Abstract: A network system comprising memory configured to store a service offer set identifying one or more service plans available to an end-user device, the one or more service plans enabling the end-user device to communicate over a wireless access network; and one or more network elements configured to obtain the service offer set from memory, send information associated with the service offer set to the end-user device over the wireless access network, the information enabling the end-user device to present, through a user interface, one or more service plan selection options associated with the one or more service plans available to the end-user device, receive an offer set user selection from the end-user device, the offer set user selection indicating a user selection of at least one of the one or more service plan selection options, and provision one or more functions based on the offer set user selection.

Abstract: Network service provisioning is described. Network service provisioning to a device includes a mechanism for ensuring that network services are available based upon one or more of appropriate traffic control, billing, and notification policies. Ensuring that the policies are properly enforced on a device is a focus of this paper. The enforcement policies can be on the device or in the network.

Abstract: A technique involves modular storage of network service plan components and provisioning of same. A subset of the capabilities of a service design system can be granted to a sandbox system to enable customization of service plan offerings or other controls.

Abstract: Methods and computer-readable media for determining that an end-user device is connected to or attempting to connect to the first wireless access network; obtaining an indication that usage of the first wireless access network is associated with a first cost; and, based on one or both of the indication that first wireless access network is associated with the first cost and the determination that the end-user device is connected to or attempting to connect to the first wireless access network, restricting communications associated with a first service activity over the first wireless access network.

Abstract: A method comprising inspecting a traffic flow associated with a device; identifying a requested access within the traffic flow; determining, based on a set of access rules, whether the requested access is within a service profile, the service profile defining a first data service, a first service usage associated with the first data service being accounted for separately from a second service usage associated with at least a second data service available to the device, the service profile identifying a particular network end-point, a particular end-user-device application, a particular content type, or a combination of these; and if the requested access is within the service profile, creating or modifying a record, the record for assisting in providing an accounting of at least a portion of the first service usage to a paying entity responsible for subsidizing or paying for the at least a portion of the first service usage.

Abstract: A network system comprising memory configured to store a device communication activity policy, and a policy verification processor configured to (a) receive a device data record over a trusted communication link between the network system and a device data record generator on a communications device, the device data record comprising information about a data communications activity by the communications device, the information configured to assist the policy verification processor in determining whether the communications device is operating or has operated in accordance with the device communication activity policy, (b) determine, based on the device data record, whether the communications device is operating or has operated in accordance with the device communication activity policy, and (c) upon determining that the communications device is not operating or has not operated in accordance with the device communication activity policy, initiate an error handling action.

Abstract: Devices, systems, and non-transitory computer-readable storage media for updating wireless device credentials, the wireless device comprising: a user interface, memory configured to store one or more credentials for enabling the wireless device to obtain one or more services over a wireless access network, and one or more processors configured to execute one or more machine-executable instructions that, when executed by the one or more processors, cause the one or more processors to obtain an indication of a user request to replace a particular credential with a target credential, detect a network-provisioning state change, determine that the particular credential does not match the target credential, initiate a programming session with a network element over a wireless access network, obtain an updated credential from the network element, and assist in storing the updated credential in memory.

Abstract: Various embodiments are disclosed for a services policy communication system and method. In some embodiments, a communications device detects one or more available roaming networks for a service on a network; connects to a roaming services network center via an access network; and sends available roaming network information to the roaming services network center.

Abstract: Various embodiments are disclosed for a services policy communication system and method. In some embodiments, a communications device stores a set of device credentials for activating the communications device for a service on a network; and sends an access request to the network, the access request including the set of device credentials.

Abstract: A network system, comprising a communication interface enabling the network system to communicate with an end-user device over a wireless access network, and one or more network elements configured to receive a device credential from the end-user device, obtain a service policy based at least in part on the device credential, the service policy being applicable to the end-user device, obtain service processor authentication information associated with a service processor on the end-user device, and using the service processor authentication information, facilitate execution of an end-user device service processor authentication procedure.

Abstract: A wireless end-user device, comprising one or more modems enabling the wireless end-user device to communicate with a network system over a wireless access network, a touch-screen user interface, and one or more processors configured to execute one or more instructions that, when executed by the one or more processors, cause the one or more processors to detect a user input through the touch-screen user interface, the user input comprising a request to remove the wireless end-user device from an existing device group account, the existing device group account being associated with one or more devices including the wireless end-user device, and send a message to the network system over the wireless access network, the message conveying the request to remove the wireless end-user device from the existing device group account.

