Service plan design, user interfaces, application programming interfaces, and device management
Disclosed herein are methods, systems, and apparatuses to enable subscribers of mobile wireless communication devices to view, research, select and customize service plans; to create and manage device groups, share and set permission controls for service plans among devices in device groups; to manage communication services through graphical user interfaces; to sponsor and promote service plans; and to design, manage, and control communication services through application programming interfaces.
1. A method of operating a network system, the method comprising:
maintaining, in a service management system comprising a network-based service controller, information for a secure device group comprising a primary mobile device and a secondary mobile device;
supplying first credentials over a first secure communication link between the service controller and a primary service processor executing on the primary mobile device, the first credentials establishing the primary mobile device as presently operating as a master device of the device group;
communicating from the primary mobile device to the service controller, over the first secure communication link, instructions for one or more application permission controls to be enforced on the secondary mobile device;
supplying second credentials over a second secure communication link between the service controller and a secondary service processor executing on the secondary mobile device, the second credentials establishing the secondary mobile device as presently operating as a non-master device of the device group;
communicating from the service controller to the secondary mobile device, over the second secure communication link, instructions for the one or more application permission controls; and
applying the application permission controls on the secondary mobile device to use and/or attempted use of one or more particular applications on the secondary mobile device.
2. The method of claim 1 , further comprising:
the secondary mobile device monitoring service usage of applications by the secondary mobile device;
the secondary service processor communicating the monitored service usage of applications via the second secure communication link to the service controller;
the service controller communicating the monitored service usage of applications via the first secure communication link to the primary service processor; and
the primary mobile device displaying, on a user interface of the primary mobile device, the monitored service usage of applications by the secondary mobile device.
3. The method of claim 1 , wherein applying the application permission controls occurs during a first time period during which a non-master user is logged on to the secondary mobile device, the method further comprising, at a second time period during which a master user is logged on to the secondary mobile device, allowing operation of the secondary mobile device without applying the application permission controls.
4. The method of claim 1 , wherein supplying second credentials over the second secure communication link comprises supplying at least an aspect of the first credentials, along with other credentials establishing present operation as a non-master device of the device group.
5. The method of claim 1 , further comprising displaying to a user of the primary mobile device, on a user interface of the primary mobile device, permission setting controls for the secondary mobile device, and wherein the instructions for one or more application permission controls to be enforced on the secondary mobile device are based on user manipulation of the permission setting controls.
6. The method of claim 1 , further comprising displaying to a user of the primary mobile device, on a user interface of the primary mobile device, controls for joining the secondary mobile device to the device group, the primary service controller cooperating with the service management system to add the secondary mobile device to the device group.
7. The method of claim 1 , wherein the application controls comprise one or more network-specific application controls, and wherein applying the application permission controls on the secondary mobile device comprises determining a current network type used by the secondary mobile device for application communication, and applying the network-specific application controls in dependence on the current network type.
8. The method of claim 1 , wherein the application permission controls comprise one or more network destination restrictions, and wherein applying the application permission controls on the secondary mobile device comprises restricting network usage of one or more applications based on the network destination restrictions.
9. The method of claim 1 , wherein the application permission controls comprise a list of allowable applications, and wherein applying the application permission controls on the secondary mobile device comprises restricting usage to disallow usage of applications not on the list of allowable applications.
10. The method of claim 1 , wherein the application permission controls comprise a list of disallowed applications, and wherein applying the application permission controls on the secondary mobile device comprises restricting usage to disallow usage of applications on the list of disallowed applications.
11. The method of claim 10 , wherein the list of disallowed applications is stored in both the service management system and on the secondary mobile device.
12. The method of claim 1 , wherein the application permission controls comprise a time-based application restriction, and wherein applying the application permission controls on the secondary mobile device comprises restricting usage to disallow usage of one or more applications for usage outside of a time parameter specified by the time-based application restriction.
13. The method of claim 2 , wherein the monitored service usage of applications comprises an attempted use of an application by the secondary mobile device, and wherein displaying the monitored service usage of applications by the secondary mobile device comprises a display option to approve or disapprove the attempted use of an application by the secondary mobile device.