
- store in the memory, in response to the receipt of the first request, the first destination device identifier;
- transmit, via the communication interface to a second network device, the first request in response to the storage of the first destination device identifier;
- determine, subsequent to the transmission, whether the first destination device identifier is valid under the data usage;
- receive, via the communication interface from the application of the end device, a second request to establish a first communication session with the first network device subsequent to determining that the first destination device identifier is valid;
- and
- enforce, in response to the receipt of the second request, the rule.
10 more elements
A non-transitory, computer-readable storage medium storing instructions executable by a processor of a device, wherein the device is a packet data network gateway or a user plane function of a core network, which when executed cause the device to:
- store a rule pertaining to data usage of an application of an end device and a data service subscription;
- establish, based on the rule, a communication session between the application of the end device and an application server associated with the data service subscription;
- receive from the application of the end device during the communication session, a first request to authenticate a first destination device identifier of a first network device that is selected by the application server and communicated to the end device via the device, wherein the first network device is an advertisement server;
- store in response to the receipt of the first request, the first destination device identifier;
- transmit to a second network device, the first request in response to the storage of the first destination device identifier;
- determine, subsequent to the transmission, whether the first destination device identifier is valid under the data usage;
- receive, from the application of the end device, a second request to establish a first communication session with the first network device subsequent to determining that the first destination device identifier is valid;
- and
- enforce, in response to the receipt of the second request, the rule.
6 more elements
Dependencies are inferred from the claim text.