Abstract: A method comprising storing information about a service plan, the service plan having a limit on usage of at least one of one or more network services, the service plan being associated with an end user device; detecting a device action that reflects or is associated with a past, current, or intended use by the end user device of the at least one of the one or more network services; identifying the device action as a trigger event; identifying notification request information based on the trigger event, the notification request information for use by the end user device in presenting, through a user interface of the end user device, a notification message comprising notification information, the notification information based on the notification request information; and transmitting the notification request information to the end user device in response to the trigger event.

Abstract: A method performed by a network system operated by or on behalf of a service provider, the network system capable of communicating with a user device over a wireless access network, the method comprising establishing, in cooperation with software running on the user device, a secure link between the network system and the software, the secure link for preventing unauthorized access to communications between the software and the network system; providing, to the software over the secure link, first information enabling the software to assist a user of the user device to view, select, or change an aspect of a service plan associated with the user device; and providing, to the software over the secure link, second information, the second information enabling the software to present, through a user interface of the user device, a notification about a past or current service usage by the user device.

Abstract: A method and network system for obtaining, from a management entity, a bill-by-account service policy applicable to a device group managed at least in part by the management entity, the device group including a plurality of devices including a particular device identified by a particular credential, the bill-by-account service policy comprising classification and accounting policies; identifying wireless access network data traffic associated with the particular device; based on the classification policy, identifying a particular service activity within the wireless access network data traffic, the particular service activity being a bill-by-account service activity; obtaining a record comprising the particular credential and a usage measure indicating a wireless access network usage associated with the particular service activity; and, based on the accounting policy, allocating the usage measure to an account associated with an entity that is financially responsible for usage of the wireless access network a

Abstract: A method performed by a network system communicatively coupled to a device over a wireless access network, the method comprising transmitting a traffic flow to, or receiving the traffic flow from, a software application on the device, the traffic flow comprising one or more related data transfers over the wireless access network, the traffic flow being routed between the software application and the network system through an assisting element comprising a control application or a proxy agent on the device, wherein the traffic flow has a characteristic associating the traffic flow with the first software application, the characteristic preserving the association between the traffic flow and the software application when the traffic flow is routed by the one or more assisting elements; identifying the characteristic; and implementing at least a portion of a control, accounting, or notification service policy based on the identified characteristic.

Abstract: A method comprising obtaining, by a server, wireless-network performance data from a plurality of end user devices; generating, by the server, a prioritized network list from the wireless-network performance data; and provisioning, by the server, the prioritized network list to an end user device comprising a radio interface for receiving the prioritized network list from the server, the radio interface being identified to receive the prioritized network list based on a characteristic associated with the end user device; a radio configured to identify available wireless networks, the available wireless networks being different than a current wireless network to which the end user device is currently connected; a prioritized network selection engine for using the prioritized network list to select one of the available wireless networks; and a network connection engine configured to initiate disconnection from the current wireless network and connection to the selected wireless network.

Abstract: Devices, methods, and computer-readable media for detecting an attempted use of a data service over a wireless access network by a device, the data service being unavailable to the device in a current state of the device or available to the device at a lower cost within a different service plan than a current service plan associated with the device; initiating communication with one or more network elements to obtain information about a service plan offer for enabling access to the data service; obtaining the information about the service plan offer; in response to the detected attempted use of the data service, presenting, through a user interface of the device, a first notification offering the service plan offer; obtaining a response to the first notification; and sending an indication of the response to the one or more network elements over the wireless access network.

Abstract: A communications device comprising one or more communication input/output (I/O) ports, at least one of the one or more communication I/O ports being a wide area network port configured to connect the communications device to a wide area network; one or more secure data path processing agents configured to execute in a secure execution environment, monitor a device data communications activity through at least one of the one or more communication I/O ports, generate a device data record comprising information about the device data communications activity through at least one of the one or more communication I/O ports, and send the device data record to the network element over a trusted communication link between the one or more secure data path processing agents and the network element; and a trusted data path between the one or more secure data path processing agents and the wide area network port.

Abstract: A method performed by a wireless device, the method comprising: establishing communication with one or more network elements available to the wireless device, the one or more network elements associated with one or more service providers, the one or more service providers including a particular service provider; updating the wireless device to include a service selection interface branding, the service selection interface branding for providing a user interface characteristic that is specific to the particular service provider; obtaining, from the one or more network elements, a service selection option comprising an option to select a service offering providing for service access over the particular wireless access network; using at least an aspect of the service selection interface branding, presenting the service selection option to the user; and obtaining a user preference in response to the service selection option.

Abstract: A method performed by a network system, the method comprising: monitoring traffic over a wireless network between the network system and a device, the traffic being within a service plan associated with the device; obtaining a first accounting of usage of the wireless network associated with a first portion of the traffic, wherein a sponsor sponsors at least a portion of the usage of the wireless network associated with the first portion of the traffic; based on the monitored traffic, obtaining a second accounting of usage of the wireless network associated with a second portion of the traffic not including the first portion of the traffic, the subscriber associated with the wireless device being financially responsible for usage of the wireless network associated with the second portion of the traffic; and providing an accounting record to the sponsor based on the first accounting.

