Abstract: A wireless end-user device has a wireless wide-area network (WWAN) modem and supports multiple wireless network types. A network service activity control policy set has a policy element that associates one or more Internet activity access controls with at least one end-user application. One or more processors determine whether to apply the Internet activity access controls to an Internet access request by or on behalf of the end-user application, based at least on which of the wireless network types is configured to support Internet service activity. The determination may further be based on whether or not the application is interacting with a user. When the controls are to be applied, network activity for the Internet access request is delayed until it can be associated with network activity for one or more other requests not associated with the application.

Abstract: A wireless end-user device has a wireless wide-area network (WWAN) modem. One or more processors classify whether an application is interacting with a user in a user interface foreground of the device. At a time when Internet service activities are communicated through the WWAN modem, the processors use a differential traffic control policy list to determine whether or not to apply a differential traffic control policy to an application requesting Internet service access. When the policy is applicable, and the application is not classified as interacting with a user in the device user interface foreground, the Internet service access request is blocked. Even when an application access is allowed, a separate control provided a wireless data usage limit for that application.

Abstract: A method performed by a network system communicatively coupled to a device over a wireless access network, the method comprising transmitting a traffic flow to, or receiving the traffic flow from, a software application on the device, the traffic flow comprising one or more related data transfers over the wireless access network, the traffic flow being routed between the software application and the network system through an assisting element comprising a control application or a proxy agent on the device, wherein the traffic flow has a characteristic associating the traffic flow with the first software application, the characteristic preserving the association between the traffic flow and the software application when the traffic flow is routed by the one or more assisting elements; identifying the characteristic; and implementing at least a portion of a control, accounting, or notification service policy based on the identified characteristic.

Abstract: A wireless end-user device has a wireless wide-area network (WWAN) modem. A network element securely provisions the device with a differential traffic control policy list that distinguishes how network traffic for at least one network type should be treated on a per-application basis. A user is also allowed, through an interface, to configure one or more aspects of how a differential traffic control policy is applied to applications. One or more device agents classify whether an application is interacting with a user in a user interface foreground of the device and whether data communication for Internet service activities is provided through the WWAN modem. Based on the network- and user-configured policy information and the classifications, a network stack agent determines whether to allow or disallow a given Internet access request. Some requests that may otherwise be disallowed are allowed when the WWAN modem is already active to serve another request.

Abstract: A device that determines an aspect of a service policy based on a state of the device, and applies the service policy. The state is based on a user interaction, or a lack of user interaction, with the device. The service policy applies a first control to a first activity over a roaming network and a second control to the first activity over a home network, wherein the first control controls the first activity differently than the second control controls the first activity. The first activity is caused by a first software component on the device and comprises a first set of prospective or successful communications over an available wireless network. The aspect of the service policy controls the first activity differently from a second activity over a roaming network, where the second activity is associated with a second software component on the device.

Abstract: A method for implementing a service policy on a device by obtaining, from a user interface (UI) or a network interface, a quality of service (QoS) activity map of an application identifier to a QoS policy, wherein the QoS policy is determined at least in part by an access state qualifier, the access state qualifier characterizing an aspect of access network resources; identifying a device service usage in association with the application identifier; applying the QoS policy from the QoS activity map to the device service usage, wherein a QoS service activity, including the device service usage, falls within a class of activities associated with the application identifier and governed by the QoS policy; and processing the device service usage in accordance with the QoS policy.

Abstract: A mobile end-user device contains a device messaging agent that securely communicates with a network message server over a wireless network. The network message server delivers messages to the device messaging agent on behalf of a plurality of network application servers. Each network application server supplies the network message server with application data and an indication of a device and an application on the device to which the application data should be delivered. The network message server securely passes the data and an application identifier to the device messaging agent on the appropriate mobile end-user device. The device messaging agent maps the application identifier to a software process corresponding to the application, and a secure interprocess communication service delivers the application data to that software process.

Abstract: A system is described for providing a wireless ambient service to a mobile end-user device operating on a Wireless Wide Area Network (WWAN). An ambient service has a primary policy that allows a user to directly access primary ambient content, but not other content, through the service. A secondary policy allows the user to access, as ambient content, content outside of the primary policy. The secondary policy allows the access of the content outside of the primary policy based on a dynamic association with primary content. The system includes one or more device agents and an ambient service proxy server that cooperate to implement the service. Policy control elements can be implemented, for example, either by the device agents or by the proxy server.

Abstract: A wireless end-user device has a wireless wide-area network (WWAN) modem. A network service activity control policy set has a policy element that associates multiple Internet activity access controls with at least one end-user application. One or more processors receive a first type of request from applications, to use the networking stack, and a second type of request from applications, to change the power control and/or network connection state of the WWAN modem. The processors determine whether to apply the Internet activity access controls to the first type of request and the second type of request. Accordingly, certain end-user applications can, when specified policy conditions apply, be prevented from consuming bandwidth by affecting the modem state, and can also be prevented from using the packet networking stack to communicate data, even when the modem state would allow such.

