End user device that secures an association of application to service policy with an application certificate check
A wireless end-user device receives application credential information and associated device agent instructions from a network element. The device communicates with a network element to perform an application credential check for a device application. When the application credential check indicates a correct correspondence between the device application and the application credential information, a device agent applies the device agent instructions to an attempted or actual use of a wireless network by the device application, for instance to allow, restrict, measure, etc., the application's use according to the policy.
1. A wireless end-user device comprising:
one or more wireless modems to communicate Internet data with at least a first wireless access network;
a non-transitory memory to store service policy data comprising
first application credential information, associated respectively with a first device application, and
first device agent instructions, associated respectively with the first application credential information; and
one or more device agents configured to
receive the first application credential information and at least a portion of the first device agent instructions from a network element reachable via one or more of the wireless modems,
communicate with a network element reachable via one or more of the wireless modems to perform an application credential check for the first device application, and
based on the application credential check indicating a correct correspondence between the first device application and the first application credential information, apply the at least a portion of the first device agent instructions to an attempted or actual use of the first wireless access network for Internet data communication by the first device application.