Service plan design, user interfaces, application programming interfaces, and device management

[0001] This application is a continuation-in-part of, and incorporates by reference for all purposes, the following co-pending U.S. patent applications: U.S. application Ser. No. 13/441,821, filed Apr. 6, 2012, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECT PLACEMENT ON A DEVICE; U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; U.S. application Ser. No. 12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT SERVICES; U.S. application Ser. No. 13/134,028, filed May 25, 2011, entitled DEVICE-ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S. application Ser. No. 13/229,580, filed Sep. 9, 2011, entitled WIRELESS NETWORK SERVICE INTERFACES; U.S. application Ser. No. 13/239,321, filed Sep. 21, 2011, entitled SERVICE OFFER SET PUBLISHING TO DEVICE AGENT WITH ON-DEVICE SERVICE SELECTION; U.S. application Ser. No. 13/309,556, filed Dec. 1, 2011, entitled END USER DEVICE THAT SECURES AN ASSOCIATION OF APPLICATION TO SERVICE POLICY WITH AN APPLICATION CERTIFICATE CHECK; and U.S. application Ser. No. 13/374,959, filed Jan. 24, 2012, entitled FLOW TAGGING FOR SERVICE POLICY IMPLEMENTATION.

[0002] This application claims the benefit of, and incorporates by reference for all purposes, the following U.S. provisional applications: U.S. Provisional Application No. 61/589,830, filed Jan. 23, 2012, entitled METHODS AND APPARATUS TO PRESENT INFORMATION ABOUT VOICE, MESSAGING, AND DATA SERVICES ON WIRELESS MOBILE DEVICES; U.S. Provisional Application No. 61/610,876, filed Mar. 14, 2012, entitled METHODS AND APPARATUS FOR APPLICATION PROMOTION AND SPONSORSHIP; U.S. Provisional Application No. 61/658,339, filed Jun. 11, 2012, entitled MULTI-DEVICE MASTER SERVICES ACCOUNTS, SERVICE PLAN SHARING AND ASSIGNMENTS, AND DEVICE MANAGEMENT FROM A MASTER DEVICE; U.S. Provisional Application No. 61/667,927, filed Jul. 3, 2012, entitled FLEXIBLE MULTI-DEVICE MASTER SERVICE ACCOUNTS, SERVICE PLAN SHARING AND ASSIGNMENTS, AND DEVICE MANAGEMENT; U.S. Provisional Application No. 61/674,331, filed Jul. 21, 2012, entitled SERVICE CONTROLLER FOR MANAGING CLOUD-BASED POLICY; U.S. Provisional Application No. 61/724,267, filed Nov. 8, 2012, entitled FLEXIBLE SERVICE PLAN DESIGN, USER INTERFACE AND DEVICE MANAGEMENT; U.S. Provisional Application No. 61/724,837, filed Nov. 9, 2012, entitled SERVICE PLAN DISCOVERY, CUSTOMIZATION, AND MANAGEMENT; U.S. Provisional Application No. 61/724,974, filed Nov. 10, 2012, entitled SERVICE PLAN DISCOVERY, CUSTOMIZATION, AND MANAGEMENT; U.S. Provisional Application No. 61/732,249, filed Nov. 30, 2012, entitled APPLICATION PROGRAMMING INTERFACES FOR SMART SERVICES; U.S. Provisional Application No. 61/734,288, filed Dec. 6, 2012, entitled INTERMEDIATE NETWORKING DEVICE SERVICES; and U.S. Provisional Application No. 61/745,548, filed Dec. 22, 2012, entitled SERVICE PLAN DESIGN, USER INTERFACES, APPLICATION PROGRAMMING INTERFACES, AND DEVICE MANAGEMENT.

[0003] U.S. application Ser. No. 13/441,821, filed Apr. 6, 2012, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECT PLACEMENT ON A DEVICE, is a continuation-in-part of the following U.S. patent applications: U.S. application Ser. No. 12/380,759, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE POLICY IMPLEMENTATION, now U.S. Pat. No. 8,270,310 (issued on Sep. 18, 2012); U.S. application Ser. No. 12/380,779, filed Mar. 2, 2009, entitled DEVICE ASSISTED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY, AND USER PRIVACY; U.S. application Ser. No. 12/380,758, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE MONITORING WITH REPORTING, SYNCHRONIZATION, AND NOTIFICATION; U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012); U.S. application Ser. No. 12/380,768, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE POLICY IMPLEMENTATION WITH NETWORK NEUTRALITY AND USER PRIVACY; U.S. application Ser. No. 12/380,767, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY, now U.S. Pat. No. 8,355,337 (issued on Jan. 15, 2013); U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; U.S. application Ser. No. 12/380,755, filed Mar. 2, 2009, entitled DEVICE ASSISTED AMBIENT SERVICES, now U.S. Pat. No. 8,331,901 (issued Dec. 11, 2012); U.S. application Ser. No. 12/380,756, filed Mar. 2, 2009, entitled NETWORK BASED AMBIENT SERVICES, now U.S. Pat. No. 8,250,207 (issued Aug. 21, 2012); U.S. application Ser. No. 12/380,772, filed Mar. 2, 2009, entitled ROAMING SERVICES NETWORK AND OVERLAY NETWORKS; U.S. application Ser. No. 12/380,782, filed Mar. 2, 2009, entitled OPEN DEVELOPMENT SYSTEM FOR ACCESS SERVICE PROVIDERS, now U.S. Pat. No. 8,270,952 (issued Sep. 18, 2012); U.S. application Ser. No. 12/380,783, filed Mar. 2, 2009, entitled VIRTUAL SERVICE PROVIDER SYSTEMS; U.S. application Ser. No. 12/380,757, filed Mar. 2, 2009, entitled SERVICE ACTIVATION TRACKING SYSTEM, now U.S. Pat. No. 8,326,958 (issued Dec. 4, 2012); U.S. application Ser. No. 12/380,781, filed Mar. 2, 2009, entitled OPEN TRANSACTION CENTRAL BILLING SYSTEM, now U.S. Pat. No. 8,229,812 (issued Jul. 24, 2012); U.S. application Ser. No. 12/380,774, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,773, filed Mar. 2, 2009, entitled VERIFIABLE SERVICE POLICY IMPLEMENTATION FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,769, filed Mar. 2, 2009, entitled SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,777, filed Mar. 2, 2009, entitled SIMPLIFIED SERVICE NETWORK ARCHITECTURE; U.S. application Ser. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No. 8,275,830 (issued Sep. 25, 2012); U.S. application Ser. No. 12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT SERVICES; U.S. application Ser. No. 12/694,445, filed Jan. 27, 2010, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES; U.S. application Ser. No. 12/694,451, filed Jan. 27, 2010, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM; U.S. application Ser. No. 12/694,455, filed Jan. 27, 2010, entitled DEVICE ASSISTED SERVICES INSTALL; U.S. application Ser. No. 12/695,021, filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTED SERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013); U.S. application Ser. No. 12/695,980, filed Jan. 28, 2010, entitled ENHANCED ROAMING SERVICES AND CONVERGED CARRIER NETWORKS WITH DEVICE ASSISTED SERVICES AND A PROXY, now U.S. Pat. No. 8,340,634 (issued Dec. 25, 2012); U.S. application Ser. No. 13/134,005, filed May 25, 2011, entitled SYSTEM AND METHOD FOR WIRELESS NETWORK OFFLOADING; U.S. application Ser. No. 13/134,028, filed May 25, 2011, entitled DEVICE-ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S. application Ser. No. 13/229,580, filed Sep. 9, 2011, entitled WIRELESS NETWORK SERVICE INTERFACES; U.S. application Ser. No. 13/237,827, filed Sep. 20, 2011, entitled ADAPTING NETWORK POLICIES BASED ON DEVICE SERVICE PROCESSOR CONFIGURATION; U.S. application Ser. No. 13/239,321, filed Sep. 21, 2011, entitled SERVICE OFFER SET PUBLISHING TO DEVICE AGENT WITH ON-DEVICE SERVICE SELECTION; U.S. application Ser. No. 13/248,028, filed Sep. 28, 2011, entitled ENTERPRISE ACCESS CONTROL AND ACCOUNTING ALLOCATION FOR ACCESS NETWORKS; U.S. application Ser. No. 13/247,998, filed Sep. 28, 2011, entitled SECURE DEVICE DATA RECORDS; U.S. application Ser. No. 13/248,025, filed Sep. 28, 2011, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; U.S. application Ser. No. 13/253,013, filed Oct. 4, 2011, entitled SYSTEM AND METHOD FOR PROVIDING USER NOTIFICATIONS; U.S. application Ser. No. 13/309,556, filed Dec. 1, 2011, entitled END USER DEVICE THAT SECURES AN ASSOCIATION OF APPLICATION TO SERVICE POLICY WITH AN APPLICATION CERTIFICATE CHECK; U.S. application Ser. No. 13/309,463, filed Dec. 1, 2011, entitled SECURITY, FRAUD DETECTION, AND FRAUD MITIGATION IN DEVICE-ASSISTED SERVICES SYSTEMS; U.S. application Ser. No. 13/330,948, filed Dec. 20, 2011, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION ACCOUNTING, AND MULTI-ACCOUNT; U.S. application Ser. No. 13/331,487, filed Dec. 20, 2011, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION ACCOUNTING, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,351,898 (issued Jan. 8, 2013); U.S. application Ser. No. 13/368,294, filed Feb. 7, 2012, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY, AND USER PRIVACY.

[0004] U.S. application Ser. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No. 8,275,830 (issued Sep. 25, 2012), is a continuation-in-part of the following U.S. patent applications: U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012); and U.S. application Ser. No. 12/380,771 filed Mar. 2, 2009, entitled VERIFIABLE SERVICE BILLING FOR INTERMEDIATE NETWORKING DEVICES, now U.S. Pat. No. 8,023,425 (issued on Sep. 20, 2011).

[0005] U.S. application Ser. No. 12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT SERVICES, is a continuation-in-part of U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION.

[0006] U.S. application Ser. No. 12/694,445, filed Jan. 27, 2010, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES, is a continuation-in-part of U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION.

[0007] U.S. application Ser. No. 12/694,451, filed Jan. 27, 2010, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM, is a continuation-in-part of U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION.

[0008] U.S. application Ser. No. 12/694,455, filed Jan. 27, 2010, entitled DEVICE ASSISTED SERVICES INSTALL, is a continuation-in-part of U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION.

[0009] U.S. application Ser. No. 12/695,021, filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTED SERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013), is a continuation-in-part of U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION.

[0010] U.S. application Ser. No. 12/695,980, filed Jan. 28, 2010, entitled ENHANCED ROAMING SERVICES AND CONVERGED CARRIER NETWORKS WITH DEVICE ASSISTED SERVICES AND A PROXY, now U.S. Pat. No. 8,340,634 (issued Dec. 25, 2012), is a continuation-in-part of the following U.S. patent applications: U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; U.S. application Ser. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No. 8,275,830 (issued Sep. 25, 2012); and U.S. application Ser. No. 12/695,021, filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTED SERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013).

[0011] U.S. application Ser. No. 13/134,005, filed May 25, 2011, entitled SYSTEM AND METHOD FOR WIRELESS NETWORK OFFLOADING, is a continuation-in-part of the following U.S. patent applications: U.S. application Ser. No. 12/380,759, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE POLICY IMPLEMENTATION, now U.S. Pat. No. 8,270,310 (issued on Sep. 18, 2012); U.S. application Ser. No. 12/380,779, filed Mar. 2, 2009, entitled DEVICE ASSISTED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY, AND USER PRIVACY; U.S. application Ser. No. 12/380,758, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE MONITORING WITH REPORTING, SYNCHRONIZATION, AND NOTIFICATION; U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012); U.S. application Ser. No. 12/380,768, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE POLICY IMPLEMENTATION WITH NETWORK NEUTRALITY AND USER PRIVACY; U.S. application Ser. No. 12/380,767, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY, now U.S. Pat. No. 8,355,337 (issued on Jan. 15, 2013); U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; U.S. application Ser. No. 12/380,755, filed Mar. 2, 2009, entitled DEVICE ASSISTED AMBIENT SERVICES, now U.S. Pat. No. 8,331,901 (issued Dec. 11, 2012); U.S. application Ser. No. 12/380,756, filed Mar. 2, 2009, entitled NETWORK BASED AMBIENT SERVICES, now U.S. Pat. No. 8,250,207 (issued Aug. 21, 2012); U.S. application Ser. No. 12/380,770, entitled NETWORK TOOLS FOR ANALYSIS, DESIGN, TESTING, AND PRODUCTION OF SERVICES, now abandoned; U.S. application Ser. No. 12/380,772, filed Mar. 2, 2009, entitled ROAMING SERVICES NETWORK AND OVERLAY NETWORKS; U.S. application Ser. No. 12/380,782, filed Mar. 2, 2009, entitled OPEN DEVELOPMENT SYSTEM FOR ACCESS SERVICE PROVIDERS, now U.S. Pat. No. 8,270,952 (issued Sep. 18, 2012); U.S. application Ser. No. 12/380,783, filed Mar. 2, 2009, entitled VIRTUAL SERVICE PROVIDER SYSTEMS; U.S. application Ser. No. 12/380,757, filed Mar. 2, 2009, entitled SERVICE ACTIVATION TRACKING SYSTEM, now U.S. Pat. No. 8,326,958 (issued Dec. 4, 2012); U.S. application Ser. No. 12/380,781, filed Mar. 2, 2009, entitled OPEN TRANSACTION CENTRAL BILLING SYSTEM, now U.S. Pat. No. 8,229,812 (issued Jul. 24, 2012); U.S. application Ser. No. 12/380,774, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,771, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES, now U.S. Pat. No. 8,023,425 (issued Sep. 20, 2011); U.S. application Ser. No. 12/380,773, filed Mar. 2, 2009, entitled VERIFIABLE SERVICE POLICY IMPLEMENTATION FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,769, filed Mar. 2, 2009, entitled SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,777, filed Mar. 2, 2009, entitled SIMPLIFIED SERVICE NETWORK ARCHITECTURE; U.S. application Ser. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No. 8,275,830 (issued Sep. 25, 2012); U.S. application Ser. No. 12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT SERVICES; U.S. application Ser. No. 12/694,445, filed Jan. 27, 2010, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES; U.S. application Ser. No. 12/694,451, filed Jan. 27, 2010, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM; U.S. application Ser. No. 12/694,455, filed Jan. 27, 2010, entitled DEVICE ASSISTED SERVICES INSTALL; U.S. application Ser. No. 12/695,021, filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTED SERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013); and U.S. application Ser. No. 12/695,980, filed Jan. 28, 2010, entitled ENHANCED ROAMING SERVICES AND CONVERGED CARRIER NETWORKS WITH DEVICE ASSISTED SERVICES AND A PROXY, now U.S. Pat. No. 8,340,634 (issued Dec. 25, 2012).

[0012] U.S. application Ser. No. 13/134,028, filed May 25, 2011, entitled DEVICE-ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY, is a continuation-in-part of the following U.S. patent applications: U.S. application Ser. No. 12/380,759, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE POLICY IMPLEMENTATION, now U.S. Pat. No. 8,270,310 (issued on Sep. 18, 2012); U.S. application Ser. No. 12/380,779, filed Mar. 2, 2009, entitled DEVICE ASSISTED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY, AND USER PRIVACY; U.S. application Ser. No. 12/380,758, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE MONITORING WITH REPORTING, SYNCHRONIZATION, AND NOTIFICATION; U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012); U.S. application Ser. No. 12/380,768, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE POLICY IMPLEMENTATION WITH NETWORK NEUTRALITY AND USER PRIVACY; U.S. application Ser. No. 12/380,767, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY, now U.S. Pat. No. 8,355,337 (issued on Jan. 15, 2013); U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; U.S. application Ser. No. 12/380,755, filed Mar. 2, 2009, entitled DEVICE ASSISTED AMBIENT SERVICES, now U.S. Pat. No. 8,331,901 (issued Dec. 11, 2012); U.S. application Ser. No. 12/380,756, filed Mar. 2, 2009, entitled NETWORK BASED AMBIENT SERVICES, now U.S. Pat. No. 8,250,207 (issued Aug. 21, 2012); U.S. application Ser. No. 12/380,770, entitled NETWORK TOOLS FOR ANALYSIS, DESIGN, TESTING, AND PRODUCTION OF SERVICES, now abandoned; U.S. application Ser. No. 12/380,772, filed Mar. 2, 2009, entitled ROAMING SERVICES NETWORK AND OVERLAY NETWORKS; U.S. application Ser. No. 12/380,782, filed Mar. 2, 2009, entitled OPEN DEVELOPMENT SYSTEM FOR ACCESS SERVICE PROVIDERS, now U.S. Pat. No. 8,270,952 (issued Sep. 18, 2012); U.S. application Ser. No. 12/380,783, filed Mar. 2, 2009, entitled VIRTUAL SERVICE PROVIDER SYSTEMS; U.S. application Ser. No. 12/380,757, filed Mar. 2, 2009, entitled SERVICE ACTIVATION TRACKING SYSTEM, now U.S. Pat. No. 8,326,958 (issued Dec. 4, 2012); U.S. application Ser. No. 12/380,781, filed Mar. 2, 2009, entitled OPEN TRANSACTION CENTRAL BILLING SYSTEM, now U.S. Pat. No. 8,229,812 (issued Jul. 24, 2012); U.S. application Ser. No. 12/380,774, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,771, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES, now U.S. Pat. No. 8,023,425 (issued Sep. 20, 2011); U.S. application Ser. No. 12/380,773, filed Mar. 2, 2009, entitled VERIFIABLE SERVICE POLICY IMPLEMENTATION FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,769, filed Mar. 2, 2009, entitled SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,777, filed Mar. 2, 2009, entitled SIMPLIFIED SERVICE NETWORK ARCHITECTURE; U.S. application Ser. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No. 8,275,830 (issued Sep. 25, 2012); U.S. application Ser. No. 12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT SERVICES; U.S. application Ser. No. 12/694,445, filed Jan. 27, 2010, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES; U.S. application Ser. No. 12/694,451, filed Jan. 27, 2010, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM; U.S. application Ser. No. 12/694,455, filed Jan. 27, 2010, entitled DEVICE ASSISTED SERVICES INSTALL; U.S. application Ser. No. 12/695,021, filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTED SERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013); U.S. application Ser. No. 12/695,980, filed Jan. 28, 2010, entitled ENHANCED ROAMING SERVICES AND CONVERGED CARRIER NETWORKS WITH DEVICE ASSISTED SERVICES AND A PROXY, now U.S. Pat. No. 8,340,634 (issued Dec. 25, 2012); and U.S. application Ser. No. 13/134,005, filed May 25, 2011, entitled SYSTEM AND METHOD FOR WIRELESS NETWORK OFFLOADING.

[0013] U.S. application Ser. No. 13/229,580, filed Sep. 9, 2011, entitled WIRELESS NETWORK SERVICE INTERFACES, is a continuation-in-part of the following U.S. patent applications: U.S. application Ser. No. 12/380,759, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE POLICY IMPLEMENTATION, now U.S. Pat. No. 8,270,310 (issued on Sep. 18, 2012); U.S. application Ser. No. 12/380,779, filed Mar. 2, 2009, entitled DEVICE ASSISTED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY, AND USER PRIVACY; U.S. application Ser. No. 12/380,758, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE MONITORING WITH REPORTING, SYNCHRONIZATION, AND NOTIFICATION; U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012); U.S. application Ser. No. 12/380,768, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE POLICY IMPLEMENTATION WITH NETWORK NEUTRALITY AND USER PRIVACY; U.S. application Ser. No. 12/380,767, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY, now U.S. Pat. No. 8,355,337 (issued on Jan. 15, 2013); U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; U.S. application Ser. No. 12/380,755, filed Mar. 2, 2009, entitled DEVICE ASSISTED AMBIENT SERVICES, now U.S. Pat. No. 8,331,901 (issued Dec. 11, 2012); U.S. application Ser. No. 12/380,756, filed Mar. 2, 2009, entitled NETWORK BASED AMBIENT SERVICES, now U.S. Pat. No. 8,250,207 (issued Aug. 21, 2012); U.S. application Ser. No. 12/380,770, entitled NETWORK TOOLS FOR ANALYSIS, DESIGN, TESTING, AND PRODUCTION OF SERVICES, now abandoned; U.S. application Ser. No. 12/380,772, filed Mar. 2, 2009, entitled ROAMING SERVICES NETWORK AND OVERLAY NETWORKS; U.S. application Ser. No. 12/380,782, filed Mar. 2, 2009, entitled OPEN DEVELOPMENT SYSTEM FOR ACCESS SERVICE PROVIDERS, now U.S. Pat. No. 8,270,952 (issued Sep. 18, 2012); U.S. application Ser. No. 12/380,783, filed Mar. 2, 2009, entitled VIRTUAL SERVICE PROVIDER SYSTEMS; U.S. application Ser. No. 12/380,757, filed Mar. 2, 2009, entitled SERVICE ACTIVATION TRACKING SYSTEM, now U.S. Pat. No. 8,326,958 (issued Dec. 4, 2012); U.S. application Ser. No. 12/380,781, filed Mar. 2, 2009, entitled OPEN TRANSACTION CENTRAL BILLING SYSTEM, now U.S. Pat. No. 8,229,812 (issued Jul. 24, 2012); U.S. application Ser. No. 12/380,774, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,771, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES, now U.S. Pat. No. 8,023,425 (issued Sep. 20, 2011); U.S. application Ser. No. 12/380,773, filed Mar. 2, 2009, entitled VERIFIABLE SERVICE POLICY IMPLEMENTATION FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,769, filed Mar. 2, 2009, entitled SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,777, filed Mar. 2, 2009, entitled SIMPLIFIED SERVICE NETWORK ARCHITECTURE; U.S. application Ser. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No. 8,275,830 (issued Sep. 25, 2012); U.S. application Ser. No. 12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT SERVICES; U.S. application Ser. No. 12/694,445, filed Jan. 27, 2010, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES; U.S. application Ser. No. 12/694,451, filed Jan. 27, 2010, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM; U.S. application Ser. No. 12/694,455, filed Jan. 27, 2010, entitled DEVICE ASSISTED SERVICES INSTALL; U.S. application Ser. No. 12/695,021, filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTED SERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013); U.S. application Ser. No. 12/695,980, filed Jan. 28, 2010, entitled ENHANCED ROAMING SERVICES AND CONVERGED CARRIER NETWORKS WITH DEVICE ASSISTED SERVICES AND A PROXY, now U.S. Pat. No. 8,340,634 (issued Dec. 25, 2012); U.S. application Ser. No. 13/134,028, filed May 25, 2011, entitled DEVICE-ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; and U.S. application Ser. No. 13/134,005, filed May 25, 2011, entitled SYSTEM AND METHOD FOR WIRELESS NETWORK OFFLOADING.

[0014] U.S. application Ser. No. 13/237,827, filed Sep. 20, 2011, entitled ADAPTING NETWORK POLICIES BASED ON DEVICE SERVICE PROCESSOR CONFIGURATION, is a continuation-in-part of the following U.S. patent applications: U.S. application Ser. No. 12/380,759, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE POLICY IMPLEMENTATION, now U.S. Pat. No. 8,270,310 (issued on Sep. 18, 2012); U.S. application Ser. No. 12/380,779, filed Mar. 2, 2009, entitled DEVICE ASSISTED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY, AND USER PRIVACY; U.S. application Ser. No. 12/380,758, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE MONITORING WITH REPORTING, SYNCHRONIZATION, AND NOTIFICATION; U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012); U.S. application Ser. No. 12/380,768, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE POLICY IMPLEMENTATION WITH NETWORK NEUTRALITY AND USER PRIVACY; U.S. application Ser. No. 12/380,767, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY, now U.S. Pat. No. 8,355,337 (issued on Jan. 15, 2013); U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; U.S. application Ser. No. 12/380,755, filed Mar. 2, 2009, entitled DEVICE ASSISTED AMBIENT SERVICES, now U.S. Pat. No. 8,331,901 (issued Dec. 11, 2012); U.S. application Ser. No. 12/380,756, filed Mar. 2, 2009, entitled NETWORK BASED AMBIENT SERVICES, now U.S. Pat. No. 8,250,207 (issued Aug. 21, 2012); U.S. application Ser. No. 12/380,770, entitled NETWORK TOOLS FOR ANALYSIS, DESIGN, TESTING, AND PRODUCTION OF SERVICES, now abandoned; U.S. application Ser. No. 12/380,772, filed Mar. 2, 2009, entitled ROAMING SERVICES NETWORK AND OVERLAY NETWORKS; U.S. application Ser. No. 12/380,782, filed Mar. 2, 2009, entitled OPEN DEVELOPMENT SYSTEM FOR ACCESS SERVICE PROVIDERS, now U.S. Pat. No. 8,270,952 (issued Sep. 18, 2012); U.S. application Ser. No. 12/380,783, filed Mar. 2, 2009, entitled VIRTUAL SERVICE PROVIDER SYSTEMS; U.S. application Ser. No. 12/380,757, filed Mar. 2, 2009, entitled SERVICE ACTIVATION TRACKING SYSTEM, now U.S. Pat. No. 8,326,958 (issued Dec. 4, 2012); U.S. application Ser. No. 12/380,781, filed Mar. 2, 2009, entitled OPEN TRANSACTION CENTRAL BILLING SYSTEM, now U.S. Pat. No. 8,229,812 (issued Jul. 24, 2012); U.S. application Ser. No. 12/380,774, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,771, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES, now U.S. Pat. No. 8,023,425 (issued Sep. 20, 2011); U.S. application Ser. No. 12/380,773, filed Mar. 2, 2009, entitled VERIFIABLE SERVICE POLICY IMPLEMENTATION FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,769, filed Mar. 2, 2009, entitled SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,777, filed Mar. 2, 2009, entitled SIMPLIFIED SERVICE NETWORK ARCHITECTURE; U.S. application Ser. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No. 8,275,830 (issued Sep. 25, 2012); U.S. application Ser. No. 12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT SERVICES; U.S. application Ser. No. 12/694,445, filed Jan. 27, 2010, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES; U.S. application Ser. No. 12/694,451, filed Jan. 27, 2010, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM; U.S. application Ser. No. 12/694,455, filed Jan. 27, 2010, entitled DEVICE ASSISTED SERVICES INSTALL; U.S. application Ser. No. 12/695,021, filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTED SERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013); U.S. application Ser. No. 12/695,980, filed Jan. 28, 2010, entitled ENHANCED ROAMING SERVICES AND CONVERGED CARRIER NETWORKS WITH DEVICE ASSISTED SERVICES AND A PROXY, now U.S. Pat. No. 8,340,634 (issued Dec. 25, 2012); U.S. application Ser. No. 13/134,028, filed May 25, 2011, entitled DEVICE-ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S. application Ser. No. 13/229,580, filed Sep. 9, 2011, entitled WIRELESS NETWORK SERVICE INTERFACES; and U.S. application Ser. No. 13/134,005, filed May 25, 2011, entitled SYSTEM AND METHOD FOR WIRELESS NETWORK OFFLOADING.

[0015] U.S. application Ser. No. 13/239,321, filed Sep. 21, 2011, entitled SERVICE OFFER SET PUBLISHING TO DEVICE AGENT WITH ON-DEVICE SERVICE SELECTION, is a continuation-in-part of the following U.S. patent applications: U.S. application Ser. No. 12/380,759, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE POLICY IMPLEMENTATION, now U.S. Pat. No. 8,270,310 (issued on Sep. 18, 2012); U.S. application Ser. No. 12/380,779, filed Mar. 2, 2009, entitled DEVICE ASSISTED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY, AND USER PRIVACY; U.S. application Ser. No. 12/380,758, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE MONITORING WITH REPORTING, SYNCHRONIZATION, AND NOTIFICATION; U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012); U.S. application Ser. No. 12/380,768, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE POLICY IMPLEMENTATION WITH NETWORK NEUTRALITY AND USER PRIVACY; U.S. application Ser. No. 12/380,767, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY, now U.S. Pat. No. 8,355,337 (issued on Jan. 15, 2013); U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; U.S. application Ser. No. 12/380,755, filed Mar. 2, 2009, entitled DEVICE ASSISTED AMBIENT SERVICES, now U.S. Pat. No. 8,331,901 (issued Dec. 11, 2012); U.S. application Ser. No. 12/380,756, filed Mar. 2, 2009, entitled NETWORK BASED AMBIENT SERVICES, now U.S. Pat. No. 8,250,207 (issued Aug. 21, 2012); U.S. application Ser. No. 12/380,770, entitled NETWORK TOOLS FOR ANALYSIS, DESIGN, TESTING, AND PRODUCTION OF SERVICES, now abandoned; U.S. application Ser. No. 12/380,772, filed Mar. 2, 2009, entitled ROAMING SERVICES NETWORK AND OVERLAY NETWORKS; U.S. application Ser. No. 12/380,782, filed Mar. 2, 2009, entitled OPEN DEVELOPMENT SYSTEM FOR ACCESS SERVICE PROVIDERS, now U.S. Pat. No. 8,270,952 (issued Sep. 18, 2012); U.S. application Ser. No. 12/380,783, filed Mar. 2, 2009, entitled VIRTUAL SERVICE PROVIDER SYSTEMS; U.S. application Ser. No. 12/380,757, filed Mar. 2, 2009, entitled SERVICE ACTIVATION TRACKING SYSTEM, now U.S. Pat. No. 8,326,958 (issued Dec. 4, 2012); U.S. application Ser. No. 12/380,781, filed Mar. 2, 2009, entitled OPEN TRANSACTION CENTRAL BILLING SYSTEM, now U.S. Pat. No. 8,229,812 (issued Jul. 24, 2012); U.S. application Ser. No. 12/380,774, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,771, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES, now U.S. Pat. No. 8,023,425 (issued Sep. 20, 2011); U.S. application Ser. No. 12/380,773, filed Mar. 2, 2009, entitled VERIFIABLE SERVICE POLICY IMPLEMENTATION FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,769, filed Mar. 2, 2009, entitled SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,777, filed Mar. 2, 2009, entitled SIMPLIFIED SERVICE NETWORK ARCHITECTURE; U.S. application Ser. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No. 8,275,830 (issued Sep. 25, 2012); U.S. application Ser. No. 12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT SERVICES; U.S. application Ser. No. 12/694,445, filed Jan. 27, 2010, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES; U.S. application Ser. No. 12/694,451, filed Jan. 27, 2010, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM; U.S. application Ser. No. 12/694,455, filed Jan. 27, 2010, entitled DEVICE ASSISTED SERVICES INSTALL; U.S. application Ser. No. 12/695,021, filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTED SERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013); U.S. application Ser. No. 12/695,980, filed Jan. 28, 2010, entitled ENHANCED ROAMING SERVICES AND CONVERGED CARRIER NETWORKS WITH DEVICE ASSISTED SERVICES AND A PROXY, now U.S. Pat. No. 8,340,634 (issued Dec. 25, 2012); U.S. application Ser. No. 13/134,028, filed May 25, 2011, entitled DEVICE-ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S. application Ser. No. 13/229,580, filed Sep. 9, 2011, entitled WIRELESS NETWORK SERVICE INTERFACES; U.S. application Ser. No. 13/237,827, filed Sep. 20, 2011, entitled ADAPTING NETWORK POLICIES BASED ON DEVICE SERVICE PROCESSOR CONFIGURATION; and U.S. application Ser. No. 13/134,005, filed May 25, 2011, entitled SYSTEM AND METHOD FOR WIRELESS NETWORK OFFLOADING.

