Terminal device control server and method for controlling access to a mobile communication network
View Patent ↗An apparatus and a method for a terminal device control server. The terminal device control server collecting, storing and providing information (i.e. device intelligence) relating to a plurality of terminal devices in a mobile communication network. A policy based control mechanism can be used in conjunction with one or more authorization lists and the device intelligence to respond to requests from various elements in the network to allow or deny access to the network or to services within the network to specific terminal devices. The device intelligence can alternatively be used to improve the effectiveness of service offerings in the network by providing information associated with a specific terminal device to other elements that adapt their services offerings and interactions to the capabilities of the specific terminal devices.
1. A terminal device control server for collecting, storing and providing information relating to a plurality of terminal devices in a mobile communication network, each terminal device having an associated equipment identifier, the terminal device control server comprising:
a device control interface for receiving a terminal device authorization request, containing an equipment identifier and a location in the mobile communication network, and for providing a terminal device authorization response;
a device intelligence database for storing a plurality of authorization lists each containing a plurality of equipment identifiers and for collecting and storing additional information associated with each equipment identifier including at least one of: a subscriber type associated with a subscriber identifier, a location in the mobile communication network, a service package subscription associated with a subscriber identifier, a device capability set, and one or more timestamps each associated with one of the other additional information;
a network information access interface providing for the terminal device control server to request and receive from other equipment platforms in the mobile communication network any of the additional information associated with each equipment identifier; and
a control policy database for storing and applying a plurality of control policies to determine which of the plurality of authorization lists will be applied and in what order the authorization lists will be applied in generating the terminal device authorization response containing a favorable device status based on a result of searching the applied authorization lists for a match to a criterion containing the equipment identifier and the location received in the terminal device authorization request, the terminal device authorization response optionally containing any one or more of a subscriber type associated with the subscriber identifier, and a service package subscription associated with the subscriber identifier;
wherein the terminal device authorization response is adapted to enable a receiver thereof, based on the response, to either allow or deny access to the mobile communication network and to services in the network to the terminal device having the equipment identifier contained in the terminal device authorization request; further comprising a device intelligence interface configured to:
receive a terminal device information request containing an identifier associated with an equipment identifier; and
provide a terminal device information response for the terminal device corresponding to the associated equipment identifier, the terminal device information response containing at least one of: an equipment identifier, a directory number, a subscriber identifier, a location in the mobile communication network, a network membership, a subscription type, a service package subscription, a device capability set, and one or more timestamps;
wherein the terminal device information response is configured to enable the recipient terminal device to use the information contained therein to adapt service offerings to, and interactions with, the terminal device corresponding to the equipment identifier;
wherein the favorable device status can further be responsive to any one or more of: a subscription type associated with the subscriber identifier; a service package subscription associated with the subscriber identifier; equipment identifier to subscription identifier pairing enforcement; and legitimate subscriber identifier with cloned equipment identifier authorization; and
wherein the application of the control policy is a function of at least one of: configuration parameters in the terminal device control server; the subscriber identifier; one or more parameters contained in the terminal device authorization request; a directory number; a capacity demand level in the network; a capabilities set associated with a terminal identifier; a location of the terminal device; a service package subscription associated with the subscriber identifier; a subscription type associated with the subscriber identifier; a billing status associated with the subscriber identifier; and a network membership associated with the subscriber identifier.
2. The terminal device control server of claim 1 , wherein the receiver of the terminal device authorization response can be any one of: a mobile switching center, a serving general packet radio service support node, a packet data serving node, and a visitor location register.
3. The terminal device control server of claim 1 , wherein the one or more authorization lists include one or more white lists, one or more black lists and one or more grey lists; and wherein inclusion of the equipment identifier, in combination with the location, in an authorization list signifies, for the terminal device associated with the equipment identifier that: access should be allowed when in a white list; access should be denied when in a black list; and access should be allowed with additional special handling when in a grey list; and
wherein the favorable device status can be set to one of: unknown, and a value determined by an applied control policy, when neither the one of: the equipment identifier, and the equipment identifier and an associated subscriber identifier, are matched in the search of the authorization lists.
