# US 8,543,698 B2 · Enhanced policy capabilities for mobile data services > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,543,698 B2 - Document ID: US8543698B2 - Status: Granted - Kind: B2 - Application number: 13/476,943 - Filed: 2012-05-21 - Published: 2012-11-22 - Granted: 2013-09-24 - Earliest claimed: 2008-03-07 - Assignees: AT&T Mobility II LLC - Applicants: Q. James Hu; Douglas Eng; Terry Figurelle; Michael Britt; Jie McKnight - Inventors: Q. James Hu; Douglas Eng; Terry Figurelle; Michael Britt; Jie McKnight - Web page: https://patentgrep.com/patent/US8543698B2 ## CPC - H04L 67/51: Discovery or management thereof, e.g. service location protocol [SLP] or web services - H04L 12/14: Charging, metering or billing arrangements specially adapted for data communications, e.g. authentication, authorisation and accounting [AAA] framework - H04L 12/1403: {Architecture for metering, charging or billing} - H04L 61/4511: using domain name system [DNS] - H04W 4/24: Accounting or billing - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A system and method for a mobile data access network to make policy control and charging decisions based on domain name queries. A mobile device sends a query about a domain name associated with a service a user of the mobile device wishes to engage. The access network carries the domain name query from a mobile device to a domain name server. The access network detects the domain name query and copies the queried domain name. The access network uses the queried domain name to make an incomplete policy decision. The policy decision is incomplete because one or more service data flow filters in the decision lack addresses for providers of the service. The access network detects a response to the domain name query and copies a service provider address from the response. The access network uses the service provider address to complete the policy decision. ## Claims ### Claim 1 A method for making a policy decision based on a domain name query, comprising: detecting, by a processor of a policy enforcement engine, the domain name query for a domain name sent by a mobile device to a domain name server; sending, by the processor, a request to a policy server for making an incomplete policy decision based on the domain name; detecting, by the processor, a domain name response sent from the domain name server to the mobile device, the domain name response including an address for a service provider associated with the domain name that is queried; completing, by the processor, the policy decision by using the address for the service provider to add service provider address information to the incomplete policy decision; and applying, by the processor, the policy decision to a service data flow between the mobile device and the service provider. ### Claim 2 (depends on 1) The method of claim 1, wherein the making the incomplete policy decision further comprises making a policy decision with a service data flow filter that lacks the service provider address information, where the service provider address information comprises the address of the service provider address. ### Claim 3 (depends on 1) The method of claim 1, wherein the making the incomplete policy decision further comprises making a policy decision with a service data flow filter that lacks service provider address information, where service provider address information comprises a regular expression based on the address of the service provider. ### Claim 4 (depends on 1) The method of claim 1, wherein the detecting the domain name query further comprises examining packets passing through an access gateway and detecting packets that have header destination addresses that match a regular expression based on a destination address for the domain name server. ### Claim 5 (depends on 1) The method of claim 1, wherein the policy enforcement engine is in an access gateway. ### Claim 6 (depends on 1) The method of claim 1, wherein the making the incomplete policy decision is performed by the policy server. ### Claim 7 A non-transitory computer-readable medium storing a plurality of instructions which, when executed by a processor of a policy enforcement engine, cause the processor to perform operations for making a policy decision based on a domain name query, the operations comprising: detecting the domain name query for a domain name sent by a mobile device to a domain name server; sending a request to a policy server for making an incomplete policy decision based on the domain name; detecting a domain name response sent from the domain name server to the mobile device, the domain name response including an address for a service provider associated with the domain name that is queried; completing the policy decision by using the address for the service provider to add service provider address information to the incomplete policy decision; and applying the policy decision to a service data flow between the mobile device and the service provider. ### Claim 8 (depends on 7) The non-transitory computer-readable medium of claim 7, wherein the making the incomplete policy decision further comprises making a policy decision with a service data flow filter that lacks the service provider address information, where the service provider address information comprises the address of the service provider address. ### Claim 9 (depends on 7) The non-transitory computer-readable medium of claim 7, wherein the making the incomplete policy decision further comprises making a policy decision with a service data flow filter that lacks service provider address information, where service provider address information comprises a regular expression based on the address of the service provider. ### Claim 10 (depends on 7) The non-transitory computer-readable medium of claim 7, wherein the detecting the domain name query further comprises examining packets passing through an access gateway and detecting packets that have header destination addresses that match a regular expression based on a destination address for the domain name server. ### Claim 11 (depends on 7) The non-transitory computer-readable medium of claim 7, wherein the policy enforcement engine is in an access gateway. ### Claim 12 (depends on 7) The non-transitory computer-readable medium of claim 7, wherein the making the incomplete policy decision is performed by the policy server. ### Claim 13 An apparatus for making a policy decision based on a domain name query, comprising: a processor of a policy enforcement engine; and a computer-readable medium storing a plurality of instructions which, when executed by the processor, cause the processor to perform operations, the operations comprising: detecting the domain name query for a domain name sent by a mobile device to a domain name server; sending a request to a policy server for making an incomplete policy decision based on the domain name; detecting a domain name response sent from the domain name server to the mobile device, the domain name response including an address for a service provider associated with the domain name that is queried; completing the policy decision by using the address for the service provider to add service provider address information to the incomplete policy decision; and applying the policy decision to a service data flow between the mobile device and the service provider. ### Claim 14 (depends on 13) The apparatus of claim 13, wherein the making the incomplete policy decision further comprises making a policy decision with a service data flow filter that lacks the service provider address information, where the service provider address information comprises the address of the service provider address. ### Claim 15 (depends on 13) The apparatus of claim 13, wherein the making the incomplete policy decision further comprises making a policy decision with a service data flow filter that lacks service provider address information, where service provider address information comprises a regular expression based on the address of the service provider. ### Claim 16 (depends on 13) The apparatus of claim 13, wherein the detecting the domain name query further comprises examining packets passing through an access gateway and detecting packets that have header destination addresses that match a regular expression based on a destination address for the domain name server.