Abstract: A method and a network system for storing a plurality of device credentials associated with a device group comprising a plurality of wireless devices managed by an entity that is different from a network system operator, each of the plurality of device credentials associated with a different wireless device, each wireless device of the device group coupled or capable of being coupled to the network system over a wireless access network; providing a secure interface configured to assist the entity in creating or modifying at least a portion of a device-group service policy associated with the device group, the device-group service policy configured to assist the network system in controlling, monitoring, or accounting for device-group communications over the wireless access network; provisioning one or more elements based on the device-group service policy; identifying the device-group communications; and applying the device-group service policy based on the identified device-group communications.

Abstract: Devices, methods, and computer-readable media for detecting an attempted use of a data service over a wireless access network by a device, the data service being unavailable to the device in a current state of the device or available to the device at a lower cost within a different service plan than a current service plan associated with the device; initiating communication with one or more network elements to obtain information about a service plan offer for enabling access to the data service; obtaining the information about the service plan offer; in response to the detected attempted use of the data service, presenting, through a user interface of the device, a first notification offering the service plan offer; obtaining a response to the first notification; and sending an indication of the response to the one or more network elements over the wireless access network.

Abstract: Within a network system, a wireless device sends a message to a network element over a first wireless access network, the message including a first device credential and being configured to obtain information to assist in presenting an on-device user service plan selection choice through a user interface of the wireless device. After sending the message, the wireless device determines that it lacks authorization to connect to the network element over the first wireless network and, in response, attempts to connect to the network element over a second data access network.

Abstract: Methods and systems for receiving a report from an end-user device, the report comprising information about a device service state; determining, based on the report, that a particular service policy setting of the end-user device needs to be modified, the particular service policy setting associated with a service profile that provides for access to a network data service over a wireless access network and configured to assist in controlling one or more communications between the end-user device and the wireless access network, the particular service policy setting stored in a protected partition configured to deter or prevent unauthorized modifications to the particular service policy setting; and, in response to determining that the particular service policy setting needs to be modified, sending configuration information to the end-user device, the configuration information configured to assist in modifying or allowing modifications to the particular service policy setting.

Abstract: A non-transitory computer-readable storage medium storing program code for causing one or more processors of a wireless device to execute a method comprising: assisting in obtaining a user input through a user interface of the wireless device; determining at least an aspect of a control policy based on the user input, the control policy associated with a first application on the wireless device, the at least an aspect of the control policy for at least assisting in controlling a first access to the first wireless network by the first application on the wireless device and enabling a first control of the first access to the first wireless network by the first application on the wireless device that differs from a second control of a second access to the first wireless network by a second application; and applying the control policy.

Abstract: Disclosed herein are methods, systems, and apparatuses to enable subscribers of mobile wireless communication devices to view, research, select and customize service plans; to create and manage device groups, share and set permission controls for service plans among devices in device groups; to manage communication services through graphical user interfaces; to sponsor and promote service plans; and to design, manage, and control communication services through application programming interfaces.

Abstract: A wireless device obtains a user input through a user interface of the wireless device. Based on the user input, the wireless device determines at least an aspect of a control policy associated with a first application on the wireless device and applies the control policy. The control policy at least assists in controlling access to a wireless network by the first application and enables a control of access to the first wireless network by the first application that differs from a control of access to the first wireless network by a second application on the wireless device.

Abstract: A non-transitory machine-readable storage medium storing program code for causing a processor to establish a plurality of links to a plurality of devices communicatively coupled to the processor, a particular link of the plurality of links supporting control-plane communications between the processor and a particular device of the plurality of devices over a wireless access network; receive a server message from a particular server of a plurality of servers communicatively coupled to the processor, the server message comprising message payload for delivery to the particular device; generate an encrypted message comprising the message payload and an identifier identifying a particular agent of a plurality of agents on the particular device; and send the encrypted message to the particular device over the particular link, wherein establishing the plurality of links comprises executing a link initialization sequence associating the particular link with a credential associated with the particular device.