[0016] U.S. application Ser. No. 13/248,028, filed Sep. 28, 2011, entitled ENTERPRISE ACCESS CONTROL AND ACCOUNTING ALLOCATION FOR ACCESS NETWORKS, is a continuation-in-part of the following U.S. patent applications: U.S. application Ser. No. 12/380,759, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE POLICY IMPLEMENTATION, now U.S. Pat. No. 8,270,310 (issued on Sep. 18, 2012); U.S. application Ser. No. 12/380,779, filed Mar. 2, 2009, entitled DEVICE ASSISTED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY, AND USER PRIVACY; U.S. application Ser. No. 12/380,758, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE MONITORING WITH REPORTING, SYNCHRONIZATION, AND NOTIFICATION; U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012); U.S. application Ser. No. 12/380,768, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE POLICY IMPLEMENTATION WITH NETWORK NEUTRALITY AND USER PRIVACY; U.S. application Ser. No. 12/380,767, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY, now U.S. Pat. No. 8,355,337 (issued on Jan. 15, 2013); U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; U.S. application Ser. No. 12/380,755, filed Mar. 2, 2009, entitled DEVICE ASSISTED AMBIENT SERVICES, now U.S. Pat. No. 8,331,901 (issued Dec. 11, 2012); U.S. application Ser. No. 12/380,756, filed Mar. 2, 2009, entitled NETWORK BASED AMBIENT SERVICES, now U.S. Pat. No. 8,250,207 (issued Aug. 21, 2012); U.S. application Ser. No. 12/380,770, entitled NETWORK TOOLS FOR ANALYSIS, DESIGN, TESTING, AND PRODUCTION OF SERVICES, now abandoned; U.S. application Ser. No. 12/380,772, filed Mar. 2, 2009, entitled ROAMING SERVICES NETWORK AND OVERLAY NETWORKS; U.S. application Ser. No. 12/380,782, filed Mar. 2, 2009, entitled OPEN DEVELOPMENT SYSTEM FOR ACCESS SERVICE PROVIDERS, now U.S. Pat. No. 8,270,952 (issued Sep. 18, 2012); U.S. application Ser. No. 12/380,783, filed Mar. 2, 2009, entitled VIRTUAL SERVICE PROVIDER SYSTEMS; U.S. application Ser. No. 12/380,757, filed Mar. 2, 2009, entitled SERVICE ACTIVATION TRACKING SYSTEM, now U.S. Pat. No. 8,326,958 (issued Dec. 4, 2012); U.S. application Ser. No. 12/380,781, filed Mar. 2, 2009, entitled OPEN TRANSACTION CENTRAL BILLING SYSTEM, now U.S. Pat. No. 8,229,812 (issued Jul. 24, 2012); U.S. application Ser. No. 12/380,774, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,771, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES, now U.S. Pat. No. 8,023,425 (issued Sep. 20, 2011); U.S. application Ser. No. 12/380,773, filed Mar. 2, 2009, entitled VERIFIABLE SERVICE POLICY IMPLEMENTATION FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,769, filed Mar. 2, 2009, entitled SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,777, filed Mar. 2, 2009, entitled SIMPLIFIED SERVICE NETWORK ARCHITECTURE; U.S. application Ser. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No. 8,275,830 (issued Sep. 25, 2012); U.S. application Ser. No. 12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT SERVICES; U.S. application Ser. No. 12/694,445, filed Jan. 27, 2010, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES; U.S. application Ser. No. 12/694,451, filed Jan. 27, 2010, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM; U.S. application Ser. No. 12/694,455, filed Jan. 27, 2010, entitled DEVICE ASSISTED SERVICES INSTALL; U.S. application Ser. No. 12/695,021, filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTED SERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013); U.S. application Ser. No. 12/695,980, filed Jan. 28, 2010, entitled ENHANCED ROAMING SERVICES AND CONVERGED CARRIER NETWORKS WITH DEVICE ASSISTED SERVICES AND A PROXY, now U.S. Pat. No. 8,340,634 (issued Dec. 25, 2012); U.S. application Ser. No. 13/134,028, filed May 25, 2011, entitled DEVICE-ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S. application Ser. No. 13/229,580, filed Sep. 9, 2011, entitled WIRELESS NETWORK SERVICE INTERFACES; U.S. application Ser. No. 13/237,827, filed Sep. 20, 2011, entitled ADAPTING NETWORK POLICIES BASED ON DEVICE SERVICE PROCESSOR CONFIGURATION; U.S. application Ser. No. 13/239,321, filed Sep. 21, 2011, entitled SERVICE OFFER SET PUBLISHING TO DEVICE AGENT WITH ON-DEVICE SERVICE SELECTION; U.S. application Ser. No. 13/247,998, filed Sep. 28, 2011, entitled SECURE DEVICE DATA RECORDS; U.S. application Ser. No. 13/248,025, filed Sep. 28, 2011, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; and U.S. application Ser. No. 13/134,005, filed May 25, 2011, entitled SYSTEM AND METHOD FOR WIRELESS NETWORK OFFLOADING.

[0017] U.S. application Ser. No. 13/247,998, filed Sep. 28, 2011, entitled SECURE DEVICE DATA RECORDS, is a continuation-in-part of the following U.S. patent applications: U.S. application Ser. No. 12/380,759, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE POLICY IMPLEMENTATION, now U.S. Pat. No. 8,270,310 (issued on Sep. 18, 2012); U.S. application Ser. No. 12/380,779, filed Mar. 2, 2009, entitled DEVICE ASSISTED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY, AND USER PRIVACY; U.S. application Ser. No. 12/380,758, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE MONITORING WITH REPORTING, SYNCHRONIZATION, AND NOTIFICATION; U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012); U.S. application Ser. No. 12/380,768, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE POLICY IMPLEMENTATION WITH NETWORK NEUTRALITY AND USER PRIVACY; U.S. application Ser. No. 12/380,767, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY, now U.S. Pat. No. 8,355,337 (issued on Jan. 15, 2013); U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; U.S. application Ser. No. 12/380,755, filed Mar. 2, 2009, entitled DEVICE ASSISTED AMBIENT SERVICES, now U.S. Pat. No. 8,331,901 (issued Dec. 11, 2012); U.S. application Ser. No. 12/380,756, filed Mar. 2, 2009, entitled NETWORK BASED AMBIENT SERVICES, now U.S. Pat. No. 8,250,207 (issued Aug. 21, 2012); U.S. application Ser. No. 12/380,770, entitled NETWORK TOOLS FOR ANALYSIS, DESIGN, TESTING, AND PRODUCTION OF SERVICES, now abandoned; U.S. application Ser. No. 12/380,772, filed Mar. 2, 2009, entitled ROAMING SERVICES NETWORK AND OVERLAY NETWORKS; U.S. application Ser. No. 12/380,782, filed Mar. 2, 2009, entitled OPEN DEVELOPMENT SYSTEM FOR ACCESS SERVICE PROVIDERS, now U.S. Pat. No. 8,270,952 (issued Sep. 18, 2012); U.S. application Ser. No. 12/380,783, filed Mar. 2, 2009, entitled VIRTUAL SERVICE PROVIDER SYSTEMS; U.S. application Ser. No. 12/380,757, filed Mar. 2, 2009, entitled SERVICE ACTIVATION TRACKING SYSTEM, now U.S. Pat. No. 8,326,958 (issued Dec. 4, 2012); U.S. application Ser. No. 12/380,781, filed Mar. 2, 2009, entitled OPEN TRANSACTION CENTRAL BILLING SYSTEM, now U.S. Pat. No. 8,229,812 (issued Jul. 24, 2012); U.S. application Ser. No. 12/380,774, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,771, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES, now U.S. Pat. No. 8,023,425 (issued Sep. 20, 2011); U.S. application Ser. No. 12/380,773, filed Mar. 2, 2009, entitled VERIFIABLE SERVICE POLICY IMPLEMENTATION FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,769, filed Mar. 2, 2009, entitled SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,777, filed Mar. 2, 2009, entitled SIMPLIFIED SERVICE NETWORK ARCHITECTURE; U.S. application Ser. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No. 8,275,830 (issued Sep. 25, 2012); U.S. application Ser. No. 12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT SERVICES; U.S. application Ser. No. 12/694,445, filed Jan. 27, 2010, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES; U.S. application Ser. No. 12/694,451, filed Jan. 27, 2010, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM; U.S. application Ser. No. 12/694,455, filed Jan. 27, 2010, entitled DEVICE ASSISTED SERVICES INSTALL; U.S. application Ser. No. 12/695,021, filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTED SERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013); U.S. application Ser. No. 12/695,980, filed Jan. 28, 2010, entitled ENHANCED ROAMING SERVICES AND CONVERGED CARRIER NETWORKS WITH DEVICE ASSISTED SERVICES AND A PROXY, now U.S. Pat. No. 8,340,634 (issued Dec. 25, 2012); U.S. application Ser. No. 13/134,028, filed May 25, 2011, entitled DEVICE-ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S. application Ser. No. 13/229,580, filed Sep. 9, 2011, entitled WIRELESS NETWORK SERVICE INTERFACES; U.S. application Ser. No. 13/237,827, filed Sep. 20, 2011, entitled ADAPTING NETWORK POLICIES BASED ON DEVICE SERVICE PROCESSOR CONFIGURATION; U.S. application Ser. No. 13/239,321, filed Sep. 21, 2011, entitled SERVICE OFFER SET PUBLISHING TO DEVICE AGENT WITH ON-DEVICE SERVICE SELECTION; U.S. application Ser. No. 13/248,028, filed Sep. 28, 2011, entitled ENTERPRISE ACCESS CONTROL AND ACCOUNTING ALLOCATION FOR ACCESS NETWORKS; U.S. application Ser. No. 13/248,025, filed Sep. 28, 2011, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; and U.S. application Ser. No. 13/134,005, filed May 25, 2011, entitled SYSTEM AND METHOD FOR WIRELESS NETWORK OFFLOADING.

[0018] U.S. application Ser. No. 13/248,025, filed Sep. 28, 2011, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES, is a continuation-in-part of the following U.S. patent applications: U.S. application Ser. No. 12/380,759, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE POLICY IMPLEMENTATION, now U.S. Pat. No. 8,270,310 (issued on Sep. 18, 2012); U.S. application Ser. No. 12/380,779, filed Mar. 2, 2009, entitled DEVICE ASSISTED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY, AND USER PRIVACY; U.S. application Ser. No. 12/380,758, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE MONITORING WITH REPORTING, SYNCHRONIZATION, AND NOTIFICATION; U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012); U.S. application Ser. No. 12/380,768, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE POLICY IMPLEMENTATION WITH NETWORK NEUTRALITY AND USER PRIVACY; U.S. application Ser. No. 12/380,767, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY, now U.S. Pat. No. 8,355,337 (issued on Jan. 15, 2013); U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; U.S. application Ser. No. 12/380,755, filed Mar. 2, 2009, entitled DEVICE ASSISTED AMBIENT SERVICES, now U.S. Pat. No. 8,331,901 (issued Dec. 11, 2012); U.S. application Ser. No. 12/380,756, filed Mar. 2, 2009, entitled NETWORK BASED AMBIENT SERVICES, now U.S. Pat. No. 8,250,207 (issued Aug. 21, 2012); U.S. application Ser. No. 12/380,770, entitled NETWORK TOOLS FOR ANALYSIS, DESIGN, TESTING, AND PRODUCTION OF SERVICES, now abandoned; U.S. application Ser. No. 12/380,772, filed Mar. 2, 2009, entitled ROAMING SERVICES NETWORK AND OVERLAY NETWORKS; U.S. application Ser. No. 12/380,782, filed Mar. 2, 2009, entitled OPEN DEVELOPMENT SYSTEM FOR ACCESS SERVICE PROVIDERS, now U.S. Pat. No. 8,270,952 (issued Sep. 18, 2012); U.S. application Ser. No. 12/380,783, filed Mar. 2, 2009, entitled VIRTUAL SERVICE PROVIDER SYSTEMS; U.S. application Ser. No. 12/380,757, filed Mar. 2, 2009, entitled SERVICE ACTIVATION TRACKING SYSTEM, now U.S. Pat. No. 8,326,958 (issued Dec. 4, 2012); U.S. application Ser. No. 12/380,781, filed Mar. 2, 2009, entitled OPEN TRANSACTION CENTRAL BILLING SYSTEM, now U.S. Pat. No. 8,229,812 (issued Jul. 24, 2012); U.S. application Ser. No. 12/380,774, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,771, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES, now U.S. Pat. No. 8,023,425 (issued Sep. 20, 2011); U.S. application Ser. No. 12/380,773, filed Mar. 2, 2009, entitled VERIFIABLE SERVICE POLICY IMPLEMENTATION FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,769, filed Mar. 2, 2009, entitled SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,777, filed Mar. 2, 2009, entitled SIMPLIFIED SERVICE NETWORK ARCHITECTURE; U.S. application Ser. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No. 8,275,830 (issued Sep. 25, 2012); U.S. application Ser. No. 12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT SERVICES; U.S. application Ser. No. 12/694,445, filed Jan. 27, 2010, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES; U.S. application Ser. No. 12/694,451, filed Jan. 27, 2010, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM; U.S. application Ser. No. 12/694,455, filed Jan. 27, 2010, entitled DEVICE ASSISTED SERVICES INSTALL; U.S. application Ser. No. 12/695,021, filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTED SERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013); U.S. application Ser. No. 12/695,980, filed Jan. 28, 2010, entitled ENHANCED ROAMING SERVICES AND CONVERGED CARRIER NETWORKS WITH DEVICE ASSISTED SERVICES AND A PROXY, now U.S. Pat. No. 8,340,634 (issued Dec. 25, 2012); U.S. application Ser. No. 13/134,028, filed May 25, 2011, entitled DEVICE-ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S. application Ser. No. 13/229,580, filed Sep. 9, 2011, entitled WIRELESS NETWORK SERVICE INTERFACES; U.S. application Ser. No. 13/237,827, filed Sep. 20, 2011, entitled ADAPTING NETWORK POLICIES BASED ON DEVICE SERVICE PROCESSOR CONFIGURATION; U.S. application Ser. No. 13/239,321, filed Sep. 21, 2011, entitled SERVICE OFFER SET PUBLISHING TO DEVICE AGENT WITH ON-DEVICE SERVICE SELECTION; U.S. application Ser. No. 13/248,028, filed Sep. 28, 2011, entitled ENTERPRISE ACCESS CONTROL AND ACCOUNTING ALLOCATION FOR ACCESS NETWORKS; U.S. application Ser. No. 13/247,998, filed Sep. 28, 2011, entitled SECURE DEVICE DATA RECORDS; and U.S. application Ser. No. 13/134,005, filed May 25, 2011, entitled SYSTEM AND METHOD FOR WIRELESS NETWORK OFFLOADING.

[0019] U.S. application Ser. No. 13/253,013, filed Oct. 4, 2011, entitled SYSTEM AND METHOD FOR PROVIDING USER NOTIFICATIONS, is a continuation-in-part of the following U.S. patent applications: U.S. application Ser. No. 12/380,759, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE POLICY IMPLEMENTATION, now U.S. Pat. No. 8,270,310 (issued on Sep. 18, 2012); U.S. application Ser. No. 12/380,779, filed Mar. 2, 2009, entitled DEVICE ASSISTED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY, AND USER PRIVACY; U.S. application Ser. No. 12/380,758, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE MONITORING WITH REPORTING, SYNCHRONIZATION, AND NOTIFICATION; U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012); U.S. application Ser. No. 12/380,768, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE POLICY IMPLEMENTATION WITH NETWORK NEUTRALITY AND USER PRIVACY; U.S. application Ser. No. 12/380,767, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY, now U.S. Pat. No. 8,355,337 (issued on Jan. 15, 2013); U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; U.S. application Ser. No. 12/380,755, filed Mar. 2, 2009, entitled DEVICE ASSISTED AMBIENT SERVICES, now U.S. Pat. No. 8,331,901 (issued Dec. 11, 2012); U.S. application Ser. No. 12/380,756, filed Mar. 2, 2009, entitled NETWORK BASED AMBIENT SERVICES, now U.S. Pat. No. 8,250,207 (issued Aug. 21, 2012); U.S. application Ser. No. 12/380,770, entitled NETWORK TOOLS FOR ANALYSIS, DESIGN, TESTING, AND PRODUCTION OF SERVICES, now abandoned; U.S. application Ser. No. 12/380,772, filed Mar. 2, 2009, entitled ROAMING SERVICES NETWORK AND OVERLAY NETWORKS; U.S. application Ser. No. 12/380,782, filed Mar. 2, 2009, entitled OPEN DEVELOPMENT SYSTEM FOR ACCESS SERVICE PROVIDERS, now U.S. Pat. No. 8,270,952 (issued Sep. 18, 2012); U.S. application Ser. No. 12/380,783, filed Mar. 2, 2009, entitled VIRTUAL SERVICE PROVIDER SYSTEMS; U.S. application Ser. No. 12/380,757, filed Mar. 2, 2009, entitled SERVICE ACTIVATION TRACKING SYSTEM, now U.S. Pat. No. 8,326,958 (issued Dec. 4, 2012); U.S. application Ser. No. 12/380,781, filed Mar. 2, 2009, entitled OPEN TRANSACTION CENTRAL BILLING SYSTEM, now U.S. Pat. No. 8,229,812 (issued Jul. 24, 2012); U.S. application Ser. No. 12/380,774, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,771, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES, now U.S. Pat. No. 8,023,425 (issued Sep. 20, 2011); U.S. application Ser. No. 12/380,773, filed Mar. 2, 2009, entitled VERIFIABLE SERVICE POLICY IMPLEMENTATION FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,769, filed Mar. 2, 2009, entitled SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,777, filed Mar. 2, 2009, entitled SIMPLIFIED SERVICE NETWORK ARCHITECTURE; U.S. application Ser. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No. 8,275,830 (issued Sep. 25, 2012); U.S. application Ser. No. 12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT SERVICES; U.S. application Ser. No. 12/694,445, filed Jan. 27, 2010, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES; U.S. application Ser. No. 12/694,451, filed Jan. 27, 2010, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM; U.S. application Ser. No. 12/694,455, filed Jan. 27, 2010, entitled DEVICE ASSISTED SERVICES INSTALL; U.S. application Ser. No. 12/695,021, filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTED SERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013); U.S. application Ser. No. 12/695,980, filed Jan. 28, 2010, entitled ENHANCED ROAMING SERVICES AND CONVERGED CARRIER NETWORKS WITH DEVICE ASSISTED SERVICES AND A PROXY, now U.S. Pat. No. 8,340,634 (issued Dec. 25, 2012); U.S. application Ser. No. 13/134,028, filed May 25, 2011, entitled DEVICE-ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S. application Ser. No. 13/229,580, filed Sep. 9, 2011, entitled WIRELESS NETWORK SERVICE INTERFACES; U.S. application Ser. No. 13/237,827, filed Sep. 20, 2011, entitled ADAPTING NETWORK POLICIES BASED ON DEVICE SERVICE PROCESSOR CONFIGURATION; U.S. application Ser. No. 13/239,321, filed Sep. 21, 2011, entitled SERVICE OFFER SET PUBLISHING TO DEVICE AGENT WITH ON-DEVICE SERVICE SELECTION; U.S. application Ser. No. 13/248,028, filed Sep. 28, 2011, entitled ENTERPRISE ACCESS CONTROL AND ACCOUNTING ALLOCATION FOR ACCESS NETWORKS; U.S. application Ser. No. 13/247,998, filed Sep. 28, 2011, entitled SECURE DEVICE DATA RECORDS; U.S. application Ser. No. 13/248,025 filed Sep. 28, 2011, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; and U.S. application Ser. No. 13/134,005, filed May 25, 2011, entitled SYSTEM AND METHOD FOR WIRELESS NETWORK OFFLOADING.

[0020] U.S. application Ser. No. 13/309,556 filed Dec. 1, 2011, entitled END USER DEVICE THAT SECURES AN ASSOCIATION OF APPLICATION TO SERVICE POLICY WITH AN APPLICATION CERTIFICATE CHECK, is a continuation-in-part of the following U.S. patent applications: U.S. application Ser. No. 12/380,759, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE POLICY IMPLEMENTATION, now U.S. Pat. No. 8,270,310 (issued on Sep. 18, 2012); U.S. application Ser. No. 12/380,779, filed Mar. 2, 2009, entitled DEVICE ASSISTED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY, AND USER PRIVACY; U.S. application Ser. No. 12/380,758, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE MONITORING WITH REPORTING, SYNCHRONIZATION, AND NOTIFICATION; U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012); U.S. application Ser. No. 12/380,768, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE POLICY IMPLEMENTATION WITH NETWORK NEUTRALITY AND USER PRIVACY; U.S. application Ser. No. 12/380,767, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY, now U.S. Pat. No. 8,355,337 (issued on Jan. 15, 2013); U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; U.S. application Ser. No. 12/380,755, filed Mar. 2, 2009, entitled DEVICE ASSISTED AMBIENT SERVICES, now U.S. Pat. No. 8,331,901 (issued Dec. 11, 2012); U.S. application Ser. No. 12/380,756, filed Mar. 2, 2009, entitled NETWORK BASED AMBIENT SERVICES, now U.S. Pat. No. 8,250,207 (issued Aug. 21, 2012); U.S. application Ser. No. 12/380,770, entitled NETWORK TOOLS FOR ANALYSIS, DESIGN, TESTING, AND PRODUCTION OF SERVICES, now abandoned; U.S. application Ser. No. 12/380,772, filed Mar. 2, 2009, entitled ROAMING SERVICES NETWORK AND OVERLAY NETWORKS; U.S. application Ser. No. 12/380,782, filed Mar. 2, 2009, entitled OPEN DEVELOPMENT SYSTEM FOR ACCESS SERVICE PROVIDERS, now U.S. Pat. No. 8,270,952 (issued Sep. 18, 2012); U.S. application Ser. No. 12/380,783, filed Mar. 2, 2009, entitled VIRTUAL SERVICE PROVIDER SYSTEMS; U.S. application Ser. No. 12/380,757, filed Mar. 2, 2009, entitled SERVICE ACTIVATION TRACKING SYSTEM, now U.S. Pat. No. 8,326,958 (issued Dec. 4, 2012); U.S. application Ser. No. 12/380,781, filed Mar. 2, 2009, entitled OPEN TRANSACTION CENTRAL BILLING SYSTEM, now U.S. Pat. No. 8,229,812 (issued Jul. 24, 2012); U.S. application Ser. No. 12/380,774, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,773, filed Mar. 2, 2009, entitled VERIFIABLE SERVICE POLICY IMPLEMENTATION FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,769, filed Mar. 2, 2009, entitled SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,777, filed Mar. 2, 2009, entitled SIMPLIFIED SERVICE NETWORK ARCHITECTURE; U.S. application Ser. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No. 8,275,830 (issued Sep. 25, 2012); U.S. application Ser. No. 12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT SERVICES; U.S. application Ser. No. 12/694,445, filed Jan. 27, 2010, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES; U.S. application Ser. No. 12/694,451, filed Jan. 27, 2010, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM; U.S. application Ser. No. 12/694,455, filed Jan. 27, 2010, entitled DEVICE ASSISTED SERVICES INSTALL; U.S. application Ser. No. 12/695,021, filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTED SERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013); U.S. application Ser. No. 12/695,980, filed Jan. 28, 2010, entitled ENHANCED ROAMING SERVICES AND CONVERGED CARRIER NETWORKS WITH DEVICE ASSISTED SERVICES AND A PROXY, now U.S. Pat. No. 8,340,634 (issued Dec. 25, 2012); U.S. application Ser. No. 13/134,028, filed May 25, 2011, entitled DEVICE-ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S. application Ser. No. 13/229,580, filed Sep. 9, 2011, entitled WIRELESS NETWORK SERVICE INTERFACES; U.S. application Ser. No. 13/237,827, filed Sep. 20, 2011, entitled ADAPTING NETWORK POLICIES BASED ON DEVICE SERVICE PROCESSOR CONFIGURATION; U.S. application Ser. No. 13/253,013, filed Oct. 4, 2011, entitled SYSTEM AND METHOD FOR PROVIDING USER NOTIFICATIONS; U.S. application Ser. No. 13/239,321, filed Sep. 21, 2011, entitled SERVICE OFFER SET PUBLISHING TO DEVICE AGENT WITH ON-DEVICE SERVICE SELECTION; U.S. application Ser. No. 13/248,028, filed Sep. 28, 2011, entitled ENTERPRISE ACCESS CONTROL AND ACCOUNTING ALLOCATION FOR ACCESS NETWORKS; U.S. application Ser. No. 13/247,998, filed Sep. 28, 2011, entitled SECURE DEVICE DATA RECORDS; U.S. application Ser. No. 13/309,463, filed Dec. 1, 2011, entitled SECURITY, FRAUD DETECTION, AND FRAUD MITIGATION IN DEVICE-ASSISTED SERVICES SYSTEMS; U.S. application Ser. No. 13/248,025 filed Sep. 28, 2011, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; and U.S. application Ser. No. 13/134,005, filed May 25, 2011, entitled SYSTEM AND METHOD FOR WIRELESS NETWORK OFFLOADING.

[0021] U.S. application Ser. No. 13/309,463, filed Dec. 1, 2011, entitled SECURITY, FRAUD DETECTION, AND FRAUD MITIGATION IN DEVICE-ASSISTED SERVICES SYSTEMS, is a continuation-in-part application of the following U.S. patent applications: U.S. application Ser. No. 12/380,759, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE POLICY IMPLEMENTATION, now U.S. Pat. No. 8,270,310 (issued on Sep. 18, 2012); U.S. application Ser. No. 12/380,779, filed Mar. 2, 2009, entitled DEVICE ASSISTED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY, AND USER PRIVACY; U.S. application Ser. No. 12/380,758, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE MONITORING WITH REPORTING, SYNCHRONIZATION, AND NOTIFICATION; U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012); U.S. application Ser. No. 12/380,768, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE POLICY IMPLEMENTATION WITH NETWORK NEUTRALITY AND USER PRIVACY; U.S. application Ser. No. 12/380,767, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY, now U.S. Pat. No. 8,355,337 (issued on Jan. 15, 2013); U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; U.S. application Ser. No. 12/380,755, filed Mar. 2, 2009, entitled DEVICE ASSISTED AMBIENT SERVICES, now U.S. Pat. No. 8,331,901 (issued Dec. 11, 2012); U.S. application Ser. No. 12/380,756, filed Mar. 2, 2009, entitled NETWORK BASED AMBIENT SERVICES, now U.S. Pat. No. 8,250,207 (issued Aug. 21, 2012); U.S. application Ser. No. 12/380,770, entitled NETWORK TOOLS FOR ANALYSIS, DESIGN, TESTING, AND PRODUCTION OF SERVICES, now abandoned; U.S. application Ser. No. 12/380,772, filed Mar. 2, 2009, entitled ROAMING SERVICES NETWORK AND OVERLAY NETWORKS; U.S. application Ser. No. 12/380,782, filed Mar. 2, 2009, entitled OPEN DEVELOPMENT SYSTEM FOR ACCESS SERVICE PROVIDERS, now U.S. Pat. No. 8,270,952 (issued Sep. 18, 2012); U.S. application Ser. No. 12/380,783, filed Mar. 2, 2009, entitled VIRTUAL SERVICE PROVIDER SYSTEMS; U.S. application Ser. No. 12/380,757, filed Mar. 2, 2009, entitled SERVICE ACTIVATION TRACKING SYSTEM, now U.S. Pat. No. 8,326,958 (issued Dec. 4, 2012); U.S. application Ser. No. 12/380,781, filed Mar. 2, 2009, entitled OPEN TRANSACTION CENTRAL BILLING SYSTEM, now U.S. Pat. No. 8,229,812 (issued Jul. 24, 2012); U.S. application Ser. No. 12/380,774, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,773, filed Mar. 2, 2009, entitled VERIFIABLE SERVICE POLICY IMPLEMENTATION FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,769, filed Mar. 2, 2009, entitled SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,777, filed Mar. 2, 2009, entitled SIMPLIFIED SERVICE NETWORK ARCHITECTURE; U.S. application Ser. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No. 8,275,830 (issued Sep. 25, 2012); U.S. application Ser. No. 12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT

[0022] SERVICES; U.S. application Ser. No. 12/694,445, filed Jan. 27, 2010, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES; U.S. application Ser. No. 12/694,451, filed Jan. 27, 2010, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM; U.S. application Ser. No. 12/694,455, filed Jan. 27, 2010, entitled DEVICE ASSISTED SERVICES INSTALL; U.S. application Ser. No. 12/695,021, filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTED SERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013); U.S. application Ser. No. 12/695,980, filed Jan. 28, 2010, entitled ENHANCED ROAMING SERVICES AND CONVERGED CARRIER NETWORKS WITH DEVICE ASSISTED SERVICES AND A PROXY, now U.S. Pat. No. 8,340,634 (issued Dec. 25, 2012); U.S. application Ser. No. 13/134,028, filed May 25, 2011, entitled DEVICE-ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S. application Ser. No. 13/229,580, filed Sep. 9, 2011, entitled WIRELESS NETWORK SERVICE INTERFACES; U.S. application Ser. No. 13/237,827, filed Sep. 20, 2011, entitled ADAPTING NETWORK POLICIES BASED ON DEVICE SERVICE PROCESSOR CONFIGURATION; U.S. application Ser. No. 13/253,013, filed Oct. 4, 2011, entitled SYSTEM AND METHOD FOR PROVIDING USER NOTIFICATIONS; U.S. application Ser. No. 13/239,321, filed Sep. 21, 2011, entitled SERVICE OFFER SET PUBLISHING TO DEVICE AGENT WITH ON-DEVICE SERVICE SELECTION; U.S. application Ser. No. 13/248,028, filed Sep. 28, 2011, entitled ENTERPRISE ACCESS CONTROL AND ACCOUNTING ALLOCATION FOR ACCESS NETWORKS; U.S. application Ser. No. 13/247,998, filed Sep. 28, 2011, entitled SECURE DEVICE DATA RECORDS; U.S. application Ser. No. 13/309,556 filed Dec. 1, 2011, entitled END USER DEVICE THAT SECURES AN ASSOCIATION OF APPLICATION TO SERVICE POLICY WITH AN APPLICATION CERTIFICATE CHECK; U.S. application Ser. No. 13/248,025) filed Sep. 28, 2011, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; and U.S. application Ser. No. 13/134,005, filed May 25, 2011, entitled SYSTEM AND METHOD FOR WIRELESS NETWORK OFFLOADING.

