# US 12,603,893 B2 · Method and system for dynamic user application control service > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,603,893 B2 - Document ID: US12603893B2 - Status: Granted - Kind: B2 - Application number: 18/430,092 - Filed: 2024-02-01 - Published: 2025-08-07 - Granted: 2026-04-14 - Earliest claimed: 2024-02-01 - Assignees: Verizon Patent and Licensing Inc. - Applicants: Verizon Patent and Licensing Inc. - Inventors: Raghuram Parvataneni; Parry Cornell Booker; Anil K. Guntupalli; Mahesh Chapalamadugu - Web page: https://patentgrep.com/patent/US12603893B2 ## CPC - H04L 63/108: {when the policy decisions are valid for a limited amount of time} - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04W 4/02: Services making use of location information - H04W 4/60: Subscription-based services using application servers or record carriers, e.g. SIM application toolkits - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method, network device, system, and non-transitory computer-readable storage medium are described in relation to an dynamic user application control service that includes receiving from an application device, a request for access controls associated with a user application and an end device; generating, per the request, policies pertaining to the access controls, wherein the policies include time-based rules, location-based rules, or application type-based rules; obtaining a current location of the end device; comparing, by the network device, a current time with the time-based rules, the current location with the location-based rules, or an application type for the user application with the application-type rules; generating, per the comparing, a policy decision among the policies pertaining to the access controls; and applying, per the policy decision, the time-based rules, the location-based rules, and the application type-based rules for establishment of an application session with the end device. ## Claims ### Claim 1 A method comprising: receiving, by a network device and from an application device, a request for access controls associated with a user application and an end device; generating, by the network device based on the request, policies pertaining to the access controls, wherein the policies include at least one of time-based rules, location-based rules, or application type-based rules; obtaining, by the network device, a current location of the end device; comparing, by the network device, at least one of a current time with the time-based rules, the current location with the location-based rules, or an application type for the user application with the application type-based rules; generating, by the network device and based on the comparing, a policy decision among the policies pertaining to the access controls; and applying, by the network device and based on the policy decision, at least one of the time-based rules, the location-based rules, or the application type-based rules for establishment of an application session with the end device. ### Claim 2 (depends on 1) The method of claim 1, further comprising: performing a subscription procedure that creates a subscription for monitoring and notification of the current location of the end device. ### Claim 3 (depends on 2) The method of claim 2, further comprising: receiving, per the subscription, an update to the current location; and determining whether the updated current location corresponds to a different policy decision. ### Claim 4 (depends on 1) The method of claim 1, further comprising: exposing, via an application programming interface (API), an access control to the end device, wherein the receiving of the request is performed in response to the API. ### Claim 5 (depends on 1) The method of claim 1, further comprising: obtaining permission information from a quota validator, wherein the generating of the policy decision is further based on the permission information. ### Claim 6 (depends on 1) The method of claim 1, further comprising: updating the current time; and determining whether the updated current time corresponds to a different policy decision. ### Claim 7 (depends on 1) The method of claim 1, wherein the network device comprises an application function in a core network. ### Claim 8 A system comprising: a network device comprising: a communication interface; and a processor configured to: receive, from an application device, a request for access controls associated with a user application and an end device; generate, based on the request, policies pertaining to the access controls, wherein the policies include at least one of time-based rules, location-based rules, or application type-based rules; obtain a current location of the end device; compare at least one of a current time with the time-based rules, the current location with the location-based rules, or an application type for the user application with the application type-based rules; generate, based on the comparing, a policy decision among the policies pertaining to the access controls; and apply, based on the policy decision, at least one of the time-based rules, the location-based rules, or the application type-based rules for establishment of an application session with the end device. ### Claim 9 (depends on 8) The system of claim 8, wherein the processor is further configured to: perform a subscription procedure that creates a subscription for monitoring and notification of the current location of the end device. ### Claim 10 (depends on 9) The system of claim 9, wherein the processor is further configured to: receive, per the subscription, an update to the current location; and determine whether the updated current location corresponds to a different policy decision. ### Claim 11 (depends on 8) The system of claim 8, wherein the processor is further configured to: expose, via an application programming interface (API), an access control to the end device, wherein the receiving of the request is performed in response to the API. ### Claim 12 (depends on 8) The system of claim 8, wherein the processor is further configured to: obtain permission information from a quota validator, wherein the generating of the policy decision is further based on the permission information. ### Claim 13 (depends on 8) The system of claim 8, wherein the processor is further configured to: update the current time; and determine whether the updated current time corresponds to a different policy decision. ### Claim 14 (depends on 8) The system of claim 8, wherein the network device comprises an application function in a core network. ### Claim 15 A non-transitory computer-readable storage medium storing instructions executable by a processor of a network device, wherein the instructions are configured to: receive, from an application device, a request for access controls associated with a user application and an end device; generate, based on the request, policies pertaining to the access controls, wherein the policies include at least one of time-based rules, location-based rules, and application type-based rules; obtain a current location of the end device; compare at least one of a current time with the time-based rules, the current location with the location-based rules, or an application type for the user application with the application type-based rules; generate, based on the comparing, a policy decision among the policies pertaining to the access controls; and apply, based on the policy decision, at least one of the time-based rules, the location-based rules, or the application type-based rules for establishment of an application session with the end device. ### Claim 16 (depends on 15) The non-transitory computer-readable storage medium of claim 15, wherein the instructions to generate the policy decision are further configured to: perform a subscription procedure that creates a subscription for monitoring and notification of the current location of the end device. ### Claim 17 (depends on 16) The non-transitory computer-readable storage medium of claim 16, wherein the instructions to generate the policy decision are further configured to: receive, per the subscription, an update to the current location; and determine whether the updated current location corresponds to a different policy decision. ### Claim 18 (depends on 15) The non-transitory computer-readable storage medium of claim 15, wherein the instructions to generate the policy are further configured to: expose, via an application programming interface (API), an access control to the end device, wherein the receiving of the request is performed in response to the API. ### Claim 19 (depends on 15) The non-transitory computer-readable storage medium of claim 15, wherein the instructions to generate the policy decision are further configured to: obtain permission information from a quota validator, wherein the generating of the policy decision is further based on the permission information. ### Claim 20 (depends on 15) The non-transitory computer-readable storage medium of claim 15, wherein the instructions are further configured to: update the current time; and determine whether the updated current time corresponds to a different policy decision.