Abstract: A system device and method are provided which determine authorization for access to one or more services grouped together as a package of services without direct intervention of a wireless network provider or wired network access provider. This offers business proprietors, contractors for telecommunication services, service resellers, OEMs and service providers the ability to authorize users, particularly users of mobile communication terminals, hereafter referred to as the “Owner,” access to package services. In this way a large package of features and applications can be available to a mobile device, but access to those features and applications can be controlled by the Owner thus providing the Owner with control over expenses related to accessing those features and applications. It also provides the Owner the ability to secure and prevent unauthorized access to features and applications which could allow an unauthorized user access to sensitive data and equipment.

Abstract: A method, apparatus and computer program product for producing and processing template access control lists (ACLs) is presented. The method, apparatus and computer program product obtain a first ACL having a first rule set, the first rule set including a peer Internet Protocol (IP) address. The first rule set is copied into the template ACL. The occurrences of a peer's IP address within the rule set of the template ACL are determined and are replaced with an indicator indicating that the peer's IP address is used in place of the indicator when the ACL is evaluated.

Abstract: Methods and apparatus for providing separable billing services. In one embodiment, an apparatus comprises a memory for storing a data address associated with a first type of communication and a processor for receiving a data packet, the data packet comprising a destination data address. The processor compares the destination data address to the data address associated with the first type of communication, and routes the data packet to the destination data address if the destination data address matches the data address associated with the first type of communication and bills an account associated with the first type of communication.