[0023] U.S. application Ser. No. 13/330,948, filed Dec. 20, 2011, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION ACCOUNTING, AND MULTI-ACCOUNT, is a continuation application of U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012).

[0024] U.S. application Ser. No. 13/331,487 filed Dec. 20, 2011, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION ACCOUNTING, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,351,898 (issued Jan. 8, 2013), is a continuation application of U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012).

[0025] U.S. application Ser. No. 13/368,294, filed Feb. 7, 2012, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY, AND USER PRIVACY, is a divisional application of U.S. application Ser. No. 12/380,767, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY, now U.S. Pat. No. 8,355,337 (issued on Jan. 15, 2013).

[0026] U.S. application Ser. No. 13/374,959, filed Jan. 24, 2012, entitled FLOW TAGGING FOR SERVICE POLICY IMPLEMENTATION, is a continuation-in-part of the following U.S. patent applications: U.S. application Ser. No. 12/380,759, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE POLICY IMPLEMENTATION, now U.S. Pat. No. 8,270,310 (issued on Sep. 18, 2012); U.S. application Ser. No. 12/380,779, filed Mar. 2, 2009, entitled DEVICE ASSISTED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY, AND USER PRIVACY; U.S. application Ser. No. 12/380,758, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE MONITORING WITH REPORTING, SYNCHRONIZATION, AND NOTIFICATION; U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012); U.S. application Ser. No. 12/380,768, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE POLICY IMPLEMENTATION WITH NETWORK NEUTRALITY AND USER PRIVACY; U.S. application Ser. No. 12/380,767, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY, now U.S. Pat. No. 8,355,337 (issued on Jan. 15, 2013); U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; U.S. application Ser. No. 12/380,755, filed Mar. 2, 2009, entitled DEVICE ASSISTED AMBIENT SERVICES, now U.S. Pat. No. 8,331,901 (issued Dec. 11, 2012); U.S. application Ser. No. 12/380,756, filed Mar. 2, 2009, entitled NETWORK BASED AMBIENT SERVICES, now U.S. Pat. No. 8,250,207 (issued Aug. 21, 2012); U.S. application Ser. No. 12/380,770, entitled NETWORK TOOLS FOR ANALYSIS, DESIGN, TESTING, AND PRODUCTION OF SERVICES, now abandoned; U.S. application Ser. No. 12/380,772, filed Mar. 2, 2009, entitled ROAMING SERVICES NETWORK AND OVERLAY NETWORKS; U.S. application Ser. No. 12/380,782, filed Mar. 2, 2009, entitled OPEN DEVELOPMENT SYSTEM FOR ACCESS SERVICE PROVIDERS, now U.S. Pat. No. 8,270,952 (issued Sep. 18, 2012); U.S. application Ser. No. 12/380,783, filed Mar. 2, 2009, entitled VIRTUAL SERVICE PROVIDER SYSTEMS; U.S. application Ser. No. 12/380,757, filed Mar. 2, 2009, entitled SERVICE ACTIVATION TRACKING SYSTEM, now U.S. Pat. No. 8,326,958 (issued Dec. 4, 2012); U.S. application Ser. No. 12/380,781, filed Mar. 2, 2009, entitled OPEN TRANSACTION CENTRAL BILLING SYSTEM, now U.S. Pat. No. 8,229,812 (issued Jul. 24, 2012); U.S. application Ser. No. 12/380,774, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,771, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES, now U.S. Pat. No. 8,023,425 (issued Sep. 20, 2011); U.S. application Ser. No. 12/380,773, filed Mar. 2, 2009, entitled VERIFIABLE SERVICE POLICY IMPLEMENTATION FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,769, filed Mar. 2, 2009, entitled SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,777, filed Mar. 2, 2009, entitled SIMPLIFIED SERVICE NETWORK ARCHITECTURE; U.S. application Ser. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No. 8,275,830 (issued Sep. 25, 2012); U.S. application Ser. No. 12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT SERVICES; U.S. application Ser. No. 12/694,445, filed Jan. 27, 2010, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES; U.S. application Ser. No. 12/694,451, filed Jan. 27, 2010, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM; U.S. application Ser. No. 12/694,455, filed Jan. 27, 2010, entitled DEVICE ASSISTED SERVICES INSTALL; U.S. application Ser. No. 12/695,021, filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTED SERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013); U.S. application Ser. No. 12/695,980, filed Jan. 28, 2010, entitled ENHANCED ROAMING SERVICES AND CONVERGED CARRIER NETWORKS WITH DEVICE ASSISTED SERVICES AND A PROXY, now U.S. Pat. No. 8,340,634 (issued Dec. 25, 2012); U.S. application Ser. No. 13/134,028, filed May 25, 2011, entitled DEVICE-ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S. application Ser. No. 13/229,580, filed Sep. 9, 2011, entitled WIRELESS NETWORK SERVICE INTERFACES; U.S. application Ser. No. 13/237,827, filed Sep. 20, 2011, entitled ADAPTING NETWORK POLICIES BASED ON DEVICE SERVICE PROCESSOR CONFIGURATION; U.S. application Ser. No. 13/253,013, filed Oct. 4, 2011, entitled SYSTEM AND METHOD FOR PROVIDING USER NOTIFICATIONS; U.S. application Ser. No. 13/239,321, filed Sep. 21, 2011, entitled SERVICE OFFER SET PUBLISHING TO DEVICE AGENT WITH ON-DEVICE SERVICE SELECTION; U.S. application Ser. No. 13/248,028, filed Sep. 28, 2011, entitled ENTERPRISE ACCESS CONTROL AND ACCOUNTING ALLOCATION FOR ACCESS NETWORKS; U.S. application Ser. No. 13/247,998, filed Sep. 28, 2011, entitled SECURE DEVICE DATA RECORDS; U.S. application Ser. No. 13/309,556 filed Dec. 1, 2011, entitled END USER DEVICE THAT SECURES AN ASSOCIATION OF APPLICATION TO SERVICE POLICY WITH AN APPLICATION CERTIFICATE CHECK; U.S. application Ser. No. 13/309,463, filed Dec. 1, 2011, entitled SECURITY, FRAUD DETECTION, AND FRAUD MITIGATION IN DEVICE-ASSISTED SERVICES SYSTEMS; U.S. application Ser. No. 13/248,025 filed Sep. 28, 2011, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; U.S. application Ser. No. 13/134,005, filed May 25, 2011, entitled SYSTEM AND METHOD FOR WIRELESS NETWORK OFFLOADING; U.S. application Ser. No. 13/330,948, filed Dec. 20, 2011, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION ACCOUNTING, AND MULTI-ACCOUNT; and U.S. application Ser. No. 13/331,487 filed Dec. 20, 2011, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION ACCOUNTING, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,351,898 (issued Jan. 8, 2013).

[0027] The following U.S. applications claim the benefit of U.S. Provisional Application No. 61/206,354, filed Jan. 28, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/206,944, filed Feb. 4, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/207,393, filed Feb. 10, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; and U.S. Provisional Application No. 61/207,739, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD, filed Feb. 13, 2009: U.S. application Ser. No. 12/380,759, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE POLICY IMPLEMENTATION, now U.S. Pat. No. 8,270,310 (issued on Sep. 18, 2012); U.S. application Ser. No. 12/380,779, filed Mar. 2, 2009, entitled DEVICE ASSISTED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY, AND USER PRIVACY; U.S. application Ser. No. 12/380,758, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE MONITORING WITH REPORTING, SYNCHRONIZATION, AND NOTIFICATION; U.S. application Ser. No. 12/380,778, filed Mar. 2, 2009, entitled VERIFIABLE DEVICE ASSISTED SERVICE USAGE BILLING WITH INTEGRATED ACCOUNTING, MEDIATION, AND MULTI-ACCOUNT, now U.S. Pat. No. 8,321,526 (issued on Nov. 27, 2012); U.S. application Ser. No. 12/380,768, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE POLICY IMPLEMENTATION WITH NETWORK NEUTRALITY AND USER PRIVACY; U.S. application Ser. No. 12/380,767, filed Mar. 2, 2009, entitled NETWORK BASED SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY, now U.S. Pat. No. 8,355,337 (issued on Jan. 15, 2013); U.S. application Ser. No. 12/380,780, filed Mar. 2, 2009, entitled AUTOMATED DEVICE PROVISIONING AND ACTIVATION; U.S. application Ser. No. 12/380,755, filed Mar. 2, 2009, entitled DEVICE ASSISTED AMBIENT SERVICES, now U.S. Pat. No. 8,331,901 (issued Dec. 11, 2012); U.S. application Ser. No. 12/380,756, filed Mar. 2, 2009, entitled NETWORK BASED AMBIENT SERVICES, now U.S. Pat. No. 8,250,207 (issued Aug. 21, 2012); U.S. application Ser. No. 12/380,770, entitled NETWORK TOOLS FOR ANALYSIS, DESIGN, TESTING, AND PRODUCTION OF SERVICES, now abandoned; U.S. application Ser. No. 12/380,772, filed Mar. 2, 2009, entitled ROAMING SERVICES NETWORK AND OVERLAY NETWORKS; U.S. application Ser. No. 12/380,782, filed Mar. 2, 2009, entitled OPEN DEVELOPMENT SYSTEM FOR ACCESS SERVICE PROVIDERS, now U.S. Pat. No. 8,270,952 (issued Sep. 18, 2012); U.S. application Ser. No. 12/380,783, filed Mar. 2, 2009, entitled VIRTUAL SERVICE PROVIDER SYSTEMS; U.S. application Ser. No. 12/380,757, filed Mar. 2, 2009, entitled SERVICE ACTIVATION TRACKING SYSTEM, now U.S. Pat. No. 8,326,958 (issued Dec. 4, 2012); U.S. application Ser. No. 12/380,781, filed Mar. 2, 2009, entitled OPEN TRANSACTION CENTRAL BILLING SYSTEM, now U.S. Pat. No. 8,229,812 (issued Jul. 24, 2012); U.S. application Ser. No. 12/380,774, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,771, filed Mar. 2, 2009, entitled VERIFIABLE AND ACCURATE SERVICE USAGE MONITORING FOR INTERMEDIATE NETWORKING DEVICES, now U.S. Pat. No. 8,023,425 (issued Sep. 20, 2011); U.S. application Ser. No. 12/380,773, filed Mar. 2, 2009, entitled VERIFIABLE SERVICE POLICY IMPLEMENTATION FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,769, filed Mar. 2, 2009, entitled SERVICE PROFILE MANAGEMENT WITH USER PREFERENCE, ADAPTIVE POLICY, NETWORK NEUTRALITY AND USER PRIVACY FOR INTERMEDIATE NETWORKING DEVICES; U.S. application Ser. No. 12/380,777, filed Mar. 2, 2009, entitled SIMPLIFIED SERVICE NETWORK ARCHITECTURE.

[0028] U U.S. application Ser. No. 12/695,019, filed Jan. 27, 2010, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING, now U.S. Pat. No. 8,275,830 (issued Sep. 25, 2012), claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/206,354, filed Jan. 28, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/206,944, filed Feb. 4, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/207,393, filed Feb. 10, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/207,739, filed Feb. 13, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/270,353, filed on Jul. 6, 2009, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING; and U.S. Provisional Application No. 61/264,126, filed Nov. 24, 2009, entitled DEVICE ASSISTED SERVICES ACTIVITY MAP.

[0029] U.S. application Ser. No. 12/695,020, filed Jan. 27, 2010, entitled ADAPTIVE AMBIENT SERVICES, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/206,354, filed Jan. 28, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/206,944, filed Feb. 4, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/207,393, filed Feb. 10, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/207,739, filed Feb. 13, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/275,208, filed Aug. 25, 2009, entitled ADAPTIVE AMBIENT SERVICES; and U.S. Provisional Application No. 61/237,753, filed Aug. 28, 2009, entitled ADAPTIVE AMBIENT SERVICES.

[0030] U.S. application Ser. No. 12/694,445, filed Jan. 27, 2010, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/206,354, filed Jan. 28, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/206,944, filed Feb. 4, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/207,393, filed Feb. 10, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/207,739, filed Feb. 13, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; and U.S. Provisional Application No. 61/252,151, filed Oct. 15, 2009, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES.

[0031] U.S. application Ser. No. 12/694,451, filed Jan. 27, 2010, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/206,354, filed Jan. 28, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/206,944, filed Feb. 4, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/207,393, filed Feb. 10, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/207,739, filed Feb. 13, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/270,353, filed Jul. 6, 2009, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING; and U.S. Provisional Application No. 61/252,153, filed Oct. 15, 2009, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM.

[0032] U.S. application Ser. No. 12/694,455, filed Jan. 27, 2010, entitled DEVICE ASSISTED SERVICES INSTALL, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/206,354, filed Jan. 28, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/206,944, filed Feb. 4, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/207,393, filed Feb. 10, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/207,739, filed Feb. 13, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; and U.S. Provisional Application No. 61/264,120, filed Nov. 24, 2009, entitled DEVICE ASSISTED SERVICES INSTALL.

[0033] U.S. application Ser. No. 12/695,021, filed Jan. 27, 2010, entitled QUALITY OF SERVICE FOR DEVICE ASSISTED SERVICES, now U.S. Pat. No. 8,346,225 (issued Jan. 1, 2013), claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/206,354, filed Jan. 28, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/206,944, filed Feb. 4, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/207,393, filed Feb. 10, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/207,739, filed Feb. 13, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/252,151, filed Oct. 15, 2009, entitled SECURITY TECHNIQUES FOR DEVICE ASSISTED SERVICES; and U.S. Provisional Application No. 61/252,153, filed Oct. 15, 2009, entitled DEVICE GROUP PARTITIONS AND SETTLEMENT PLATFORM.

[0034] U.S. application Ser. No. 12/695,980, filed Jan. 28, 2010, entitled ENHANCED ROAMING SERVICES AND CONVERGED CARRIER NETWORKS WITH DEVICE ASSISTED SERVICES AND A PROXY, now U.S. Pat. No. 8,340,634 (issued Dec. 25, 2012), claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/206,354, filed Jan. 28, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/206,944, filed Feb. 4, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/207,393, filed Feb. 10, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; U.S. Provisional Application No. 61/207,739, filed Feb. 13, 2009, entitled SERVICES POLICY COMMUNICATION SYSTEM AND METHOD; and U.S. Provisional Application No. 61/270,353, filed on Jul. 6, 2009, entitled DEVICE ASSISTED CDR CREATION, AGGREGATION, MEDIATION AND BILLING.

[0035] U.S. application Ser. No. 13/134,028, filed May 25, 2011, entitled DEVICE-ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/348,022, filed May 25, 2010, entitled DEVICE ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S. Provisional Application No. 61/381,159, filed Sep. 9, 2010, entitled DEVICE ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S. Provisional Application No. 61/381,162, filed Sep. 9, 2010, entitled SERVICE CONTROLLER INTERFACES AND WORKFLOWS; U.S. Provisional Application No. 61/384,456, filed Sep. 20, 2010, entitled SECURING SERVICE PROCESSOR WITH SPONSORED SIMS; U.S. Provisional Application No. 61/389,547, filed Oct. 4, 2010, entitled USER NOTIFICATIONS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/385,020, filed Sep. 21, 2010, entitled SERVICE USAGE RECONCILIATION SYSTEM OVERVIEW; U.S. Provisional Application No. 61/387,243, filed Sep. 28, 2010, entitled ENTERPRISE AND CONSUMER BILLING ALLOCATION FOR WIRELESS COMMUNICATION DEVICE SERVICE USAGE ACTIVITIES; U.S. Provisional Application No. 61/387,247, filed Sep. 28, 2010, entitled SECURED DEVICE DATA RECORDS; U.S. Provisional Application No. 61/407,358, filed Oct. 27, 2010, entitled SERVICE CONTROLLER AND SERVICE PROCESSOR ARCHITECTURE; U.S. Provisional Application No. 61/418,507, filed Dec. 1, 2010, entitled APPLICATION SERVICE PROVIDER INTERFACE SYSTEM; U.S. Provisional Application No. 61/418,509, filed Dec. 1, 2010, entitled SERVICE USAGE REPORTING RECONCILIATION AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/420,727, filed Dec. 7, 2010, entitled SECURE DEVICE DATA RECORDS; U.S. Provisional Application No. 61/422,565, filed Dec. 13, 2010, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,572, filed Dec. 13, 2010, entitled SYSTEM INTERFACES AND WORKFLOWS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,574, filed Dec. 13, 2010, entitled SECURITY AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/435,564, filed Jan. 24, 2011, entitled FRAMEWORK FOR DEVICE ASSISTED SERVICES; and U.S. Provisional Application No. 61/472,606, filed Apr. 6, 2011, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECT PLACEMENT ON A DEVICE.

[0036] U.S. application Ser. No. 13/229,580, filed Sep. 9, 2011, entitled WIRELESS NETWORK SERVICE INTERFACES, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/381,159, filed Sep. 9, 2010, entitled DEVICE ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S. Provisional Application No. 61/381,162, filed Sep. 9, 2010, entitled SERVICE CONTROLLER INTERFACES AND WORKFLOWS; U.S. Provisional Application No. 61/384,456, filed Sep. 20, 2010, entitled SECURING SERVICE PROCESSOR WITH SPONSORED SIMS; U.S. Provisional Application No. 61/389,547, filed Oct. 4, 2010, entitled USER NOTIFICATIONS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/385,020, filed Sep. 21, 2010, entitled SERVICE USAGE RECONCILIATION SYSTEM OVERVIEW; U.S. Provisional Application No. 61/387,243, filed Sep. 28, 2010, entitled ENTERPRISE AND CONSUMER BILLING ALLOCATION FOR WIRELESS COMMUNICATION DEVICE SERVICE USAGE ACTIVITIES; U.S. Provisional Application No. 61/387,247, filed Sep. 28, 2010, entitled SECURED DEVICE DATA RECORDS; U.S. Provisional Application No. 61/407,358, filed Oct. 27, 2010, entitled SERVICE CONTROLLER AND SERVICE PROCESSOR ARCHITECTURE; U.S. Provisional Application No. 61/418,507, filed Dec. 1, 2010, entitled APPLICATION SERVICE PROVIDER INTERFACE SYSTEM; U.S. Provisional Application No. 61/418,509, filed Dec. 1, 2010, entitled SERVICE USAGE REPORTING RECONCILIATION AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/420,727, filed Dec. 7, 2010, entitled SECURE DEVICE DATA RECORDS; U.S. Provisional Application No. 61/422,565, filed Dec. 13, 2010, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,572, filed Dec. 13, 2010, entitled SYSTEM INTERFACES AND WORKFLOWS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,574, filed Dec. 13, 2010, entitled SECURITY AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/435,564, filed Jan. 24, 2011, entitled FRAMEWORK FOR DEVICE ASSISTED SERVICES; and U.S. Provisional Application No. 61/472,606, filed Apr. 6, 2011, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECT PLACEMENT ON A DEVICE.

[0037] U.S. application Ser. No. 13/237,827, filed Sep. 20, 2011, entitled ADAPTING NETWORK POLICIES BASED ON DEVICE SERVICE PROCESSOR CONFIGURATION, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/384,456, filed Sep. 20, 2010, entitled SECURING SERVICE PROCESSOR WITH SPONSORED SIMS; U.S. Provisional Application No. 61/389,547, filed Oct. 4, 2010, entitled USER NOTIFICATIONS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/385,020, filed Sep. 21, 2010, entitled SERVICE USAGE RECONCILIATION SYSTEM OVERVIEW; U.S. Provisional Application No. 61/387,243, filed Sep. 28, 2010, entitled ENTERPRISE AND CONSUMER BILLING ALLOCATION FOR WIRELESS COMMUNICATION DEVICE SERVICE USAGE ACTIVITIES; U.S. Provisional Application No. 61/387,247, filed Sep. 28, 2010, entitled SECURED DEVICE DATA RECORDS; U.S. Provisional Application No. 61/407,358, filed Oct. 27, 2010, entitled SERVICE CONTROLLER AND SERVICE PROCESSOR ARCHITECTURE; U.S. Provisional Application No. 61/418,507, filed Dec. 1, 2010, entitled APPLICATION SERVICE PROVIDER INTERFACE SYSTEM; U.S. Provisional Application No. 61/418,509, filed Dec. 1, 2010, entitled SERVICE USAGE REPORTING RECONCILIATION AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/420,727, filed Dec. 7, 2010, entitled SECURE DEVICE DATA RECORDS; U.S. Provisional Application No. 61/422,565, filed Dec. 13, 2010, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,572, filed Dec. 13, 2010, entitled SYSTEM INTERFACES AND WORKFLOWS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,574, filed Dec. 13, 2010, entitled SECURITY AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/435,564, filed Jan. 24, 2011, entitled FRAMEWORK FOR DEVICE ASSISTED SERVICES; and U.S. Provisional Application No. 61/472,606, filed Apr. 6, 2011, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECT PLACEMENT ON A DEVICE.

[0038] U.S. application Ser. No. 13/253,013, filed Oct. 4, 2011, entitled SYSTEM AND METHOD FOR PROVIDING USER NOTIFICATIONS, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/389,547, filed Oct. 4, 2010, entitled USER NOTIFICATIONS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/407,358, filed Oct. 27, 2010, entitled SERVICE CONTROLLER AND SERVICE PROCESSOR ARCHITECTURE; U.S. Provisional Application No. 61/418,507, filed Dec. 1, 2010, entitled APPLICATION SERVICE PROVIDER INTERFACE SYSTEM; U.S. Provisional Application No. 61/418,509, filed Dec. 1, 2010, entitled SERVICE USAGE REPORTING RECONCILIATION AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/420,727, filed Dec. 7, 2010, entitled SECURE DEVICE DATA RECORDS; U.S. Provisional Application No. 61/422,565, filed Dec. 13, 2010, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,572, filed Dec. 13, 2010, entitled SYSTEM INTERFACES AND WORKFLOWS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,574, filed Dec. 13, 2010, entitled SECURITY AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/435,564, filed Jan. 24, 2011, entitled FRAMEWORK FOR DEVICE ASSISTED SERVICES; and U.S. Provisional Application No. 61/472,606, filed Apr. 6, 2011, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECT PLACEMENT ON A DEVICE.

[0039] U.S. application Ser. No. 13/239,321, filed Sep. 21, 2011, entitled SERVICE OFFER SET PUBLISHING TO DEVICE AGENT WITH ON-DEVICE SERVICE SELECTION, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/389,547, filed Oct. 4, 2010, entitled USER NOTIFICATIONS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/385,020, filed Sep. 21, 2010, entitled SERVICE USAGE RECONCILIATION SYSTEM OVERVIEW; U.S. Provisional Application No. 61/387,243, filed Sep. 28, 2010, entitled ENTERPRISE AND CONSUMER BILLING ALLOCATION FOR WIRELESS COMMUNICATION DEVICE SERVICE USAGE ACTIVITIES; U.S. Provisional Application No. 61/387,247, filed Sep. 28, 2010, entitled SECURED DEVICE DATA RECORDS; U.S. Provisional Application No. 61/407,358, filed Oct. 27, 2010, entitled SERVICE CONTROLLER AND SERVICE PROCESSOR ARCHITECTURE; U.S. Provisional Application No. 61/418,507, filed Dec. 1, 2010, entitled APPLICATION SERVICE PROVIDER INTERFACE SYSTEM; U.S. Provisional Application No. 61/418,509, filed Dec. 1, 2010, entitled SERVICE USAGE REPORTING RECONCILIATION AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/420,727, filed Dec. 7, 2010, entitled SECURE DEVICE DATA RECORDS; U.S. Provisional Application No. 61/422,565, filed Dec. 13, 2010, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,572, filed Dec. 13, 2010, entitled SYSTEM INTERFACES AND WORKFLOWS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,574, filed Dec. 13, 2010, entitled SECURITY AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/435,564, filed Jan. 24, 2011, entitled FRAMEWORK FOR DEVICE ASSISTED SERVICES; and U.S. Provisional Application No. 61/472,606, filed Apr. 6, 2011, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECT PLACEMENT ON A DEVICE.

[0040] U.S. application Ser. No. 13/248,028, filed Sep. 28, 2011, entitled ENTERPRISE ACCESS CONTROL AND ACCOUNTING ALLOCATION FOR ACCESS NETWORKS, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/389,547, filed Oct. 4, 2010, entitled USER NOTIFICATIONS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/387,243, filed Sep. 28, 2010, entitled ENTERPRISE AND CONSUMER BILLING ALLOCATION FOR WIRELESS COMMUNICATION DEVICE SERVICE USAGE ACTIVITIES; U.S. Provisional Application No. 61/387,247, filed Sep. 28, 2010, entitled SECURED DEVICE DATA RECORDS; U.S. Provisional Application No. 61/407,358, filed Oct. 27, 2010, entitled SERVICE CONTROLLER AND SERVICE PROCESSOR ARCHITECTURE; U.S. Provisional Application No. 61/418,507, filed Dec. 1, 2010, entitled APPLICATION SERVICE PROVIDER INTERFACE SYSTEM; U.S. Provisional Application No. 61/418,509, filed Dec. 1, 2010, entitled SERVICE USAGE REPORTING RECONCILIATION AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/420,727, filed Dec. 7, 2010, entitled SECURE DEVICE DATA RECORDS; U.S. Provisional Application No. 61/422,565, filed Dec. 13, 2010, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,572, filed Dec. 13, 2010, entitled SYSTEM INTERFACES AND WORKFLOWS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,574, filed Dec. 13, 2010, entitled SECURITY AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/435,564, filed Jan. 24, 2011, entitled FRAMEWORK FOR DEVICE ASSISTED SERVICES; and U.S. Provisional Application No. 61/472,606, filed Apr. 6, 2011, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECT PLACEMENT ON A DEVICE.

[0041] U.S. application Ser. No. 13/247,998, filed Sep. 28, 2011, entitled SECURE DEVICE DATA RECORDS, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/389,547, filed Oct. 4, 2010, entitled USER NOTIFICATIONS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/387,243, filed Sep. 28, 2010, entitled ENTERPRISE AND CONSUMER BILLING ALLOCATION FOR WIRELESS COMMUNICATION DEVICE SERVICE USAGE ACTIVITIES; U.S. Provisional Application No. 61/387,247, filed Sep. 28, 2010, entitled SECURED DEVICE DATA RECORDS; U.S. Provisional Application No. 61/407,358, filed Oct. 27, 2010, entitled SERVICE CONTROLLER AND SERVICE PROCESSOR ARCHITECTURE; U.S. Provisional Application No. 61/418,507, filed Dec. 1, 2010, entitled APPLICATION SERVICE PROVIDER INTERFACE SYSTEM; U.S. Provisional Application No. 61/418,509, filed Dec. 1, 2010, entitled SERVICE USAGE REPORTING RECONCILIATION AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/420,727, filed Dec. 7, 2010, entitled SECURE DEVICE DATA RECORDS; U.S. Provisional Application No. 61/422,565, filed Dec. 13, 2010, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,572, filed Dec. 13, 2010, entitled SYSTEM INTERFACES AND WORKFLOWS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,574, filed Dec. 13, 2010, entitled SECURITY AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/435,564, filed Jan. 24, 2011, entitled FRAMEWORK FOR DEVICE ASSISTED SERVICES; and U.S. Provisional Application No. 61/472,606, filed Apr. 6, 2011, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECT PLACEMENT ON A DEVICE.

[0042] U.S. application Ser. No. 13/309,556, filed Dec. 1, 2011, entitled END USER DEVICE THAT SECURES AN ASSOCIATION OF APPLICATION TO SERVICE POLICY WITH AN APPLICATION CERTIFICATE CHECK, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/418,507, filed Dec. 1, 2010, entitled APPLICATION SERVICE PROVIDER INTERFACE SYSTEM; U.S. Provisional Application No. 61/418,509, filed Dec. 1, 2010, entitled SERVICE USAGE REPORTING RECONCILIATION AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/420,727, filed Dec. 7, 2010, entitled SECURE DEVICE DATA RECORDS; U.S. Provisional Application No. 61/422,565, filed Dec. 13, 2010, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,572, filed Dec. 13, 2010, entitled SYSTEM INTERFACES AND WORKFLOWS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,574, filed Dec. 13, 2010, entitled SECURITY AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/435,564, filed Jan. 24, 2011, entitled FRAMEWORK FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/472,606, filed Apr. 6, 2011, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECT PLACEMENT ON A DEVICE; and U.S. Provisional Application No. 61/550,906, filed Oct. 24, 2011, entitled SECURITY FOR DEVICE-ASSISTED SERVICES.

