Headwater Research LLC

A method comprising obtaining, from a master user, a device usage allocation applicable to two or more devices, the two or more devices being associated with another user, the another user being different from the master user, obtaining an aggregate measure of device usage associated with the two or more devices, if the aggregate measure of device usage associated with the two or more devices satisfies a condition relative to the device usage allocation, managing an activity of the two or more devices, and sending a notification to at least one of the two or more devices, the notification for presentation to the another user through a user interface of the at least one of the two or more devices.

There is provided an end-user device for use with a network system configured to provide access to a network, the network system including an authentication system and one or more network elements. The end-user device includes a SIM having a service usage cap providing a limited amount of network service usage, and a processor to connect the end-user device to the network subject to the service usage cap providing the limited amount of network service usage that allows the end-user device to communicate with the authentication system, through the network, provide authentication information for the end-user device to facilitate execution of an end-user device authentication procedure by the authentication system using the authentication information, and upon successful completion of the procedure, communicate with the one or more network elements without the service usage cap limiting the amount of network service usage by the end-user device.

A wireless communication device comprising: one or more network modems enabling the wireless communication device to communicate over a first wireless network; one or more network modems enabling the wireless communication device to communicate with two or more end-point devices over a second wireless network; one or more processors configured to execute one or more instructions; and memory coupled to the one or more processors and configured to provide the one or more processors with the one or more instructions. The one or more instructions, when executed by the processors, cause processors to: establish a first connection between the wireless communication device and a first end-point device; establish a second connection between the wireless communication device and a second end-point device; apply a first control to traffic transmitted by or to the first end-point device; and apply a second control to traffic transmitted by or to the second end-point device.

A technique involves modular storage of network service plan components and provisioning of same. A subset of the capabilities of a service design system can be granted to a sandbox system to enable customization of service plan offerings or other controls.

Device Assisted Services (DAS) for protecting network capacity is provided. In some embodiments, DAS for protecting network capacity includes monitoring a network service usage activity of the communications device in network communication; classifying the network service usage activity for differential network access control for protecting network capacity; and associating the network service usage activity with a network service usage control policy based on a classification of the network service usage activity to facilitate differential network access control for protecting network capacity.

There is provided a network message server configured to establish a secure network data connection between the network message server and a mobile end-user device, the secure network data connection supported by a socket including a socket identifier (ID) having at least one of a port address or a port number, receive a request to transmit data to one of a plurality of mobile applications a the mobile end-user device, the request including a device ID corresponding to the mobile end-user device and one of a plurality of mobile application IDs corresponding to the one of the plurality of mobile applications, and generate a network data message based on the request, the network data message including application data and the one of the plurality of mobile application IDs corresponding to the one of the plurality of mobile applications.

Disclosed herein are various embodiments to prevent, detect, or take action in response to the moving a device credential from one device to another, the improper configuration of a service processor, a missing service processor, or the tampering with a service processor in device-assisted services (DAS) systems.

Adaptive ambient services are provided. In some embodiments, an adaptive ambient service includes providing an ambient service profile. In some embodiments, an ambient service includes implementing an ambient service profile for assisting control of the communications device use of an ambient service on a wireless network, in which the ambient service profile includes a plurality of service policy settings, and in which the ambient service profile is associated with an ambient service plan that provides for initial access to the ambient service with limited service capabilities prior to activation of a new service plan; monitoring use of the ambient service based on the ambient service profile; and adapting the ambient service profile based on the monitored use of the ambient service.

There is provided a wireless end-user device that includes a wireless wide area network (WWAN) modem to communicate Internet data with a WWAN, and one or more processors configured to pass, using an operating system packet network stack, Internet data packet traffic, including Internet data, between the WWAN modem and one or more applications being executed by the one or more processors, classify, using the application identification agent, each of individual flows of the Internet data packet traffic passing through the operating system packet network stack according to the one or more applications associated with each of the individual flows, measure, using a service measurement agent, for each of the classified individual flows, an amount of the Internet data packet traffic associated with each of the one or more applications, and apply, using a policy control agent, application-specific traffic policy controls to each of the classified individual flows.

There is provided a policy implementation method for a communications device using an access network. The method includes obtaining network state information of the access network, determining a plurality of state values of the access network based on the network state information, accessing a policy database using the plurality of state values, retrieving, from the policy database including a plurality of policies, a first policy of the plurality of policies that corresponds to the plurality of state values, receiving one or more packets of data traffic associated with the communications device, and applying the first policy to the one or more packets of the data traffic.