Virtual dynamic pool of SIM-based devices

1. A method of providing data services to a plurality of user devices, the method comprising:

grouping a plurality of network-connected user devices into a virtual device group, wherein each of the plurality of user devices is identified by an individual device identification;

assigning an Internet Protocol (IP) address to the virtual device group, wherein the IP address of the virtual group is an IP address pool;

intercepting routing information, related to a first user device, exchanged between a home gateway residing in one mobile network and a serving gateway residing in the same or different mobile network;

determining if the first user device is assigned to the virtual device group;

responsive to determining that the first user device is assigned to the virtual device group, rewriting the routing information to replace an IP address assigned by the network gateway with the IP address of the virtual device group; and

sending the routing information to the first user device with the assigned IP address having been replaced with the IP address of the virtual device group.

2. The method of claim 1 , in response to the first user device sending upstream data packets to an application server, further includes:

intercepting the upstream data packets;

identifying the first user device responsible for the upstream data packets;

inspecting the upstream data packets and verifying policies related with the first user device; and

executing any corresponding allow, deny, encrypt and decrypt actions.

3. The method of claim 2 , further including queuing the upstream data packets, reformatting the upstream data packets, and converting the data packets to mediate the communications between the first user device and the application server.

4. The method of claim 2 , further including decapsulating a GTP-U header on the upstream data packets and forwarding the upstream data packets to the application server.

5. The method of claim 2 , further including:

intercepting a downstream data packet sent from the application server to the first user device;

verifying policies related with the first user device;

executing any corresponding allow, deny, encrypt and decrypt actions; and

relaying the downstream data packets to the first user device.

6. The method of claim 1 , in response to the first user device attempting to send data packets to a second user device that has been assigned to the virtual group, further includes:

intercepting outgoing data packets upstream from a serving gateway;

determining if the second user device is grouped in the virtual device group;

in response to determining that the second user device is grouped in the virtual device group, routing the outgoing data packets back to the serving gateway, without traversing an internet backbone, to be relayed to the second user device.

7. The method of claim 6 , wherein the step of routing the outgoing data packets back to the serving gateway includes modifying GTP-U headers in the data packets with GTP-C session information for the second user device.

8. The method of claim 1 , in response to the first user device requesting to pull messages from an application server, further includes:

intercepting a request to pull new messages from application server, upstream from a serving gateway;

decapsulating GTP-U packets from the request;

querying a database for content, wherein the database stores messages delivered from the application server;

retrieving the content and encapsulating the retrieved content into GTP-U packets;

sending the GTP-U packets back to the serving gateway for delivery to the first user device.

9. The method of claim 1 , in response to an application server requesting that a message be pushed to the virtual device group, further includes:

storing the message in a database;

identifying each user device in the virtual device group;

generates data packets to be delivered to each user device in the virtual device group;

encapsulated the data packets with a GTP-U payload based on each user device's GTP-C session information;

sending the encapsulated data packets to the serving gateway for delivery to each user device.

10. The method of claim 1 , wherein the user device identification is its international mobile subscriber identification (IMSI), International Mobile Station Equipment Identity (IMEI), or mobile station international subscriber directory number (MSISDN).

11. The method of claim 1 , wherein each user device has a physical or virtual SIM card.

12. The method of claim 1 , wherein at least some of the user devices subscribe to different mobile networks.

13. The method of claim 1 , wherein each of the user devices operates in accordance with a communications protocol selected from the group consisting of GTP-C, GTP-U, L2TP, and Mobile IP.

14. The method of claim 1 , wherein each of the user devices is identified during the mobile data session setup procedure.

15. The method of claim 1 , wherein each of the user devices is grouped dynamically according to its type, location, or serving network.

16. The method of claim 1 , wherein the home gateway is a gateway GPRS support node (GGSN), packet data network gateway (PGW), L2TP network server (LNS), or home agent (HA).

17. The method of claim 1 , wherein the serving gateway is a serving GPRS support node (SGSN), serving gateway (SGW), L2TP access concentrator (LAC), or foreign agent (FA).

18. The method of claim 1 , further comprising the step of assigning IP addresses to the user devices within the virtual group, wherein the assigned IP addresses are different than IP addresses issued to the user devices by mobile networks.

19. The method of claim 1 , wherein the user devices within the virtual group can communicate with one another without traversing Internet.

20. The method of claim 1 , further comprising the steps of encrypting and decrypting intercepted data packets.