[0043] U.S. application Ser. No. 13/309,463, filed Dec. 1, 2011, entitled SECURITY, FRAUD DETECTION, AND FRAUD MITIGATION IN DEVICE-ASSISTED SERVICES SYSTEMS, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/418,507, filed Dec. 1, 2010, entitled APPLICATION SERVICE PROVIDER INTERFACE SYSTEM; U.S. Provisional Application No. 61/418,509, filed Dec. 1, 2010, entitled SERVICE USAGE REPORTING RECONCILIATION AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/420,727, filed Dec. 7, 2010, entitled SECURE DEVICE DATA RECORDS; U.S. Provisional Application No. 61/422,565, filed Dec. 13, 2010, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,572, filed Dec. 13, 2010, entitled SYSTEM INTERFACES AND WORKFLOWS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,574, filed Dec. 13, 2010, entitled SECURITY AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/435,564, filed Jan. 24, 2011, entitled FRAMEWORK FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/472,606, filed Apr. 6, 2011, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECT PLACEMENT ON A DEVICE; and U.S. Provisional Application No. 61/550,906, filed Oct. 24, 2011, entitled SECURITY FOR DEVICE-ASSISTED SERVICES.

[0044] U.S. application Ser. No. 13/248,025, filed Sep. 28, 2011, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/389,547, filed Oct. 4, 2010, entitled USER NOTIFICATIONS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/387,243, filed Sep. 28, 2010, entitled ENTERPRISE AND CONSUMER BILLING ALLOCATION FOR WIRELESS COMMUNICATION DEVICE SERVICE USAGE ACTIVITIES; U.S. Provisional Application No. 61/387,247, filed Sep. 28, 2010, entitled SECURED DEVICE DATA RECORDS; U.S. Provisional Application No. 61/407,358, filed Oct. 27, 2010, entitled SERVICE CONTROLLER AND SERVICE PROCESSOR ARCHITECTURE; U.S. Provisional Application No. 61/418,507, filed Dec. 1, 2010, entitled APPLICATION SERVICE PROVIDER INTERFACE SYSTEM; U.S. Provisional Application No. 61/418,509, filed Dec. 1, 2010, entitled SERVICE USAGE REPORTING RECONCILIATION AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/420,727, filed Dec. 7, 2010, entitled SECURE DEVICE DATA RECORDS; U.S. Provisional Application No. 61/422,565, filed Dec. 13, 2010, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,572, filed Dec. 13, 2010, entitled SYSTEM INTERFACES AND WORKFLOWS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,574, filed Dec. 13, 2010, entitled SECURITY AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/435,564, filed Jan. 24, 2011, entitled FRAMEWORK FOR DEVICE ASSISTED SERVICES; and U.S. Provisional Application No. 61/472,606, filed Apr. 6, 2011, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECT PLACEMENT ON A DEVICE.

[0045] U.S. application Ser. No. 13/374,959, filed Jan. 24, 2012, entitled FLOW TAGGING FOR SERVICE POLICY IMPLEMENTATION, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/435,564, filed Jan. 24, 2011, entitled FRAMEWORK FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/472,606, filed Apr. 6, 2011, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECT PLACEMENT ON A DEVICE; and U.S. Provisional Application No. 61/550,906, filed Oct. 24, 2011, entitled SECURITY FOR DEVICE-ASSISTED SERVICES; and U.S. Provisional Application No. 61/589,830, filed Jan. 23, 2012, entitled METHODS AND APPARATUS TO PRESENT INFORMATION ABOUT VOICE, MESSAGING, AND DATA SERVICES ON WIRELESS MOBILE DEVICES.

[0046] U.S. application Ser. No. 13/441,821, filed Apr. 6, 2012, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECT PLACEMENT ON A DEVICE, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/472,606, filed Apr. 6, 2011, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECT PLACEMENT ON A DEVICE; U.S. Provisional Application No. 61/550,906, filed Oct. 24, 2011, entitled SECURITY FOR DEVICE-ASSISTED SERVICES; U.S. Provisional Application No. 61/589,830, filed Jan. 23, 2012, entitled METHODS AND APPARATUS TO PRESENT INFORMATION ABOUT VOICE, MESSAGING, AND DATA SERVICES ON WIRELESS MOBILE DEVICES; U.S. Provisional Application No. 61/610,876, filed Mar. 14, 2012, entitled METHODS AND APPARATUS FOR APPLICATION PROMOTION AND SPONSORSHIP; and U.S. Provisional Application No. 61/610,910, filed Mar. 14, 2012, entitled WIFI ACTIVATION BACKUP PROCESS.

[0047] U.S. application Ser. No. 13/134,005, filed May 25, 2011, entitled SYSTEM AND METHOD FOR WIRELESS NETWORK OFFLOADING, claims the benefit of the following U.S. Provisional Applications: U.S. Provisional Application No. 61/348,022, filed May 25, 2010, entitled DEVICE ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S. Provisional Application No. 61/381,159, filed Sep. 9, 2010, entitled DEVICE ASSISTED SERVICES FOR PROTECTING NETWORK CAPACITY; U.S. Provisional Application No. 61/381,162, filed Sep. 9, 2010, entitled SERVICE CONTROLLER INTERFACES AND WORKFLOWS; U.S. Provisional Application No. 61/384,456, filed Sep. 20, 2010, entitled SECURING SERVICE PROCESSOR WITH SPONSORED SIMS; U.S. Provisional Application No. 61/389,547, filed Oct. 4, 2010, entitled USER NOTIFICATIONS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/385,020, filed Sep. 21, 2010, entitled SERVICE USAGE RECONCILIATION SYSTEM OVERVIEW; U.S. Provisional Application No. 61/387,243, filed Sep. 28, 2010, entitled ENTERPRISE AND CONSUMER BILLING ALLOCATION FOR WIRELESS COMMUNICATION DEVICE SERVICE USAGE ACTIVITIES; U.S. Provisional Application No. 61/387,247, filed Sep. 28, 2010, entitled SECURED DEVICE DATA RECORDS; U.S. Provisional Application No. 61/407,358, filed Oct. 27, 2010, entitled SERVICE CONTROLLER AND SERVICE PROCESSOR ARCHITECTURE; U.S. Provisional Application No. 61/418,507, filed Dec. 1, 2010, entitled APPLICATION SERVICE PROVIDER INTERFACE SYSTEM; U.S. Provisional Application No. 61/418,509, filed Dec. 1, 2010, entitled SERVICE USAGE REPORTING RECONCILIATION AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/420,727, filed Dec. 7, 2010, entitled SECURE DEVICE DATA RECORDS; U.S. Provisional Application No. 61/422,565, filed Dec. 13, 2010, entitled SERVICE DESIGN CENTER FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,572, filed Dec. 13, 2010, entitled SYSTEM INTERFACES AND WORKFLOWS FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/422,574, filed Dec. 13, 2010, entitled SECURITY AND FRAUD DETECTION FOR DEVICE ASSISTED SERVICES; U.S. Provisional Application No. 61/435,564, filed Jan. 24, 2011, entitled FRAMEWORK FOR DEVICE ASSISTED SERVICES; and U.S. Provisional Application No. 61/472,606, filed Apr. 6, 2011, entitled MANAGING SERVICE USER DISCOVERY AND SERVICE LAUNCH OBJECT PLACEMENT ON A DEVICE.

[0048] All patent applications and patents listed above are incorporated by reference herein for all purposes.

[0049] In recent years, mobile wireless communication devices have become popular, and many individuals, families, and organizations use or own multiple mobile wireless communication devices. As would be appreciated by a person having ordinary skill in the art, there are many kinds of mobile wireless communication devices, including, for example, smart phones, tablets, laptops, mobile phones, personal digital assistants, and many others. These mobile wireless communication devices are capable of sending and receiving wireless radio frequency signals over one or more wireless communication networks, such as cellular (e.g., 2G, 2.5G, 3G, 4G, LTE, LTE advanced, etc.) networks, local-area (e.g., Wi-Fi) networks, or other wireless communication networks.

[0050] As the computing power of mobile end-user devices (e.g., smart phones, tablets, etc.) has increased, mobile devices have become capable of sending and receiving increasing amounts of data. In addition to e-mail and text messages, many of today's mobile devices can support a variety of applications that send large quantities of information to and from end users. For example, in addition to sending e-mail and text messages, many of today's mobile devices can deliver news, weather, sports, maps, social networking information, music, videos, high-resolution photographs, documents, presentations, and other kinds of information. Furthermore, users can take advantage of applications that provide transactional services, e.g., shopping for content (books, music, videos, etc.) or applications.

[0051] The ability of mobile devices to send and receive such a wide variety and large quantity of data has stressed wireless access network bandwidth capabilities. As a result, network operators are either eliminating service plans with unlimited data usage, or they are increasing the price of unlimited service plans so that such plans are not attractive to most consumers. Consequently, many users of mobile end-user devices subscribe to service plans that include only a limited amount of data per fixed time period (e.g., per month). Because today's mobile end-user devices can access (e.g., send or receive) large amounts of information, there is a potential for a user of a mobile device to exceed his or her data plan allowance without realizing it. It is well known that such “overages” in data usage can be very expensive because the billing rate for data usage exceeding the contracted service plan amount is often significantly higher than the billing rate under the service plan. At the same time subscribers face an increasing potential for overage conditions and thus may be reticent to take advantage of wireless access network data services, network operators face declining revenues and are motivated to increase data adoption by their subscribers.

[0052] Today, users of mobile devices (e.g., cellular phones, smart phones, etc.) subscribe to a service plan in order to take advantage of various services including voice, messaging, and data services offered by wireless service providers (e.g., carriers). This application discloses novel approaches that allow users to purchase services on an as-needed, a la carte basis, thus enabling users to have customized service plans and service plan combinations. This application also discloses novel ways to present information associated with voice, messaging, and data service plans through user interfaces of mobile devices.

[0053] The increased computing power of mobile devices has led to an explosion in the number of applications that are available for mobile devices. Hundreds of thousands of applications are available for Android-based devices and for Apple-based devices, and the number of available applications continues to grow at a rapid pace. Many of these applications are available for subscribers to download or purchase through an electronic “app store” or “marketplace.” A subscriber may find applications of interest to him or her by typing in a search word or phrase in a field in a search field offered by the app store or marketplace, or he or she may find an application by browsing a list offered by the app store or marketplace (e.g., popular applications). Often, however, subscriber visits to the app store are “hit and miss” unless a subscriber happens to know the name of a desired application or happens to type in a search word or phrase that results in the application being presented.

[0054] For application developers, getting subscribers to see, download, purchase, or use their applications is critical to the application developers' success because their revenues depend on purchases, downloads, and/or use of their applications. Yet because of the sheer number of applications available through marketplaces and app stores, and because of how subscribers may behave when browsing through the marketplace or app store, application developers have little control over whether a subscriber even finds their applications. This application discloses methods to improve the presentation and discovery of services, service plans, applications and content for users of mobile wireless communication devices.

[0055] Disclosed herein are methods, systems, and apparatuses to enable subscribers of mobile wireless communication devices to view, research, select and customize service plans for one or more mobile wireless communication devices. Also disclosed herein are methods, systems, and apparatuses that allow subscribers to create and manage a group of two or more devices (herein referred to as a device group) without service provider involvement. After a subscriber has established a master service account, the subscriber can create a device group by associating additional mobile wireless communication devices with the established master service account that is already associated with a master mobile wireless communication device. Also disclosed are methods, systems, and apparatuses to enable subscribers to share service plans among multiple devices in the device group. Also disclosed are methods, systems, and apparatuses to enable subscribers to fully or partially assign a service plan from one mobile wireless communication device to another mobile wireless communication device in the device group. Also disclosed are methods, systems, and apparatuses to allow subscribers to monitor or manage the mobile wireless communication devices in a device group from one or more master devices in the device group. Managing includes adding, deleting, or modifying devices or properties of devices, service plans, service accounts, etc.

[0056] Disclosed herein are methods, systems, and apparatuses to design the content and presentation of service plan offers targeted to specific users and groups of users of mobile wireless communication devices. Disclosed herein are methods, systems, and apparatuses to notify users of service plans for mobile wireless communication devices and of modifications to service plans to support particular service usage. Disclosed herein are methods, systems, and apparatuses to manage sharing, assigning, and restricting use of service plans by devices within a device group. Disclosed herein are methods, systems, and apparatuses to manage sponsorship of service plans through a device management system. Disclosed herein are methods, systems, and apparatuses to manage interfaces between systems of multiple service providers and a common network management system. Disclosed herein are methods, systems, and apparatuses to display information and receive inputs to manage communication services, including service plans, device groups, and service plan customization through graphical user interfaces of mobile wireless communication devices.

[0057] Disclosed herein are methods and apparatuses for managing service user discovery and service launch object placement on a mobile device. Disclosed is a method comprising obtaining information to assist in identifying a portion of a user interface of a wireless device, the wireless device communicatively coupled to the network system over a wireless access network, determining a differentiating attribute of the identified portion of the user interface, obtaining one or more service launch objects for placement in the identified portion of the user interface, and sending configuration information to the wireless device over the wireless access network, the configuration information at least configured to assist the wireless device in placing the one or more service launch objects in the identified portion of the user interface.

[0058] Disclosed herein are methods and apparatus to facilitate promoting particular applications or services and to enable sponsorship of applications or services. Using these methods and apparatus allows network operators to encourage subscriber use of data services while simultaneously alleviating subscriber fears of overage conditions. In addition, the methods and apparatus disclosed herein allow application developers to promote or sponsor use of their applications or particular services, thus increasing their potential for success.

[0059] Disclosed herein are methods, systems, and apparatuses to design and manage communication services using application programming interfaces (APIs) for mobile wireless communication devices and for network elements communicatively connected to the mobile wireless communication devices. In some embodiments, API functionality is provided on a mobile wireless communication device, on one or more network elements, and/or partly on both mobile devices and network elements. Disclosed herein are methods, systems, and apparatuses to enable subscribers of mobile wireless communication devices to view, research, select and customize service plans for one or more mobile wireless communication devices using one or more APIs. Also disclosed herein are methods, systems, and apparatuses that allow subscribers to create and manage a group of two or more devices (herein referred to as a device group) and to share or assign service plans with difference devices in the device group using one or more APIs. Also disclosed herein are methods, systems, and apparatuses to allow subscribers to monitor and manage mobile wireless communication devices in a device group using one or more APIs. Managing includes adding, deleting, or modifying devices or properties of devices, service plans, service accounts, etc. Also disclosed herein are methods, systems, and apparatuses to enable subscribers, service providers, and third parties to manage communication services for mobile wireless communication devices in a uniform consistent manner across different devices and/or different service providers using one or more APIs. Also disclosed herein are methods, systems and apparatuses that provide for communication of control messages for device authorization, device activation, service plan selection and customization, service plan provisioning, service usage monitoring, service notifications, service control, service accounting/charging/billing, and service plan design using one or more APIs.

[0379] The invention can be implemented in numerous ways, including as a process; an apparatus; a system; a composition of matter; a computer program product embodied on a computer readable storage medium; and/or a processor, such as a processor configured to execute instructions stored on and/or provided by a memory coupled to the processor. In this specification, these implementations, or any other form that the invention may take, may be referred to as techniques. In general, the order of the steps of disclosed processes may be altered within the scope of the invention. Unless stated otherwise, a component such as a processor or a memory described as being configured to perform a task may be implemented as a general component that is temporarily configured to perform the task at a given time or a specific component that is manufactured to perform the task. As used herein, the term “processor” refers to one or more devices, circuits, and/or processing cores configured to process data, such as computer program instructions.

[0380] A detailed description of one or more embodiments of the invention is provided below along with accompanying figures that illustrate the principles of the invention. The invention is described in connection with such embodiments, but the invention is not limited to any embodiment. The scope of the invention is limited only by the claims and the invention encompasses numerous alternatives, modifications and equivalents. Numerous specific details are set forth in the following description in order to provide a thorough understanding of the invention. These details are provided for the purpose of example and the invention may be practiced according to the claims without some or all of these specific details. For the purpose of clarity, technical material that is known in the technical fields related to the invention has not been described in detail so that the invention is not unnecessarily obscured.

[0381] Disclosed herein a methods, systems, and apparatuses for the design, distribution, control and management of communication services for mobile wireless communication devices. As would be appreciated by one of ordinary skill in the art, mobile wireless communication devices include many types of computing devices. As used herein, the term device, mobile device, mobile communication device, mobile wireless communication device, wireless device, end-user device, wireless end-user device, and other equivalent terms are used interchangeably to refer to computing devices having one or more wireless communication capabilities to interoperate with one or more wireless networks. In some embodiments, the devices are mobile. In some embodiments, the devices include wired and wireless communication capabilities. In some embodiments, the devices are used to connect to one or more different wireless networks. In some embodiments, the devices include user interfaces through which information can be displayed and inputs received. In some embodiments, the devices include separate displays and input mechanisms. There are many other examples of devices having wireless communication capabilities and the representative embodiments disclosed herein are not intended to be limiting.

[0382] To date, service providers have provided a limited variety of different service plans and service plan bundles (multiple service plan elements bundled together) to which a user of the mobile wireless communication device may subscribe. With the increasing proliferation of a broad spectrum of mobile wireless communication devices having diverse communication and processing capabilities, it may be desirable to provide methods for an increased array of service plans and service plan bundles that may be easily accessed, reviewed, and selected by the subscriber of the mobile wireless communication device. In addition, customizable service plan bundles may be provided that permit the subscriber to select among a range of constituent service plan elements, thereby building the subscriber's own custom service plan bundle that best fits his or her particular communication service requirements. Service plan bundles may be customized based on numerous different criteria, including, but not limited to, service type (e.g., voice, messaging, data), applicable time period, geographic location, access network type, and application/service specific content. In addition, promotional service plans, subsidized service plans, and special service plan bundles that include multiple constituent service plan elements may be offered to the subscriber to increase the subscriber's exposure to featured service plans and service plan bundles. Through an easily navigable interface, e.g., using a flexible user interface of the mobile wireless communication device itself, through access to a website through a web browser, or through an application connected to an application portal, the subscriber may learn about, test out and subscribe to one or more service plans and/or service plan bundles that include a combination of service plan elements best suited for the subscriber's own needs. In some embodiments, a user or administrator also reviews, subscribes, shares, assigns or otherwise manages service plans and service plan bundles for devices in a device group. In some embodiments, the user or administrator manages service plans and service plan bundles for devices in a device group through an interface of one of the devices, or through a separate system that can interface with a service management system in the wireless network.

[0383] A mobile wireless communication device may need to be associated with a service account in order to allow a user or owner of the mobile wireless communication device (herein referred to as a subscriber) to use the mobile wireless communication device to communicate over a particular wireless communication network in a manner that is meaningful to the subscriber (e.g., to access content or a service offered by a service provider). Moreover, the mobile wireless communication device may need to be associated with one or more service plans that allow it to access services offered by a service provider. A service plan may, in general, allow for a quantity of communication that may be permitted during a time period of communication (e.g., 100 MB of data per month, 24 hours of network access, 100 minutes of phone calls, etc.). Some examples of services that may be offered by a service provider include the non-mutually-exclusive categories of voice services (e.g., phone calls, etc.), messaging services (e.g., text messages, multimedia messages, etc.), data services (e.g., Internet access, etc.), and hybrid services (e.g., voice over IP (VOIP), video chat, etc.). A service provider may be an operator of a wireless communication network, or may be another entity, such as a mobile virtual network operator (MVNO), a retail partner, a mobile wireless communication device original equipment manufacturer (OEM), a mobile wireless communication device operating system (OS) provider or a third-party service partner. There are many other examples of services, service plans, and service providers, and the examples provided herein are not intended to be limiting.

[0384] It may also be desirable to associate more than one mobile wireless communication device with a particular service account. There are many potential benefits of associating multiple wireless communication devices to a particular service account, including, for example, simplifying billing for the service provider and for the subscriber, and potentially reducing service costs for subscribers, e.g., by sharing the particular service account among multiple wireless communication devices. For example, a husband and wife may want to establish a single service account for both of their smart phones. As another example, a parent may want to establish a single service account for the several mobile phones used by family members. As another example, an employer may want to establish a single service account for multiple smart phones used by one or more of its employees. As another example, a person may want to establish a single service plan for multiple mobile wireless communication devices that the person uses, such as, for example, one or more of a smart phone, a tablet, a laptop, and an intermediate networking device that forwards traffic between a local area network and a wireless cellular network. There are many other examples of situations in which it might be desirable to associate multiple mobile wireless communication devices to a single service account (hereinafter referred to as a master service account).

[0385] In addition to associating multiple mobile wireless communication devices with a master service account, it may be desirable to share a service plan that is associated with the master service account among the multiple wireless communication devices associated with the master service account. For example, a parent might want to purchase a single service plan that is shared among all members of the family, or an employer might want to purchase a single service plan that is shared among multiple employees.

[0386] Today, subscribers who wish to share a service plan among multiple mobile wireless communication devices can only do so with several limitations. For example, creating a master service account and sharing a service plan among multiple wireless communication devices can require direct involvement of a service provider, e.g., a service provider customer representative. The service provider associates each of the mobile wireless communication devices with a master service account and with a service plan, and the associated mobile wireless communication devices then share the service plan. Often, subscribers cannot add or delete mobile wireless communication devices from the master service account without assistance from the service provider. In order to make changes to the master account, subscribers may need to call the service provider or may be required to log in to a web portal (e.g., by logging into a website), e.g., through a separate computing system. Another drawback is that although all of the mobile wireless communication devices associated with a master service account share a service plan, there are no controls to prevent a particular mobile wireless communication device from “hogging” allocations provided by the service plan. Another drawback is that although some service providers today allow sharing of voice minutes or text message allocations, they do not allow or limit sharing of a data plan. Yet another drawback is that today's shared service plans do not allow subscribers to associate different kinds of mobile wireless communication devices (e.g., a tablet and a smart phone) with a master service account. As a result of these drawbacks, the utility of shared service plans available today is limited.

[0387] As used herein, service activity is used to refer to any service usage or traffic usage that can be associated with, for example, an application; a network communication end point, such as an address, uniform resource locator (URL) or other identifier with which the device is communicating; a traffic content type; a transaction where content or other material, information or goods are transacted, purchased, reserved, ordered or exchanged; a download, upload or file transfer; email, text, short messaging service (SMS), IP multimedia system (IMS), or other messaging activity or usage; VOIP services; video services; a device usage event that generates a billing event; service usage associated with a bill by account activity (also referred to as billing by account) as described herein; device location; device service usage patterns, device user interface (UI) discovery patterns, content usage patterns or other characterizations of device usage; or other categories of user or device activity that can be identified, monitored, recorded, reported, controlled or processed in accordance with a set of verifiable service control policies. As will be apparent to one of ordinary skill in the art in view of the embodiments described herein, some embodiments identify various service activities for the purpose of decomposing overall service usage into finer sub-categories of activities that can be verifiably monitored, categorized, cataloged, reported, controlled, monetized and used for end user notification in a manner that results in superior optimization of the service capabilities for various levels of service cost or for various types of devices or groups. In some embodiments, it will be apparent to one of ordinary skill in the art that the terms service activity or service usage are associated with categorizing and possibly monitoring or controlling data traffic, application usage, communication with certain network end points, or transactions, and it will also be apparent that In some embodiments, the term service activity is intended to include one or more of the broader aspects listed above. The shortened term service usage can be used interchangeably with service activity, but neither term is intended in general to exclude any aspect of the other. In some cases, where the terms service usage or service activity are used, more specific descriptors such as traffic usage, application usage, website usage, and other service usage examples are also used to provide more specific examples or focus in on a particular element of the more encompassing terms.

[0388] In some embodiments, a user of a mobile wireless communication device configures service plans and service plan bundles, including individual constituent service plan elements thereof, permissions associated therewith, and restrictions applied thereto through a flexible user interface of the mobile wireless communication device. In some embodiments, a user is presented a selection of content for service plans and service plan bundles through the user interface of the mobile wireless communication device. In some embodiments, service providers or third parties supply applications to the mobile wireless communication device through which service plan and service plan bundle selection, customization, and management are effected. In some embodiments, customization and selection of service plans and service plan bundles occurs through the user interface of the mobile wireless communication device. In some embodiments, service plan and service plan bundle customization and selection occurs through a web browser application on the mobile wireless communication device. In some embodiments, customization and selection of service plans and service plan bundles uses one or more specific applications provided by a service provider or by a third party and installed on the mobile wireless communication device. In some embodiments, service plan and service plan bundle customization and selection uses applications provided by an operating system for the mobile wireless communication device. In some embodiments, the user selects and customizes service plans and service plan bundles for one mobile wireless communication device through another mobile wireless communication device. In some embodiments, selection and customization of service plans and service plan bundles occurs through a web browser communicating with a server or a website or a web portal. In some embodiments, selection and customization of service plans and service plan bundles occurs through an application communicating with an application portal or server, e.g., an application on the mobile wireless communication device or an application on another computing system. In some embodiments, a server communicatively coupled to a wireless network provides information for service plan and service plan bundle selection and customization. In some embodiments, information displayed for service plan and service plan bundle selection and customization originates from storage in the mobile wireless communication device. In some embodiments, the user selects and customizes individual constituent service plan elements included within a service plan bundle. In some embodiments, the user selects and customizes features of a service plan, service plan element or service plan bundle.

[0389] In some embodiments, notification messages, e.g., marketing interceptors, provide service plan offers to a user of the mobile wireless communication device. In some embodiments, the notification messages are presented directly through the user interface of the mobile wireless communication device. In some embodiments, multiple service plan options are presented to the user of the mobile wireless communication device for service plan selection. In some embodiments, a set of service plan selection options (and/or customization options) is presented in response to a user action. In some embodiments, the content of the set of service plan selection options depends on the particular action of the user. In some embodiments, the user interface provides for sharing, assigning and controlling permissions for service plans among multiple mobile wireless communication devices. In some embodiments, the user interface provides for managing service plans of devices in a device group. In some embodiments, the user interface provides for restricting usage of specific service plans that are assigned or shared with one or more devices in a device group.

[0390] In some embodiments, an offer for subscription to a service plan is presented through the user interface directly to the user of the mobile wireless communication device. In some embodiments, notification messages, e.g., “try this app,” are presented to highlight an available service plan to the user of the mobile wireless communication device. In some embodiments, a service plan is offered by placing an overlay message (e.g., within a callout box). In some embodiments, marketing features of a service plan, e.g., sponsorship and/or “paid for” time periods, are presented to the user of the mobile wireless communication device. In some embodiments, one or more device agents resident in the mobile wireless communication device obtain indications or information related to available service plans from a network element, e.g., a server in a wireless network. In some embodiments, a flexible user interface presents offers to purchase service plans, including a “bundle” of service plan elements grouped together, e.g., voice, messaging, and data service plan elements offered as a service plan bundle. In some embodiments, a user can customize the selection of service plan elements to include in a service plan bundle.

[0391] In some embodiments, a selection of options for service plans and/or service plan bundles is presented to a user of the mobile wireless communication device through a flexible user interface, and the user of the mobile wireless communication device selects one or more service plans or service plan bundles through the flexible user interface, e.g., Plan A, B or C, or Service Plan Bundle X, Y or Z. In some embodiments, a selection of options for individual service plan elements to include in a service plan bundle is presented to a user of the mobile wireless communication device through a flexible user interface, and the user of the mobile wireless communication device selects a set of service plan elements to build a customized service plan bundle. In some embodiments, a rotating “carousel” of service plan bundles is presented to the user of the mobile wireless communication device, and the user selects from the “carousel” a service plan bundle through the user interface. In some embodiments, the user cycles through the selection options by interacting with the user interface, e.g., through a touch screen, of the mobile wireless communication device. In some embodiments, multiple rotating “carousels” of service plan elements are presented to the user of the mobile wireless communication device, and the user selects individual service plan elements from each of the “carousels” to build a customized service plan bundle. In some embodiments, selection and customization occurs through an application on the mobile wireless communication device, e.g., connected to an application portal. In some embodiments, selection and customization occurs through a web browser, e.g., connected to a website. In some embodiments, selection options for service plans, service plan elements, and service plan bundles are stored in the mobile wireless communication device. In some embodiments, the selection options are provided through a communication link to a server communicatively coupled to the wireless network. In some embodiments, the selection options are partially stored in the mobile wireless communication device and partially obtained from a server in the wireless network. In some embodiments, display parameters for presenting selection options (or other service plan information) through a user interface are obtained from storage in the mobile wireless communication device, obtained from a server communicatively coupled to the wireless network, or obtained in part from the device and in part from a server communicatively coupled to the wireless network.

[0392] In some embodiments, a service plan (bundle) selection system interviews the user to determine a “best match” set of selection options to provide to the user. Based on responses obtained from the user to one or more interview questions, the service plan (bundle) selection system provides one or more service plan bundles (or constituent service plan elements thereof) and/or one or more service plans to include in one or more offered service plan bundles. In some embodiments, the service plan (bundle) selection system includes information gathered from previous service usage, present service usage, and/or a service usage history for the mobile wireless communication device or for a user thereof to determine options to present to the user for selection and customization of service plans and service plan bundles. In some embodiments, the service plan (bundle) selection system offers the user of the mobile wireless communication device assistance in selecting and configuring service plans and service plan bundles. In some embodiments, service plan offers and service plan bundle offers can match service usage patterns. In some embodiments, information about previous service usage and/or current service usage is presented simultaneously with service plan options and service plan bundle options to the user of the mobile wireless communication device. In some embodiments, service usage provides context to the user of the mobile wireless communication device when choosing and/or customization a service plan or service plan bundle.

[0393] In some embodiments, service plan bundle selection and customization can include one or more individual constituent service plan elements. In some embodiments, service plan bundle customization can include selecting an option for a constituent service plan element from each of a plurality of service plan categories. In some embodiments, service plan categories include voice service plans, messaging service plans, and data access service plans. In some embodiments, service plan categories include domestic voice service plans and international voice service plans. In some embodiments, service plan categories include “home network” service plans and “roaming” network service plans. In some embodiments, adding individual service plans to a base service plan bundle customizes the base service plan bundle. In some embodiments, selecting each of the individual constituent service plan elements of a base service plan bundle customizes the base service plan bundle. In some embodiments, recommendations for different levels of matching criteria are presented to the user in order to provide options for selecting and/or customizing service plan bundles. In some embodiments, the user selects criteria for service plan recommendations, e.g., “low cost,” “high bandwidth,” “roaming access,” and the service plan bundle selection and customization system provides options for service plans to include in a service plan bundle. In some embodiments, a ranking of service plan options to include in a service plan bundle is provided. In some embodiments, when the user selects one or more service plan elements to include in a service plan bundle, a “better” matching service plan element is provided as an alternative selection option for the user of the mobile wireless communication device. In some embodiments, when the user customizes a service plan bundle, a “different” matching service plan bundle is provided as a service plan bundle offer to the user of the mobile wireless communication device. In some embodiments, matching criteria to determine the “better” matching service plan, service plan element or service plan bundle include service usage history. In some embodiments, sponsored service plans or service plan bundles based on service usage are presented to the user of the mobile wireless communication device. In some embodiments, service plans or service plan bundles are offered with one or more additional promotional features.

