Abstract: A method comprising obtaining, from a master user, a device usage allocation applicable to two or more devices, the two or more devices being associated with another user, the another user being different from the master user, obtaining an aggregate measure of device usage associated with the two or more devices, if the aggregate measure of device usage associated with the two or more devices satisfies a condition relative to the device usage allocation, managing an activity of the two or more devices, and sending a notification to at least one of the two or more devices, the notification for presentation to the another user through a user interface of the at least one of the two or more devices.

Abstract: A method comprising obtaining a credential associated with a first device in a device group, the device group having a shared data allocation available to the device group, the shared data allocation establishing an amount of communication over a first wireless network; determining, based on the credential, that the first device is authorized to set or change an aspect of a policy applicable when a second device in the device group is connected to the first wireless network; obtaining, from the first device, a user preference; and provisioning, based on the user preference and the determination that the first device is authorized to set or change the at least an aspect of the policy for the second device, one or more network elements to at least assist in enforcing or applying the policy when the second device is connected to the first wireless network.

Abstract: A method comprising storing information about a service plan, the service plan having a limit on usage of at least one of one or more network services, the service plan being associated with an end user device; detecting a device action that reflects or is associated with a past, current, or intended use by the end user device of the at least one of the one or more network services; identifying the device action as a trigger event; identifying notification request information based on the trigger event, the notification request information for use by the end user device in presenting, through a user interface of the end user device, a notification message comprising notification information, the notification information based on the notification request information; and transmitting the notification request information to the end user device in response to the trigger event.

Abstract: A method performed by a network system operated by or on behalf of a service provider, the network system capable of communicating with a user device over a wireless access network, the method comprising establishing, in cooperation with software running on the user device, a secure link between the network system and the software, the secure link for preventing unauthorized access to communications between the software and the network system; providing, to the software over the secure link, first information enabling the software to assist a user of the user device to view, select, or change an aspect of a service plan associated with the user device; and providing, to the software over the secure link, second information, the second information enabling the software to present, through a user interface of the user device, a notification about a past or current service usage by the user device.

Abstract: A method performed by a network system communicatively coupled to a device over a wireless access network, the method comprising transmitting a traffic flow to, or receiving the traffic flow from, a software application on the device, the traffic flow comprising one or more related data transfers over the wireless access network, the traffic flow being routed between the software application and the network system through an assisting element comprising a control application or a proxy agent on the device, wherein the traffic flow has a characteristic associating the traffic flow with the first software application, the characteristic preserving the association between the traffic flow and the software application when the traffic flow is routed by the one or more assisting elements; identifying the characteristic; and implementing at least a portion of a control, accounting, or notification service policy based on the identified characteristic.

Abstract: A method comprising obtaining, by a server, wireless-network performance data from a plurality of end user devices; generating, by the server, a prioritized network list from the wireless-network performance data; and provisioning, by the server, the prioritized network list to an end user device comprising a radio interface for receiving the prioritized network list from the server, the radio interface being identified to receive the prioritized network list based on a characteristic associated with the end user device; a radio configured to identify available wireless networks, the available wireless networks being different than a current wireless network to which the end user device is currently connected; a prioritized network selection engine for using the prioritized network list to select one of the available wireless networks; and a network connection engine configured to initiate disconnection from the current wireless network and connection to the selected wireless network.

Abstract: A communications device comprising one or more communication input/output (I/O) ports, at least one of the one or more communication I/O ports being a wide area network port configured to connect the communications device to a wide area network; one or more secure data path processing agents configured to execute in a secure execution environment, monitor a device data communications activity through at least one of the one or more communication I/O ports, generate a device data record comprising information about the device data communications activity through at least one of the one or more communication I/O ports, and send the device data record to the network element over a trusted communication link between the one or more secure data path processing agents and the network element; and a trusted data path between the one or more secure data path processing agents and the wide area network port.

Abstract: A communications device comprising one or more communication input/output (I/O) ports, at least one of the one or more communication I/O ports being a wide area network port configured to connect the communications device to a wide area network; one or more secure data path processing agents configured to execute in a secure execution environment, monitor a device data communications activity through at least one of the one or more communication I/O ports, generate a device data record comprising information about the device data communications activity through at least one of the one or more communication I/O ports, and send the device data record to the network element over a trusted communication link between the one or more secure data path processing agents and the network element; and a trusted data path between the one or more secure data path processing agents and the wide area network port.

Abstract: A device that determines an aspect of a service policy based on a state of the device, and applies the service policy. The state is based on a user interaction, or a lack of user interaction, with the device. The service policy applies a first control to a first activity over a roaming network and a second control to the first activity over a home network, wherein the first control controls the first activity differently than the second control controls the first activity. The first activity is caused by a first software component on the device and comprises a first set of prospective or successful communications over an available wireless network. The aspect of the service policy controls the first activity differently from a second activity over a roaming network, where the second activity is associated with a second software component on the device.

