Abstract: Systems and methods are described for establishing credentials at a device and at a device management server for the purpose of exchanging secure credentials in order to mutually authenticate the device and the server. A credential generation algorithm is described which uses a plurality of seeds, including the hardware identity of the device, the server identity, and a shared private key, to generate two sets of credentials, one to be used by the device and the other to be used by the device management server. The credentials are exchanged between the device and the server during any session, thereby assuring mutual authentication.

Abstract: A method, system, and computer program product for providing dynamic group subscriptions for M2M device communication provides a more flexible and efficient technology for allocating registrations and resources. A method for allocating a plurality of subscriptions to wireless services in a network among a plurality of wireless devices in the network comprises creating a group including a plurality of wireless devices, making an initial allocation of the subscriptions to the group, the initial allocation including allocating one subscription to each of some of the plurality of wireless devices, modifying the allocation of the subscriptions to the group, including at least one of deallocating a subscription from one of the plurality of wireless devices and allocating a subscription to one of the plurality of wireless devices.

Abstract: A system and method is disclosed which may comprise receiving, via a computing device, from a first user having a first personal device, a request for sharing access to a resource or a state of a second personal device of a second user, the first user and second user having an on-line social network relationship; and determining whether to grant sharing access to the one of the resource and the state of the second personal device of the second user. Determining whether to grant sharing access may be based, at least in part, upon the nature of the on-line social network relationship. The method and apparatus may comprise registering, via the computing device, an ownership link for a personal device and an owner having a certified identity within the social network; storing the ownership link; and utilizing the ownership link for determining whether to grant sharing access.

Abstract: A system and method by which a mobile wireless device dynamically decides the other end host to initiate a session to automatically conduct a performance test. Results of the performance test are then transferred to a monitoring server under appropriate conditions. A method for conducting a performance test on a wireless device comprises receiving information indicating how and when a performance test is to be conducted by the wireless device, determining whether the conditions for the performance test to be started are met, conducting the specified performance test, and storing results of the performance test.

Abstract: Systems and methods are described for establishing credentials at a device and at a device management server for the purpose of exchanging secure credentials in order to mutually authenticate the device and the server. A credential generation algorithm is described which uses a plurality of seeds, including the hardware identity of the device, the server identity, and a shared private key, to generate two sets of credentials, one to be used by the device and the other to be used by the device management server. The credentials are exchanged between the device and the server during any session, thereby assuring mutual authentication.

Abstract: A system and method for automatically altering device functionality based on the occurrence of certain predetermined conditions. A link may be established between a device and a trusted server to provide an association between various conditions that may be detected at the device and actions that are to be taken on the device. In particular, software traps can be set up and linked to device functionality such that execution of the trap may automatically disable or enable certain device capabilities. Some aspects of the invention are directed to a system and method for remotely setting software traps for detecting software viruses and, upon execution of the traps, several methods for establishing a quarantine on infected devices.

Abstract: The present invention relates to a system and method of remote application management on wireless data terminals using a device management agent and dynamic link libraries provided by the application. Third party applications on a wireless device can communicate and be controlled by a remote management server via a management client plug-in interface.

Abstract: A system and method for detecting and recording events related to the quality of service experienced by a wireless device in a wireless network. In one example, these events may be detected and recorded by the wireless device, without support from the network. Performance monitoring tests may be initiated by the wireless device at the direction of a management server, independent of the network in which the device may be operating. The wireless device may store the results of these tests and report the results to the management server.

Abstract: A system and method for retrieving the dynamic state of mobile communication devices is disclosed. The key state indicators from mobile communication devices are retrieved to target user requested contents or advertising contents for users of the communication devices. The method for delivering the contents to mobile communication devices includes determining key state indicators (KSI) of mobile communication devices sending the determined values to a server, and orienting the values to send the content to users of said mobile communication devices, on request. The key state indicators of mobile communication devices comprises of device state, link state, network state, behavior state and dynamic state of the device. The values of key state indicators are calculated and stored in said mobile communication device in a Mobile Advertising Record (MAR) format.

Abstract: A system and method for automatically altering device functionality based on the occurrence of certain predetermined conditions. A link may be established between a device and a trusted server to provide an association between various conditions that may be detected at the device and actions that are to be taken on the device. In particular, software traps can be set up and linked to device functionality such that execution of the trap may automatically disable or enable certain device capabilities. Some aspects of the invention are directed to a system and method for remotely setting software traps for detecting software viruses and, upon execution of the traps, several methods for establishing a quarantine on infected devices.