4. The terminal device control server of claim 3 , the one or more black lists further including one or more deferred-barring lists and an immediate-barring list, and the control policy database further for:
responsive to a match of the criterion in one of the deferred-barring lists, executing the steps of:
completing one of: sending a warning message to the terminal device associated with the equipment identifier; and running a time-out period; and
moving the equipment identifier to one of: the immediate-barring list, and another one of the one or more deferred-barring lists; and
responsive to a match of the criterion in the immediate-barring list, denying access to the mobile communication network to the terminal device associated with the equipment identifier.
5. The terminal device control server of claim 1 , wherein the one or more parameters contained in the terminal device authorization request include the address of the originator of the terminal device authorization request, and the address is a Signaling Connection and Control Part address containing any one or more of: a network indicator, a routing indicator, a point code and a subsystem number.
6. The terminal device control server of claim 1 , the device intelligence database further for collecting and storing additional information associated with the equipment identifier related to any one or more of: presence of the terminal device at a particular location, presence of the terminal device at a particular location at a particular time; a change of the equipment identifier associated with the subscriber identifier; entry of a roamer into the network; and detection of a fraud event.
7. The terminal device control server of claim 1 , further comprising a device intelligence interface for:
receiving a terminal device information request containing a location and optionally containing a time value and an additional information value; and
providing a terminal device information response containing information including: one or more equipment identifiers associated with terminal devices having:
when no time value is contained in terminal device information request, corresponding location information indicating the most recent location of terminal device is one of:
the same as the location contained in the terminal device information request, and
within a pre-determined distance of the location contained in the terminal device information request:
when the time value is contained in terminal device information request, corresponding location and timestamp information indicating the location of the terminal device, proximate the time value, is one of:
the same as the location contained in the terminal device information request, and
within a pre-determined distance of the location contained in the terminal device information request; and
when the additional information value is contained in terminal device information request, corresponding additional information that matches the additional information value, when an additional information value is contained in the terminal device information request.
8. The terminal device control server of claim 1 , further comprising a device intelligence interface for:
receiving a terminal device information request; and
providing a terminal device information response containing information including: one or more equipment identifiers associated with terminal devices, and corresponding location information indicating the most recent location of each terminal device.
9. The terminal device control server of claim 1 , further comprising a device intelligence interface for:
receiving a terminal device information request including a trigger event and a trigger group; and
providing a terminal device information response including one of an equipment identifier and a subscriber identifier, when the trigger event occurs for a terminal device associated with the trigger group;
wherein, the trigger group contains one or more of any of: a equipment identifier, a subscriber identifier, a directory number, a device type, a subscription type, a service package subscription, a network membership and a device capability.
10. The terminal device control server of claim 1 , wherein said additional information associated with each equipment identifier includes a location in the mobile communication network and one or more timestamps associated with the location.
11. A method for a terminal device control server in a mobile communication network, the network having a plurality of terminal devices each having an equipment identifier, the method comprising the steps of:
receiving a terminal device authorization request containing an equipment identifier and a location in the mobile communication network;
selecting a control policy from a plurality of control policies;
searching one or more authorization lists, selected from a plurality of authorization lists and in an order that is responsive to the selected control policy, for a match to a criterion containing the equipment identifier and the location;
providing a terminal device authorization response containing a favorable device status based on a result of the authorization list search, and optionally containing any one or more of a subscriber type associated with a subscriber identifier, and a service package subscription associated with a subscriber identifier;
wherein the terminal device authorization response can is adapted to enable the receiver thereof, based on the response, to either allow or deny access to the mobile communication network and to services in the network to the terminal device having the equipment identifier contained in the device authorization request; and
receiving a terminal device information request containing an identifier associated with an equipment identifier; and
providing a terminal device information response for the terminal device corresponding to the associated equipment identifier, the terminal device information response containing any one or more of: an equipment identifier, a directory number, a subscriber identifier, a location in the mobile communication network, a network membership, a subscription type, a service package subscription, a device capability set, and one or more timestamps;
wherein the terminal device information response is adapted to enable the recipient to use the information contained therein to adapt service offerings to, and interactions with, the terminal device corresponding to the equipment identifier; and
collecting and storing additional information associated with the equipment identifier including any one or more of: a subscriber identifier, a subscriber type, a directory number, a location in the mobile communication network, a service package subscription, a network membership, a device capability set, and one or more timestamps each associated with one of the other additional information;
wherein the selection of the control policy is a function of any one or more of: configuration parameters in the terminal device control server; the subscriber identifier; one or more parameters contained in the terminal device authorization request; the directory number; a capacity demand level in the network; a capabilities set associated with the terminal identifier; a location of the terminal device; a service package subscription associated with the subscriber identifier; a subscription type associated with the subscriber identifier; a billing status associated with the subscriber identifier; and a network membership associated with the subscriber identifier.
