Abstract: A method performed by a network system communicatively coupled to a device over a wireless access network, the method comprising transmitting a traffic flow to, or receiving the traffic flow from, a software application on the device, the traffic flow comprising one or more related data transfers over the wireless access network, the traffic flow being routed between the software application and the network system through an assisting element comprising a control application or a proxy agent on the device, wherein the traffic flow has a characteristic associating the traffic flow with the first software application, the characteristic preserving the association between the traffic flow and the software application when the traffic flow is routed by the one or more assisting elements; identifying the characteristic; and implementing at least a portion of a control, accounting, or notification service policy based on the identified characteristic.

Abstract: A technique involves modular storage of network service plan components and provisioning of same. A subset of the capabilities of a service design system can be granted to a sandbox system to enable customization of service plan offerings or other controls.

Abstract: Disclosed herein are various embodiments to prevent, detect, or take action in response to the moving a device credential from one device to another, the improper configuration of a service processor, a missing service processor, or the tampering with a service processor in device-assisted services (DAS) systems.

Abstract: A wireless end-user device, comprising one or more modems enabling the wireless end-user device to communicate with a network system over a wireless access network, a touch-screen user interface, and one or more processors configured to execute one or more instructions that, when executed by the one or more processors, cause the one or more processors to detect a user input through the touch-screen user interface, the user input comprising a request to remove the wireless end-user device from an existing device group account, the existing device group account being associated with one or more devices including the wireless end-user device, and send a message to the network system over the wireless access network, the message conveying the request to remove the wireless end-user device from the existing device group account.

Abstract: A method comprising obtaining, from a master user, a device usage allocation applicable to two or more devices, the two or more devices being associated with another user, the another user being different from the master user, obtaining an aggregate measure of device usage associated with the two or more devices, if the aggregate measure of device usage associated with the two or more devices satisfies a condition relative to the device usage allocation, managing an activity of the two or more devices, and sending a notification to at least one of the two or more devices, the notification for presentation to the another user through a user interface of the at least one of the two or more devices.

Abstract: A wireless end-user device has wireless wide-area network (WWAN) and wireless local-area network (WLAN) modems. One or more processors attribute data communications for at least one of the modems to respective personas, including a first persona for usage of the device that is personal to the user and a second persona for usage of the device that is on behalf of an enterprise. The device transmits information to a network element that reflects the attribution of the data communications. The information is adapted for use in allocating a first amount of wireless data consumption to one of the personas.

Abstract: A method performed by a network system communicatively coupled to a device over a wireless network, the method comprising: receiving authentication information from the device over the wireless network, the authentication information enabling the network system to authenticate the device; obtaining a charging data record (CDR) comprising information identifying a device activity over the wireless network associated with the device and indicating a usage amount associated with the device activity; and using one or more rules, processing the CDR to generate information configured to assist in (a) providing to a partner entity an accounting of a first portion of usage of the wireless network associated with the device activity indicated by the CDR, the partner entity providing an Internet-based service to the device, and (b) determining an accounting of a second portion of the usage of the wireless network associated with the activity indicated by the CDR.

Abstract: Disclosed herein are methods, systems, and apparatuses to enable subscribers of mobile wireless communication devices to view, research, select and customize service plans; to create and manage device groups, share and set permission controls for service plans among devices in device groups; to manage communication services through graphical user interfaces; to sponsor and promote service plans; and to design, manage, and control communication services through application programming interfaces.

Abstract: A proxy server is disclosed for providing a wireless ambient service to a mobile end-user device operating on a Wireless Wide Area Network (WWAN). An ambient service has a primary policy that allows a user to directly access primary ambient content, but not other content, through the service. A secondary policy allows the user to access, as ambient content, content outside of the primary policy. The secondary policy allows the access of the content outside of the primary policy based on an association with primary content. The ambient service proxy server implements the policies of the service.

Abstract: A wireless end-user device has WWAN and WLAN modems. A memory stores a WWAN network access policy specific to data traffic usage and/or attempted usage by a first software application but not a second software application. An application service interface agent identifies network data traffic flows with respective tag information that associates a responsible one of a plurality of software applications with each identified network data traffic flow. One or more elements of a network stack then use the tag information to identify a network data traffic flow associated with the first software application, the one or more elements applying the network access policy to the identified network data traffic flow.

Abstract: A method comprising obtaining, by a server, wireless-network performance data from a plurality of end user devices; generating, by the server, a prioritized network list from the wireless-network performance data; and provisioning, by the server, the prioritized network list to an end user device comprising a radio interface for receiving the prioritized network list from the server, the radio interface being identified to receive the prioritized network list based on a characteristic associated with the end user device; a radio configured to identify available wireless networks, the available wireless networks being different than a current wireless network to which the end user device is currently connected; a prioritized network selection engine for using the prioritized network list to select one of the available wireless networks; and a network connection engine configured to initiate disconnection from the current wireless network and connection to the selected wireless network.