Abstract: A system and method are described for providing least-cost call routing for mobile wireless devices having access to voice-over-IP (VoIP) infrastructure, such as may be operated by an enterprise having global presence. Using a local wireless connection, such as a wireless local area network (WLAN), a software agent on the mobile wireless device registers with a common, enterprise-wide registrar, which, in turn, informs a VoIP gateway in the device's home region of the device's new location. The home region VoIP gateway will then re-route incoming calls for the device to a VoIP gateway serving the region in which the device is currently located. The local VoIP gateway will then route the call to the device via the WLAN. Seamless routing occurs even when the wireless device obtains a local phone number in a foreign network. Outgoing calls from the device can be routed via the VoIP infrastructure or the foreign network based on availability of service and/or cost.

Abstract: A system and method for automatically altering device functionality based on the occurrence of certain predetermined conditions. A link may be established between a device and a trusted server to provide an association between various conditions that may be detected at the device and actions that are to be taken on the device. In particular, software traps can be set up and linked to device functionality such that execution of the trap may automatically disable or enable certain device capabilities. Some aspects of the invention are directed to a system and method for remotely setting software traps for detecting software viruses and, upon execution of the traps, several methods for establishing a quarantine on infected devices.

Abstract: An arrangement is described for capturing and reporting call-through events in connection with phone numbers embedded in advertising impressions sent to mobile wireless devices. A call-through event is said to occur when a phone number embedded within an advertising impression is called from the mobile device. The system includes a call-through detector on the device that captures data related to a call-through event and communicates the captured data for one or more phone numbers over the network to a server. The server collects the captured data from various mobile devices and can correlate those with the advertisements sent to the mobile devices. A call detail information record sent from a device may contain detailed information about the context in which the call was made from the mobile device, including, for example, time of day or device location.

Abstract: Software/content for a mobile device may be selected by means of the web using a device other than the mobile device, and the software/content is downloaded onto the mobile device. This provides the capability to interact with an e-commerce site using some other terminal, such as desktop or laptop computer, and to install the software/content over the air to a given mobile device. This provides improved convenience in the selection and purchase of software/content, as desktop and laptop computer systems typically have which have larger screens and higher speed connectivity than smaller mobile devices.

Abstract: A technique to automatically select a bearer from among a plurality of bearers available on a wireless device bases the selection of the bearer on which a data transfer takes place on a cost function that is used both by the server and the wireless device. A method for communicating data with a mobile device capable of communicating using a plurality of communication bearers comprises selecting a communication bearer to opportunistically initiate a data transfer between a server and the mobile device using a cost function and a policy table to select the communication bearer, from among the plurality of communication bearers, and when the selected communication bearer is or becomes available, initiating the transfer between the server and the mobile device using the selected communication bearer.

Abstract: Systems and methods are described for establishing credentials at a device and at a device management server for the purpose of exchanging secure credentials in order to mutually authenticate the device and the server. A credential generation algorithm is described which uses a plurality of seeds, including the hardware identity of the device, the server identity, and a shared private key, to generate two sets of credentials, one to be used by the device and the other to be used by the device management server. The credentials are exchanged between the device and the server during any session, thereby assuring mutual authentication.

Abstract: Systems and methods are described for securely downloading management client software onto a device from an embedded stub in the device. In one embodiment, the stub client is activated by a message with credentials from a management server. The stub client, after verification of the credentials, downloads and activates a full management client. The management client then participates in any authorized management session with the device management server. The messages are preferably encrypted using a key that is based on the credentials. The credentials may be specific to the device and to the service provider associated with the device.

Abstract: When a network-based wireless device such as a mobile phone or data terminal is reported lost or stolen or is determined to be malfunctioning, a service provider can immediately deny the device access to the network. However, any management operation to secure data carried by the wireless device cannot be carried out as the device is no longer reachable from the network. Therefore, the data should be secured before the device is rendered inoperable. Apparatus and methods are provided to back-up the data or wipe the data before the system denies access to the device. A system and method are provided by which a security manager works in conjunction with an equipment register of the network to lock and wipe data on the wireless device before the device is denied access to the network. Similarly, for a wireless device that is later recovered or determined to be operable, the device can be granted access to the network again and any data that was locked or wiped can be unlocked or restored over the network.

Abstract: A method and system for communicating the identity of devices detected in a wireless communication system. The devices connect to a mobile wireless network comprising a wireless access network and a core Internet Protocol (IP) network. The identities of devices so detected are specified by a combination of device and network-level identities and is communicated to a management server. In an exemplary embodiment, network elements of the core IP network are used to detect and convey the identity of wireless devices to a management server.

Abstract: The present invention is a method and system for sending SIP notification messages to a wireless device, for example a wireless telephone, that can accept SIP control messages. A method is described for establishing a data session between a wireless device and a management server over a wireless network, the wireless device operable to receive and parse SIP messages, the wireless network operable to transmit messages between the wireless device and the management server. The method includes retrieving an address for the wireless device on the management server, sending a SIP invite message from the management server to the wireless device, receiving the SIP invite message on the wireless device, parsing the SIP invite message on the wireless device, and establishing the data session between the wireless device and the management server.