[0394] In some embodiments, a network system uses a service usage history of the mobile wireless communication device to determine a set of service plans to offer to a user of the mobile wireless communication device. In some embodiments, the network system determines a set of service plans that provide a different set of features or benefits to the user of the mobile wireless communication device compared with a current or recent set of service plans to which the user of the mobile wireless communication device subscribes. In some embodiments, one or more service plans in the determined set of service plans includes a cost savings and/or a feature benefit compared with the current or recent set of service plans. In some embodiments, the network system categorizes the features and/or benefits (e.g., cost savings). In some embodiments, the network system provides for a notification message to the mobile wireless communication device to indicate at least a portion of the determined set of service plans. In some embodiments, the notification message includes at least a portion of the categorized features and/or benefits of the service plans included in the notification message. In some embodiments, the notification message includes an option to subscribe to one of the service plans. In some embodiments, the notification message includes an option to review information about one or more of the service plans. In some embodiments, the notification message provides for a responsive action from the user of the mobile wireless communication device. In some embodiments, the network system obtains a response to the notification message. In some embodiments, the response indicates an acceptance or a rejection to subscribe to a service plan indicated in the notification message. In some embodiments, the network system provisions one or more network elements and/or the mobile wireless communication device when obtaining a affirmative indication from the user of the mobile wireless communication device to subscribe to a service plan offered in the notification message. In some embodiments, the network system replaces a current service plan with the selected new service plan. In some embodiments, the notification message indicates a cost savings to the user of the mobile wireless communication device for at least one of the service plans. In some embodiments, the network system determines a billing offset when the user selects to subscribe to a new service plan. In some embodiments, the network system applies the billing offset to a service account for the user of the mobile wireless communication device.

[0395] In some embodiments, a catalog of “free” services is presented to the user of the mobile wireless communication device. In some embodiments, a service plan provides access to a set of services, e.g., a quantity of voice minutes, and/or a number of text messages, and/or an amount of data access consumption, in return for subscribing to a particular service or for using a particular application. In some embodiments, promotional offers are provided for a limited time period. In some embodiments, promotional offers provide for a limited set of features. In some embodiments, promotional features are accessible only after the user takes additional actions, e.g., interacts with a particular application or website.

[0396] In some embodiments, service plan offers are displayed through the user interface of the mobile wireless communication device. In some embodiments, notification messages are displayed to provide service plan offers. In some embodiments, notification messages are triggered based on trigger conditions, e.g., based on a pre-determined condition being met, or based on a particular action of the user of the mobile wireless communication device, or based on a network state. In some embodiments, marketing interceptors offer service plan (bundle) selections or customization based on a set of numerical digits dialed by the user of the mobile wireless communication device to establish a connection for a service, e.g., for a voice call. In some embodiments, a marketing interceptor offers an alternative service in response to the particular set of dialed numerical digits. In some embodiments, the marketing interceptor offers a different set of features or costs for an alternative service compared to the “dialed” service. In some embodiments, an application or a part of an operating system on the mobile wireless communication device, alone or in conjunction with one or more network based systems, uses an alternative service implicitly changing the connection without intervention by the user of the mobile wireless communication device. In a representative embodiment, a voice call is transformed to a voice over Internet protocol (VOIP) call or other packet/data based voice connection. In some embodiments, an SMS text message is converted to use an alternative text/data connection service, e.g., from a text messaging service that counts individual text messages to a data service that counts data bytes. In a representative embodiment, a “video chat” call through a cellular connection is changed to a “video chat” call through a wireless local area network connection. In some embodiments, a service having a higher cost per unit time and/or per unit message and/or per unit data byte is transformed to a lower cost service. In some embodiments, marketing interceptors for alternative service can depend on a set of networks available and/or based on types of networks available to the mobile wireless communication device.

[0397] In some embodiments, one or more device agents of a service processor of a mobile wireless communication device intercept establishment of (and/or use of) a communication service connection or service activity, classify the communication service connection or service activity, compare the communication service connection or service activity to a service policy, and initiate an action based on the service policy. In some embodiments, the service policy is stored at least in part in the mobile wireless communication device. In some embodiments, the service policy is stored at least in part in a network element and communicated to the mobile wireless communication device. In some embodiments, the action initiated includes providing a notification message to the mobile wireless communication device. In some embodiments, the action includes displaying the provided notification message to a user of the mobile wireless communication device, e.g., through the user interface (UI) of the mobile wireless communication device. In some embodiments, the action includes displaying an actionable notification message from which further actions can be initiated. In some embodiments, the actionable notification message includes one or more options presented to the user of the mobile wireless communication device. In some embodiments, the actionable notification message includes a service plan offer. In some embodiments, the actionable notification message includes an option to start and/or download an application.

[0398] In some embodiments, a mobile wireless communication device intercepts a dialed phone number, classifies the phone number according to a pre-configured/pre-stored policy and initiates a policy action. In some embodiments, the mobile wireless communication device displays a pop-up notification message that includes one or more actionable buttons. In some embodiments, the pop-up notification message provides one or more options for an alternate service corresponding to the classification of the phone number. In some embodiments, the mobile wireless communication device provides for a Voice over Internet Protocol (VoIP) connection in place of a “dialed” voice connection. In some embodiments, the notification message offers an option to download an application that provides for a VoIP connection.

[0399] In some embodiments, a method for intercepting a communication service connection includes detecting an aspect of a number dialed to establish a connection, classifying an aspect of the connection, obtaining a service policy associated with the connection, intercepting the establishment of the connection, and redirecting the connection through an alternative communication service.

[0400] In some embodiments, aspects of the number dialed to establish a connection include one or more of: a specific number, an emergency services number, an information number, a long distance number, a local number, an international number, a toll free number, a number belonging to a preferred calling group, a number of a white list, and a number of a black list.

[0401] In some embodiments, a method for intercepting a communication service connection includes detecting an aspect of an attempted access to a communication service, classifying an aspect of the attempted access to the communication service, obtaining a service policy associated with the communication service, interrupting access to the communication service, and redirecting access to the communication service through an alternative communication service.

[0402] In some embodiments, aspects of the attempted access to the communication service include an application used, a network endpoint address, a wireless access network type, a website on a white list, a website on a black list, or a combination thereof.

[0403] In some embodiments, service plan (bundle) selection options are grouped based on a characteristic of the service plan or service plan bundle. In some embodiments, service plan (bundle) selection options are grouped based on an applicable time period for the service plan or service plan bundle. In some embodiments, a user interface provides flexible navigation to view a subset of all available service plan or service plan bundle options. In some embodiments, service plan (bundle) selection options are presented using a rotatable “carousel.” In some embodiments, service plan (bundle) selection options are presented using one or more scrollable lists. In some embodiments, service plan (bundle) selection options are presented using an array of icons. In some embodiments, service plan (bundle) selection options are presented as a combination of graphics and text. In some embodiments, service plan (bundle) selection options are presented through one or more drop down menus. In some embodiments, service plan (bundle) selection options are presented through a set of tabs. In some embodiments, particular service plans or service plan bundles are highlighted to the user based on one or more criteria. In some embodiments, highlighted selections are determined based on service usage. In some embodiments, one or more tabs organize service plan (bundle) selection options include “featured service plans,” “application based service plans,” “voice service plans,” “data service plans,” and “messaging service plans.” In some embodiments, a banner area of the user interface presents graphics and advertisements for particular service plans or service plan bundles. In some embodiments, graphics are static. In some embodiments, graphics are dynamic.

[0404] In some embodiments service usage history and/or service plan and/or service plan bundle subscription history influences a selection and customization of service plans and/or service plan bundles. In some embodiments, the selection of options for service plans or service plan bundles uses information resident in the mobile wireless communication device itself. In some embodiments, indicators are presented with service plan (bundle) selection options to provide the user information, e.g., “installed, purchased, expired, etc.” In some embodiments, service plan (bundle) selection options are organized based on a history of viewing, e.g., “not seen” service plans or service plan bundles are presented, and “seen” service plans or service plan bundles are not presented. In some embodiments, service plan selection options presented are based on a set of user preferences. In some embodiments, a history of service plan and/or service plan bundle purchases and customizations is presented in conjunction with presentation of service plan selections and/or service plan offers. In some embodiments, one or more differences between an offered service plan (bundle), a current service plan (bundle), a past service plan (bundle), a customized service plan (bundle), and/or a standard service plan (bundle) are presented along with the service plan (bundle) options.

[0405] In some embodiments, “adding” a supplemental service plan element to a service plan bundle customizes the service plan bundle. In some embodiments, service plan (bundle) selection options include “upgrade” offers to provide the user a higher grade of service based on a current service plan or service plan bundle. In some embodiments, service plan or service plan bundle offers provide “upgrades” or “downgrades” based on service usage history.

[0406] In some embodiments, accounting information includes different billing options, including but not limited to credit cards, “virtual wallets” resident on the mobile wireless communication device, and “bill me later.”

[0407] In some embodiments, an organization of information provided to the user to select and/or customize service plans and service plan bundles includes formatting the information based on choosing service plans and service plan bundles (or features of service plans and service plan bundles) for specific mobile wireless communication devices. In some embodiments, the organization of information, provided to the user to select and/or customize service plans and service plan bundles, includes formatting the information based on choosing mobile wireless communication devices for specific current or newly subscribed service plans or service plan bundles. In a representative embodiment, a user adds or deletes mobile wireless communication devices to a specific service plan or service plan bundle. In a representative embodiment, a user adds or deletes a service plan or service plan bundle to a specific mobile wireless communication device. In a representative embodiment, a user interface presents information for service plan (bundle) selection and customization using a “plan view,” a “master device view” and/or a “slave device view.” In some embodiments, the “plan view” provides for adding, deleting and/or modifying sharing/assignment of a mobile wireless communication device to a specific service plan or service plan bundle. In some embodiments, the “master device view” provides for adding, deleting or modifying sharing/assignment of a service plan or service plan bundle on one or more mobile wireless communication devices associated with a device group. In some embodiments, the “slave device view” provides for limited capabilities to add, delete or modify sharing/assignment of a service plan or service plan bundle on the specific “slave” mobile wireless communication device. In some embodiments, information is presented to the user of the mobile wireless communication device tailored to permissions controls that apply to the mobile wireless communication device.

[0408] In some embodiments, permissions controls for a mobile wireless communication device are contained in a device credential or in a user credential. In some embodiments, a level of permission control affects information displayed through a user interface of the mobile wireless communication device. In some embodiments, different applications and/or settings for applications are loaded based on permissions controls, e.g., based on a device credential or a user credential. In some embodiments, a network-based server determines information to provide to a mobile wireless communication device based on a device credential or a user credential. In some embodiments, an application on the mobile wireless communication device presents information to the user of the mobile wireless communication device based on a permission level.

[0409] In some embodiments, notifications are provided to a mobile wireless communication device for providing information to control and/or manage communication services available to, offered to, subscribed to, or otherwise usable by the mobile wireless communication device. In some embodiments, notifications are triggered to be obtained and/or displayed based on trigger conditions established by a user, an network administrator, a service provider, an enterprise administrator, a device group administrator, or a third-party service partner. In some embodiments, notification trigger conditions and/or notification content and/or notification display parameters are configured through a service design center. In some embodiments, notification trigger conditions are configured through access to a service provider service management system (including third-party service partners), e.g., through an application on the mobile wireless communication device, or through a web browser interacting with a specific website. In some embodiments, notification trigger conditions are configured through the user interface of the mobile wireless communication device, e.g., by the user of the mobile wireless communication device interacting with one or more screens presented on a display of the mobile wireless communication device.

[0410] In some embodiments, a service usage control policy includes a service usage notification policy. In some embodiments, the user notification includes one or more of the following: a notification that the application to be downloaded and/or launched is a network capacity controlled service; a list of one or more service activities (e.g., applications, OS/other software functions/utilities, and/or other functions/utilities as described herein) that have a network capacity controlled services classification; type of service policy in effect for one or more network capacity controlled services; notification that a service activity belongs to a network capacity controlled services class; notification that a service activity that is classified as network capacity controlled service can have the service class changed; notification that if the service class is changed for a service activity the service charges will change; notification that one or more networks are available (e.g., one or more alternative networks and/or network busy state information and/or charging information and/or incentives associated with such networks), a service plan upgrade/downgrade offer/option; and an offer for a service plan that rewards a user that responds to the notification a service plan is lower cost/discounted for responding to notification to use or not to use service activity based on usage level warning notification. In some embodiments, the user notification includes a user preference selection, including one or more of the following: a provision to associate an access policy control with the application (e.g., allow/block, notify of usage, notify of usage at a given threshold, traffic control settings, allow during certain times, allow when network not busy, and/or other policy controls as described herein), an over-ride option for selecting the service usage control policy; a modify option to select the service usage control policy; a select option to select a new service plan (e.g., an option to review and select alternative/new service plan upgrade/downgrade options), and an acknowledgement request (e.g., to confirm/acknowledge receipt of the notification, in which the acknowledgement can be transmitted to a network element/function and/or stored locally for later reference/transmission).

[0411] In some embodiments, before a given device application, process, function, OS service or other service activity is allowed to start, the intention to start is intercepted by a launch manager, the background service policy set or the network protection service policy set for the service activity is retrieved, and any necessary user notification or service launch control policies are implemented prior to allowing the service activity to launch. In such embodiments, a launch intercept manager may be used to implement this functionality. In some embodiments, this launch intercept manager is provided with a list identifying the service activities (e.g., application identifiers, OS function identifiers, aggregate service activity identifiers, and/or component service activity identifiers) that have a launch control policy in effect. In some embodiments, the list of launch control policies includes blocking or delaying launch of the one or more service activities. In some embodiments, the launch control policy includes a user notification before, during or after the service activity is launched. In some embodiments, the user is informed that a service activity that has a background service control policy in effect or a network protection service control policy in effect is attempting to launch, is about to launch or has launched. In a further set of embodiments, the launch is held up until the user is notified and is allowed to decide if they would like to launch the service activity. In some embodiments, the user notification includes a message that the service activity attempting to launch consumes a large amount of service usage and asks the user if they would like to continue (e.g., “This application consumes a large amount of data, would you like to continue?”, “This application consumes data even when you are not using it, would you like to continue?”, “This application consumes data while you are roaming which adds cost to your usage bill, would you like to continue?”, etc.). In some embodiments, the decision on whether or not to launch a service activity is pre-programmed into the list identifying the service activities (e.g., application identifiers, OS function identifiers, aggregate service activity identifiers, and/or component service activity identifiers) that have a launch control policy in effect. In some embodiments a portion of the list is pre-programmed by the user in accordance with user preference for controlling usage of service activities. In some embodiments, a portion of the list is pre-programmed by a network element (e.g., a service controller) in accordance with network background service or network protection service policies specified by a service policy design management system operated by a service provider as described herein. In some embodiments, the policy implementation defined by the list identifying the service activities (e.g., application identifiers, OS function identifiers, aggregate service activity identifiers, and/or component service activity identifiers) that have a launch control policy in effect is verified to ensure that the user or malicious software has not defeated the policy enforcement specified in the list. In some embodiments the list identifying the service activities that have a launch control policy in effect includes launch policies that are a function of one or more of: background service state, network busy state (or performance state or QoS state), type of network the device is connected to, home or roaming connection, time of day or day of week.

[0412] In some embodiments, the various design techniques described herein that allow for intercepting a service activity intention to launch, and applying a background service policy set or a network protection service policy set can be designed into the OS itself. For example, the intercept and policy implementation functions can be designed into the activity manager, broadcast intent manger, media service manager, service manager, or other application or service activity management function in the Android OS. One of ordinary skill in the art will recognize that similarly, the various design techniques described herein that allow for intercepting a service activity intention to launch, and applying a background service policy set or a network protection service policy set can be designed into application launch management functions in the iPhone OS, windows mobile OS, windows PC OS, Blackberry OS, Palm OS, and other OS designs.

[0413] In some embodiments, the pre-launch user notification information indicates one or more of: typical service usage or cost, or projected service usage or cost for the service activity attempting to launch. In some embodiments, the user sets limitations on access for one or more service activities and once this limit is hit then when the service activities with exceeded limits attempt to launch the user is notified. In some embodiments, the user chooses from a set of service restrictions rather than simply blocking or allowing service activity launch, with example service restrictions including but not limited to: a pre-configured set of restriction policies to chose from (e.g., full access, limited access, highly restricted access or block access), block, throttle, delay, aggregate and hold, limit amount of usage per unit time, cap usage, set limit for additional notification, specify type of network, specify busy state (performance, QoS) or background state, or choose from pre-configured settings options.

[0414] In some embodiments, the user notification occurs after the user attempts to download or load an application onto the device (e.g., an application downloaded from the web or an online application store for a smart phone or other wireless/network computing device, such as an Apple iPhone or iPad, or Google Android/Chrome based device). In some embodiments, the user notification occurs after the user attempts to run the service activity or to initiate usage of a cloud based service/application (e.g., Google or Microsoft cloud service based apps). In some embodiments, the user notification occurs after one or more of the following: the service usage activity hits a usage threshold event, the service usage activity attempts a network service usage that satisfies a pre-condition, an update to a network capacity protection service activity classification list or policy set, and a network message is sent to the device triggering the notification. In some embodiments, the user notification provides information on the service usage activity that is possible, typical, or likely for the service usage activity. In some embodiments, the user notification includes a user option for obtaining more information about the service usage of the service activity (e.g., a message that the service usage activity may result in a high service usage and/or that the service usage activity may or will result in a high service usage as compared in some way to a limit of the current service plan) to make informed user preference settings.

[0415] In some embodiments, a user notification includes displaying (e.g., and as applicable, allowing users to provide UI input) one or more of the following: current and/or past/historical/logged network service usage activity list, current and/or past/historical/logged network capacity controlled service usage activities, current activity policy settings, current or available networks, service plan options (e.g., for how to treat one or more network capacity controlled service traffic types), selection option(s) to assign a network capacity controlled service activity into a different priority traffic control and/or charging buckets, network service usage by activity (e.g., network capacity controlled services and other services), network busy state (e.g., and with resulting policies in force), service activity policy setting vs. busy state and time/day/week, network service activity priority, network service activity usage statistics (e.g., vs. network busy state and/or network service usage control policy state).

[0416] In some embodiments, a UI notification is displayed when user attempts a network capacity controlled service activity during a network busy state (e.g., that modifies a network capacity controlled services policy). In some embodiments, the UI notification includes information on service plan choice and a network capacity controlled services policy over-ride option (e.g., one time, time window, usage amount, permanent by activity, and/or all), charging information based on a user selection, and/or service plan upgrade information and options.

[0417] In some embodiments, a UI notification is displayed for user input for preferences/configurations for multiple networks (e.g., Wi-Fi, 4G, 3G, and/or other wired or wireless access networks) including charging policy. In some embodiments, a UI notification is displayed when a specified network traffic service usage activity (e.g., based on network capacity controlled services classification, QoS classification, priority classification, time based criteria, network capacity, service plan, charging criteria, and/or other criteria/measures) is being attempted or is occurring and providing options (e.g., allow, block, delay, throttle, and/or other options).

[0418] In some embodiments, a UI fuel gauge is displayed (e.g., to depict current and/or historical network service usage, for example, relative to a service plan for the device, by network, relative to network busy state, time based criteria, and/or other criteria/measures). In some embodiments, a user notification includes a communication sent to the user (e.g., an email, SMS or other text message, voice message/call, and/or other electronic form of communication). In some embodiments, the communication sent to the user includes network service usage information, network capacity controlled service usage related information, and/or an instruction to log into a web page or send a communication for more information (e.g., regarding an information update and/or alert or warning message, such as related to network service usage and/or charging for network service usage).

[0419] In some embodiments, a notification (e.g., a user or network service cloud notification) is generated based on an aggregate service activity reports usage (e.g., allows network provider to generate user notifications and/or to notify application provider/service activity provider). In some embodiments, a notification (e.g., a user or network service cloud notification) is generated based on a publishing of an updated/new network capacity controlled services list based on an aggregate monitored activity (e.g., based on a service plan, velocity, sockets opening frequency/rate (e.g., messaging layer behavior), total data usage, peak busy time usage to formulate or update black list for monitoring, notifying, and/or controlling, which can be applied to one, multiple, group, or all devices). In some embodiments, a notification (e.g., a user or network service cloud notification) is generated based on data usage trends for particular device relative to an associated service plan and/or other comparable devices or data usage thresholds/statistical based data usage measures.

[0420] In some embodiments an application is actually composed of several component applications, processes or functions. Examples of this include but are not limited to: the components of a Java application JAR file; applications that use OS functions; applications that use a proxy service function; applications, functions or processes that coordinate with one another to implement a composite process, function or application; and OS process functions that support an application or overall OS function. In such embodiments it is important to be able to categorize all applications, functions and processes on a device that contribute to the service usage of a service activity so that the service activity can be monitored for service usage, have the service usage accounted for, implement the appropriate user notification when one or more service activity components attempts to start or use the network, implement the appropriate user notification when one or more service activity components reaches a pre-determined service usage level that requires user notification, and implement the appropriate background service or network protection service usage controls as specified herein ((including but not limited to for example: block network access, restrict network access, throttle network access, delay network access, aggregate and hold network access, select for time of day network access restrictions, select network type restrictions, select roaming network access restrictions, select service usage restrictions such as a usage limit, select service cost restrictions such as a cost limit or otherwise place on another form of background service status or network usage restriction as described herein). In the case of service activity components that belong exclusively to one aggregate service activity (e.g., an application, application JAR file or OS function), this may be accomplished by including each of the component service activities on a list that identifies the service activity components that belong to the aggregate service activity, and then monitoring, possibly controlling and providing user notifications based on the aggregate or component behavior of each service activity in accordance with the policies specified for the aggregate service activity. For example, it is necessary to group all application launch behavior and/or network access behavior under the monitoring, launch, notification, accounting and background service controls or network protection service controls (or other background or network protection service policies as specified herein) in accordance with the background service or network protection service policies for the aggregate application that the JAR file supports. As another example, if an OS network synch or update function utilizes various software components or processes to implement the network synch or update function, then each of the software components or process must be monitored and aggregated under the background service policies or network protection service policies for the aggregate OS synch or update function.

[0421] In some embodiments, this ability to group usage for a related set of service activity components dedicated to an aggregate service activity as described herein is used to improve usage reporting of service activities to a service controller for the purpose of statistically identifying service activities that are candidates for background service policy controls or network protections service policy controls.

[0422] In some cases, multiple applications, processes, functions, OS services or other service activities can utilize a common set of component software applications, processes, functions or OS services. In such cases, in order to implement background service policies and/or network protection service policies for service activity monitoring and accounting, service activity launch control, user notification, or network access control as described herein, it is necessary to associate the specific network access data or information flows to and from the common component software applications, processes or functions that belong to the specific initiating application, process, function or other service activity that is to be managed according to a background service or network protection service policy set. In what follows, a specific set of examples are provided on how to map common component service activity for a set of common OS functions referred to as proxy service functions to a specific application, process, function, OS service or other service activity for the purpose of implementing a background service policy set or a network protection service policy set as described herein. Once these examples are reviewed, it will be obvious to one of ordinary skill in the art how to apply similar mapping of service activity for a common set of components to a service activity that is to be managed in accordance with a background service policy set or a network protection service policy set as described herein.

[0423] In some embodiments, this ability to group usage for a common set of service activity components as described herein is used to improve usage reporting of service activities to a service controller for the purpose of statistically identifying service activities that are candidates for background service policy controls or network protections service policy controls.

[0424] In some embodiments, a proxy network service manager refers to an intermediary data flow function in a device operating system that sits on a data path between a device application and a device networking stack interface to provide a level of network service abstraction from the network stack interface, a higher level service function above the network stack interface, enhanced or special traffic processing functions, media service transfer management, file download service, HTTP proxy service functions, QoS differentiation, or other similar or related higher level traffic processing. Example Proxy Service Managers include the following: media service manager (e.g., android media service library function), email service manger, DNS function, software download service manager, media download manager (e.g., audio player, streaming media player, movie downloader, media service OS function, etc), data download service manager, Android “media” library function, Android.net library function, Jave.net library function, Apache library function, other similar software/library functions or services in other device operating systems, SMTP/IMAP/POP proxy, HTTP proxy, IM proxy, VPN service manager, SSL proxy, etc. Herein these alternative network access data flows that are initiated by an application are termed application proxy service flows. In such embodiments an app can sometimes simply requests a network access service activity from an OS component such as a proxy service component rather then directly accessing the network. In such embodiments, in order to implement background service controls or user notification of application service usage, it is necessary to monitor the application proxy service flows, classify them as being initiated by or belonging to a particular application or service activity, and implement the proper background service classifications, user notifications, application process launch intercept, background service accounting, and background service usage restrictions as described herein in accordance with the policies intended for the initiating application or service activity. This is accomplished by inserting service usage monitors that allow a mapping of (i) the initiating application identifier (e.g., app name, app fingerprint, application identification tag, application process number, application credential, or other secure or non-secure application or process identifier) to (ii) the request to the proxy service and subsequently to (iii) the network service flows between the proxy service and the network elements that service the information communications. Once this mapping is accomplished, the service usage flows of the proxy service can then be accounted back to the initiating application, device software process or other service activity, the proper policies can then be applied to each service usage flow for user notification, service activity launch control, service activity background accounting (including variable charge rating dependent on background service state and/or sponsored service charging), service activity background service controls or network usage restrictions as described herein (including but not limited to for example: block network access, restrict network access, throttle network access, delay network access, aggregate and hold network access, select for time of day network access restrictions, select network type restrictions, select roaming network access restrictions, select service usage restrictions such as a usage limit, select service cost restrictions such as a cost limit or otherwise place on another form of background service status or network usage restriction as described herein).

[0425] In some embodiments, this ability to track service usage for an service activity through a proxy service as described herein is used to improve usage reporting of service activities to a service controller for the purpose of statistically identifying service activities that are candidates for background service policy controls or network protections service policy controls.

[0426] In some embodiments, the various design techniques described herein that allow for monitoring, accounting for and/or implementing service policy for component service activities that belong to an aggregate service activity can be designed into the OS itself. For example, in certain current mobile OS implementations (e.g., Android, iPhone, Blackberry, etc) there are some applications available in the market that allow a user to get an estimate for how much data a certain subset of applications are consuming on a wireless service provider network, but it is not possible for the user or application to get an indication of the service usage for certain OS functions, whereas the embodiments disclosed herein will allow for this. As another example, in certain current mobile OS implementations it is not possible to associate proxy service usage (e.g., media download and media streaming proxy library software functions) with the specific applications that use the proxy service, so while the user can be informed of generic common OS functions or proxy services (e.g., in the case of Android: “media service”, “media”, “gallery”, “Google service framework” and other generic common OS software library functions or proxy services), there is no way for the user to determine what applications widgets or other service activities are actually generating this common service function usage, whereas the invention described herein permits the user full visibility on such usage monitoring examples. Furthermore, if the OS is retrofitted with the intercept and policy implementation functions can be designed into the activity manager, broadcast intent manger, media service manager, service manager, or other application or service activity management function in the Android OS. One or ordinary skill in the art will recognize that similarly, the various design techniques described herein that allow for intercepting a service activity intention to launch, and applying a background service policy set or a network protection service policy set can be designed into application launch management functions in the iPhone OS, windows mobile OS, windows PC OS, Blackberry OS, Palm OS, and other OS designs.

[0427] FIG. 1 illustrates a system 10600 of interconnected elements including a mobile wireless communication device 100 communicatively coupled to a service controller 122 through a network 1100. The service controller 122 in turn is communicatively coupled to a service design center 135. The service design center 135 (SDC) allows a service provider or a third party to design service plans and/or service plan bundles for mobile wireless communication devices, such as voice service plans, messaging service plans, data service plans, application specific service plans, and other service plans and service plan bundles as described herein. Representative embodiments of the SDC 135 are described in detail in related documents, including U.S. patent application Ser. No. 13/248,025, entitled “Service Design Center for Device Assisted Services.”

[0428] As illustrated by the solid line connecting the SDC 135 and the service controller 122, the SDC 135 communicates with the service controller 122, which is a network element that is generally located within the service-provider-controlled part of a wireless access network. Representative embodiments of the service controller 122 are described in detail in related documents, including U.S. Pat. No. 8,023,425, entitled “Verifiable Service Billing for Intermediate Networking Devices.” In some embodiments, the SDC 135 sends service plan information to the service controller 122, or the service controller 122 obtains service plan information from the SDC 135. The service controller 122 communicates over the wireless access network with a mobile wireless communication device 100, as illustrated by the solid lines in FIG. 1. In some embodiments, the service controller 122 sends information about available service plans to a service processor 115 on the mobile wireless communication device 100, and the service processor 115 coordinates the presentation of service plan information to a user of the mobile wireless communication device 100. The service processor 115 and its functions are described in detail in related documents, including U.S. Pat. No. 8,023,425, entitled “Verifiable Service Billing for Intermediate Networking Devices.” In some embodiments, the service processor 115 obtains information about the service plans from the service controller 122 or from another network element. In some embodiments, using the SDC 135, the service provider can specify various aspects of how the information entered in the SDC 135 is displayed or presented on a mobile wireless communication device 100.

[0429] In some embodiments, the mobile wireless communication device 100 includes a user interface device component for communicating with user interface devices (e.g., keyboards, displays and/or other interface devices) and other input/output (I/O) device components for communicating with other I/O devices. In some embodiments, user interface devices, such as keyboards, display screens, touch screens, specialized buttons or switches, speakers, and/or other user interface devices provide various interfaces for allowing one or more users to use the mobile wireless communication device 100.

[0430] In some embodiments a service provider (carrier) designs a suite of service plans using the service design center 135, and a service controller 122 or another network element communicates at least one of the service plans (or a selected subset of service plans) to the mobile wireless communication device, or the mobile wireless communication device otherwise obtains the one or more service plans from a network element. Likewise, in some embodiments, the service provider (or carrier) establishes (e.g., using one or more embodiments disclosed in U.S. Patent Application No. 61/472,606) how the one or more service plans will be presented through a user interface of the mobile wireless communication device 100 (for example, by using the SDC 135 or another network based device management system), and the mobile wireless communication device 100 is configured to present the one or more service plans as specified by the service provider (carrier) to the user of the mobile wireless communication device 100.