12. The method of claim 11 , wherein the receiver of the terminal device authorization response can be any one of: a mobile switching center, a serving general packet radio service support node, a packet data serving node, and a visitor location register.
13. The method of claim 11 , wherein the one or more authorization lists include one or more white lists, one or more black lists and one or more grey lists; and wherein inclusion of the equipment identifier, optionally in combination with any of the subscriber identifier, the directory number and the location, in an authorization list signifies, for the terminal device having the equipment identifier, that:
access should be allowed when in a white list; access should be denied when in a black list; and access should be allowed with additional special handling when in a grey list; and
wherein the favorable device status can be set to one of: unknown, and a value determined by the selected control policy, when neither the one of: the equipment identifier, and the equipment identifier and the associated subscriber identifier, are matched in the search of the authorization lists.
14. The method of claim 13 , the one or more black lists further including one or more deferred-barring lists and an immediate-barring list, and the method further comprising the steps of:
responsive to a match of the criterion in one of the deferred-barring lists, executing the steps of:
completing one of: sending a warning message to the terminal device associated with the equipment identifier; and running a time-out period; and
moving the equipment identifier to one of: the immediate-barring list, and another one of the one or more deferred-barring lists; and
responsive to a match of the criterion in the immediate-barring list, denying access to the mobile communication network to the terminal device associated with the equipment identifier.
15. The method of claim 11 , wherein the favorable device status can further be responsive to any one or more of: a subscription type associated with a subscriber identifier; a service package subscription associated with a subscriber identifier; equipment identifier to subscription identifier pairing enforcement; and legitimate subscriber identifier with cloned equipment identifier authorization.
16. The method of claim 11 , wherein the one or more parameters contained in the terminal device authorization request include the address of the originator of the terminal device authorization request, and the address is a Signaling Connection and Control Part address containing any one or more of: a network indicator, a routing indicator, a point code and a subsystem number.
17. The method of claim 11 , further comprising the step of collecting and storing additional information associated with the equipment identifier related to any one or more of: presence of the terminal device at a particular location, presence of the terminal device at a particular location at a particular time; a change of the equipment identifier associated with the subscriber identifier; entry of a roamer into the network; and detection of a fraud event.
18. The method of claim 11 , further comprising the steps of:
receiving a terminal device information request containing a location and optionally containing a time value and an additional information value; and
providing a terminal device information response containing information including: one or more equipment identifiers associated with terminal devices having:
when no time value is contained in terminal device information request, corresponding location information indicating the most recent location of terminal device is one of:
the same as the location contained in the terminal device information request, and
within a pre-determined distance of the location contained in the terminal device information request:
when the time value is contained in terminal device information request, corresponding location and timestamp information indicating the location of the terminal device, proximate the time value, is one of:
the same as the location contained in the terminal device information request, and
within a pre-determined distance of the location contained in the terminal device information request; and
when the additional information value is contained in terminal device information request, corresponding additional information that matches the additional information value, when an additional information value is contained in the terminal device information request.
19. The method of claim 11 , further comprising the steps of:
receiving a terminal device information request; and
providing a terminal device information response containing information including: one or more equipment identifiers associated with terminal devices, and corresponding location information indicating the most recent location of each terminal device.
20. The method of claim 11 , further comprising the steps of:
receiving a terminal device information request including a trigger event and a trigger group; and
providing a terminal device information response including one of an equipment identifier and a subscriber identifier, when the trigger event occurs for a terminal device associated with the trigger group;
wherein, the trigger group contains one or more of any of: a equipment identifier, a subscriber identifier, a directory number, a device type, a subscription type, a service package subscription, a network membership and a device capability.