Security techniques for device assisted services
View Patent ↗Methods and systems for receiving a report from an end-user device, the report comprising information about a device service state; determining, based on the report, that a particular service policy setting of the end-user device needs to be modified, the particular service policy setting associated with a service profile that provides for access to a network data service over a wireless access network and configured to assist in controlling one or more communications between the end-user device and the wireless access network, the particular service policy setting stored in a protected partition configured to deter or prevent unauthorized modifications to the particular service policy setting; and, in response to determining that the particular service policy setting needs to be modified, sending configuration information to the end-user device, the configuration information configured to assist in modifying or allowing modifications to the particular service policy setting.
1. A method comprising:
receiving, over a service control link, a report from a wireless end-user device, the report comprising information about a device service state;
determining, based on the report, that a particular service policy setting of the wireless end-user device needs to be modified, the particular service policy setting being stored in a protected partition of the wireless end-user device, the protected partition configured to deter or prevent unauthorized modifications to the particular service policy setting, the particular service policy setting being associated with a service profile that provides for access by the wireless end-user device to a network data service over a wireless access network, the particular service policy setting configured to assist in controlling one or more communications associated with the wireless end-user device over the wireless access network; and
is in response to determining that the particular service policy setting needs to be modified, sending configuration information to the wireless end-user device over the service control link, the configuration information configured to assist in modifying or allowing modifications to the particular service policy setting.
2. The method of claim 1 , wherein the particular service policy setting assists in implementing a roaming control, a parental control, or an enterprise wireless wide-area network (WWAN) management control.
3. The method of claim 1 , wherein the wireless end-user device is an intermediate networking device for forwarding traffic between a wireless wide-area network (WWAN) and a wireless local-area network (WLAN).
4. The method of claim 1 , wherein the wireless end-user device is an intermediate networking device comprising a cellular device, the intermediate networking device for forwarding traffic between the wireless access network and a second network.
5. The method of claim 1 , wherein the wireless end-user device is an intermediate networking device, and the particular service policy setting assists one or more other end-user devices in communicating over the wireless access network via the intermediate networking device.
6. The method of claim 1 , further comprising:
obtaining a service usage measure, the service usage measure accounting for the one or more communications associated with the wireless end-user device over the wireless access network; and
based on the service usage measure, taking an action.
7. The method of claim 6 , wherein the service usage measure comprises a measure of a service usage activity.
8. The method of claim 6 , wherein the action is to verify the service usage measure.
9. The method of claim 6 , wherein the action is to quarantine or suspend the wireless end-user device.
10. The method of claim 6 , further comprising obtaining secondary information associated with the wireless end-user device, and wherein the action is to verify the service usage measure using the secondary information.
11. The method of claim 1 , further comprising receiving, from the wireless end-user device, an integrity report configured to assist a network element in identifying an access control integrity violation.
12. The method of claim 1 , wherein the configuration information comprises at least a portion of the service profile.
13. The method of claim 1 , wherein the service control link is secured by an encryption protocol.
14. The method of claim 1 , wherein the device service state comprises a service profile setting, a service usage policy setting, or a device-assisted services (DAS) setting.
15. The method of claim 1 , wherein the device service state provides information about a user preference.
16. The method of claim 1 , wherein the device service state comprises information associated with an encryption key.
17. The method of claim 1 , wherein the device service state comprises an agent report, a service usage record, a transaction record, or an integrity report.
18. The method of claim 1 , wherein the device service state comprises user status information, device status information, application status information, a device location, or a device quality-of-service (QOS) state.