Abstract: In an example embodiment, A PICNEEC is provided. It includes one or more Virtual Customized Rules Enforcer (VCRE) instances, each VCRE instance corresponding to a group of mobile devices and defining a set of policies personalized for the group of mobile devices. Each VCRE is configured to, upon receiving a data packet communicated between a packet-based network and a mobile device in the corresponding group via a radio network, execute one or more policy rules stored in the VCRE instance to the data packet prior to forwarding the data packet. Each VCRE instance is controlled independently of one another via direct accessing of the VCRE instance by a different customer of the mobile network provider.

Abstract: In an example embodiment, a mobile security offloader (MSOL) is provided. Within the MSOL, a mobile device identification component is used to receive unencrypted data from a mobile device in a mobile radio network and to determine a mobile device identification of the mobile device from the unencrypted data. A security profiles directory interface then uses the mobile device identification to retrieve a security profile corresponding to the mobile device identification from a security profiles directory, the security profile identifying a security protocol for encrypting data from the mobile device corresponding to the mobile device identification. An encryption engine is used to encrypt the unencrypted data using the security protocol identified in the security profile. A packet switched network interface is then used to route the encrypted data to a secured server identified in the data via a packet switched network.

Abstract: In an example embodiment, A PICNEEC is provided. It includes one or more Virtual Customized Rules Enforcer (VCRE) instances, each VCRE instance corresponding to a group of mobile devices and defining a set of policies personalized for the group of mobile devices. Each VCRE is configured to, upon receiving a data packet communicated between a packet-based network and a mobile device in the corresponding group via a radio network, execute one or more policy rules stored in the VCRE instance to the data packet prior to forwarding the data packet. Each VCRE instance is controlled independently of one another via direct accessing of the VCRE instance by a different customer of the mobile network provider.

Abstract: In an example embodiment, a mobile security offloader (MSOL) is provided. Within the MSOL, a mobile device identification component is used to receive unencrypted data from a mobile device in a mobile radio network and to determine a mobile device identification of the mobile device from the unencrypted data. A security profiles directory interface then uses the mobile device identification to retrieve a security profile corresponding to the mobile device identification from a security profiles directory, the security profile identifying a security protocol for encrypting data from the mobile device corresponding to the mobile device identification. An encryption engine is used to encrypt the unencrypted data using the security protocol identified in the security profile. A packet switched network interface is then used to route the encrypted data to a secured server identified in the data via a packet switched network.