Abstract: A wireless end-user device contains a wireless modem, a network stack configurable to receive and transmit network data via the wireless modem, a media service manager, and a service classification agent. The media service manager manages network data transfers for media objects as requested by multiple applications. Even though the media service manager manages the network data transfers, the service classification agent provides a capability to associate network data usage for the network data transfers with the applications that requested the service from the media service manager.

Abstract: A wireless end-user device has wireless wide-area network (WWAN) and wireless local-area network (WLAN) modems. One or more processors classify whether an application is interacting with a user in a user interface foreground of the device. At a time when Internet service activities are communicated through a first wireless network type, the processors use a differential traffic control policy list to determine whether or not to apply a differential traffic control policy to Internet service activities for an application. When the policy is applicable, the policy may direct that Internet service activities by the application are blocked. A user of the device is allowed to augment the policy that will be applied for applications specified as controlled by the list, but not for other applications and/or services.

Abstract: A method performed by a network system communicatively coupled to a wireless device by a wireless access network, the network system including a network element corresponding to a network element destination, the method comprising providing at least a portion of a device policy to the wireless device, wherein the device policy is configured to assist in detecting wireless device traffic associated with a service activity, identifying the service activity as being included in a service usage activity classification, and directing or routing the wireless device traffic associated with the service activity over the wireless access network based on information identifying the network element destination; providing a network element policy to the network element corresponding to the network element destination; detecting, at the network element, traffic associated with the wireless device; and applying the network element policy at the network element to the traffic associated with the wireless device.

Abstract: A mobile activation server has a secure network port to receive requests from mobile end-user devices operating on a cellular access network with a set of pre-activation credentials. The server contains a database with a stored set of pre-activation credentials for multiple such devices. An authorization engine compares one or more of the stored pre-activation credentials to those of a requesting device to determine whether the device is authorized to receive offers from the server. An offer engine supplies to authorized devices via the cellular access network a set of multiple cellular network service options, including for each of multiple cellular network service carriers at least one option for activating service on that carrier.

Abstract: A wireless end-user device has a configurable wireless wide-area network (WWAN) modem capable of connection to both a home WWAN and a roaming WWAN. One or more processors classify whether an application is interacting with a user in a user interface foreground of the device. At a time when Internet service activities are communicated through the roaming WWAN, the processors use a differential traffic control policy list to determine whether or not to apply a differential traffic control policy to an application requesting Internet service access. When the policy is applicable, and the application is not classified as interacting with a user in the device user interface foreground, the Internet service access request is blocked.

Abstract: Each of several mobile end-user devices contains a device messaging agent that securely communicates with a network message server over a wireless network. The network message server delivers messages to the device messaging agent on behalf of a plurality of network application servers. Each network application server supplies the network message server with application data and an indication of a device and an application on the device to which the application data should be delivered. The network message server securely passes the data and an application identifier to the device messaging agent on the appropriate mobile end-user device. The device messaging agent maps the application identifier to a software process corresponding to the application, and a secure interprocess communication service delivers the application data to that software process.

Abstract: Methods and systems for receiving a report from an end-user device, the report comprising information about a device service state; determining, based on the report, that a particular service policy setting of the end-user device needs to be modified, the particular service policy setting associated with a service profile that provides for access to a network data service over a wireless access network and configured to assist in controlling one or more communications between the end-user device and the wireless access network, the particular service policy setting stored in a protected partition configured to deter or prevent unauthorized modifications to the particular service policy setting; and, in response to determining that the particular service policy setting needs to be modified, sending configuration information to the end-user device, the configuration information configured to assist in modifying or allowing modifications to the particular service policy setting.

Abstract: A wireless end-user device has wireless wide-area network (WWAN) and wireless local-area network (WLAN) modems. One or more processors associate each of a plurality of Internet access requests with a corresponding application executing on the device. The processors apply a differential traffic control policy to at least some of the Internet access requests, based on the corresponding executing application and whether or not that application is covered by a differential traffic control policy list. For one of the modems, the list treatment of an associated application determines whether an Internet access request is allowed or disallowed. For the other modem, the list treatment does not cause that same application to have its Internet access requests disallowed.

Abstract: A wireless end-user device has a wireless wide-area network (WWAN) modem. One or more processors classify whether an application associated with an Internet access request is interacting with a user. In at least one power control state, the Internet access request is disallowed because the application is classified as not interacting with a user. In at least one other power control state, a similar Internet access request is allowed.

Abstract: A mobile device has a service monitor agent that monitors device location from GPS or other location data. A user interface contains privacy user controls to allow users to specify, for each of multiple applications, a location monitoring policy setting applicable specifically to that application. A policy control agent stores the settings and manages access by the respective applications to device location data from the service monitor agent on a per-application basis, based at least in part on the settings. An application interface agent can provide control over the access to the location data by the applications. The user controls and policy control agent may further manage access by specific applications to Internet data service over a WWAN modem.

Abstract: A mobile device has a service monitor agent to categorize wireless network data usage by the device, according to network used (for instance whether a WWAN or a WLAN is used) and also according to the device application associated with the network data usage. A set of service usage counters track network data usage per application for at least one of the networks. An application data usage user interface displays, to a user, service usage on a per-application basis based on the service usage counters.