IP Library Granted Patent US 12,401,654
Granted Patent B2
US 12,401,654 · App. 18/479,644 · Granted Aug 26, 2025

System and method to map hierarchical multi-tenant access to services

Inventors: Kazi Bashir (Lewisville, TX); Rajesh Chilka (Littleton, CO); Mehdi Alasti (Arlington, VA); Siddhartha Chenumolu (Ashburn, VA)
Assignee: DISH Wireless L.L.C.
H04L63/102H04L63/105H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,401,654
App. No.
18/479,644
Granted
Aug 26, 2025
Kind
B2
Abstract

An apparatus comprises a memory and a processor communicatively coupled to one another. The memory may be configured to store one or more directories comprising access to multiple tenant profiles and one or more network access commands configured to provide access to one or more entitlements. Each tenant profile of the tenant profiles are associated with one or more services. The processor may be configured to receive a request to access at least one service. The request comprises an application function identifier (AFID) comprising a tenant ID that references a tenant profile of the tenant profiles, a department ID that references multiple entitlements associated with the tenant profile, and an API ID that references a service associated with the entitlements. Further, the processor may be configured to generate a report comprising multiple network access commands configured to enable access to the service in accordance with the entitlements.

Claims (99)

1. An apparatus, comprising:

a memory, comprising:

one or more directories comprising access to a plurality of tenant profiles, each tenant profile of the plurality of tenant profiles being associated with one or more services of a plurality of services; and

one or more network access commands configured to provide access to one or more entitlements; and

a processor communicatively coupled to the memory and configured to:

receive a first request to access at least one service of the plurality of services, the first request comprising a first application function identifier (AFID);

extrapolate a first tenant identifier (ID), a first department ID, and a first application programming interface (API) ID from the first AFID, wherein:

the first tenant ID references a first tenant profile of the plurality of tenant profiles;

the first department ID references a first plurality of entitlements associated with the first tenant profile; and

the first API ID references a first service associated with the first plurality of entitlements;

determine a first plurality of network access commands configured to enable access to the first service in accordance with the first plurality of entitlements; and

generate a first report comprising the first plurality of network access commands.

2. The apparatus of claim 1 , wherein the AFID comprises a first plurality of characters corresponding to the tenant ID, a second plurality of characters corresponding to the first department ID, and a third plurality of characters corresponding to the API ID.

3. The apparatus of claim 1 , wherein the AFID is an information element that comprises an availability between 50 characters and 150 characters.

4. The apparatus of claim 1 , wherein the processor is further configured to:

receive a second request comprising a second AFID;

extrapolate a second tenant ID, a second department ID, and a second API ID from the second AFID, wherein:

the second tenant ID references a second tenant profile of the plurality of tenant profiles;

the second department ID references a second plurality of entitlements associated with the second tenant profile; and

the second API ID references a second service and a third service associated with the second plurality of entitlements;

determine a second plurality of network access commands configured to enable access to the second service in accordance with the second plurality of entitlements and a third plurality of network access commands configured to enable access to the third service in accordance with the second plurality of entitlements; and

generate a second report comprising the second plurality of network access commands and the third plurality of network access commands.

5. The apparatus of claim 1 , wherein the processor is further configured to:

receive a second request comprising a second AFID;

extrapolate a second tenant ID, a second department ID, and a second API ID from the second AFID, wherein:

the second tenant ID references a second tenant profile of the plurality of tenant profiles;

the second department ID references a second plurality of entitlements and a third plurality of entitlements associated with the second tenant profile; and

the second API ID references a second service associated with the second plurality of entitlements and the third plurality of entitlements;

determine a second plurality of network access commands configured to enable access to the second service in accordance with the second plurality of entitlements and the third plurality of entitlements; and

generate a second report comprising the second plurality of network access commands.

6. The apparatus of claim 1 , wherein the processor is further configured to:

receive a second request comprising a second AFID;

extrapolate a second tenant ID and a second API ID from the second AFID, wherein:

the second tenant ID references a second tenant profile of the plurality of tenant profiles; and

the second API ID references a second service associated with the second tenant ID;

determine a second plurality of network access commands configured to enable access to the second service in accordance with a second plurality of entitlements corresponding to the second tenant profile; and

generate a second report comprising the second plurality of network access commands.

