Granted Patent B2

US 9,497,183 · App. 14/843,322 · Granted Nov 15, 2016

Abstract

Claims (54)

1. A method for authorizing access by a user device to at least one service offered over an Internet Protocol (IP) network, comprising:

receiving, by a server, a SIP message from the user device, wherein the SIP message includes information that indicates that the user device is configured to support the at least one service;

retrieving from a database, by the server, policy data associated with the user device; validating, by the server, based on the policy data that the user device is authorized to advertise the at least one service and the at least one service is available for access by the user device; and

when said validating determines that the at least one service is unauthorized or unavailable for access by the user device, modifying, by the server, the received message to generate a modified message, modifying said received message including omitting from said modified message information corresponding to the at least one service that is unauthorized or unavailable for access by the user device while including information from said received message indicating one or more authorized and available services for the user device;

forwarding, by the server, the modified message to a second user device or to a network server; and

dynamically updating the policy data associated with the user device based on a change in at least one parameter associated with the user device or the IP network.

2. The method of claim 1 ,

wherein said forwarding includes forwarding the modified message to a second user;

wherein the received message is one of a SIP INVITE message and a SIP OPTIONS message;

wherein a Contact header of said received SIP message includes information indicating that the user device is configured to support image share and video share services; and

wherein modifying said received message to generate a modified message includes removing from the Contact header of said received SIP message the information indicating that the user device is configured to support said video share services.

3. The method of claim 1 , wherein modifying said received message to generate a modified message includes:

adding information indicating that a service which was indicated by said received message to be supported by said user device is unavailable, said modified message including said added information.

4. The method of claim 1 wherein forwarding, by the modified message includes:

forwarding the modified message to a second user device, said second user device being a user device with which said first user device may establish a communications session.

5. The method of claim 1 , wherein the received message and the modified message are the same type of SIP messages.

6. The method of claim 1 wherein the policy data indicates the one or more authorized services currently available to the user device.

7. The method of claim 1 wherein said dynamically updating the policy data associated with the user device includes:

examining the at least one parameter associated with the user device or the IP network;

determining one or more services currently authorized and available for use by the user device based on the at least one parameter; and

removing at least a portion of the policy data corresponding to a service currently unavailable or unauthorized to the user device based on the determining.

8. The method of claim 7 wherein the at least one parameter describes user location, user device network access capability, user device hardware capability, availability of a network resource, or a combination thereof.

9. The method of claim 1 wherein retrieving from the database the policy data comprises the server sending a Diameter Server Assignment request to the database.

10. The method of claim 1 further comprising;

subscribing, by the user device, to the server for notification of a change in service availability or authorization to the user device; and

notifying the user device, by the server, if the user device is not authorized to access a service or the service is not available to the user device.

11. The method of claim 1 wherein the user device is configured to support the one or more authorized services.

12. A method for authorizing access by a user device to at least one service offered over an internet Protocol (IP) network, comprising;

receiving, by a server, a SIP message from the user device, wherein the SIP message includes information that indicates that the user device is configured to support the at least one service,

retrieving from a database, by the server, policy data associated with the user device, said retrieving from the database the policy data comprises the server sending a Diameter Server Assignment request to the database;

validating, by the server, based on the policy data that the user device is authorized to advertise the at least one service and the at least one service is available for access by the user device; and

when said validating determines that the at least one service is unauthorized or unavailable for access by the user device, modifying, by the server, the received message to generate a modified message, modifying said received message including omitting from said modified message information corresponding to the at least one service that is unauthorized or unavailable for access by the user device while including information from said received message indicating one or more authorized and available services for the user device; and

forwarding, by the server, the modified message to a second user device or to a network server.

13. The method of claim 1 further comprising:

including, by the server, the at least one service in a message that is unauthorized or unavailable for access by the user device if the at least one service becomes authorized and available to the user device; and

forwarding, by the server, the message to indicate that the at least one service is authorized and available to the user device.

14. A system for authorizing access by a user device to at least one service offered over an IP network, comprising:

a database for storing policy data associated with the user device; and a server for receiving a SIP message from the user device, said SIP message including information indicating that the user device is configured to support the at least one service, the server being implemented in computer hardware including a processor for executing instructions and a memory device, said server being configured to:

retrieve from the database policy data associated with the user device;

validate based on the policy data that the user device is authorized to advertise the at least one service and the at least one service is available for access by the user device; and

when said validating determines that the at least one service is unauthorized or unavailable for access by the user device, modify the received message to generate a modified message, modifying said received message including omitting from said modified message information corresponding to the at least one service that is unauthorized or unavailable for access by the user device while including information from said received message to indicate one or more authorized and available services for the user device;

forward the modified message to a second user device or to a network server; and

dynamically update the policy data associated with the user device based on a change in at least one parameter associated with the user device or the IP network.

15. The system of claim 14 wherein the server resides in a Serving Call Session Control Function (S-CSCF) node or an application server of an Internet Protocol Multimedia Subsystem (IMS) network.

16. The system of claim 14 wherein the database storing the policy data is a Home Subscriber Service (HSS) in an IMS network.

17. The system of claim 14 wherein the server resides in a SIP registrar or a home proxy of a non-IMS network.

18. The system of claim 14 further comprising a module electronic circuitry for updating the policy data associated with the user device to indicate one or more services currently available and authorized to the user device.

19. The system of claim 18 wherein the module electronic circuitry updates the policy data based on information related to user location, user device network access capability, user device hardware capability, availability of a network resource, or a combination thereof.

20. A computer program product, tangibly embodied in a non-transitory computer readable medium, for authorizing access by a user device to at least one service offered over an IP network, the computer program product including instructions being operable to cause a data processing apparatus to:

receive a SIP message from the user device, wherein the SIP message includes information that indicates that the user device is configured to support the at least one service; retrieve from a database policy data associated with the user device;

validate based on the policy data that the user device is authorized to advertise the at least one service and the at least one service is available for access by the user device; and

when said validating determines that the at least one service is unauthorized or unavailable for access by the user device, modify the received message to generate a modified message, modifying said received message including omitting from said modified message information corresponding to the at least one service that is unauthorized or unavailable for access by the user device while including information from said received message to indicate one or more authorized and available services for the user device without including the at least one service;

forward the modified message to a second user device or to a network server; and

dynamically update the policy data associated with the user device based on a change in at least one parameter associated with the user device or the IP network.

Assignments (7)