Abstract: A system comprising a processor of a communications device configured to monitor a network service usage activity of the communications device in network communication, classify the network service usage activity for differential network access control for protecting network capacity, and associate the network service usage activity with a network service usage control policy based on a classification of the network service usage activity to facilitate differential network access control for protecting network capacity; and a memory coupled to the processor and configured to provide the processor with instructions.

Abstract: A device comprising non-volatile memory capable of being partitioned into first and second partitions, the first partition for storing device system software, the second partition for storing a service processor and having one or more system execution properties for enhancing or augmenting the device system software, and comprising one or more processors for verifying integrity of the device system software using a first security element, verifying integrity of the service processor using a second security element, obtaining the service processor from the non-volatile memory, executing the obtained service processor, and updating, installing, removing, or modifying the service processor in the second partition of the non-volatile memory without affecting the device system software in the first partition.

Abstract: A network system comprising memory configured to store a service offer set identifying one or more service plans available to an end-user device, the one or more service plans enabling the end-user device to communicate over a wireless access network; and one or more network elements configured to obtain the service offer set from memory, send information associated with the service offer set to the end-user device over the wireless access network, the information enabling the end-user device to present, through a user interface, one or more service plan selection options associated with the one or more service plans available to the end-user device, receive an offer set user selection from the end-user device, the offer set user selection indicating a user selection of at least one of the one or more service plan selection options, and provision one or more functions based on the offer set user selection.

Abstract: Disclosed herein are various embodiments to prevent, detect, or take action in response to the moving a device credential from one device to another, the improper configuration of a service processor, a missing service processor, or the tampering with a service processor in device-assisted services (DAS) systems.

Abstract: A network system for providing one or more services to one or more end-user devices communicatively coupled to the network system over a wireless access network, the network system comprising: a policy enforcement function, a first policy element, a second policy element, and a network element, wherein the network element is communicatively coupled to the policy enforcement function, the first policy element, and the second policy element, and wherein the network element is configured to communicate first policy information between the policy enforcement function and the first policy element, and communicate second policy information between the first policy enforcement function and the second policy element.

Abstract: A method comprising communicating a first set of data communications over a wireless cellular connection of a wireless cellular network to or from an end user device, the first set of data communications associated with one or more service activities the end user device is capable of supporting; identifying an alternative wireless network that can be used to communicate a second set of data communications to or from the end user device; and based on electronically processing an instruction set for offloading from the wireless cellular network to the alternative wireless network, determining whether to communicate the second set of data communications to or from the end user device over the alternative wireless network or over the wireless cellular connection, wherein the instruction set for offloading comprises at least one rule that takes into account at least one state associated with the wireless cellular connection.

Abstract: A system communicatively coupled to a device over a wireless access network, the system comprising one or more processors configured to establish, in cooperation with one or more agents on the device, a secure control link enabling secure communications between the system and the one or more agents over the wireless access network, and a service interface enabling the one or more processors to communicate over the secure control link with the one or more agents to assist the one or more agents to change at least an aspect of a service plan associated with the device, and provide, to the one or more agents, information about a past or current service usage by the device to enable the one or more agents to present, through a user interface of the device, a notification associated with the past or current service usage by the device.

Abstract: A non-transitory computer-readable storage medium storing machine-executable instructions that, when executed by one or more processors, cause the one or more processors to execute a software application, implement a traffic stack capable of coupling to a communication network, and implement one or more software agents configured to register an association between the software application and a traffic flow, and at least assist in implementing a service policy based on the registered association between the software application and the traffic flow, wherein the one or more software agents include a proxy agent configured to at least assist in communicating the traffic flow over the communication network on behalf of the software application.

Abstract: Disclosed is a non-transitory computer-readable storage medium storing machine-executable instructions that, when executed by one or more processors of a wireless end-user device, cause the one or more processors to: identify a service usage activity of the wireless end-user device, the service usage activity being associated with a first software component of a plurality of software components on the wireless end-user device, the service usage activity comprising one or more prospective or successful communications over a wireless network; determine whether the service usage activity comprises a background activity; determine at least an aspect of a policy based on a user input or based on information from a network element, the policy to be applied if the service usage activity is the background activity, the policy at least for controlling the service usage activity; and if it is determined that the service usage activity is the background activity, apply the policy.

Abstract: A technique involves modular storage of network service plan components and provisioning of same. A subset of the capabilities of a service design system can be granted to a sandbox system to enable customization of service plan offerings or other controls.

Abstract: A method comprising obtaining a credential associated with a first device in a device group, the device group having a shared data allocation available to the device group, the shared data allocation establishing an amount of communication over a first wireless network; determining, based on the credential, that the first device is authorized to set or change an aspect of a policy applicable when a second device in the device group is connected to the first wireless network; obtaining, from the first device, a user preference; and provisioning, based on the user preference and the determination that the first device is authorized to set or change the at least an aspect of the policy for the second device, one or more network elements to at least assist in enforcing or applying the policy when the second device is connected to the first wireless network.