Abstract: Systems and methods for providing user-centric device-based data communications cost monitoring and controls. In an embodiment, the method operates by sending a registration request associated with a subscriber session, determining current data usage associated with the subscriber, and sending data usage thresholds. The method further comprises sending quotas associated with the subscriber session after collecting data usage information associated with the subscriber session. The method receives a notification at the subscriber's mobile device when a pre-determined quota is exceeded during the subscriber session to control data usage. The system communicates with a usage policy server and a usage policy application. The usage policy application allows a subscriber to alter terms and service tiers of a subscription.

Abstract: Systems and methods system for a user accessing an unsecure Wifi access point are provided. In an embodiment, the present invention requests that the customer perform authentication of the access point to which he is connected. On initial connection to the access point, the customer provides his username/password and chooses a memorable information element (e.g., image or phrase). A site specific cookie is delivered to the customer device after a successful authentication. On subsequent connections, the site specific cookie is validated and the MAC address of the customer device is used to retrieve the memorable information element. If the customer recognizes his memorable image, he confirms that he is on a bona fide access point. In a further embodiment, if the customer connects at a location and/or time of day which breaks a previously observed pattern, MAC authentication is not accepted and a full authentication (e.g., user/password) is required.

Abstract: A radio spectrum management system is provided. In an embodiment, the radio spectrum management system includes a radio spectrum gateway, a radio spectrum management server and a radio spectrum policy decision server. The radio spectrum gateway is coupled to a radio access network that receives bandwidth requests from subscriber devices and provides bandwidth allocation decisions to the radio access network. The radio spectrum management server receives bandwidth requests from the radio spectrum gateway and provides bandwidth allocation decisions to the radio spectrum gateway based on radio resources and bandwidth policy decisions. The radio spectrum policy management server provides bandwidth policy decisions to the radio spectrum server. The bandwidth policy decisions are generated based on consideration of subscriber and/or application service provider characteristics.

Abstract: Methods, systems, and computer program products for providing dynamic Quality of Service (QoS) for connections to applications over a network are provided. The method receives a message associated with the application, wherein the message includes information identifying the connection to the application and information about the application. The method then determines, based on a set of rules defined for the application, a QoS level to apply to the connection, and applies the determined QoS level to the connection. The QoS applied to the connection corresponds to the application and not the QoS associated with a personal or home account QoS that would otherwise be applied to the connection.

Abstract: A content capability clearing house that can act as a trusted and neutral mediator among network providers to manage rich content capabilities among multiple networks is provided. Content capabilities that can be brokered include, but are not limited to, quality of service and content screening. In an embodiment, a content capability clearing house includes a receiver that receives content capability request messages and other messages from network providers. A content capability request message includes a quality of service request and/or a subscriber profile request for use with content screening and subscriber specific advertisements. The present invention includes a series of methods for determining content capabilities for data transmission over a transaction between a content provider and a subscriber in which a content capability clearing house is used to efficiently broker and manage the capability among multiple network providers.

Abstract: The PCRF Selection Function selects the PCRF for an IP-CAN session. In embodiments, the PCRF Selection Function is located in the HSS and/or the 3GPP AAA server. The PCRF Selection Function is only required to be located in the HSS if a Bearer Binding and Event Reporting Function (BBERF) is deployed in the serving gateway. In this case, the PCRF selection takes place at the time that the PDN Gateway is selected and returned by the HSS to the serving gateway over the HSS to MME interface (S6a).

Abstract: A content capability clearing house that can act as a trusted and neutral mediator among network providers to manage rich content capabilities among multiple networks is provided. Content capabilities that can be brokered include, but are not limited to, quality of service and content screening. In an embodiment, a content capability clearing house includes a receiver that receives content capability request messages and other messages from network providers. A content capability request message includes a quality of service request and/or a subscriber profile request for use with content screening and subscriber specific advertisements. The present invention includes a series of methods for determining content capabilities for data transmission over a transaction between a content provider and a subscriber in which a content capability clearing house is used to efficiently broker and manage the capability among multiple network providers.

Abstract: Methods for authenticating and authorizing a mobile device using tunneled extensible authentication protocol are provided. The methods include evaluating an inner user identifier against a policy engine to determine a home AAA server to route an access request for inner user authentication. Instead of having a static route configured based on an outer identifier/roaming identity, the policy engine can have multiple rules and actions for routing the request. The evaluation can be based on the conditions of the inner user identifier and or other AAA attributes received in the request. The request is transmitted within a secure communication tunnel. There are several embodiments of evaluating an inner user identifier against a policy engine.

Abstract: A flexible rule engine allows a network operator to dynamically create and modify business rules that govern a subscriber's access to a communications network. The flexible rule engine governs subscriber transitions between various session states by testing for subscriber conditions, network conditions, and then performing specified actions based on these conditions. A rule editor provides the network operator with the ability to compose, edit and delete one or more rules in real time, using an appropriate user interface.

Abstract: Systems and methods for network congestion management thru selective network access among wireless cells and wireless hotspots are provided. In an embodiment of the present invention, a method to transmit a connection policy decision to a wireless communications device that is connected to a cellular wireless network whether to access a wireless hotspot is provided. The method includes determining a wireless cell location of the wireless communications device, generating a connection policy decision to determine whether the wireless communication device should access a wireless hotspot based on the wireless cell location and wireless hotspot availability, and transmitting the connection policy decision to the wireless communications device.