Abstract: A method performed by a wireless end-user hardware device that is configured to connect to a wireless access network via associated device circuitry, the method including monitoring at a service interface layer attempts by the plurality of end-user applications to communicate over the wireless access network, determining that connectivity to the wireless access network is available and that a data service plan is not active, communicating with an activation server over the wireless access network and either i) opening an interface through which the end-user may enroll, subscribe or otherwise activate the data service plan and communicating with the activation server to activate the data service plan or ii) executing an application that automatically exchanges previously entered credentials with the activation server to activate the data service plan.

Abstract: A method performed by a first client-side device agent, instantiated on a hardware device that is configured to connect to a data-handling network via associated device circuitry, comprising receiving configuration data in the form of non-executable data, configuring the first client-side device agent such that the first client-side device agent has a first configuration specifying a first application on the hardware device, monitoring substantially in real-time a flow of packets between the of applications and a server-side device, selecting packets based on their association with the application, modifying or appending packet header information for the selected packets, and transmitting modified or appended packets configured such that they are routed based on the modified or appended packet header information.

Abstract: A method and network system for obtaining, from a management entity, a service policy applicable to a device group managed by the management entity, the device group including a first device and a second device communicatively coupled to the network system over a wireless network, the service policy comprising a classification policy to assist in identifying traffic associated with one or more available service activities and a control policy to assist in controlling at least a portion of the traffic associated with the one or more available service activities; identifying data traffic over the wireless network associated with the first device; based on the classification policy, identifying first traffic associated with the one or more available service activities within the data traffic over the wireless network associated with the first device; and based on the control policy, controlling at least a portion of the first traffic.

Abstract: A first end-user device comprising one or more modems enabling the first end-user device to communicate with a network system over a first network and with one or more other end-user devices over a second network, the first network comprising a wireless access network, and at least one processor configured to provide a forwarding service to the one or more other end-user devices, the forwarding service for forwarding first traffic between the one or more other end-user devices and the network system, implement a first service policy for assisting in control of the first traffic, implement a second service policy for assisting in control of second traffic associated with access by the first end-user device to a service over the first network, wherein the second service policy differs from the first service policy, and monitor or identify successful use or attempted use of the forwarding service.

Abstract: A device that detects an attempted installation of update software on the device, the update software purporting to be a modification, update, or replacement of an application program that assists the device in accessing a data service over a wireless access network, obtain an update-software credential associated with the update software, obtain an application credential associated with the application program, determine whether the update-software credential matches the application credential, and allow the update software to be installed if the update-software credential matches the application credential, determine that the application program is initiating or attempting to initiate communication over the wireless access network, and based on the determination that the application program is initiating or attempting to initiate communication over the wireless access network, apply a policy when the application program initiates or attempts to initiate communication over the wireless access network.

Abstract: A method performed by a network system, the method comprising: monitoring traffic over a wireless network between the network system and a device, the traffic being within a service plan associated with the device; obtaining a first accounting of usage of the wireless network associated with a first portion of the traffic, wherein a sponsor sponsors at least a portion of the usage of the wireless network associated with the first portion of the traffic; based on the monitored traffic, obtaining a second accounting of usage of the wireless network associated with a second portion of the traffic not including the first portion of the traffic, the subscriber associated with the wireless device being financially responsible for usage of the wireless network associated with the second portion of the traffic; and providing an accounting record to the sponsor based on the first accounting.

Abstract: A wireless end-user device is disclosed. One or more user inputs indicate that a user of the wireless end-user device authorizes the device to send a first file to a server over a network of a first network type, and that the user does not authorize the device to send a second file to the server over the network of the first type. Based on the one or more user inputs and a determination that the device is connected to the network of the first type, the device sends the first file, but not the second file, to the server over the network of the first network type. Upon detecting that the device is connected to a network of the second network type, the device sends the second file to the server over the network of the second network type.

Abstract: A method comprising obtaining, from a master user, a device usage allocation applicable to two or more devices, the two or more devices being associated with another user, the another user being different from the master user, obtaining an aggregate measure of device usage associated with the two or more devices, if the aggregate measure of device usage associated with the two or more devices satisfies a condition relative to the device usage allocation, managing an activity of the two or more devices, and sending a notification to at least one of the two or more devices, the notification for presentation to the another user through a user interface of the at least one of the two or more devices.

Abstract: A method comprising obtaining a credential associated with a first device in a device group, the device group having a shared data allocation available to the device group, the shared data allocation establishing an amount of communication over a first wireless network; determining, based on the credential, that the first device is authorized to set or change an aspect of a policy applicable when a second device in the device group is connected to the first wireless network; obtaining, from the first device, a user preference; and provisioning, based on the user preference and the determination that the first device is authorized to set or change the at least an aspect of the policy for the second device, one or more network elements to at least assist in enforcing or applying the policy when the second device is connected to the first wireless network.