Back to results
US 12,543,031 B2Granted
Adapting network policies based on device service processor configuration
AssigneeHeadwater Research LLC
InventorsGregory G. Raleigh, James Lavine
Life of this patent
Estimating the term…
Abstract
Disclosed herein are various embodiments to prevent, detect, or take action in response to the moving a device credential from one device to another, the improper configuration of a service processor, a missing service processor, or the tampering with a service processor in device-assisted services (DAS) systems.
Claims20
A network system comprising:
- an authentication system;
- and
- one or more network elements configured to:
- receive, from an end-user device, a request to connect to a network;
- and
- in response to the request, allow the end-user device to connect to the network with a first limit placed on a network service usage by the end-user device, wherein the first limit placed on the network service usage allows the end-user device to communicate with the authentication system, through the network, to authenticate the end-user device, and wherein the first limit placed on the network service usage limits the network service usage by the end-user device;
- and
- the authentication system configured to:
- obtain authentication information for the end-user device;
- using the authentication information, facilitate execution of an end-user device authentication procedure;
- and
- upon successful completion of the end-user device authentication procedure, communicate with the one or more network elements to remove the first limit placed on the network service usage;
- the one or more network elements are further configured to:
- remove the first limit placed on the network service usage, in response to the communication from the authentication system;
- and
- after removing the first limit placed on the network service usage, accept a flow of data usage records from the end-user device;
- wherein the flow of data usage records indicate a classification of the network service usage that differentiates between background and foreground communications.
14 more elements
A method for use by a network system including one or more network elements and an authentication system, the method comprising:
- receiving, by the one or more network elements from an end-user device, a request to connect to a network;
- in response to the request, allowing, by the one or more network elements, the end-user device to connect to the network with a first limit placed on a network service usage by the end-user device, wherein the first limit placed on the network service usage allows the end-user device to communicate with the authentication system, through the network, to authenticate the end-user device, and wherein the first limit placed on the network service usage limits the network service usage by the end-user device;
- obtaining, by the authentication system, authentication information for the end-user device;
- facilitating, by the authentication system using the authentication information, execution of an end-user device authentication procedure;
- and
- upon successful completion of the end-user device authentication procedure, communicating, by the authentication system, with the one or more network elements to remove the first limit placed on the network service usage;
- removing, by the one or more network elements, the first limit placed on the network service usage, in response to the communication from the authentication system;
- and
- after removing the first limit placed on the network service usage, accepting, by the one or more network elements, a flow of data usage records from the end-user device;
- wherein the flow of data usage records indicate a classification of the network service usage that differentiates between background and foreground communications.
7 more elements
An end-user device for use with a network system configured to provide access to a network, the network system including an authentication system and one or more network elements, the end-user device comprising:
- one or more processors configured to:
- transmit, to the one or more network elements, a request to connect to the network;
- in response to the request, obtain allowance to connect to the network with a first limit placed on a network service usage, wherein the first limit placed on the network service usage allows the end-user device to communicate with the authentication system, through the network, to authenticate the end-user device, and wherein the first limit placed on the network service usage limits the network service usage by the end-user device;
- provide, to the authentication system, authentication information for the end-user device to facilitate execution of an end-user device authentication procedure by the authentication system using the authentication information;
- upon successful completion of the end-user device authentication procedure, communicate with the one or more network elements without the first limit being placed on the network service usage by the end-user device;
- provide a flow of data usage records to the one or more network elements, wherein the flow of data usage records indicate a classification of the network service usage that differentiates between background and foreground communications.
3 more elements
Dependencies are inferred from the claim text.