Abstract: A method for implementing a service policy on a device by obtaining, from a user interface (UI) or a network interface, a quality of service (QoS) activity map of an application identifier to a QoS policy, wherein the QoS policy is determined at least in part by an access state qualifier, the access state qualifier characterizing an aspect of access network resources; identifying a device service usage in association with the application identifier; applying the QoS policy from the QoS activity map to the device service usage, wherein a QoS service activity, including the device service usage, falls within a class of activities associated with the application identifier and governed by the QoS policy; and processing the device service usage in accordance with the QoS policy.

Abstract: A method performed by a network system communicatively coupled to a wireless device by a wireless access network, the network system including a network element corresponding to a network element destination, the method comprising providing at least a portion of a device policy to the wireless device, wherein the device policy is configured to assist in detecting wireless device traffic associated with a service activity, identifying the service activity as being included in a service usage activity classification, and directing or routing the wireless device traffic associated with the service activity over the wireless access network based on information identifying the network element destination; providing a network element policy to the network element corresponding to the network element destination; detecting, at the network element, traffic associated with the wireless device; and applying the network element policy at the network element to the traffic associated with the wireless device.

Abstract: A method performed by a network system communicatively coupled to a wireless device by a wireless access network, the network system including a network element corresponding to a network element destination, the method comprising providing at least a portion of a device policy to the wireless device, wherein the device policy is configured to assist in detecting wireless device traffic associated with a service activity, identifying the service activity as being included in a service usage activity classification, and directing or routing the wireless device traffic associated with the service activity over the wireless access network based on information identifying the network element destination; providing a network element policy to the network element corresponding to the network element destination; detecting, at the network element, traffic associated with the wireless device; and applying the network element policy at the network element to the traffic associated with the wireless device.

Abstract: A method comprising providing a plurality of links to a plurality of end-user devices communicatively coupled to a network system, a particular link of the plurality of links supporting control-plane communications between the network system and a particular end-user device of the plurality of end-user devices over one or more wireless access networks; receiving a message from a server communicatively coupled to the network system, the message comprising payload for delivery to the particular end-user device; generating an encrypted message comprising the payload and an identifier identifying a particular device agent of a plurality of device agents on the particular end-user device, the identifier configured to assist in delivering at least a portion of the payload to the particular device agent on the particular end-user device; and sending the encrypted message to the particular end-user device over the particular link.

Abstract: Devices, methods, and computer readable media for communicating with a network system over a wireless access network, the network system comprising one or more network elements, and communicating with one or more other devices over one or more of a wireless local-area network, a personal-area network, and a near-field network; obtaining configuration information from the one or more network elements, the configuration information enabling modification of a first service policy setting for authorizing provision of a forwarding service to the one or more other devices; obtaining a user input associated with enabling or disabling the forwarding service; and modifying a second service policy setting in accordance with the user input, the second service policy setting for assisting in enabling or disabling the forwarding service.

Abstract: Devices, methods, and computer-readable media for determining that an end-user device is connected to or attempting to connect to the first wireless access network; obtaining an indication that usage of the first wireless access network is associated with a first cost; and, based on one or both of the indication that first wireless access network is associated with the first cost and the determination that the end-user device is connected to or attempting to connect to the first wireless access network, restricting communications associated with a first service activity over the first wireless access network.

Abstract: Methods, devices, and computer-readable media for enabling a wireless device to establish communication with one or more network elements associated with one or more service providers including a particular service provider; update to include a service selection interface branding for providing a user interface characteristic that is specific to the particular service provider; obtain a service selection option comprising an option to select a service offering providing for access service over a particular wireless access network; use at least an aspect of the service selection interface branding to present the service selection option to the user; and obtain a user preference in response to the service selection option.

Abstract: Device group partitions can be used and a settlement platform can provide for partitions of devices based on associated device groups. A settlement platform service might be provided for partitioned devices. Device generated service usage information might be generated and aggregated for a settlement platform for the one or more devices in wireless communication on the wireless network. A settlement platform might implement a service billing allocation and/or a service/transactional revenue share among one or more partners. Service usage information can include micro-CDRs used for CDR mediation or reconciliation that provides for service usage accounting. Device activity that is desired to be associated with a billing event can be assigned a micro-CDR transaction code, with a service processor of the device programmed to account for activity associated with that transaction code. A service processor executing on a wireless communications device might periodically report micro-CDR usage measures.