[0431] In some embodiments, device based access control services are extended and combined with other policy design techniques to create a simplified device activation process and connected user experience referred to herein as ambient activation. In some embodiments, ambient access generally refers to an initial service access in which such service access is in some manner limited, such as where service options are significantly limited (e.g., low bandwidth network browsing and/or access to a specific transactional service), limited bandwidth, limited duration access before which a service plan must be purchased to maintain service or have service suspended/disabled or throttled or otherwise limited/reduced/downgraded, and/or any other time based, quality based, scope of service limited initial access for the network enabled device. In some embodiments, ambient activation is provided by setting access control to a fixed destination (e.g., providing access to a portal, such as a web page (e.g., for a hotspot) or WAP (Wireless Application Protocol) page, that provides the user with service plan options for obtaining a service plan for the user desired access, such as the service plan options for data usage, service types, time period for access (e.g., a day pass, a week pass or some other duration), and costs of service plan(s)). In some embodiments, service data usage of the ambient activated device is verified using Internet Protocol Detail Records (IPDRs, also sometimes and interchangeably referred to herein as Charging Data Records or CDRs), (e.g., using the device ID/device number for the device 100 to determine if the device 100 has been used in a manner that is out of plan for the service plan associated with the device 100, such as based on the amount of data usage exceeding the service plan's service data usage limits, out of plan/unauthorized access to certain websites, and/or out of plan/unauthorized transactions). In some embodiments, service data usage of the ambient activated device 100 is verified by setting a maximum data rate in a policy control agent and if/when it is determined that the device 100 is exceeding a specified data rate/data usage, then the service data usage is throttled accordingly. In some embodiments, various other verification approaches are used for ambient activation purposes.

[0432] In some embodiments, a billing agent in the device 100 detects and reports service billing events. In some embodiments, the billing agent plays a key role in transaction billing. In some embodiments, the billing agent performs one or more of the following functions: provides the user with service plan options, accepts service plan selections, provides options on service usage notification policies, accepts user preference specifications on service usage notification policies, provides notification on service usage levels, provides alerts when service usage threatens to go over plan limits or to generate excess cost, provides options on service usage control policy, accepts choices on service usage control policy, informs a policy control agent of user preference on service usage control policy, provides billing transaction options and/or accepts billing transaction choices. In some embodiments, the billing agent interacts with transaction servers (e.g., an open content transaction partner sites) to conduct ecommerce transactions with central billing.

[0433] FIG. 2 illustrates a representative set of “sandbox” interfaces of the service provider/third-party interface 145 of the service design center 135 to provide external design interfaces for a service provider and/or third parties. In some embodiments, the service design center 135 provides for service plan design and service plan policy management. In some embodiments, the service design center 135 provides for the design of information presented through a user interface of the mobile wireless communication device 100, e.g., during service selection, service offer, and other service management processes. In some embodiments, the service design center 135 provides for a user of the service design center 135 (e.g., a network operator administrator, a mobile virtual network operator administrator, or a third-party service partner administrator) to design a set of service plans and associate the service plans with service policies. In some embodiments, the service policies determine, at least in part, rules for enforcing the service plans and management of services provided to one or more mobile wireless communication devices 100. In some embodiments, the service design center is communicatively coupled to servers and/or databases in the wireless network. In some embodiments, the servers and/or databases provide for storage, distribution, and control of service policies to manage and control services configured through the service design center 135.

[0434] In some embodiments, one or more sandbox interfaces of the service design center 135 provide for service design and management with access to limited information and restricted controls to which the associated third party and/or service provider has permission and/or requires for services of interest to them. In some embodiments, multiple “sandbox” interfaces are available for different types of service provider and/or third parties. In some embodiments, the service provider/third-party interface 145 includes a sandbox interface 145-1 for sponsored applications and websites to be designed and managed by a sponsor, servicer provider or other third-party service partner. In some embodiments, the service provider/third-party interface 145 includes a sandbox interface 145-2 for an enterprise information technology (IT) administrator to manage communication services, e.g., service plans and device groups, for an enterprise business. In some embodiments, the service provider/third-party interface 145 includes a sandbox interface 145-3 for a machine-to-machine and/or a VSP/MVNO third-party service partner to design and manage services for mobile wireless communication devices 100. In some embodiments, the service provider/third-party interface 145 includes a sandbox interface 145-4 for a device original equipment manufacturer (OEM) and/or a media third-party service provider to design and manage communication services and device features and capabilities, e.g., user interface display properties, device applications, associated services and applications, media distribution, and other third-party service provider functions. In some embodiments, the service provider/third-party interface 145 includes a sandbox interface 145-5 for device group management and control, e.g., for a parent to manage capabilities and services of devices for a family unit. As would be understood by a person of ordinary skill, additional sandbox interfaces can be included in the service provider/third-party interface 145 illustrated in FIG. 2, and the sandboxes illustrated are representative but not limiting.

[0435] In some embodiments, the service design center 135 and the service design sandboxes share design and/or provisioning responsibilities. In some embodiments, the service design center 135 and the service design sandboxes can be hierarchically organized. In some embodiments, the service design center 135 delegates certain roles to a service design sandbox and, in some embodiments, retains an oversight capability for agents of the service design center 135. In some embodiments, a service design sandbox can be given the ability to impact policy control to a subset of subscriber groups of a network service plan provisioning system. In some embodiments, the network service plan provisioning system can be referred to as “distributed”.

[0436] In some embodiments, entities that might desire to include one or more service design sandboxes in their networks include enterprises with employees that consume network services, MVNOs, application developers, gifters, and community-based organizations. In some embodiments, e.g., enterprises with employees that consume network services, a service design sandbox can enable fine-tuned control over traffic control and charging policy (as well as notification policy). Assume that XYZ company controls a service design sandbox. XYZ company can create a service plan specific to XYZ company network services on the XYZ company intranet, which will be referred to as the XYZ plan. Specifically, the XYZ company can sponsor the XYZ company network services on the XYZ company intranet for XYZ company employees. A paid plan offered by a carrier that controls the service design center 135, for example, can still be available for XYZ company employees that are using other network services (or XYZ company could partially sponsor a subset of the other network services). The XYZ plan could also include a component that prevents XYZ company employees from accessing certain restricted sites through the XYZ company intranet and has notification policy associated with the attempted access. Continuing the example, an agent (e.g., IT manager) of the XYZ company can define subscriber groups that comprise XYZ company members and assign different service plans (e.g., different traffic control, notification, or charging policies) to the different XYZ company subscriber groups. For example, employees could get limited usage, managers might get access to more usage and additional services (e.g., email), members of the sales team might get better roaming services, and a CEO might get everything in the carrier's service plan offering, perhaps with XYZ company as a sponsor for all services. Advantageously, split billing is possible using these techniques, such that XYZ company can pay for sponsored services and XYZ employees can pay for unsponsored services (or for a portion of subsidized services).

[0437] In some embodiments, an MVNO can purchase bulk data from a carrier and offer plans based on the bulk. Advantageously for MVNOs, a service design sandbox enables control over subscribers based on various specified criteria, e.g., network state. Indeed, for all subscribers “owned” by the MVNO, a great deal of policy control can be applied (dependent upon the amount of control a carrier is willing to give to the MVNO). Other providers that can benefit from the sandbox model include mobile virtual network enablers (MVNEs), mobile shared spectrum enablers (MSSEs), and service providers (SPs).

[0438] In some embodiments, e.g., for application developers, a service design sandbox can specify applications that can be covered by a service plan. In some embodiments, the service design center 135 may be responsible for creating the underlying control mechanism. In some embodiments, a company like amazon.com can be given some control over sponsorship settings for applications associated with amazon.com.

[0439] In some embodiments, e.g., for “gifters,” a service design sandbox can enable specification of a sponsorship amount that is donated to some other organization, such as a non-profit organization. In some embodiments, e.g., for community-based organizations, a service design sandbox can specify free access for a particular network service. For example, the San Francisco Giants organization could have a plan group for fans that grants free access to the official site of the San Francisco Giants. As another example, AAA could sponsor access to services for AAA members.

[0440] In some embodiments, agents of the network service plan provisioning system can be given roles that grant access to certain aspects of service design and/or provisioning. In some embodiments, agents at the service design center 135 can have a role system administrator, super user, or the like, while agents of a service design sandbox can have roles such as enterprise IT manager, MVNO administrator, or the like. In some embodiments, agents of a service design sandbox can subdivide roles further, if applicable, depending upon implementation.

[0441] In some embodiments, the service design center 135 is connected to the Internet and is coupled to the service controller 122. In some embodiments, the service design center 135 can set up boundaries for “sandboxed” service and allow customizations for partner sets; lock in master tariffs based on negotiated rates for a given partner set or individual partner; create custom log-ins for different partner sets or individual partners; and carry out any applicable techniques appropriate for a service design system. In some embodiments, the service design center 135 allows authorized agents to manage service plan components and subscribers. In some embodiments, the agents can manage groups (collections of subscribers, SIMs, or devices) to create groups and group directories, assign an identity hierarchy for the operator, associated identifiers with groups, etc. In some embodiments, the agents can manage service plans (including one or more components) including plan name and description, groups using the plan, service plan components, service activities, network busy states and connection types, charging policies (including usage limits, thresholds, frequency, time, and payment type), notifications (e.g., for plan usage thresholds, plan cap, expiration, block, overage, no capable plan, etc.), and events (e.g., for plan usage thresholds, plan cap, expiration, block, overage, etc.). In some embodiments, the agents can manage service components (logical grouping of one or more filters and rules), including component name and description, plans using the component, network busy states and connection types, charging policies (including usage limits, thresholds, frequency, time and payment type), notifications (e.g., for plan usage thresholds, plan cap, expiration, block, overage, no capable plan, etc.), and events (e.g., for plan usage thresholds, plan cap, expiration, block, overage, etc.). In some embodiments, the agents can manage service activities (e.g., activity name, plans using the activity, components using the activity, filter name and description, and filter type details (e.g., operating system, application, remote, port, protocol, etc.). The agents can manage service group plans including assign and publish plan group, create activation workflow screens, create buy workflow screens. In some embodiments, the agents can receive, manage, customize, or generate reports for, for example, usage reports by destination for a subscriber over a period of time, usage reports by destination for a range of subscribers over a period of time (top destinations).

[0442] In some embodiments, a sandbox of the service design center 135 is coupled to the service design center 135 in an applicable convenient fashion. In some embodiments, the service design center 135 sandbox can provide a secure login environment in which a subset of SDC service management controls can be designed and/or used; enable selection from bounded service customization options for one or more device groups under management; customize device UI branding; access real time analytics for service usage, application usage, location, etc.; set up service usage alerts, fraud alerts, theft alerts, etc.; and carry out any applicable techniques appropriate for a service design system that have been delegated to the sandboxed environment.

[0443] The service provider/third-party interface 145 of the service design center 135, in some embodiments, is equivalent to at least a portion of capabilities of a virtual service provider (VSP) workstation or terminal interface. In some embodiments, virtual service provider (VSP) capabilities include making available to a third-party service partner one or more of the following: (1) device group definition, control and security, (2) provisioning definition and execution, (3) activation tracking service (ATS) owner, (4) service profile definitions, (5) activation and ambient service definition, (6) billing rules definition, (7) billing process and branding controls, (8) bill by account settings, (9) service usage analysis capabilities by device, sub-group or group, (10) beta test publishing capabilities by device, sub-group or group, and (11) production publishing, fine tuning and re-publishing.

Application Promotion and Sponsorship

[0444] In some embodiments, a service provider/network operator/carrier provides means for a third party to define information that is then provided to one or more mobile wireless communication device service processors 115. For example, in some embodiments, the network operator provides a service provider/third-party interface 145, shown in FIG. 1 as communicatively coupled to the SDC 135, that allows a third party to enter information for the purpose of sponsoring an application or a service. In some embodiments, the service provider/third-party interface 145 is a web interface. In some embodiments, the service provider/third-party interface 145 is part of the SDC 135. In some embodiments, the service provider/third-party interface 145 is a separate interface that is communicatively coupled to the SDC 135 (as shown in FIG. 1). In some embodiments, the service provider/third-party interface 145 is not communicatively coupled to the SDC 135.

[0445] In some embodiments, the third party (e.g., the sponsor) uses the service provider/third-party interface 145 to perform one or more of the following tasks: (1) establish a service account, (2) define an application or a service that the third party wishes to sponsor, (3) define the parameters associated with the sponsorship.

[0446] In some embodiments, establishing a service account comprises entering payment information, such as a credit card. In some embodiments, establishing a service account comprises entering information that identifies the third party (sponsor).

[0447] In some embodiments, defining the application or service that the third party wishes to sponsor comprises selecting the application or service from a menu, such as a drop down menu or from a graphical display. In some embodiments, defining the application or service that the third party wishes to sponsor comprises entering information into the interface (e.g., typing characters). In some embodiments, defining the application or service that the third party wishes to sponsor comprises uploading software through the interface.

[0448] In some embodiments, defining the parameters associated with the sponsorship comprises establishing one or more of the following: a device group for which to sponsor a service or application (e.g., a list of device or subscriber credentials authorized to take advantage of the sponsored service or application), a sponsorship period (e.g., a start time and an end time, such as Friday from 6:00 P.M. to 7:00 P.M.), a time period (e.g., 30 minutes of usage starting at any time), an amount or percentage of data usage (e.g., 2 MB or 50% of data usage during a sponsorship period), a cost of data usage (e.g., $1.00 of data usage), roaming constraints (e.g., no sponsorship if the device is roaming, but sponsorship if the device is on a home network), network constraints (e.g., different sponsorship parameters for WiFI networks versus for cellular networks, sponsorship parameters dependent on network type (e.g., 3G, 4G, Wi-Fi, roaming, etc.), expiration (e.g., offer sponsorship for the next seven days), device geography (e.g., sponsor a service or application for devices in a particular geographical region, etc.) and any other parameter that could define a sponsored application or service.

[0449] In some embodiments, the service provider/third-party interface 145 allows the third party to specify information associated with service launch, such as the service launch object itself, the service launch object discovery level, etc. In some embodiments, the interface can present information to the sponsor about costs associated with particular service launch object placement or discovery levels, thus enabling the sponsor to select the parameters that fit budgetary constraints.

[0450] In some embodiments, the service provider/third-party interface 145 allows the third party to enter information about notifications associated with the sponsored application or service. In some embodiments, the third party enters conditions that will cause a notification (e.g., launch of the service or application results in the presentation of a notification). In some embodiments, the third party enters information that defines the content of the notification (e.g., information about the sponsor, the application, or the service, or a service offer, or an advertisement, etc.). In some embodiments, the third party selects from a pre-fabricated set of notification options. In some embodiments, the third party may create or modify customized content for notification messages.

[0451] In some embodiments, the service provider/third-party interface 145 allows the third party to enter information about a revenue share associated with a particular application or service. In some embodiments, the service provider/third-party interface 145 allows the third party to enter conditions under which the sponsor will subsidize or pay for data access. For example, in some embodiments the sponsor enters information indicating that the sponsor will pay for data access associated with a particular application if a subscriber exhibits particular behavior (e.g., purchases a product or service using the particular application or another application, clicks through some number of advertisements, activates a service plan under certain conditions, etc.).

[0452] In some embodiments, the service provider/third-party interface 145 allows the third party to access data associated with usage of the sponsored service or application. For example, in some embodiments, the sponsor can access “analytics” the provide information about engagement, response metrics, upsell statistics or numbers, etc.

[0453] In some embodiments, the service provider/third-party interface 145 allows the sponsor to specify a sponsorship level selected from a set of two or more sponsorship levels. In some embodiments, the sponsorship levels may include one or more of the following: a base level, a featured level, a premium level, a banner ad level, and a promotional messaging level.

[0454] In some embodiments, selection of the base sponsorship level results in placement of a service launch object (e.g., an application icon) in a “standard” device catalog. In some embodiments, the service launch object is customizable. In some embodiments, selection of the base sponsorship level allows the sponsor to specify or configure user notifications (e.g., upsell messages, service offers, advertisements, etc.).

[0455] In some embodiments, selection of the featured sponsorship level results in placement of a service launch object (e.g., an application icon) in both a “standard” device catalog and in a catalog of featured plans. FIG. 86 illustrates an embodiment with a listing of featured plans displayed as part of a screen 10470. In some embodiments, the featured plans have a placement on the device user interface that increases the likelihood of a device user seeing and selecting them. In some embodiments, the featured plans appear in a list through which a user can scroll to view featured plans. In some embodiments, the service launch object is customizable. In some embodiments, selection of the featured sponsorship level allows the sponsor to specify or configure user notifications (e.g., upsell messages, service offers, advertisements, etc.). In some embodiments, the featured sponsorship level is more expensive than the base sponsorship level.

[0456] In some embodiments, selection of the premium sponsorship level results in placement of a service launch object (e.g., an application icon) in a “standard” device catalog and in a catalog of premium plans. In some embodiments, the premium plans have a placement on the device user interface that increases the likelihood of a device user seeing and selecting them. In some embodiments, premium plans appear in the same catalog as featured plans, but premium plans appear first in a list (e.g., the premium plans are visible on the user interface without scrolling, whereas the featured plans are viewable only if the user scrolls down). In the example embodiment shown in FIG. 86, the visible plans under the “Featured Plans” label could be premium plans. In some embodiments, the catalog of premium plans is placed on the user interface in a position in which it is presumed to be more noticeable to a user than the position of featured plans or the “standard” catalog. In some embodiments, the catalog of premium plans is given more space on a user interface display than other content presented on the device user interface. In some embodiments, the service launch object associated with the premium sponsorship level is customizable. In some embodiments, selection of the premium sponsorship level allows the sponsor to specify or configure user notifications (e.g., upsell messages, service offers, advertisements, etc.). In some embodiments, the premium sponsorship level is more expensive than the featured and base sponsorship levels.

[0457] In some embodiments, the banner ad sponsorship level results in placement of a service launch object (e.g., an application icon) in a banner region of the device user interface. In some embodiments, the banner region has a placement on the device user interface that increases the likelihood of a device user seeing and selecting an item from the banner region. FIG. 86 illustrates the banner region above the four buttons labeled “Voice,” “Internet,” “Text,” and “Bundles.” In some embodiments, the banner region is placed on the user interface in a position in which it is presumed to be more noticeable to a user than the position of premium plans, featured plans, or the “standard” catalog. In some embodiments, the banner region is given more space on a user interface display than other content presented on the device user interface. In some embodiments, the service launch object associated with the sponsored service or application is customizable. In some embodiments, selection of the banner ad sponsorship level allows the sponsor to specify or configure user notifications (e.g., upsell messages, service offers, advertisements, etc.). In some embodiments, the banner region of the device user interface presents a static display. In some embodiments, the banner region rotates through a set of applications or services or offers associated with the banner ad sponsorship level. In some embodiments, the banner ad sponsorship level is more expensive than the premium, featured, and base sponsorship levels.

[0458] In some embodiments, the promotional messaging sponsorship level results in placement of a service launch object (e.g., an application icon) as a promotional message presented on the device user interface. In some embodiments, the promotional message is presented in the foreground of the device user interface. In some embodiments, the promotional message is presented to each mobile wireless communication device 100 in a particular subscriber group. In some embodiments, the promotional message prompts the user for a response. In some embodiments, the promotional messaging sponsorship level is more expensive than the banner ad, premium, featured, and base sponsorship levels.

[0459] Although the foregoing text described the service provider/third-party interface 145 as accessible to the third party (sponsor), it should be understood that the carrier/service provider/network operator can also configure partially or fully subsidized services or applications through the service provider/third-party interface 145 or directly through the SDC 135.

[0460] In some embodiments, the network operator/carrier/service provider uses the service provider/third-party interface 145 to provide information to prospective application or service sponsors. In some embodiments, the sponsor can learn about the levels of sponsorship, service discovery, pricing, etc. In some embodiments, the sponsor selects a sponsorship package from a pre-configured package. In some embodiments, the pre-configured package has been pre-configured by the network operator/carrier/service provider. In some embodiments, the pre-configured package has been configured by the sponsor or by another sponsor (e.g., a previous sponsor of the same or different application or service). In some embodiments, the sponsor selects a level of promotion (e.g., base, featured, premium, banner ads, promotional messaging, etc.). In some embodiments, the sponsor selects sponsorship parameters (e.g., amount of data to sponsor, amount of time to sponsor, roaming settings, etc.). In some embodiments, after configuring the sponsored application or service, the sponsor signs a contract. In some embodiments, the contract is electronic. In some embodiments, the contract is executed through the interface.

[0461] In some embodiments, after a sponsor has configured the sponsored application or service, the network operator/carrier/service provider enters information associated with the sponsored application or service into the service design center 135. In some embodiments, the information associated with the sponsored application or service includes: one or more application credentials, one or more device credentials, information defining notifications, information defining service parameters, information defining promotional parameters. In some embodiments, after the network operator/carrier/service provider has entered the information into the SDC 135, the sponsor approves the information. In some embodiments, information associated with the sponsored service in the SDC 135 is published to a specified device group. In some embodiments, the selected device group is specified or configured by the sponsor.

[0462] After a sponsor has configured the sponsored service or application parameters, the service controller 122 or another network element communicates the sponsored service to a mobile wireless communication device 100, or the mobile wireless communication device 100 otherwise obtains the sponsored service from a network element.

[0463] In some embodiments, when a user launches the service object (e.g., icon, banner ad, etc.) associated with the sponsored service or application, but the mobile wireless communication device 100 does not yet have an application (e.g., the sponsored application) necessary to use the sponsored service or application, an appropriate application (e.g., the sponsored application) is downloaded to the mobile wireless communication device 100. In some embodiments, the cost associated with downloading the application is charged to the sponsor.

[0464] In some embodiments, when a user launches the service object (e.g., icon, banner ad, etc.) associated with the sponsored service or application, the user interface displays information about the sponsored application or service.

[0465] In some embodiments, when a user has used a sponsored application or service, and the sponsorship of that service or application ends, a notification is presented through the device user interface 101. In some embodiments, the notification is a service offer (e.g., an offer for a paid service plan associated with the sponsored service or application). In some embodiments, if the user responds positively to the notification (e.g., the user purchases an offered service plan), the network operator/carrier/service provider credits the sponsor for some amount of sponsored access. In some embodiments, the credit is determined based on a revenue share agreement.

[0466] In some embodiments, the sponsor pays for all data usage associated with the sponsored application or service in order to maximize traffic using the application or service. For example, a bank may decide to sponsor all data usage associated with a banking application, or an insurance company may decide to sponsor all data usage associated with visits to the insurance company's website.

[0467] In some embodiments, the sponsor pays for only a portion of the data usage associated with the sponsored application or service in order to prevent excessive costs to the sponsor. In some embodiments, the sponsor pays for all data usage during a particular time period. Using such partial-sponsorship models, for example, an application developer may attempt to expose users to their applications in the hope that the users will like or need those applications and thereafter pay for data usage associated with those applications. As another example, a network operator/carrier/service provider may use a partial sponsorship model to encourage subscribers to try using data at no cost to them, the hope being that subscribers will then purchase a data service plan that will result in profit to the network operator.

[0468] In some embodiments, a free version of an application is offered along with free access for a limited time. In some embodiments, after the initial free period, the user is prompted to buy a paid version of the application or a paid data plan. Using such a “freemium” model, application developers can increase sales, and operators can improve revenues from subscriber uptake of data plans.

[0469] In some embodiments, a service plan or an application is offered to the user of a mobile wireless communication device 100 that permits a limited time or service amount usage of the service plan or application. In some embodiments, the service plan or application offer is provided in a notification message, e.g., through a UI of the device. In some embodiments, a user of the mobile wireless communication device 100 enters one or more credentials, e.g., a device credential, a user credential, and/or an account credential in order to “sign up” for the offered service plan or application. In some embodiments, the user is required to provide a form of credit information, e.g., a credit card or a user credential that points to a service account that includes credit information, before the user can access and use the service plan or application. In some embodiments, the user supplies the user credential to a third-party service partner system, e.g., an “Apple ID” to “iTunes” or to an “Application Store” or to an “iCloud” account. In some embodiments, service usage for the service plan or application by the mobile wireless communication device 100 (and/or a user thereof) is accounted by a network system. In some embodiments, when the service plan expires or an allocated service usage amount for the service plan is consumed, a notification message (e.g., a marketing interceptor) is provided to the user of the mobile wireless communication device 100. In some embodiments, the notification message provides for selecting to purchase, replace, upgrade or continue use of the service plan or application. In some embodiments, the notification message provides for selecting a pre-paid or post-paid service plan or application in place of the limited “free” service plan or application. In some embodiments, the user of the mobile wireless communication device 100 is not required to provide credit information to use the limited “free” service plan or application. In some embodiments, the user of the mobile wireless communication device 100 is required to provide credit information to purchase and/or subscribe to a service plan or application offered by the notification message when the limited “free” service plan or application expires or runs out.

[0470] In some embodiments, one or more of the mediation/reconciliation functions for device assisted billing, device generated billing events, device generated bill by account events and device generated open transaction billing events can be implemented in the service controller 122 (e.g., a billing event server) or in another function located in a billing system or elsewhere. This billing mediation server function accepts the device based billing events discussed immediately above, reformats the billing events into a format accepted and recognized by the billing system, mediates the billing event information to remove service usage billing from the user account and place it in other bill by account categories as appropriate according to the bill by account mediation rules, adds other billing events for service usage or transactions to the user account as appropriate according to the device based billing rules, and then applies the information to the billing information the user account to correct or update the account.

[0471] For example, a bill by account can allow for a website provider, such as Google or Yahoo, to pay for or offset certain account usage for web browsing, web based searching, web based email, or any other web based or other service usage activities, which may also be based (in whole or in part) on the activities performed by the user on such transactional services (e.g., based on advertisement viewing/accessing or click-through activities by the user, by which an advertisement business model used by such website providers directly or indirectly supports such service account subsidies). As another example, a bill by account can allow for an advertiser to pay for or offset certain account usage for viewing and/or accessing (e.g., clicking through) a web placed advertisement or other advertisement sent via the network to the device. As yet another example, various network chatter (e.g., heartbeat related network and other network chatter related service data usage) can be assigned to a dummy account and such can be used to offset the bill and/or used for tracking the data usage for such activities for the device. In another example, service data usage for access to a transactional service, such as a multimedia content download service (e.g., music, eBook, music/video streaming, and/or movie or other multimedia content download service), or an online shopping site (e.g., Amazon, eBay or another online shopping site), can be billed to a transactional service account assigned to a transactional service partner that sponsors access to that sponsor's transactional service, thereby allowing that transactional service partner to pays for or offset (e.g., subsidize) the account usage for such activities, which may also be based (in whole or in part) on the transactions actually performed by the user on such transactional services (e.g., based on the volume/cost of the multimedia service download purchases by the user and/or online activities)

Service Plan Selection and Customization

[0472] In some embodiments, a user of the mobile wireless communication device 100 obtains information about service plans and/or service plan bundles from the service controller 122 through the network 1100. In some embodiments, the user selects among service plans and/or service plan bundles to which to subscribe for one or more wireless communication devices 100. In some embodiments, selection of service plans and/or service plan bundles occurs through a user interface of the mobile wireless communication device 100. In some embodiments, the user determines a customized service plan bundle by selecting among options for different constituent service plans to include in the customized service plan bundle. In some embodiments, the options for constituent service plans to include in the customized service plan bundle are obtained from a network element, e.g., the service controller 122. In some embodiments, summary characteristics of the customized service plan bundle are presented simultaneously to the user of the mobile wireless communication device 100 during selection of the constituent service plans for the customized service plan bundle. In some embodiments, information on service plan and/or service plan bundle promotions and subsidies are presented along with service plans and/or service plan bundles to the user of the mobile wireless communication device 100. In some embodiments, the mobile wireless communication device 100 communicates selections of one or more service plans to a network element, e.g., the service controller 122. In some embodiments, the service processor 115 in the mobile wireless communication device 100 and the service controller 122 in the wireless network negotiate a customized service plan bundle. In some embodiments, information on service usage history is provided to inform the user of the mobile wireless communication device 100 during the selection process. In some embodiments, the service controller 122 provides one or more options for service plans or service plan bundles to the user of the mobile wireless communication device 100 that match to a previous use of, present use of or attempt to access or use one or more communication services.

[0473] In some embodiments, a subscriber can acquire a mobile device and establish a master service account through the mobile device user interface (e.g., a touch screen) or through, for example, a website. FIG. 1 illustrates mobile device 100 equipped with service processor 115 in accordance with some embodiments. Service processor 115 is communicatively coupled to service controller 122 through a wireless network. Service controller 122 is communicatively coupled to network elements that facilitate the provisioning of services to mobile devices, such as billing systems (not shown). The functions and capabilities of service processor 115 and service controller 122 have been described in many other patent applications and patents, including, for example, U.S. Pat. No. 8,023,425. One of the functions of service processor 115 is to present information to a user of mobile device 100 through a user interface of mobile device 100 (e.g., a touch screen display, etc.). In some embodiments, service processor 115 also collects information from a user through the user interface. In some embodiments, service processor 115 sends some or all of the collected information, or a representation of some or all of the collected information, over a control channel to service controller 122. In some embodiments, the control channel is secured by an encryption protocol.

[0474] In some embodiments, service controller 122 is also communicatively coupled to the service design center 135. In some embodiments, the service design center 135 allows a service provider or a service provider partner entity to configure service plan and service plan bundle offerings for distribution to mobile devices such as mobile device 100. In some embodiments, the service design center 135 allows a service provider or a service provider partner entity to configure the messages, information, and screens as illustrated by multiple figures provided herein.

[0475] In some embodiments, a device agent (e.g., software such as one or more components of a service processor 115 shown in FIG. 1) installed on the mobile wireless communication device 100 is configured to communicate a request to add the mobile wireless communication device 100 to a master service account, a device group, or a multi-device (i.e., shareable) service plan or service plan bundle. In some embodiments, at least an aspect of the request is received from a network element, such as service controller 122 of FIG. 1. In some embodiments, the communications between the device agent and the network element take place over a secure communications link. In some embodiments, the secure communications link is encrypted by a transport layer security (TLS), a secure socket layer (SSL), or by other suitable encryption mechanisms or protocols.