Abstract: Systems and methods system for managing data objects that support the personalization of mobile communications services are provided. The system includes one or more databases that contain subscriber data, such as usage, or state information related to the subscriber. For one or more of the databases within the system, a database federator and a distributed object repository having multiple nodes is provided. The nodes are used to store data objects and duplicate data objects. Data objects may be distributed to the nodes based on, a hashing algorithm. Additionally, graceful redundancy degradation of stored duplicate objects is provided. Further, time-based triggering of duplicate objects stored within separate nodes is provided.

Abstract: Systems and methods for providing carrier-centric data communications cost monitoring and controls are provided. In an embodiment, the method operates by receiving a registration request associated with a subscriber session, determining current data usage associated with the subscriber, and receiving data usage thresholds. The method further comprises receiving quotas associated with the subscriber session and collecting data usage information associated with the subscriber session. The method sends a notification to the subscriber when a pre-determined quota is exceeded during the subscriber session and controls data usage. The cost monitoring and control system comprises a usage policy server and a usage policy application. The usage policy application allows a carrier to offer alterations to terms of a subscription.

Abstract: A system and a method are described, whereby a data cache enables the realization of an efficient design of a usage analyzer for monitoring subscriber access to a communications network. By exploiting the speed advantages of cache memory, as well as adopting innovative data loading and retrieval choices, significant performance improvements in the time required to access the necessary data records can be realized.

Abstract: Methods for congestion control by a AAA server are provided. In an embodiment of the invention a hint indicator is embedded in reply messages from a AAA server. In subsequent messages received by that AAA server, the AAA server determines when the hint indicator is present. Processing decisions for the subsequent message are based on the presence of the hint indicator. In another embodiment, a method for congestion control at the AAA server is provided. At the AAA server a message received from a network access server is stored and timestamped in an ingress message queue. A congestion state for the AAA server is determined based on an ingress queue state and a message age state. The message is processed based on the congestion state. In alternative embodiments, message processing is based on the congestion state, message type and number of round trip messages.

Abstract: Systems and methods system for a user accessing an unsecure Wifi access point are provided. In an embodiment, the present invention requests that the customer perform authentication of the access point to which he is connected. On initial connection to the access point, the customer provides his username/password and chooses a memorable information element (e.g., image or phrase). A site specific cookie is delivered to the customer device after a successful authentication. On subsequent connections, the site specific cookie is validated and the MAC address of the customer device is used to retrieve the memorable information element. If the customer recognizes his memorable image, he confirms that he is on a bona fide access point. In a further embodiment, if the customer connects at a location and/or time of day which breaks a previously observed pattern, MAC authentication is not accepted and a full authentication (e.g., user/password) is required.

Abstract: A system and method are described whereby interoperability is facilitated in a 3GPP network environment in combination with DIAMETER policy controls. Such interoperability enables updated policy rules to be fully communicated in on-line charging situations where quota expirations occur. This invention maintains centralized policy control in a 3GPP network with on-line charging.

Abstract: Systems and methods for providing centralized subscriber session state information are provided. The system includes multiple local session state store servers associated with one or more access control servers and a global location store. When access to a network is attempted, the local session state store server receives an access request message and creates a local session state store record, including a user identifier and information associated with the requested session. The local session state store server also transmits a location message to the global location store. Upon receipt of the location message, the global location store creates a record including the user identifier and a network address for the local session state store server having the session state information for the user. An application requiring user session information can access the global location store and the multiple local session state store servers via a common application programming interface.

Abstract: A radio spectrum management system is provided. In an embodiment, the radio spectrum management system includes a radio spectrum gateway, a radio spectrum management server and a radio spectrum policy decision server. The radio spectrum gateway is coupled to a radio access network that receives bandwidth requests from subscriber devices and provides bandwidth allocation decisions to the radio access network. The radio spectrum management server receives bandwidth requests from the radio spectrum gateway and provides bandwidth allocation decisions to the radio spectrum gateway based on radio resources and bandwidth policy decisions. The radio spectrum policy management server provides bandwidth policy decisions to the radio spectrum server. The bandwidth policy decisions are generated based on consideration of subscriber and/or application service provider characteristics.

Abstract: Systems and methods for providing carrier-centric data communications cost monitoring and controls are provided. In an embodiment, the method operates by receiving a registration request associated with a subscriber session, determining current data usage associated with the subscriber, and receiving data usage thresholds. The method further comprises receiving quotas associated with the subscriber session and collecting data usage information associated with the subscriber session. The method sends a notification to the subscriber when a pre-determined quota is exceeded during the subscriber session and controls data usage. The cost monitoring and control system comprises a usage policy server and a usage policy application. The usage policy application allows a carrier to offer alterations to terms of a subscription.

Abstract: Methods for authenticating and authorizing a mobile device using tunneled extensible authentication protocol are provided. The methods include evaluating an inner user identifier against a policy engine to determine a home AAA server to route an access request for inner user authentication. Instead of having a static route configured based on an outer identifier/roaming identity, the policy engine can have multiple rules and actions for routing the request. The evaluation can be based on the conditions of the inner user identifier and or other AAA attributes received in the request. The request is transmitted within a secure communication tunnel. There are several embodiments of evaluating an inner user identifier against a policy engine.