Management of group mobile device network traffic usage

A method, comprising:

• receiving, by a system comprising a processor, an identifier of a device affiliated with a subscribing organization identity, wherein the identifier is associated with a mapping representative of an association between the device and a group of types of network traffic usage associated with use of the device, wherein the mapping of the association between the device and the group of types of network traffic usage is determined based on a probabilistic analysis that classifies the device as having used one of the types of network traffic usage included in the group of types of network traffic usage, wherein classification of the device is determined based on a classifier that maps an attribute vector representing an input attribute to a confidence score that the input attribute belongs to a class and that determines a multiply changing hypersurface using the attribute vector, wherein the input attribute represents at least short message service traffic, and wherein the class represents a group of data comprising an amount of network traffic usage for the one of the types of network traffic usage, the one of the types of network traffic usage, and a duration of the one of the types of network traffic usage;
• monitoring, by the system, the network traffic usage of the device comprising monitoring voice traffic, data traffic, and text message service traffic;
• creating, by the system, a customizable report that comprises a subset of the network traffic usage of the device;
• sending, by the system, the customizable report to a device associated with the subscribing organization identity;
• sending, by the system, a first alert to the device associated with the subscribing organization identity in response to determining that the device affiliated with the subscribing organization identity has exceeded a threshold condition representative of a breach of security policy, a breach in access policy, an increase in data usage, an increase in voice usage, and an access to a restricted website.

A non-transitory computer-readable medium, comprising executable instructions that, when executed by a processor, facilitate performance of operations, comprising:

• obtaining network traffic usage information associated with registered mobile devices, wherein the network traffic usage information is stored as a mapping between a device associated with the registered mobile devices and a group of types of traffic usage associated with use of the device, wherein the mapping is determined as a function of a probabilistic analysis that classifies the device as having communicated via one type of traffic usage included in the group of types of traffic usage, wherein classification of the device is determined based on using a classifier that maps an attribute vector representing an input attribute to a confidence score that the input attribute belongs to a class and that determines a dynamically changing hypersurface using the attribute vector, wherein the input attribute represents at least short message service traffic, and wherein the class represents a group of data comprising an amount for the type of network traffic usage, the type of network traffic usage, and a duration of the type of network traffic usage;
• receiving a request for a report of the network traffic usage information, wherein the request is received from an administrator device associated with the registered mobile devices;
• sending a customizable report to the administrator device, wherein the customizable report comprises at least some of the network traffic usage information, and wherein the obtaining, the receiving, and the sending are performed by network devices within a communications network;
• as a function of the network traffic usage information, identifying an increase in data traffic volume being transmitted to the registered mobile devices, wherein the increase in data traffic volume is determined as a function of a threshold condition being exceeded by the registered mobile devices, wherein the threshold condition represents a breach of a security policy and access policy, an increase in data usage and in voice usage, and an access to a restricted website;
• and
• in response to the identifying, sending a first alert to the registered mobile devices indicating the increase in data traffic volume.