[0476] In some embodiments, the request to be added to the master service account, device group, or multi-device service plan (bundle) includes a credential that uniquely identifies the mobile wireless communication device 100, such as a subscriber identity module, a device identifier, a phone number, an international mobile subscriber identity (IMSI), a mobile equipment identifier (MEID), or any other credential. In some embodiments, the credential comprises a secure information aspect associated with the mobile wireless communication device 100. As would be appreciated by a person having ordinary skill in the art, a credential allows a user to access network services using the mobile wireless communication device 100. A credential uniquely identifies an entity, such as a particular mobile wireless communication device 100, a particular subscriber or account-holder, a particular service account, etc. Examples of credentials include, but are not limited to, a phone number, an international mobile subscriber identifier (IMSI), a mobile station identifier (MSID), a subscriber information module (SIM) identifier, an electronic serial number (ESN), a mobile equipment identifier (MEID), an international mobile equipment identity (IMEI), a device identifier, a subscriber identifier, a service account identifier, a media access control (MAC) address, an Internet protocol (IP) address, a token, a one-time token, any other identifying information that uniquely identifies an entity, and combinations of these. Some credentials (e.g., a SIM, a phone number, etc.) may be moved from one mobile wireless communication device 100 to another mobile wireless communication device 100, whereas other credentials are permanently associated with a mobile wireless communication device 100 (e.g., an ESN, a device identifier, etc.). This document often refers to a credential as uniquely identifying the mobile wireless communication device 100 because even a credential that can be moved from one mobile wireless communication device 100 to another mobile wireless communication device 100 can uniquely identify a particular mobile wireless communication device 100 when the credential is installed in the particular mobile wireless communication device 100 (e.g., while a SIM card is in mobile wireless communication device 100, the SIM card uniquely identifies the particular mobile wireless communication device 100 because the SIM card can only be installed in one mobile wireless communication device 100 at a time). In some embodiments, the request to be added to the master service account, device group, or multi-device service plan or service plan bundle includes information that identifies a user of the mobile wireless communication device 100.

[0477] FIG. 3 illustrates a network management system 10601, in accordance with some embodiments, including the mobile wireless communication device 100 communicatively coupled through the network 1100 to a set of network services 120-1 and to a device management system 170-1. In some embodiments, the mobile wireless communication device 100 is communicatively coupled through the network 1100 to an application download server 140-1. In some embodiments, the mobile wireless communication device 100 includes a user interface (UI) 101.

[0478] In some embodiments, the device agent initiates the request to be added to the master service account, device group, or multi-device service plan or service plan bundle based at least in part on a user input obtained through the user interface 101. In some embodiments, the mobile wireless communication device 100 includes a UI location manager 132-1, a UI agent 134-1, and a set of one or more device services 138-1. In some embodiments, the device management system 170-1 includes a UI location management server 150-1, an accounting database 180-1, and a UI location management console 160-1. In some embodiments, the device management system 170-1 determines placement of “service launch objects” and notification messages on the UI 101 of the mobile wireless communication device 100.

[0479] In some embodiments, a service provider (e.g., a wireless network operator or a third-party service provider) uses the network management system 10601 shown in FIG. 3 to manage and control information content and placement provided through the UI 101 of the mobile wireless communication device 100. In some embodiments, information content includes specific details on service plans and service plan bundles, such as availability, cost, features, promotions, subsidies, applicability, location, time frame, service usage amounts, restrictions, sharing capabilities, etc. Using the network management system 10601, in some embodiments, service providers determine visibility of pre-defined service plans, pre-defined service plan bundles, customizable service plans and customizable service plan bundles to which the user of the mobile wireless communication device 100 can subscribe. In some embodiments, the user selects, customizes and subscribes to service plans and/or service plan bundles through the UI 101 on the mobile wireless communication device 100. In some embodiments, the user shares or assigns a portion of or an entirety of a service plan or a service plan bundle among one or more different mobile wireless communication devices 100. In some embodiments, options on service plan and/or service plan bundle sharing are presented to the user of the mobile wireless communication device 100 through the UI 101. In some embodiments, service providers use the service design center 135 to define and publish pre-defined and customizable service plans or service plan bundles to users of mobile wireless communication devices 100. In some embodiments, information on service plans or service plan bundles is pushed from a network element, e.g., the service controller 122, to the mobile wireless communication device 100. In some embodiments, the user of the mobile wireless communication device 100 pulls information on service plans or service plan bundles from a network element, e.g., the service controller 122. In some embodiments, placement, formatting and content of service plan and service plan bundle information provided to the user of the mobile wireless communication device 100 and displayed on the UI 101 is determined at least in part by the device management system 170-1.

[0480] FIG. 4 illustrates a representative system 10602 including elements of a mobile wireless communication device 100 interconnected to a service controller 122 through a wireless network. While the embodiment illustrated in FIG. 4 illustrates the mobile wireless communication device 100 connected to the service controller 122 through a wireless radio access network and the Internet, other network combinations are also possible. In some embodiments, the wireless communication device 100 connects to the service controller through a radio access network, a core network, an access transport network, one or more service provider networks (e.g., of a network operator, mobile virtual network operator (MVNO), virtual service provider (VSP), or third-party service partner), or a combination of these. In some embodiments, the mobile wireless communication device includes a service processor 115 having one or more device agents that communicate through a control plane communication path to the service controller 122. In some embodiments, the service controller 122 includes one or more servers that provide communication service management functions. In some embodiments, one or more servers in the service controller 122 communicate with one or more device agents in the service processor 115 of the mobile wireless communication device 100.

[0481] In some embodiments, a service notification and billing interface is provided. For example, service usage and projected service usage, such as described herein, can be displayed to the user of the device (e.g., via user interface 101). Similarly, expected/projected service or cost overrun/overage, such as described herein, can also be displayed to the user. As another example, a most cost effective plan can be determined/projected based on historical and/or projected service usage, and this determined/projected most cost effective plan can be displayed to the user. In yet another example, a list of available networks accessible by the device can be displayed to the user. In this example, one or more undesired available networks can also be blocked from display thereby only displaying to the user desired and/or preferred available networks. In this example, service usage plans and/or service usage plan option comparison for one or more alternative networks or roaming networks can also be displayed to the user. Similarly, service cost plans and/or service/cost plan option comparison for one or more alternative networks or roaming networks can also be displayed to the user. In addition, roaming service usage, projected roaming service usage, estimated roaming service cost, and/or projected estimated roaming service cost can also be displayed to the user. These roaming service usage/costs can also be displayed to the user so that the user can utilize this information for selecting various roaming service billing options. In another example, alternative and/or least cost networks are determined and displayed to the user. In another example, alternative warnings are displayed to the user for any or specified roaming networks.

[0482] In some embodiments, the service notification and billing interface notifies the user of expected network coverage (e.g., based on the device's current geography/location and the accessible networks for the device from that current geography/location) and displays options to the user based on the expected network coverage information. In some embodiments, the service notification and billing interface notifies the user of their current service usage at specified service usage points and displays various options to the user (e.g., service usage options and/or billing options). For example, the user's responses to the presented options are recorded (e.g., stored locally on the device at least temporarily for reporting purposes or permanently in a local configuration data store until such configuration settings are otherwise modified or reset) and reported, such as to a billing server (e.g., central billing 123). For example, user input, such as selected options and/or corresponding policy settings, can be stored locally on the device via a cache system. As another example, the service notification and billing interface displays options to the user for how the user wants to be notified and how the user wants to control service usage costs, the user's input on such notification options is recorded, and the cost control options (e.g., and the billing agent 1695 and policy control agent 1692) are configured accordingly. Similarly, the user's input on service plan options/changes can be recorded, and the service plan options/changes (e.g., and the billing agent 1695 and policy control agent 1692) are configured/updated accordingly. In another example, the service notification and billing interface provides various traffic control profiles, such as for where the user requests assistance in controlling service usage costs (e.g., service data usage and/or transactional usage related activities/costs). Similarly, the service notification and billing interface can provide various notification options, such as for where the user wants advance warning on service coverage. In another example, the service notification and billing interface provides options for automatic pre-buy at a set point in service usage. In another example, the service notification and billing interface provides the option to choose different notification and cost control options for alternative networks or roaming networks.

[0483] In some embodiments, an online portal or web server is provided for allowing the user to select and/or update policy settings. For example, user input provided via the online portal/web server can be recorded and reported to the billing server (e.g., central billing 123). In another example, the online portal/web server can display transaction billing information and/or accept input for a transaction billing request, which can then be reported to the billing server accordingly.

[0484] As shown in FIG. 4, the service processor 125 includes a service interface or user interface (UI) 101. In some embodiments, the user interface 101 provides the user with information and accepts user choices or preferences on one or more of the following: user service information, user billing information, service activation, service plan selection or change, service usage or service activity counters, remaining service status, service usage projections, service usage overage possibility warnings, service cost status, service cost projections, service usage control policy options, privacy/CRM/GPS related options, and/or other service related information, settings, and/or options. For example, the user interface 101 can collect service usage information from service monitor agent 1696 to update the local service usage counter (and/or, alternatively, the service usage information is obtained from the service controller 122) to update user interface service usage or service cost information for display to the user. As another example, service billing records obtained from central billing system 123 can be used to synchronize local service usage counters and service monitor agent 1696 information to perform real-time updating of local service usage counters between billing system 123 synchronizations. As another example, the user interface 101 can display options and accept user preference feedback, such as similarly discussed above with respect to user privacy/CRM/GPS filtering, traffic monitoring and service controls. For example, the user interface 101 can allow the user of the device to modify their privacy settings, provide user feedback on service preferences and/or service experiences, modify their service profiles (e.g., preferences, settings, configurations, and/or network settings and options), to review service usage data (e.g., based on local service usage counters and/or other data monitored by the service processor 115), to receive various events or triggers (e.g., based on projected service usage/costs), and/or the user interface 101 can provide/support various other user input/output for service control and service usage.

[0485] In some embodiments, by providing the service policy implementation and the control of service policy implementation to the preferences of the user, and/or by providing the user with the option of specifying or influencing how the various service notification and control policies or control algorithms are implemented, the user is provided with options for how to control the service experience, the service cost, the capabilities of the service, the manner in which the user is notified regarding service usage or service cost, the level of sensitive user information that is shared with the network or service provider entity, and the manner in which certain service usage activities may or may not be throttled, accelerated, blocked, enabled and/or otherwise controlled. Accordingly, some embodiments provide the service control to beneficially optimize user cost versus service capabilities or capacities in a manner that facilitates an optimized user experience and does not violate network neutrality goals, regulations and/or requirements. For example, by offering the user with a set of choices, ranging from simple choices between two or more pre-packaged service control settings options to advanced user screens where more detailed level of user specification and control is made available, some embodiments allow the service provider, device manufacturer, device distributor, MVNO, VSP, service provider partner, and/or other “entity” to implement valuable or necessary service controls while allowing the user to decide or influence the decision on which service usage activities are controlled, such as how they are controlled or throttled and which service usage activities may not be throttled or controlled in some manner. These various embodiments allow the service provider, device manufacturer, device distributor, MVNO, VSP, service provider partner, or other “entity” to assist the user in managing services in a manner that is network neutral with respect to their implementation and service control policies, because the user is making or influencing the decisions, for example, on cost versus service capabilities or quality. By further providing user control or influence on the filtering settings for the service usage reporting or CRM reporting, various levels of service usage and other user information associated with device usage can be transmitted to the network, service provider, device manufacturer, device distributor, MVNO, VSP, service provider partner, and/or other “entity” in a manner specified or influenced by the user to maintain the user's desired level of information privacy.

[0486] As shown in FIG. 4, the service processor 115 includes a service downloader 1663. In some embodiments, the service downloader 1663 provides a download function to install or update service software elements on the device. In some embodiments, the service downloader 1663 requires a secure signed version of software before a download is accepted. For example, the download can require a unique key for a particular service downloader 1663. As another example, the service downloader 1663 can be stored or execute in secure memory or execute a secure memory partition in the CPU memory space. Those of ordinary skill in the art will appreciate that there are a variety of other security techniques that can be used to ensure the integrity of the service downloader 1663.

[0487] In some embodiments, the service processor 115 and service controller 122 are capable of assigning multiple service profiles associated with multiple service plans that the user chooses individually or in combination as a package. For example, a device 100 starts with ambient services that include free transaction services wherein the user pays for transactions or events rather than the basic service (e.g., a news service, eReader, PND service, pay as you go session Internet) in which each service is supported with a bill by account capability to correctly account for any subsidized partner billing to provide the transaction services (e.g., Barnes and Noble may pay for the eReader service and offer a revenue share to the service provider for any book or magazine transactions purchased from the device 100). In some embodiments, the bill by account service can also track the transactions and, in some embodiments, advertisements for the purpose of revenue sharing, all using the service monitoring capabilities disclosed herein. After initiating services with the free ambient service discussed above, the user may later choose a post-pay monthly Internet, email and SMS service. In this case, the service controller 122 would obtain from the billing system 123 in the case of network based billing (or in some embodiments the service controller 122 billing event server 1622 in the case of device based billing) the billing plan code for the new Internet, email and SMS service. In some embodiments, this code is cross referenced in a database (e.g., the policy management server 1652) to find the appropriate service profile for the new service in combination with the initial ambient service. The new superset service profile is then applied so that the user maintains free access to the ambient services, and the billing partners continue to subsidize those services, the user also gets access to Internet services and may choose the service control profile (e.g., from one of the embodiments disclosed herein). The superset profile is the profile that provides the combined capabilities of two or more service profiles when the profiles are applied to the same device 100 service processor. In some embodiments, the device 100 (service processor 115) can determine the superset profile rather than the service controller 122 when more than one “stackable” service is selected by the user or otherwise applied to the device. The flexibility of the service processor 115 and service controller 122 embodiments described herein allow for a large variety of service profiles to be defined and applied individually or as a superset to achieve the desired device 100 service features.

[0488] As shown in FIG. 4, service processor 115 includes a service control device link 1691. For example, as device based service control techniques involving supervision across a network become more sophisticated, it becomes increasingly important to have an efficient and flexible control plane communication link between the device agents and the network elements communicating with, controlling, monitoring, or verifying service policy. In some embodiments, the service control device link 1691 provides the device side of a system for transmission and reception of service agent to/from network element functions. In some embodiments, the traffic efficiency of this link is enhanced by buffering and framing multiple agent messages in the transmissions. In some embodiments, the traffic efficiency is further improved by controlling the transmission frequency or linking the transmission frequency to the rate of service usage or traffic usage. In some embodiments, one or more levels of security or encryption are used to make the link robust to discovery, eavesdropping or compromise. In some embodiments, the service control device link 1691 also provides the communications link and heartbeat timing for the agent heartbeat function. As discussed herein, various embodiments disclosed herein for the service control device link 1691 provide an efficient and secure solution for transmitting and receiving service policy implementation, control, monitoring and verification information with other network elements.

[0489] In some embodiments, the service control device link 1691 agent messages are transmitted asynchronously as they are generated by one or more of the service agents. In some embodiments, the service control device link 1691 performs collection or buffering of agent messages between transmissions. In some embodiments, the service control device link 1691 determines when to transmit based potentially on several parameters including, for example, one or more of the following parameters: periodic timer trigger, waiting until a certain amount of service usage or traffic usage has occurred, responding to a service controller message, responding to a service controller request, initiated by one or more agents, initiated by a verification error condition, initiated by some other error or status condition. In some embodiments, once a transmission trigger has occurred, the service control device link 1691 assembles all buffered agent communications and frames the communications.

[0490] In some embodiments, the transmission trigger is controlled by waiting for an amount of service usage, such as waiting until a certain amount of data traffic has passed, which reduces the control plane communication channel traffic usage to a fraction of the data plane traffic. For example, this approach preserves network capacity and reduces service cost even in traffic scenarios in which data traffic is light.

[0491] In some embodiments, the transmission trigger is based on waiting for an amount of service usage, and also including a minimum transmission rate that triggers a transmission according to one or more of the following parameters: a maximum time between transmissions clock to keep the service processor 115 in communication with the service controller 122 when little or no service usage is occurring, a polling request of some kind from the service controller 122, a response to a service controller heartbeat, a transmission generated by a service verification error event, or a transmission generated by some other asynchronous event with time critical service processor 115 (or service controller 122) messaging needs, such as a transaction or service billing event or a user request. For example, service control plane traffic down is reduced to a relatively inexpensive and capacity conserving trickle when device 100 data traffic is not significant. At the same time, this approach also provides an effective flow of real time or near real-time service control plane traffic that is both cost and capacity efficient, because the service control plane traffic is a relatively small percentage of the data plane traffic when data plane traffic usage is heavy. For example, when data plane traffic usage is heavy is generally the time when close monitoring of service policy implementation verification or compromise prevention can be particularly important and by keeping the control plane overhead to a fraction of data plane traffic close monitoring and control of services are maintained at a reasonable cost in terms of percentage of both bandwidth used and network capacity. In some embodiments, the service usage or service activity trigger occurs based on some other measure than traffic usage, such as a number of messages transacted, one or more billing events, number of files downloaded, number of applications run or time that an application has been running, usage of one or more specified applications, GPS coordinate changes, roaming event, an event related to another network connection to the device and/or other service related measures.

[0492] In some embodiments, the service control device link 1691 provides for securing, signing, encrypting or otherwise protecting communications before sending. For example, the service control device link 1691 can send to the transport layer or directly to the link layer for transmission. In some embodiments, the communications are further secured with transport layer encryption, such as TCP TLS (Transport Control Protocol Transport Layer Security) or another secure transport layer protocol. In some embodiments, communications are encrypted at the link layer, such as IPSEC (Internet Protocol Security), various VPN (Virtual Private Network) services, other forms of IP layer encryption and/or another link layer encryption technique.

[0493] In some embodiments, the service control link 1691 includes the above discussed agent heartbeat function in which the agents provide certain required reports to the service controller 122 for the purpose of service policy implementation verification (e.g., verification related reports on certain aspects of the service processor 115) or for other purposes. For example, such agent heartbeat messages can be in the open/clear (unencrypted) or encrypted, signed and/or otherwise secured. In some embodiments, these messages include one or more of the below described types of messages: an agent information message, an agent check-in message and/or agent cross check message.

[0494] In some embodiments, an agent information message is included in the agent heartbeat service policy implementation verification message, which includes, for example, any information the agent needs to communicate to the service controller 122 as part of the operation of the service policy implementation system. For example, an agent response to a service controller challenge, as described below, can be included in the agent heartbeat service policy implementation verification message.

[0495] In some embodiments, an agent check-in message is included in an agent heartbeat service policy implementation verification message, which includes, for example, a transmission of a unique agent identifier, secure unique identifier, and/or hashed encrypted and signed message beginning with some shared secret or state variable for the hash. For example, an agent self-check can be included in the agent heartbeat service policy implementation verification message, which includes reporting on agent configuration, agent operation, agent code status, agent communication log, agent error flags, and/or other agent associated information potentially hashed, encrypted, signed or otherwise secured in the message (e.g., using a shared secret unique to that agent).

[0496] In some embodiments, an agent cross-check message is included in the agent heartbeat service policy implementation verification message, which includes, for example, reports on the status, configuration, operation observations, communication log or other aspects of another agent. For example, agent environment reports can be included in the agent heartbeat service policy implementation verification message, which includes, for example, reports on certain aspects of the service processor 115 operating environment, such as software presence (e.g., installation status of certain operating system and/or application software and/or components thereof), observed communication with agents or communication attempts, memory accesses or access attempts, network accesses or access attempts, software downloads or attempted downloads, software removal or download blocking, service policy implementation verification or compromise event error conditions with respect to the operating environment for the service processor 115, and/or other messages regarding the verification or possibility of compromise associated with the service processor 115 operating environment or agents.

[0497] In some embodiments, the agent heartbeat function also provides regular updates for information important to user service notification services. For example, the network based elements can provide regular synchronization updates for the device based service usage or service activity counters in which service usage or service activity measures available from one or more network service history elements is transmitted to the device 100. This allows the service usage counter errors between the device service counter and the counters used for central billing to be minimized. A common service usage or service activity measure is total traffic usage measured to date within a time frame over which a service limit is applicable. Other service usage or service activity measures can also be tracked and reconciled in a similar manner.

[0498] In some embodiments for the heartbeat function, the service controller 122 verifies that the scheduled agent reports are being received and that the reports are within expected parameters. In some embodiments, the access control integrity server 1654 issues signed challenge/response sequences to the policy implementation agent 1690. For example, the challenges can be asynchronous, issued when an event or error condition occurs, issued on a schedule or issued when a certain amount of data has passed. This approach, for example, provides a second layer of service policy implementation verification that strengthens the service usage or service activity measurement verification. For example, a challenge/response can be sent over the heartbeat link for the purpose of verifying device agent integrity. Various challenge/response related verification embodiments are described below.

[0499] In some embodiments, the challenge/response heartbeat message can include sending any kind of command or query, secure or transmitted in the open, receiving a response from the agent and then evaluating the response to determine if the response is within a range of parameters expected for a correctly configured agent, an agent that is operating properly, an agent that is not partially compromised or an agent that is not entirely compromised. In some embodiments, the agent is only required to respond with a simple acknowledgement of the challenge. In some embodiments, the agent is required to respond with a message or piece of information that is known by the agent. In some embodiments, the agent is required to respond with a message or piece of information that is difficult for the agent to respond correctly with if it were to be partially or entirely compromised. In some embodiments, the agent is required to respond back with information regarding the operation or configuration of the agent that is difficult for the agent to respond properly with if the agent is not properly configured, not operating properly, is partially compromised or is entirely compromised. In some embodiments, the first agent is required to respond back with information regarding the operation, configuration, status or behavior of a second agent that is difficult for the first or second agent to respond properly with if the first or second agent is not properly configured, not operating properly, is partially compromised or is entirely compromised. In some embodiments, the agent is required to respond with a response that includes a shared secret. In some embodiments, the agent is required to respond with information regarding the presence, configuration, operating characteristics or other information regarding other programs in the operating environment of the agent. In some embodiments, the agent is required to respond with hashed information to be portions of code or a code sample (e.g., the code portion or code sample can be specified by the service controller 122).

[0500] In some embodiments, the information the agent responds with is a response to a signed or encrypted message from the service controller 122 in which the agent must know how to decode the encrypted controller message in order to respond correctly or it would be difficult for the agent to respond properly if the agent is not configured properly, is not operating within appropriate limits, is partially compromised or is entirely compromised. In some embodiments, the agent signs or encrypts information in such a manner that it is difficult to respond correctly when the message is decoded by the service controller 122 unless the agent is configured properly, is operating within appropriate limits, is not partially compromised and is not entirely compromised. In some embodiments, the agent is required to respond with a signed or encrypted hash of information that is difficult for the agent to generate unless the agent is configured properly, is operating within appropriate limits, is not partially compromised and is not entirely compromised. For example, the hashed information can be local device configuration information, portions of code or all of the code, and/or the code portion to be used in the response can be specified by the service controller. In another example, the hashed information the agent responds with can include a shared secret, and/or the hashed information can be information regarding the presence, configuration, operating characteristics or other information regarding other programs in the operating environment of the agent.

[0501] Accordingly, as described above, the agent heartbeat function provides an important and efficient system in some embodiments for verifying the service policy implementation or protecting against compromise events. For example, there are many other functions the agent heartbeat service can perform and some are described herein while others will be apparent to one of ordinary skill in the art given the principles, design background and various embodiments provided herein.

[0502] In some embodiments, the service control device link 1691 facilitates another important function, which is the download of new service processor software elements, revisions of service processor software elements, and/or dynamic refreshes of service processor software elements. There are many embodiments for such operations. In some embodiments, the software is received as a single file over the service control device link 1691. For example, the file can have encryption or signed encryption beyond any provided by the communication link protocol itself. In some embodiments, the software files are segmented into smaller packets that are communicated in multiple messages sent over the service control device link 1691. In some embodiments, once the file(s) are received, or the segmented portions of the file(s) are received, they are communicated to a service downloader 1663 for file aggregation and installation, which, in some embodiments, is performed after further measures to verify the service processor software are completed. In some embodiments, the files are sent using other delivery means, such a direct TCP socket connection to the service downloader 1663 or some other software installer, which can also involve secure transport and additional levels of encryption.

[0503] As shown in FIG. 4, the service controller 122 includes a service control server link 1638. In some embodiments, device based service control techniques involving supervision across a network (e.g., on the control plane) are more sophisticated, and for such it is increasingly important to have an efficient and flexible control plane communication link between the device agents (e.g., of the service processor 115) and the network elements (e.g., of the service controller 122) communicating with, controlling, monitoring, or verifying service policy. For example, the communication link between the service control server link 1638 of service controller 122 and the service control device link 1691 of the service processor 115 can provide an efficient and flexible control plane communication link, a service control link 1653 as shown in FIG. 4, and, in some embodiments, this control plane communication link provides for a secure (e.g., encrypted) communications link for providing secure, bidirectional communications between the service processor 115 and the service controller 122. In some embodiments, the service control server link 1638 provides the network side of a system for transmission and reception of service agent to/from network element functions. In some embodiments, the traffic efficiency of this link is enhanced by buffering and framing multiple agent messages in the transmissions (e.g., thereby reducing network chatter). In some embodiments, the traffic efficiency is further improved by controlling the transmission frequency and/or linking the transmission frequency to the rate of service usage or traffic usage. In some embodiments, one or more levels of security and/or encryption are used to secure the link against potential discovery, eavesdropping or compromise of communications on the link. In some embodiments, the service control server link 1638 also provides the communications link and heartbeat timing for the agent heartbeat function. As discussed below, various embodiments described herein for the service control server link 1638 provide an efficient and secure mechanism for transmitting and receiving service policy implementation, control, monitoring and verification information between the device agents (e.g., service processor agents/components) and other network elements (e.g., service controller agents/components).

[0504] In some embodiments, the service control server link 1638 can employ the counterpart service control plane secure transmission methods discussed above with respect to the service control device link 1691. For example, one or more layers of security can be used to secure the communications link, including, for example, basic IP layer security, TCP layer security, service control link layer security, and/or security specific from service controller servers to service processor agents.

[0505] In some embodiments, the service control server link 1638 reduces network chatter by efficiently transmitting service control related communications over the link. For example, the service control server link 1638 can transmit server messages asynchronously as they arrive. As another example, the service control server link 1638 can perform collection or buffering of server messages between transmissions. As another example, the service control server link 1638 can determine when to transmit based potentially on several parameters, such as one or more of: periodic timer trigger, waiting until a certain amount of service usage or traffic usage has occurred, responding to a service agent message, responding to a service agent request, initiated by one or more servers, initiated by a verification error condition, and/or initiated by some other error condition. For example, once a transmission trigger has occurred, the service control server link 1638 can take all buffered agent communications and frame the communications. In addition, the service control server link 1638 can provide for an efficient communication link based on various embodiments related to the timing of transmissions over the service control link, as similarly discussed above with respect to the service control device link 1691 description. For example, the timing functions, such as asynchronous messages or polling for messages, constant frequency transmission, transmission based on how much service usage or data traffic usage has taken place, transmission in response to device side control link message, service verification error events, other error events, and/or other message transmission trigger criteria can be determined, controlled and/or initiated by either the device side or the network side depending on the embodiment.

[0506] In some embodiments, the service control server link 1638 provides for securing, signing, encrypting and/or otherwise protecting the communications before sending such communications over the service control link 1653. For example, the service control server link 1638 can send to the transport layer or directly to the link layer for transmission. In another example, the service control server link 1638 further secures the communications with transport layer encryption, such as TCP TLS or another secure transport layer protocol. As another example, the service control server link 1638 can encrypt at the link layer, such as using IPSEC, various possible VPN services, other forms of IP layer encryption and/or another link layer encryption technique.

[0507] In some embodiments, the service control server link 1638 includes the agent heartbeat function in which the agents provide certain required reports to the service processor for the purpose of service policy implementation verification or for other purposes. For example, the heartbeat function can also be used to issue queries or challenges, messages, service settings, service control objectives, information requests or polling, error checks and/or other communications to the agents. As another example, agent heartbeat messages can be in the open or encrypted, signed and/or otherwise secured. Additional heartbeat function and the content of heartbeat messages can be provided as similarly described herein, such as described above with respect to the service control device link 1691 and the access control integrity agent 1694 and other sections. In some embodiments, the service controller 122 and/or agents of the service controller 122 are programmed to periodically provide reports, such as upon a heartbeat response (e.g., an agent can repeatedly send necessary reports each heartbeat), and appropriate actions can then be taken based upon such received reports. Accordingly, the heartbeat function provides an important and efficient system in various embodiments described herein for verifying the service policy implementation and/or protecting against compromise events. There are many other functions the agent heartbeat service can perform many of which are discussed herein, while many others will be apparent to one of ordinary skill in the art given the principles, design background and various embodiments provided herein.

[0508] In some embodiments, the service control server link 1638 also provides a service control software download function for various embodiments, which, for example, can include a download of new service software elements, revisions of service software elements, and/or dynamic refreshes of service software elements of the service processor 115 on the device. In some embodiments, this function is performed by the service control server link 1638 transmitting the service control software as a single file over the service control link. For example, the file can have encryption or signed encryption beyond any provided by the communication link protocol itself for service control link 1653. In another example, the service control software files can be segmented/divided into smaller packets that are transmitted in multiple messages sent over the service control link 1653. In yet another example, the service control software files can be transmitted using other delivery mechanism, such as a direct TCP socket connection from a service download control server 1660, which can also involve secure transport and additional levels of encryption. In some embodiments, the service control server link 1638 and/or service download control server 1660 use(s) an agent serial number and/or a security key look up when agents are updated and/or when a dynamic agent download occurs.

[0509] As shown in FIG. 4, the service controller 122 includes an access control integrity server 1654. In some embodiments, the access control integrity server 1654 collects device information on service policy, service usage, agent configuration and/or agent behavior. For example, the access control integrity server 1654 can cross check this information to identify integrity breaches in the service policy implementation and control system. In another example, the access control integrity server 1654 can initiate action when a service policy violation or a system integrity breach is suspected.

[0510] In some embodiments, the access control integrity server 1654 (and/or some other agent of service controller 122) acts on access control integrity agent reports and error conditions. Many of the access control integrity agent 1654 checks can be accomplished by the server. For example, the access control integrity agent 1654 checks include one or more of the following: service usage measure against usage range consistent with policies (e.g., usage measure from the network and/or from the device); configuration of agents; operation of the agents; and/or dynamic agent download.

[0511] In some embodiments, the access control integrity server 1654 (and/or some other agent of service controller 122) verifies device service policy implementations by comparing various service usage measures (e.g., based on network monitored information, such as by using IPDRs, and/or local service usage monitoring information) against expected service usage behavior given the policies that are intended to be in place. For example, device service policy implementations can include measuring total data passed, data passed in a period of time, IP addresses, data per IP address, and/or other measures such as location, downloads, email accessed, URLs, and comparing such measures expected service usage behavior given the policies that are intended to be in place.