7. The apparatus of claim 1 , wherein the processor is further configured to present the first report to a user equipment, the user equipment being configured to access the first service based at least in part upon the first plurality of network access commands in the first report.

8. A method, comprising:

receiving a first request to access at least one service of a plurality of services, the first request comprising a first application function identifier (AFID);

extrapolating a first tenant identifier (ID), a first department ID, and a first application programming interface (API) ID from the first AFID, wherein:

the first tenant ID references a first tenant profile of the plurality of tenant profiles;

the first department ID references a first plurality of entitlements associated with the first tenant profile; and

the first API ID references a first service associated with the first plurality of entitlements;

determining a first plurality of network access commands configured to provide access to one or more entitlements and enable access to the first service in accordance with the first plurality of entitlements; and

generating a first report comprising the first plurality of network access commands.

9. The method of claim 8 , wherein the AFID comprises a first plurality of characters corresponding to the tenant ID, a second plurality of characters corresponding to the first department ID, and a third plurality of characters corresponding to the API ID.

10. The method of claim 8 , wherein the AFID is an information element that comprises an availability between 50 characters and 150 characters.

11. The method of claim 8 , further comprising:

receiving a second request comprising a second AFID;

extrapolating a second tenant ID, a second department ID, and a second API ID from the second AFID, wherein:

the second tenant ID references a second tenant profile of the plurality of tenant profiles;

the second department ID references a second plurality of entitlements associated with the second tenant profile; and

the second API ID references a second service and a third service associated with the second plurality of entitlements;

determining a second plurality of network access commands configured to enable access to the second service in accordance with the second plurality of entitlements and a third plurality of network access commands configured to enable access to the third service in accordance with the second plurality of entitlements; and

generating a second report comprising the second plurality of network access commands and the third plurality of network access commands.

12. The method of claim 8 , further comprising:

receiving a second request comprising a second AFID;

extrapolating a second tenant ID, a second department ID, and a second API ID from the second AFID, wherein:

the second tenant ID references a second tenant profile of the plurality of tenant profiles;

the second department ID references a second plurality of entitlements and a third plurality of entitlements associated with the second tenant profile; and

the second API ID references a second service associated with the second plurality of entitlements and the third plurality of entitlements;

determining a second plurality of network access commands configured to enable access to the second service in accordance with the second plurality of entitlements and the third plurality of entitlements; and

generating a second report comprising the second plurality of network access commands.

13. The method of claim 8 , further comprising:

receiving a second request comprising a second AFID;

extrapolating a second tenant ID and a second API ID from the second AFID, wherein:

the second tenant ID references a second tenant profile of the plurality of tenant profiles; and

the second API ID references a second service associated with the second tenant ID;

determining a second plurality of network access commands configured to enable access to the second service in accordance with a second plurality of entitlements corresponding to the second tenant profile; and

generating a second report comprising the second plurality of network access commands.

14. The method of claim 8 , further comprising presenting the first report to a user equipment, the user equipment being configured to access the first service based at least in part upon the first plurality of network access commands in the first report.

15. A non-transitory computer readable medium storing instructions that when executed by a processor cause the processor to:

receive a first request to access at least one service of a plurality of services, the first request comprising a first application function identifier (AFID);

extrapolate a first tenant identifier (ID), a first department ID, and a first application programming interface (API) ID from the first AFID, wherein:

the first tenant ID references a first tenant profile of the plurality of tenant profiles;

the first department ID references a first plurality of entitlements associated with the first tenant profile; and

the first API ID references a first service associated with the first plurality of entitlements;

determine a first plurality of network access commands configured to provide access to one or more entitlements and enable access to the first service in accordance with the first plurality of entitlements; and

generate a first report comprising the first plurality of network access commands.

16. The non-transitory computer readable medium of claim 15 , wherein the AFID comprises a first plurality of characters corresponding to the tenant ID, a second plurality of characters corresponding to the department ID, and a third plurality of characters corresponding to the API ID.