Abstract: A network system capable of communicating with a first end user device over a wireless access network, and a method performed by the network system. The method comprises receiving an instruction from the first end user device, the instruction being based on a user input obtained through a user interface of the first end user device, the user input requesting a change to a forwarding service, the forwarding service enabling the first end user device to forward traffic between the wireless access network and one or more other end user devices according to a forwarding policy; determining to change a setting associated with the forwarding policy based on the instruction; and initiating provisioning of one or more elements to change the setting associated with the forwarding policy.

Abstract: Methods and computer-readable media for determining that an end-user device is connected to or attempting to connect to the first wireless access network; obtaining an indication that usage of the first wireless access network is associated with a first cost; and, based on one or both of the indication that first wireless access network is associated with the first cost and the determination that the end-user device is connected to or attempting to connect to the first wireless access network, restricting communications associated with a first service activity over the first wireless access network.

Abstract: A communications device comprising one or more communication input/output (I/O) ports, at least one of the one or more communication I/O ports being a wide area network port configured to connect the communications device to a wide area network; one or more secure data path processing agents configured to execute in a secure execution environment, monitor a device data communications activity through at least one of the one or more communication I/O ports, generate a device data record comprising information about the device data communications activity through at least one of the one or more communication I/O ports, and send the device data record to the network element over a trusted communication link between the one or more secure data path processing agents and the network element; and a trusted data path between the one or more secure data path processing agents and the wide area network port.

Abstract: A wireless communication device comprising: one or more network modems enabling the wireless communication device to communicate over a first wireless network; one or more network modems enabling the wireless communication device to communicate with two or more end-point devices over a second wireless network; one or more processors configured to execute one or more instructions; and memory coupled to the one or more processors and configured to provide the one or more processors with the one or more instructions. The one or more instructions, when executed by the processors, cause processors to: establish a first connection between the wireless communication device and a first end-point device; establish a second connection between the wireless communication device and a second end-point device; apply a first control to traffic transmitted by or to the first end-point device; and apply a second control to traffic transmitted by or to the second end-point device.

Abstract: A computer-readable medium, a service controller, and a method for obtaining one or more credentials from a device communicatively coupled to the service controller over a network, the credentials identifying an aspect of the device; determining, using the credentials, that a user of the device has not selected a service plan for the device; identifying one or more candidate service plans, at least one of the plans identified based on the one or more credentials; establishing a secure link between the service controller and a service processor of the device over an ambient services connection enabling the user to select one of the candidate service plans for the device; sending, to the service processor over the secure link, information about the candidate service plans; and obtaining, from the service processor over the secure link, a response identifying a service plan selected by the user.

Abstract: A system comprising a processor of a communications device configured to monitor a network service usage activity of the communications device in network communication, classify the network service usage activity for differential network access control for protecting network capacity, and associate the network service usage activity with a network service usage control policy based on a classification of the network service usage activity to facilitate differential network access control for protecting network capacity; and a memory coupled to the processor and configured to provide the processor with instructions.

Abstract: A device that determines an aspect of a service policy based on a state of the device, and applies the service policy. The state is based on a user interaction, or a lack of user interaction, with the device. The service policy applies a first control to a first activity over a roaming network and a second control to the first activity over a home network, wherein the first control controls the first activity differently than the second control controls the first activity. The first activity is caused by a first software component on the device and comprises a first set of prospective or successful communications over an available wireless network. The aspect of the service policy controls the first activity differently from a second activity over a roaming network, where the second activity is associated with a second software component on the device.

Abstract: A method comprising configuring and installing a service processor in a wireless communications device that is capable of accessing one or more data services over a first wireless network and over a second wireless network. The service processor, which comprises one or more device agents, at least one of the one or more device agents comprising software or firmware, at least assists in implementing at least a first service policy and a second service policy by: detecting that the wireless communications device is connected to the first wireless network, and, in response, applying the first service policy, where the first service policy assists in controlling usage of the first wireless network associated with a first service activity of the wireless communications device, and detecting that the wireless communications device is connected to the second wireless network, and, in response, applying the second service policy.

Abstract: Various embodiments are disclosed for a services policy communication system and method. In some embodiments, an intermediate networking device provides a service intermediary or intermediate connection between a network and one or more communications devices; implements a service profile set for assisting control of the intermediate networking device use of a service set on the network, wherein the service profile set includes one or more service profiles, each profile being associated with either the intermediate networking device or a communications device, each profile further including a plurality of service policy settings; and monitors use of the service set based on the service profile set, in which the implementation of the first service profile set is verified.

Abstract: A device comprising non-volatile memory capable of being partitioned into first and second partitions, the first partition for storing device system software, the second partition for storing a service processor and having one or more system execution properties for enhancing or augmenting the device system software, and comprising one or more processors for verifying integrity of the device system software using a first security element, verifying integrity of the service processor using a second security element, obtaining the service processor from the non-volatile memory, executing the obtained service processor, and updating, installing, removing, or modifying the service processor in the second partition of the non-volatile memory without affecting the device system software in the first partition.

Abstract: A network system comprising memory configured to store a service offer set identifying one or more service plans available to an end-user device, the one or more service plans enabling the end-user device to communicate over a wireless access network; and one or more network elements configured to obtain the service offer set from memory, send information associated with the service offer set to the end-user device over the wireless access network, the information enabling the end-user device to present, through a user interface, one or more service plan selection options associated with the one or more service plans available to the end-user device, receive an offer set user selection from the end-user device, the offer set user selection indicating a user selection of at least one of the one or more service plan selection options, and provision one or more functions based on the offer set user selection.