Method to mitigate fraudulent usage of QoS from mobile terminals using uplink packet marking
A method is provided for mapping between an uplink traffic characteristic and a transmission prioritization level to prevent fraudulent access to priority flows at a centralized point in a network. According to certain embodiments, an Access Gateway (AGW) receives at least one network filter parameter from a network element, which indicates expected priorities. The User Equipment (UE) transmits a message over a traffic flow to an Access Point (AP), including an indicator of the actual priority at the AP. The message is forwarded to an AGW. The actual priority is determined at the user equipment according to a message characteristic and an uplink filter parameter, which is associated with the traffic flow that was used for transmission. Access to priority flows is determined based on comparing the expected priority and the actual priority of the message.
1 . A method for determining access to priority traffic flows at an access gateway (AGW) according to associated quality of service (QoS) priorities between user equipment (UE) and the access gateway (AGW), the method comprising:
receiving, from a network element, at least one uplink filter parameter;
receiving a message using a traffic flow, from a user equipment (UE), including an indicator of an actual priority at an access point (AP), wherein the actual priority is determined at the UE according to a message characteristic and the at least one uplink filter parameters, and is associated with the used traffic flow;
using the at least one uplink filter parameter to determine an expected priority of the message; and
determining access based on comparing the expected priority and the actual priority of the message.
2 . The method of claim 1 , wherein the network element is a policy server.
3 . The method of claim 1 , wherein the at least one uplink filter parameter is a member of the group consisting of: source IP address, source port, destination IP address, destination port, and protocol identification.
4 . The method of claim 1 , wherein the expected priority matches the actual priority.
5 . The method of claim 4 , wherein access is allowed to a traffic flow associated with the actual priority.
6 . The method of claim 1 , wherein the expected priority does not match the actual priority.
7 . The method of claim 6 , wherein access is blocked from a traffic flow associated with the actual priority.
8 . The method of claim 6 , wherein access is reduced from a traffic flow associated with the actual priority.
9 . The method of claim 1 , wherein the receiving from a network element at least one uplink filter parameter is based on a non-access network-specific signaling.
10 . The method of claim 9 , wherein non-access network-specific signaling is session initiation protocol (SIP).
11 . The method of claim 1 , wherein the expected priority is a differentiated service priority.
12 . The method of claim 1 , wherein the actual priority is a differentiated service priority.
13 . An access gateway (AGW) to affect the passage of transmitted messages over traffic priority flow according to associated quality of service (QoS), the access gateway comprising logic for:
receiving, from a network element, at least one uplink filter parameter;
receiving a message using a traffic flow, from a user equipment (UE), including an indicator of an actual priority at an access point (AP), wherein the actual priority is determined at the UE according to a message characteristic and the at least one uplink filter parameters, and is associated with the used traffic flow;
using the at least one uplink filter parameter to determine an expected priority of the message; and
determining access based on comparing the expected priority and the actual priority of the message.
14 . The AGW of claim 13 , wherein the network element is a policy server.
15 . The AGW of claim 13 , wherein the at least one uplink filter parameter is a member of the group consisting of: source IP address, source port, destination IP address, destination port, and protocol identification.
16 . The AGW of claim 13 , wherein the expected priority matches the actual priority.
17 . The AGW of claim 16 , wherein access is allowed to a traffic flow associated with the actual priority.
18 . The AGW of claim 13 , wherein the expected priority does not match the actual priority.
19 . The AGW of claim 18 , wherein access is blocked from a traffic flow associated with the actual priority.
20 . The AGW of claim 18 , wherein access is reduced from a traffic flow associated with the actual priority.
21 . The AGW of claim 13 , wherein the receiving from a network element at least one uplink filter parameter is based on a non-access network-specific signaling.
22 . The AGW of claim 21 , wherein non-access network-specific signaling is session initiation protocol (SIP).
23 . The AGW of claim 13 , wherein the expected priority is a differentiated service priority.
24 . The AGW of claim 13 , wherein the actual priority is a differentiated service priority.
25 . A computer-readable medium comprising instructions for providing a service to a wireless terminal, the instructions for causing performance of a method comprising:
receiving, from a network element, at least one uplink filter parameter;
receiving a message using a traffic flow, from a user equipment (UE), including an indicator of an actual priority at an access point (AP), wherein the actual priority is determined at the UE according to a message characteristic and the at least one uplink filter parameters, and is associated with the used traffic flow;
using the at least one uplink filter parameter to determine an expected priority of the message; and
determining access based on comparing the expected priority and the actual priority of the message.
26 . The computer-readable medium of claim 25 , wherein the network element is a policy server.
27 . The computer-readable medium of claim 25 , wherein the at least one uplink filter parameter is a member of the group consisting of: source IP address, source port, destination IP address, destination port, and protocol identification.
28 . The computer-readable medium of claim 25 , wherein the expected priority matches the actual priority.
29 . The computer-readable medium of claim 28 , wherein access is allowed to a traffic flow associated with the actual priority.
30 . The computer-readable medium of claim 25 , wherein the expected priority does not match the actual priority.
31 . The computer-readable medium of claim 30 , wherein access is blocked from a traffic flow associated with the actual priority.
32 . The computer-readable medium of claim 30 , wherein access is reduced from a traffic flow associated with the actual priority.
33 . The computer-readable medium of claim 25 , wherein the receiving from a network element at least one uplink filter parameter is based on a non-access network-specific signaling.
34 . The computer-readable medium of claim 33 , wherein non-access network-specific signaling is session initiation protocol (SIP).
35 . The computer-readable medium of claim 25 , wherein the expected priority is a differentiated service priority.
36 . The computer-readable medium of claim 25 , wherein the actual priority is a differentiated service priority.