17. The non-transitory computer readable medium of claim 15 , wherein the AFID is an information element that comprises an availability between 50 characters and 150 characters.

18. The non-transitory computer readable medium of claim 15 , wherein the processor is further caused to:

receive a second request comprising a second AFID;

extrapolate a second tenant ID, a second department ID, and a second API ID from the second AFID, wherein:

the second tenant ID references a second tenant profile of the plurality of tenant profiles;

the second department ID references a second plurality of entitlements associated with the second tenant profile; and

the second API ID references a second service and a third service associated with the second plurality of entitlements;

determine a second plurality of network access commands configured to enable access to the second service in accordance with the second plurality of entitlements and a third plurality of network access commands configured to enable access to the third service in accordance with the second plurality of entitlements; and

generate a second report comprising the second plurality of network access commands and the third plurality of network access commands.

19. The non-transitory computer readable medium of claim 15 , wherein the processor is further caused to:

receive a second request comprising a second AFID;

extrapolate a second tenant ID, a second department ID, and a second API ID from the second AFID, wherein:

the second tenant ID references a second tenant profile of the plurality of tenant profiles;

the second department ID references a second plurality of entitlements and a third plurality of entitlements associated with the second tenant profile; and

the second API ID references a second service associated with the second plurality of entitlements and the third plurality of entitlements;

determine a second plurality of network access commands configured to enable access to the second service in accordance with the second plurality of entitlements and the third plurality of entitlements; and

generate a second report comprising the second plurality of network access commands.

20. The non-transitory computer readable medium of claim 15 , wherein the processor is further caused to present the first report to a user equipment, the user equipment being configured to access the first service based at least in part upon the first plurality of network access commands in the first report.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 10, 2025
From: DISH WIRELESS L.L.C.
To: BOOST SUBSCRIBERCO L.L.C.
Reel/Frame 073066/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 2, 2023
From: BASHIR, KAZI; CHILKA, RAJESH; ALASTI, MEHDI; CHENUMOLU, SIDDHARTHA
To: DISH WIRELESS L.L.C.
Reel/Frame 065097/0853 →
Continuity (1)
Related Publication 20250112926A1 · Apr 3, 2025
References Cited (23)
US 8452726B2 · Kuruganti et al. · 2013 [cited by applicant]
US 10089070B1 · Kanjariya · 2018 [cited by examiner]
US 10667130B2 · Bolte · 2020 [cited by examiner]
US 10721237B2 · Vats et al. · 2020 [cited by applicant]
US 10791087B2 · Medam et al. · 2020 [cited by applicant]
US 10963349B2 · Dhamdhere et al. · 2021 [cited by applicant]
US 11086700B2 · Myneni et al. · 2021 [cited by applicant]
US 11121962B2 · Michael · 2021 [cited by applicant]
US 11171830B2 · Vaidya et al. · 2021 [cited by applicant]
US 11347806B2 · Tal et al. · 2022 [cited by applicant]
US 11405427B2 · Desai · 2022 [cited by examiner]
US 11483329B1 · Singh et al. · 2022 [cited by applicant]
US 11570146B2 · Liu et al. · 2023 [cited by applicant]
US 11579941B2 · Giannetti et al. · 2023 [cited by applicant]
US 11700196B2 · Michael et al. · 2023 [cited by applicant]
US 20030126465A1 · Tassone · 2003 [cited by examiner]
US 20120102543A1 · Kohli · 2012 [cited by examiner]
US 20200067789A1 · Khuti et al. · 2020 [cited by applicant]
US 20220100553A1 · Croteau et al. · 2022 [cited by applicant]
US 20220124013A1 · Chitalia et al. · 2022 [cited by applicant]
US 20220171648A1 · Rodriguez et al. · 2022 [cited by applicant]
US 20220182298A1 · Degioanni · 2022 [cited by applicant]
Kazi Bashir, System and method to implement name-spaces in hierarchical multi-tenant containerized service clusters, U.S. Appl. No. 18/479,604, filed Oct. 2, 2023, pp. 1-55. [cited by applicant]