Abstract: A wireless end-user device has wireless wide-area network (WWAN) and wireless local-area network (WLAN) modems. A WWAN-specific differential traffic control policy includes aspects that are user-configurable for specific applications, including a background/foreground operation-based policy. One or more processors implement an application program interface that allows an application to access one or more aspects of the policy that are applicable to that application, including one or more user-configurable aspects of the policy.

Abstract: A device having: an application program that assists the device in accessing a data service over a wireless access network, an application credential associated with the application program, and a policy to be applied when the application program initiates or attempts to initiate communication over the wireless access network. The device also has one or more agents that detect an attempted installation of update software on the device, the update software purporting to be a modification, update, or replacement of the application program; obtain an update-software credential associated with the update software; obtain the application credential; allow the update software to be installed if the update-software credential matches the application credential; and interact with the application program to arrange a setting of the application program, the setting configured to assist in applying the policy when the application program initiates or attempts to initiate communication over the wireless access network.

Abstract: A mobile device has an inter-process software communication (IPC) bus that provides secure communication between a device link agent and software component processes. The software processes are allowed to access the bus based on access authorization information from a secure server that identifies those components. The device link object maintains a secure message link to a message link server that receives messages from plural network functions, identified for delivery to respective software components on the mobile device, and conveys them to the device link agent. For the authorized software components, the link agent delivers received messages to the component processes.

Abstract: Mobile end-user devices are disclosed having a stored network access policy, applicable to specific applications stored on and executable by the device. The policy specifies, for at least some of the applications, whether or not those applications are individually allowed to initiate access network communication activity using one or more wireless data modems, when those applications are running as a background application. One or more device agents, which may operate at different points within the device in different embodiments, enforce the policies based on a determination as to whether a running application is running as a background application.

Abstract: A method performed by an end user device associated with a service plan having a limit on usage of a network service, the method comprising storing one or more notification actions corresponding to one or more notification requests; performing a device action that reflects a past or intended use of the network service; receiving one of the one or more notification requests from a network element in response to the device action; performing one of the one or more notification actions in response to the notification request, the notification action causing the end user device to retrieve at least a portion of a notification message associated with a status of the use, the at least a portion of the notification message being separate from the one of the one or more notification requests; and presenting the notification message on a user interface of the end user device.

Abstract: A method is described for providing a wireless ambient service to a mobile end-user device operating on a Wireless Wide Area Network (WWAN). An ambient service has a primary policy that allows a user to directly access primary ambient content, but not other content, through the service. When the user accesses primary content, however, that content can include user-selectable references to content outside of the primary policy. A secondary policy then allows the user, by selecting such a reference, to access content outside of the primary policy.

Abstract: A wireless communication device comprising: one or more network modems enabling the wireless communication device to communicate over a first wireless network; one or more network modems enabling the wireless communication device to communicate with two or more end-point devices over a second wireless network; one or more processors configured to execute one or more instructions; and memory coupled to the one or more processors and configured to provide the one or more processors with the one or more instructions. The one or more instructions, when executed by the processors, cause processors to: establish a first connection between the wireless communication device and a first end-point device; establish a second connection between the wireless communication device and a second end-point device; apply a first control to traffic transmitted by or to the first end-point device; and apply a second control to traffic transmitted by or to the second end-point device.

Abstract: A wireless end-user device has wireless wide-area network (WWAN) and wireless local-area network (WLAN) modems. One or more processors classify whether an application is interacting with a user in a user interface foreground of the device. At a time when Internet service activities are communicated through a first wireless network type, the processors use a differential traffic control policy list to determine whether or not to apply a differential traffic control policy to an application requesting Internet service access. When the policy is applicable, and the application is not classified as interacting with a user in the device user interface foreground, the Internet service access request is blocked. A network element supplies or contributes to the contents of the traffic control policy list via secure updates transmitted to the processor(s).

Abstract: A wireless end-user device has wireless wide-area network (WWAN) and wireless local-area network (WLAN) modems. One or more processors classify whether an application is interacting with a user in a user interface foreground of the device. At a time when Internet service activities are communicated through the WWAN modem, the processors use a differential traffic control policy list to determine whether or not to apply a differential traffic control policy to an application requesting Internet service access. When the policy is applicable, and the application is not classified as interacting with a user in the device user interface foreground, the Internet service access request is blocked.