Automated device provisioning and activation
There is provided a wireless end-user device including a wireless wide area network (WWAN) modem, a memory storing a WWAN network access policy including one or more first policy instructions associated with a first software application, and one or more processors to provide, using the WWAN modem, one or more network data traffic flows between the wireless end-user device and the WWAN, associate the first software application with a first one of the one or more network data traffic flows, and when (i) the wireless end-user device communicates or attempts to communicate data over the WWAN, and (ii) the first software application is associated with the first one of the one or more network data traffic flows, apply the one or more first policy instructions associated with the first software application to the first one of the one or more network data traffic flows.
1. A wireless end-user device comprising:
a wireless wide area network (WWAN) modem configured to communicate data with a WWAN when a connection is established between the wireless end-user device and the WWAN;
a memory storing a WWAN network access policy including one or more first policy instructions associated with a first software application of a plurality of software applications resident on the wireless end-user device; and
one or more processors configured to:
provide, using the WWAN modem, one or more network data traffic flows between the wireless end-user device and the WWAN;
associate each of the one or more of the plurality of software applications with a respective one of the one or more network data traffic flows between the wireless end-user device and the WWAN, including associating the first software application with a first one of the one or more network data traffic flows; and
when (i) the wireless end-user device communicates or attempts to communicate data over the WWAN, and (ii) the first software application is associated with the first one of the one or more network data traffic flows, apply the one or more first policy instructions associated with the first software application to the first one of the one or more network data traffic flows.
2. The wireless end-user device of claim 1 , wherein the one or more processors is further configured to:
use tag information to associate each of the one or more of the plurality of software applications with the respective one of the one or more network data traffic flows.
3. The wireless end-user device of claim 2 , wherein the one or more processors is further configured to:
augment the tag information with flow-specific assignment information, and wherein the flow-specific assignment information includes at least one of an application layer protocol associated with each of the respective one of the one or more network data traffic flows, a transport layer protocol associated with each of the respective one of the one or more network data traffic flows, or IP socket information associated with each of the respective one of the one or more network data traffic flows.
4. The wireless end-user device of claim 3 , wherein the one or more processors is further configured to:
use the flow-specific assignment information to identify one or more downstream packets that are part of the first one of the one or more network data traffic flows.
5. The wireless end-user device of claim 1 , wherein applying the one or more first policy instructions associated with the first software application to the first one of the one or more network data traffic flows includes applying a firewall service policy to block the first one of the one or more network data traffic flows through the WWAN.
6. The wireless end-user device of claim 5 , wherein the firewall service policy is applied to (i) block the first one of the one or more network data traffic flows when the WWAN is a roaming network, or (ii) pass the first one of the one or more network data traffic flows when the WWAN is a home network.
7. The wireless end-user device of claim 1 , wherein applying the one or more first policy instructions associated with the first software application to the first one of the one or more network data traffic flows includes applying a notification policy that presents a notification to a user of the wireless end-user device, the notification relates to use or attempted use of the WWAN modem to communicate data by the first software application.
8. The wireless end-user device of claim 1 , wherein applying the one or more first policy instructions associated with the first software application to the first one of the one or more network data traffic flows includes applying a service monitor policy that counts data usage related to use of the WWAN modem to communicate data by the first software application.
9. The wireless end-user device of claim 8 , further comprising:
a user interface;
wherein the one or more first policy instructions are configured to assist in determining an accounting of the data usage, and presenting, through the user interface, a notification comprising information about the data usage.
10. The wireless end-user device of claim 9 , wherein the one or more first policy instructions are further configured to assist in obtaining a user input from the user interface, the user input comprising an indication of a restriction on the data usage allowed for the first software application.
11. A method for use by a wireless end-user device including a wireless wide area network (WWAN) modem, one or more processors, and a memory storing a WWAN network access policy including one or more first policy instructions associated with a first software application of a plurality of software applications resident on the wireless end-user device, the method comprising:
establishing a connection, using the WWAN modem, between the wireless end-user device and a WWAN;
providing, using the WWAN modem, one or more network data traffic flows between the wireless end-user device and the WWAN;
associating, using the one or more processors, each of the one or more of the plurality of software applications with a respective one of the one or more network data traffic flows between the wireless end-user device and the WWAN, including associating the first software application with a first one of the one or more network data traffic flows; and
when (i) the wireless end-user device communicates or attempts to communicate data over the WWAN, and (ii) when the first software application is associated with the first one of the one or more network data traffic flows, applying, using the one or more processors, the one or more first policy instructions associated with the first software application to the first one of the one or more network data traffic flows.
12. The method of claim 11 , further comprising:
using tag information to associate each of the one or more of the plurality of software applications with the respective one of the one or more network data traffic flows.
13. The method of claim 12 , further comprising:
augmenting the tag information with flow-specific assignment information, and wherein the flow-specific assignment information includes at least one of an application layer protocol associated with each of the respective one of the one or more network data traffic flows, a transport layer protocol associated with each of the respective one of the one or more network data traffic flows, or IP socket information associated with each of the respective one of the one or more network data traffic flows.
14. The method of claim 13 , further comprising:
using the flow-specific assignment information to identify one or more downstream packets that are part of the first one of the one or more network data traffic flows.
15. The method of claim 11 , wherein applying the one or more first policy instructions associated with the first software application to the first one of the one or more network data traffic flows includes applying a firewall service policy to block the first one of the one or more network data traffic flows through the WWAN.
16. The method of claim 15 , wherein applying the firewall service policy (i) blocks the first one of the one or more network data traffic flows when the WWAN is a roaming network, or (ii) passes the first one of the one or more network data traffic flows when the WWAN is a home network.
17. The method of claim 11 , wherein applying the one or more first policy instructions associated with the first software application to the first one of the one or more network data traffic flows includes applying a notification policy that presents a notification to a user of the wireless end-user device, the notification relates to use or attempted use of the WWAN modem to communicate data by the first software application.
18. The method of claim 11 , wherein applying the one or more first policy instructions associated with the first software application to the first one of the one or more network data traffic flows includes applying a service monitor policy that counts data usage related to use of the WWAN modem to communicate data by the first software application.
19. The method of claim 18 , wherein the wireless end-user device further includes a user interface, and wherein the one or more first policy instructions assist in determining an accounting of the data usage, and presenting, through the user interface, a notification comprising information about the data usage.
20. The method of claim 19 , wherein the one or more first policy instructions further assist in obtaining a user input from the user interface, the user input comprising an indication of a restriction on the data usage allowed for the first software application.