Policy-enabled dynamic deep packet inspection for telecommunications networks
AssigneeAT&T Mobility II LLC
InventorsQingmin James Hu, Megan Klenzak, Paul Smith
Life of this patent
Estimating the term…
Abstract
Provided herein is a method including the steps of: establishing at least one policy in a centralized policy management framework (PMF), wherein the policy includes at least one policy condition; monitoring data traffic; determining if the data traffic at least substantially meets one of the policy conditions; sending a trigger to the PMF, if at least one of the policy conditions is at least substantially met; generating an enforcement decision at the PMF, wherein the enforcement decision includes at least one enforcement action; sending the enforcement decision to an enforcement function; and enforcing the enforcement decision. A system for realizing this method is also provided.
Claims14
A method, for managing communications network resources using a policy management framework, comprising:
- communicating, by the policy management framework, a policy condition, stored at a policy repository of the policy management framework, from the policy management framework to a deep packet inspection component being separate from and in communication by way of a P4 interface with the policy management framework;
- and
- performing, in response to the deep packet inspection component monitoring data traffic using the policy condition and determining that the policy condition is satisfied, operations comprising:
- receiving, by the policy management framework, from the deep packet inspection component, being separate from the policy management framework, a trigger communication, the trigger communication comprising an indication that the policy condition has been satisfied based on results of the monitoring;
- and
- generating, by the policy management framework, in response to receiving the trigger communication from the deep packet inspection component, an enforcement decision comprising an enforcement action for execution by an enforcement function, wherein:
- the deep packet inspection component is part of a first network element and comprises a first processing resource;
- the enforcement function is implemented by a network gateway component;
- the network gateway component is implemented as a gateway general packet radio service support node;
- the gateway packet radio service support node is:
- (i) part of, to accomplish performance benefits, and to accomplish efficiency benefits, a second network element being distinct from the first network element;
- and
- (ii) in communication via a Gx interface with the policy management framework;
- and
- the enforcement action comprises a characteristic selected from a group of characteristics consisting of:
- a warning message communicated to an address associated with a user account;
- an account closure, closing the user account;
- and
- a financial charge to the user account for one or more services.
A non-transitory computer-readable storage device comprising computer-executable instructions that, when executed at a policy management framework of a communications network, cause the policy management framework to perform operations comprising:
- storing, by a policy repository of the policy management framework, a policy condition;
- communicating the policy condition from the policy management framework to a deep packet inspection component in communication with the policy management framework;
- and
- in response to the deep packet inspection component determining, by way of monitoring, that the policy condition is satisfied:
- receiving, by the policy management framework, from the deep packet inspection component a trigger communication, wherein:
- the deep packet inspection component has a processing resource being separate from, and in communication by way of a P4 interface with, a processing resource of the policy management framework;
- and
- the trigger communication comprises an indication that the policy condition has been satisfied based on results of the monitoring;
- recognizing the trigger communication received as an indication that the policy condition has been satisfied;
- and
- generating, in response to receiving the trigger communication from the deep packet inspection component, an enforcement decision comprising an enforcement action for execution by an enforcement function, wherein:
- the deep packet inspection component is part of a first network element and comprises a first processing resource;
- the enforcement function is implemented by a network, gateway component;
- the network, gateway component is implemented as a gateway, general packet radio service support node;
- the, gateway packet radio service support node is:
- (i) part of, to accomplish performance benefits, and to accomplish efficiency benefits, a second network element being distinct from the first network element;
- and
- (ii) in communication via a Gx interface with the policy management framework;
- and
- the enforcement action comprises a characteristic selected from a group of characteristics consisting of:
- a warning message communicated to an address associated with a user account;
- an account closure, closing the user account;
- and
- a financial charge to the user account for one or more services.
A policy management framework system, for
- managing policies including a policy condition, comprising:
- a processor;
- and a computer-readable storage medium being in operative communication with the processor and having computer-executable instructions that, when executed by the processor, cause the processor to perform operations comprising:
- generating, in response to receiving a trigger communication from a deep packet inspection component, an enforcement decision, the enforcement decision comprises an enforcement action, wherein:
- the deep packet inspection component has a processing resource being separate from, and in communication by way of a P4 interface with, the processor of the policy management framework;
- the trigger communication has been sent to the policy management framework in response to the deep packet inspection component having determined, in monitoring data traffic using the policy condition, that the data traffic satisfied the policy condition;
- and
- sending the enforcement decision to an enforcement function for execution of the enforcement action, wherein:
- the deep packet inspection component is part of a first network element and comprises a first processing resource;
- the enforcement function is implemented by a network gateway component;
- the network, gateway component is implemented as a gateway general packet radio service support node;
- the gateway packet radio service support node is:
- (i) part of, to accomplish performance benefits, and to accomplish efficiency benefits, a second network element being distinct from the first network element;
- and
- (ii) in communication via a Gx interface with the policy management framework;
- and
- the enforcement action comprises a characteristic selected from a group of characteristics consisting of:
- a warning message communicated to an address associated with a user account;
- an account closure, closing the user account;
- and
- a financial charge to the user account for one or more services (iii).
Dependencies are inferred from the claim text.