[0512] In some embodiments, the access control integrity server 1654 (and/or some other agent of service controller 122) verifies device service policy, and the verification error conditions that can indicate a mismatch in service measure and service policy include one or more of the following: unauthorized network access (e.g., access beyond ambient service policy limits); unauthorized network speed (e.g., average speed beyond service policy limit); network data amount does not match policy limit (e.g., device not stop at limit without re-up/revising service policy); unauthorized network address; unauthorized service usage (e.g., VOIP, email, and/or web browsing); unauthorized application usage (e.g., email, VOIP, email, and/or web); service usage rate too high for plan, and policy controller not controlling/throttling it down; and/or any other mismatch in service measure and service policy.

[0513] In some embodiments, the access control integrity server 1654 (and/or some other agent of service controller 122) verifies device service policy based at least in part on, for example, various error conditions that indicate a mismatch in service measure and service policy. For example, various verification error conditions that can indicate a mismatch in service measure and service policy include one or more of the following: mismatch in one service measure and another service measure; agent failure to report in; agent failure to respond to queries (e.g., challenge-response sequence and/or expected periodic agent reporting); agent failure to respond correctly to challenge/response sequence; agent improperly configured; agent failure in self checks; agent failure in cross-checks; unauthorized agent communication or attempted unauthorized communication; failure in service policy implementation test; failure in service usage reporting test; failure in service usage billing test; failure in transaction billing test; failure in download sequence; environment compromise event, such as unauthorized software load or execution (or attempt), unauthorized memory access (or attempt), unauthorized agent access (or attempt), known harmful software, and/or known harmful communications signature; and/or failure to respond to various messages, such as send message and suspend and/or send message and quarantine. In some embodiments, the access control integrity server 1654 (and/or some other agent of service controller 122) verifies device service policy by performing automated queries and analysis, which are then reported (e.g., anomalous/suspicious report results can be reported for further analysis by a person responsible for determining whether such activities indicate out of policy activities or to provide information to the user to inform the user of such anomalous/suspicious report results that may indicate out of policy activities). For example, the user can review the report to authorize whether such activities were performed by the user (e.g., website access requests, specific transactions, and/or phone calls) and/or indicate that such activities were not authorized by the user (e.g., indicate a potential compromise of the device, such as by malware or other unauthorized software/user use of the device). In another example, the user can also be connected to communicate with service support of the service provider regarding such reported activities (e.g., by text/chat, voice/phone, and/or video conference to a service support). Accordingly, in some embodiments, the access control integrity server 1654 (and/or some other agent of service controller 122) provides a policy/service control integrity service to continually (e.g., periodically and/or based on trigger events) verify that the service control of the device has not been compromised and/or is not behaving out of policy.

[0514] In some embodiments, upon detection of one or more service verification errors, such as the various service verification errors discussed above, the device is directed to a quarantine network status in which the device can, for example, only access network control plane functions, billing functions, and other functions generally controlled by the access network service provider or the central service provider. For example, quarantine network access restrictions and routing can be accomplished with the access network AAA and routing system (e.g., access network AAA server 121 and one or more of the gateways) or can be accomplished with device based access control or traffic control policy implementation. Quarantine network equipment or servers can, for example, be located within the access network or within another network with access to the access network. Communication with the quarantine network infrastructure can be accomplished, for example, with a secure link with one or more encryption levels or a dedicated private link. In some embodiments, quarantining a device includes, for example, a two step process for routing quarantine network device traffic, first, to a quarantine traffic handling router or server and, second, from there to the actual quarantine network infrastructure, with the route being determined by device parameters, user parameters, access service provider parameters or other parameters associated with the quarantine network routing. In some embodiments, the device is completely suspended from the network in which, for example, the device can first issue a user interface message to the user or issuing another form of a message to the user or service subscriber, such as via email, hard copy message and/or voice message. In some embodiments, the device network access, service capabilities and/or traffic shaping are limited, partially restricted or completely restricted, service capabilities. For example, these limitations and/or restrictions can be implemented in the device and/or in the network. For example, implementing a device quarantine (e.g., using a RADIUS server to quarantine the device) can involve assigning the device to a different billing profile.

[0515] In some embodiments, upon detection of one or more service verification errors, such as the various service verification errors discussed above, switch based port analysis is performed to further monitor the device (e.g., referred to as Switched Port Analyzer (SPAN) on Cisco switches, and various other vendors have different names for it, such as Roving Analysis Port (RAP) on 3Com switches). In some embodiments, the device service policy implementation behavior is monitored at a deeper level in the network by copying device traffic in the switch so that it goes to both an intended data path destination and to a specified port for switch based port analysis (e.g., the traffic content can be analyzed and recorded using deep packet inspection (DPI) techniques, which can provide a finer level of detail than the typical IPDR). For example, an advantage of performing a switch based port analysis function is that the traffic need not be analyzed in real time, and a sample subset of the devices on the network can be selected for such analysis based on, for example, either identifying devices that have suspect service policy implementation behavior and/or a regular sampling algorithm that eventually samples all devices, or some other selection approaches. As another example, a scheduled switch based port analysis sampling can be applied that eventually rotates through all devices and designates a higher priority in the sampling queue for devices that are suspect.

[0516] In some embodiments, switch based port analysis allows for off-line sampled or non-real-time DPI, as described above, as a verification measure for the device based service control measures that are implemented. In some embodiments, sophisticated DPI techniques are used to enhance the content of the IPDRs so that they provide detailed information that can be made available in the network. For example, some of the DPI packet analysis may be redundant between the device and the network, but this approach provides for a much finer grain validation for the device based service and less reliance on the device for some of the service traffic analysis that service providers need. In some embodiments, the device control server functions and the service control policy verification functions are implemented in an integrated hardware/software system (e.g., a gateway, server, router, switch, base station, base station aggregator, AAA server cluster or any other hardware or hardware/software system) located in the network that the network level traffic inspection is accomplished in, or in one or more servers integrated to operate in a coordinated manner with the DPI boxes. In some embodiments, the device control server functions and the service control policy verification functions are implemented in an integrated hardware/software system (e.g., a gateway, server, router, switch, base station, base station aggregator, AAA server cluster or any other hardware or hardware/software system) located in the network that provides deep service control capability (e.g., using DPI techniques) for devices that have some or all of the service processor functions installed and, in some embodiments, also providing coarser network control of the basics for devices that do not have a service processor installed in the device (e.g., such coarser network control functions include max data rate and/or max total data).

[0517] In some embodiments, the SPAN function is used in a revolving periodic manner as well to augment CDR data with deeper packet information for the purpose of spot-checking device based service usage measures. Examples of where this can be beneficial include spot checking network address access policies, spot checking ambient access policies, spot checking billing event reports, spot checking intermediate networking device/end point device count (via checking network source or destination addresses, token, cookies or other credentials, etc). For example, the periodic SPAN can be scheduled for all devices equally, for certain devices or users with higher priority, frequency or depth of SPAN than others, higher priority, higher frequency or immediate priority for devices with higher usage patterns or unusual usage patterns, immediate or very high priority for devices with a policy violation status.

[0518] In some embodiments, a combination traffic inspection and service control approach implements traffic and service control functions in the network that are conducive for a network based implementation and implements traffic and service control functions in the device that are either more conducive for performing in the device or can only be performed in the device (e.g., activities involving inspection of traffic that is encrypted once it is transmitted to the network). For example, using this approach, activities that can be done in the network are generally performed in the network and/or are more efficiently performed in the network than the device, and activities that are more efficiently performed in the device or can only be performed in the device are performed in the device (e.g., depending on device processing/storage capabilities and/or other design/security considerations). For example, the following are various traffic and service control functions that, in some embodiments, are preferably or can only be performed in the device: network based packet processing capability limitations (e.g., encrypted traffic, application layer information unavailable once the traffic goes into the networking stack, other application/usage context information available on the device but not in the network); information that is generally/preferably maintained and processed locally in the device for network neutrality reasons (e.g., network neutrality issues can generally be efficiently implemented by keeping all, substantially all or at least some aspect of decisions on how to implement algorithms to control traffic local to the device and under user decision control, and/or by providing the user with a set of pre-packaged choices on how to manage service usage or service activity usage or manage service usage versus service cost or price); information that is generally/preferably maintained and processed locally in the device for user privacy reasons (e.g., deeper levels of traffic monitoring and service usage monitoring data where it is available for assisting the user in achieving the best, lowest cost experience and implementing a CRM filter function to the user so that the user can control the level of CRM the network is allowed to receive, such as with the higher levels of information being exchanged for something of value to the user, and/or user location information); information that is generally/preferably maintained and processed locally in the device for the purpose of informing the user of service control settings or service activity usage or to adjust service activity control settings or receive user feedback to choices regarding service usage policies or billing options (e.g., providing the user with a UI for the purpose of monitoring an estimate of service usage and/or notifying the user of at least some aspect of estimated service usage or projected service usage, providing the user with a UI for the purpose of monitoring an estimate of service cost and/or notifying the user of at least some aspect of estimated service cost or projected service cost, providing the user with a UI for the purpose of providing the user with one or more service usage and/or service cost notification messages that require user acknowledgement and/or a user decision and obtaining or reporting the user acknowledgements and/or decisions, providing the user with a UI for the purpose of providing the user with service options and/or service payment options, providing the user with a UI for the purpose of obtaining user choice for such options when service usage or cost estimates are about to run over limits or have run over limits or are projected to run over limits, providing the user with a UI for the purpose of monitoring or conducting open central billing transactions or other transactions, providing the user with a UI for the purpose of selecting the service control techniques and/or policies and/or algorithms and/or pre-packaged configurations that can be used to define or partially define the service activity usage control policies implemented in the device service processor or the network service control equipment/billing system or a combination of both); service control for roaming on different networks that typically do not have compatible DPI-type techniques with the home network; certain service notification and traffic control algorithms (e.g., stack-ranked activity statistical analysis and control of only the high usage activities); and/or a function for assigning a device to a service experience or ambient activation experience or virtual service provider (VSP) at various times from manufacturing to device distribution to a user of the device. In some embodiments, certain activities are implemented in the device as a solution for networks in which a new centralized DPI approach is not possible, not economically feasible, or for any number of reasons not an option or not a preferred option.

[0519] In some embodiments, a network based solution is provided for a more basic set of services for all devices that do not have service control capabilities, and a super-set of services and/or additional services are provided for devices that include a service processor. As described herein, a service controller function can be located in various places in the network in accordance with various embodiments. It should also be noted that various other embodiments described herein also employ a hybrid service control function performing certain service control functions in the network (e.g., collecting network service usage information, such as IPDRs, and/or performing DPI related functions in the network for collecting network service usage information and/or throttling/shaping traffic) and service control functions in the device (e.g., service processor 115, which, for example, monitors service usage in the device and/or performs throttling or traffic shaping in the device and/or performs certain billing event recording and reporting functions that are aptly performed on the device).

[0520] In some embodiments, lower level service policy implementation embodiments are combined with a higher level set of service policy supervision functions to provide device assisted verifiable network access control, authentication and authorization services.

[0521] In some embodiments, device based access control services are extended and combined with other policy design techniques to create a simplified device activation process and connected user experience referred to herein as ambient activation. As similarly discussed above, ambient activation can be provided by setting access control to a fixed destination, verifying access with IPDRs, verifying access by setting a max data rate and triggering off in the network if it exceeds the max data rate, and/or by various other techniques.

[0522] As shown in FIG. 4, service controller 122 includes a service history server 1650. In some embodiments, the service history server 1650 collects and records service usage or service activity reports from the Access Network AAA Server 121 and the Service Monitor Agent 1696. For example, although service usage history from the network elements can in certain embodiments be less detailed than service history from the device, the service history from the network can provide a valuable source for verification of device service policy implementation, because, for example, it is extremely difficult for a device error or compromise event on the device to compromise the network based equipment and software. For example, service history reports from the device can include various service tracking information, as similarly described above. In some embodiments, the service history server 1650 provides the service history on request to other servers and/or one or more agents. In some embodiments, the service history server 1650 provides the service usage history to the device service history 1618. In some embodiments, for purposes of facilitating the activation tracking service functions (described below), the service history server 1650 maintains a history of which networks the device has connected to. For example, this network activity summary can include a summary of the networks accessed, activity versus time per connection, and/or traffic versus time per connection. As another example, this activity summary can further be analyzed or reported to estimate the type of service plan associated with the traffic activity for the purpose of bill sharing reconciliation.

[0523] As shown in FIG. 4, service controller 122 includes a policy management server 1652. In some embodiments, the policy management server 1652 transmits policies to the service processor 115 via the service control link 1653. In some embodiments, the policy management server 1652 manages policy settings on the device (e.g., various policy settings as described herein with respect to various embodiments) in accordance with a device service profile. In some embodiments, the policy management server 1652 sets instantaneous policies on policy implementation agents (e.g., policy implementation agent 1690). For example, the policy management server 1652 can issue policy settings, monitor service usage and, if necessary, modify policy settings. For example, in the case of a user who prefers for the network to manage their service usage costs, or in the case of any adaptive policy management needs, the policy management server 1652 can maintain a relatively high frequency of communication with the device to collect traffic and/or service measures and issue new policy settings. In this example, device monitored service measures and any user service policy preference changes are reported, periodically and/or based on various triggers/events/requests, to the policy management server 1652. In this example, user privacy settings generally require secure communication with the network (e.g., a secure service control link 1653), such as with the policy management server 1652, to ensure that various aspects of user privacy are properly maintained during such configuration requests/policy settings transmitted over the network. For example, information can be compartmentalized to service policy management and not communicated to other databases used for CRM for maintaining user privacy.

[0524] In some embodiments, the policy management server 1652 provides adaptive policy management on the device. For example, the policy management server 1652 can issue policy settings and objectives and rely on the device based policy management (e.g., service processor 115) for some or all of the policy adaptation. This approach can require less interaction with the device thereby reducing network chatter on service control link 1653 for purposes of device policy management (e.g., network chatter is reduced relative to various server/network based policy management approaches described above). This approach can also provide robust user privacy embodiments by allowing the user to configure the device policy for user privacy preferences/settings so that, for example, sensitive information (e.g., geo-location data, website history) is not communicated to the network without the user's approval. In some embodiments, the policy management server 1652 adjusts service policy based on time of day. In some embodiments, the policy management server 1652 receives, requests or otherwise obtains a measure of network availability and adjusts traffic shaping policy and/or other policy settings based on available network capacity.

[0525] In some embodiments, the policy management server 1652 performs a service control algorithm to assist in managing overall network capacity or application QoS. In some embodiments, the policy management server 1652 performs an algorithm to determine which access network is best to connect to, such as based on network capacity or application QoS, service usage costs, and/or any other criteria. In some embodiments, the device is capable of connecting to more than one network, and accordingly, device service policies can be selected/modified based on which network the device is connected to. In some embodiments, the network control plane servers detect a network connection change from a first network to a second network and initiate the service policy implementation established for the second network. In other embodiments, the device based adaptive policy control agent (e.g., policy control agent 1692 described herein) detects network connection changes from the first network to the second network and implements the service policies established for the second network.

[0526] In some embodiments, when more than one access network is available, the network is chosen based on which network is most preferred according to a network preference list or according to the network that optimizes a network cost function. For example, the preference list can be pre-established by the service provider and/or the user. For example, the network cost function can be based on a minimum service cost, maximum network performance, determining whether or not the user or device has access to the network, maximizing service provider connection benefit, reducing connections to alternative paid service providers, and/or a variety of other network preference criteria. In other embodiments, the device detects when one or more preferred networks are not available, implements a network selection function or intercepts other network selection functions, and offers a connection to the available service network that is highest on a preference list. For example, the preference list can be set by the service provider, the user and/or the service subscriber.

[0527] As shown in FIG. 4, service controller 122 includes a network traffic analysis server 1656. In some embodiments, the network traffic analysis server 1656 collects/receives service usage history for devices and/or groups of devices and analyzes the service usage. In some embodiments, the network traffic analysis server 1656 presents service usage statistics in various formats to identify improvements in network service quality and/or service profitability. In other embodiments, the network traffic analysis server 1656 estimates the service quality and/or service usage for the network under variable settings on potential service policy. In other embodiments, the network traffic analysis server 1656 identifies actual or potential service behaviors by one or more devices that are causing problems for overall network service quality or service cost.

[0528] As shown in FIG. 4, service controller 122 includes a beta test server 1658. In some embodiments, the beta test server 1658 publishes candidate service plan policy settings to one or more devices. In some embodiments, the beta test server 1658 provides summary reports of network service usage or user feedback information for one or more candidate service plan policy settings. In some embodiments, the beta test server 1658 provides a mechanism to compare the beta test results for different candidate service plan policy settings or select the optimum candidates for further policy settings optimization.

[0529] As shown in FIG. 4, service controller 122 includes a service download control server 1660. In some embodiments, the service download control server 1660 provides a download function to install and/or update service software elements (e.g., the service processor 115 and/or agents/components of the service processor 115) on the device, as described herein.

[0530] As shown in FIG. 4, service controller 122 includes a billing event server 1662. In some embodiments, the billing event server 1662 collects billing events, provides service plan information to the service processor 115, provides service usage updates to the service processor 115, serves as interface between device and central billing server 123, and/or provides trusted third-party function for certain ecommerce billing transactions.

[0531] As shown in FIG. 4, the Access Network AAA server 121 is in network communication with the access network 1610. In some embodiments, the Access Network AAA server 121 provides the necessary access network AAA services (e.g., access control and authorization functions for the device access layer) to allow the devices onto the central provider access network and the service provider network. In some embodiments, another layer of access control is required for the device to gain access to other networks, such as the Internet, a corporate network and/or a machine to machine network. This additional layer of access control can be implemented, for example, by the service processor 115 on the device. In some embodiments, the Access Network AAA server 121 also provides the ability to suspend service for a device and resume service for a device based on communications received from the service controller 122. In some embodiments, the Access Network AAA server 121 also provides the ability to direct routing for device traffic to a quarantine network or to restrict or limit network access when a device quarantine condition is invoked. In some embodiments, the Access Network AAA server 121 also records and reports device network service usage (e.g., device network service usage can be reported to device service history 1618).

[0532] As shown in FIG. 4, the device service history 1618 is in network communication with the access network 1610. In some embodiments, the device service history 1618 provides service usage data records used for various purposes in various embodiments. In some embodiments, the device service history 1618 is used to assist in verifying service policy implementation. In some embodiments, the device service history 1618 is used to verify service monitoring. In some embodiments, the device service history 1618 is used to verify billing records and/or billing policy implementation. In some embodiments, the device service history 1618 is used to synchronize and/or verify the local service usage counter.

[0533] As shown in FIG. 4, the central provider billing server 123 is in network communication with the access network 1610. In some embodiments, the central provider billing server 123 provides a mediation function for central provider billing events. For example, the central provider billing server 123 can accept service plan changes. In some embodiments, the central provider billing server 123 provides updates on device service usage, service plan limits and/or service policies. In some embodiments, the central provider billing server 123 collects billing events, formulates bills, bills service users, provides certain billing event data and service plan information to the service controller 122 and/or device 100.

Network Selection and Notification

[0534] In some embodiments, a mobile device 100 is capable of connecting to more than one network and device service policies are potentially changed based on which network the device is connected to at the time. In some embodiments, the network control plane servers detect a network connection change and initiate the service policy implementation established for the second network. In some embodiments, the device based adaptive policy control agent, as described herein (e.g., policy control agent 1692 illustrated in FIG. 4), detects network connection changes and implements the service policies established for the second network.

[0535] In some embodiments, when more than one access network is available, the network is chosen based on which network is most preferred according to a network preference list or according to which network that optimizes a network cost function. For example, the network preference list can be pre-established by the service provider and/or the user and/or later modified/adjusted by either the service provider and/or the user. For example, the cost function can be based on determining a minimum service cost, maximum network performance, whether or not the user or device has access to the network, maximizing service provider connection benefit, reducing connections to alternative paid service providers, and/or any other cost related criteria for network selection purposes.

[0536] In some embodiments, the mobile device 100 detects when one or more preferred networks are not available, implements a network selection function or intercepts other network selection functions, and offers a connection to the available service network that is highest on a preference list. For example, the preference list can be set by the service provider, the user and/or the service subscriber. In some embodiments, a notification is provided to the device/user when the device is not connected to a network (e.g., indicating in a pop-up/bubble or other UI based display a notification, such as “You are not connected to the network. Click here to learn more, get free trial, use a session, sign-up for service”). In some embodiments, the notification content can be determined based on usage service patterns, locally stored and/or programmable logic on the device and/or a server (e.g., device reports that user is not connected and WWAN is available). Decisions on what bubble to present when may be in pre-stored logic on device.

Open Content Distribution and Transaction System

[0537] Referring now to FIGS. 53, 54 and 55, in another set of embodiments an open, decentralized, device based system for enabling central billing for third-party electronic commerce transactions for mobile commerce is provided as shown. For example, in these embodiments, device information can be embedded in HTTP, WAP or other portal browser/network header request information that indicates a central billing option is available to a compatible third-party transaction server, as further described below with respect to FIGS. 53, 54 and 55.

[0538] FIG. 53 is a functional diagram illustrating open, decentralized, device based mobile commerce transactions in accordance with some embodiments. As shown, a service processor 4615 of the device 100 (e.g., any mobile device capable of storing and executing the service processor 4615) includes access control integrity agent 1694, billing agent 1695, agent communication bus 1630, user interface 101, policy control agent 1692, service monitor agent 1696, application interface agent 1693, policy implementation agent 1690, and modem router and firewall 1655, as similarly described herein with respect to various other service processor embodiments. In some embodiments, an application 4604 (e.g., an HTML/WAP web browser) and a mobile payment agent 4699 are also included in the device, such as part of the service processor 4615 as shown. In some embodiments, the application 4604 is not integrated as part of the service processor 4615, but is executing and/or stored on the device. In some embodiments, the mobile payment agent 4699 includes billing agent 1695, user interface 101 and/or application interface agent 1693, and/or various other functional components/agents. As shown, the service processor 4615 is in communication with a carrier access network 4610, which is in network communication with the Internet 120.

[0539] In some embodiments, device information can be embedded in HTTP, WAP or other portal browser/network header request information that indicates a central billing option is available to a compatible third-party transaction server, such as the open content transaction partner site(s) 134. For example, the compatible transaction server can then send a signed confirmation request over a pre-assigned control socket channel to the billing agent 1695 with the billing agent 1695 confirming the signed confirmation request by either performing the signature check locally based on a stored and synchronized list of approved transaction servers or by passing the signed request onto a billing server 4630 for confirmation. Optionally, in another example, a triangle confirmation can be set up in which the billing server 4630 can confirm the transaction set up with the transaction server 134 or the transaction server 134 can confirm the transaction set up with the billing server 4630. Once the device confirms the compatible and approved status of the transaction server 134, the device/transaction server pair can then optionally further exchange keys for the remainder of the transaction for enhanced security. In another example, the transaction server 134 can also redirect the user browsing experience to one tailored to one or more of device type, service provider, device manufacturer or user. When the user selects a transaction, the transaction server sends the billing agent 1695 a transaction bill that describes the transaction and the amount. The billing agent 1695 can optionally confirm that the user account has sufficient credit limit to make the purchase by either confirming the stored credit limit on the device or querying the billing server 4630. The billing agent 1695 then invokes the device UI 101 to display the transaction description and amount and request user approval for the billing to be conducted through the central billing option. User approval can be acquired, for example, by a simple click operation or require a secure password, key and/or biometric response from the user. Upon user approval, the billing agent 1695 generates a billing approval and sends it to the transaction server 134, the transaction server 134 completes the transaction and then sends a bill to the billing agent 1695. The billing agent 1695 optionally sends a confirmation to the transaction server 134 and sends the bill to the billing server 4630. Again, optionally a triangle confirmation can be formed by the billing server sending a confirmation to the transaction server 134, or the transaction server 134 can send the bill to the billing server 4630. In some embodiments, the billing server 4630 can also communication such billed transactions to a central provider billing system 4623 via the carrier access network 4610. Also, in some embodiments, an alternate location billing server 4632 is in communication via the Internet 120, and an alternate location central provider billing system 4625 is also in communication via the Internet 120.

[0540] FIGS. 54 and 55 are transactional diagrams illustrating open, decentralized, device based mobile commerce transactions in accordance with some embodiments. Referring to FIG. 54, the device application 4604 browses (e.g., based on the user submitting a browse request using a browser application) to transaction server 134 (e.g., a transaction web server, such as the open content transaction partner site 134). The transaction server 134 provides an offer to the device application 4604. The device application 4604 selects a purchase (e.g., based on the user's selection input). In response, the transaction server 134 seeks an API connection with the device mobile payment agent 4699, which then confirms the API connection. The transaction server 134 requests user purchase confirmation (mediated by the device mobile agent 4699 as shown), and the purchase is confirmed by the device application 4604 (e.g., based on the user's acknowledgement as similarly described above with respect to FIG. 46). The transaction server 134 then transmits a purchase receipt, and the device application 4604 confirms the receipt. The transaction server 134 then transmits the purchase bill to the device mobile payment agent 4699, which then sends the purchase bill to the device billing server (e.g., billing server 4630). The transaction server also optionally sends a confirmation of the purchase bill to the device billing server for a triangle confirmation, as similarly described above with respect to FIG. 53. The device billing server sends a copy of the purchase bill to the central provider billing system (e.g., central provider billing system 4623).

[0541] Referring now to FIG. 55, the device application 4604 browses (e.g., based on the user submitting a browse request using a browser application) to transaction server 134 (e.g., a transaction web server, such as the open content transaction partner site 134), in which the browse request includes device ID information, such as similarly described above with respect to FIG. 53. The transaction server 134 establishes API contact with the device mobile agent 4699, which then confirms contact and good standing for transactional purchases from the device. The transaction server 134 provides an offer to the device application 4604. The device application 4604 selects a purchase (e.g., based on the user's selection input). The transaction server 134 notifies the device mobile payment agent 4699 of the purchase description and amount, and the device mobile payment agent 4699 then requests user purchase confirmation. The purchase is confirmed by the device application 4604 (e.g., based on the user's acknowledgement as similarly described above with respect to FIG. 53 and the device mobile payment agent 4699 then transmits a purchase confirmation to the transaction server 134. The transaction server 134 then transmits a purchase receipt, and the device application 4604 confirms the receipt. The transaction server 134 then transmits the purchase bill to the device mobile payment agent 4699, which then sends the purchase bill to the device billing server (e.g., billing server 4630). The transaction server also optionally sends a confirmation of the purchase bill to the device billing server for a triangle confirmation, as similarly described above with respect to FIG. 53. The device billing server sends the purchase bill to the central provider billing system (e.g., central provider billing system 4623). In some embodiments, the communications described above with respect to FIGS. 54 and 55 with the billing server and the central provider billing system are with the alternate location billing server 4632 and/or alternate location central provider billing system 4625 via the Internet 120. Similarly, in some embodiments, the transaction servers 134 are connected to the Internet 120.

[0542] Accordingly, these transaction billing embodiments do not require centralized content storage or content and transaction exchange infrastructure. For example, the transactions can be conducted over the Internet, and the user experience and content can be tailored versions of the transaction server/content provider's normal experience and content. This approach provides for a much wider array of content and transaction partners with minimal or no need to accommodate proprietary specialized systems. Moreover, the compatibility between the device billing agent transaction system and the transaction provider server is easily established, for example, by writing specifications for the header information transmitted by the device and for the secure handshake and signed message transactions that take place between the device billing agent, the transaction server and optionally the transaction server and the billing server. Once a transaction partner shows compatibility test results and concludes a business relationship with the service provider, the service provider can place the transaction partner on the compatible and approved list and exchange security keys and/or certificates. If a common user experience is desired by the service provider across multiple transaction partners, then the experience specifications for the browser redirects can also be specified in the compatibility specification and tested before the transaction partner gains approval.

User Interfaces

[0543] FIG. 56 illustrates a representative generic user interface (UI) arrangement 10200, for a mobile wireless communication device 100, including a top area 10204, a bottom area 10208 and a partition area 10206 in between the top area 10204 and the bottom area 10208. In some embodiments, the top area 10204 is used for information about the mobile wireless communication device 100 and for services available to the mobile wireless communication device 100. In some embodiments, one or more indicia 10202 are placed in the top area 10204. In some embodiments, the indicia 10202 are dynamically updated, in real time or in near real time, to indicate information about the mobile wireless communication device 100 and/or about one or more services available to or in use on the mobile wireless communication device 100. In some embodiments, the top area 10204 is always visible when the UI 101 of the mobile wireless communication device 100 is on. In some embodiments, the bottom area includes additional information related to services available to the user of the mobile wireless communication device 100. In some embodiments, one or more icons are placed in the bottom area providing information and/or links to additional information. In some embodiments, the bottom area is dynamically sized to change in size, thereby covering different amounts of area of the bottom area 10208 of UI 101.

[0544] FIG. 57 illustrates a representative generic UI arrangement 10210 including the indicia 10202 distributed along the top area 10204 and within a secondary area 10212. In some embodiments, the indicia 10202 include a logo 10216 that is displayed in the secondary area 10212 alongside a service name. In some embodiments, the partition area 10206 includes one or more distinct partitions for services available to, installed on, subscribed to or otherwise accessible by the user of the mobile wireless communication device 100. In some embodiments, the partition area 10206 includes multiple partitions 10214 that display information about services available to or accessible by the user of the mobile wireless communication device 100.

Ambient Services

[0545] In some embodiments, improved and simplified processes for provisioning a device or user for service on a central provider network, an MVNO network or a virtual service provider (VSP) on the central provider network are provided. In some embodiments, provisioning includes one or more of the following: a process or result of assigning, programming, storing or embedding into the device and/or network a set of credentials, or otherwise providing the credentials to the user; the credentials being at least in part carried on the device or with the user; and/or at least a portion of or a counterpart to the credentials being stored or recognized by the network so that the various network elements responsible for admitting the device access to the appropriate service activities do so once the device or user service is active.

[0546] As an example, as discussed herein, the credentials can include one or more of the following: phone number, device identification number, MEID or similar mobile device identifier, hardware security device ID, security signature or other security credentials, device serial number, device identification and/or credential information via security hardware such as a SIM, one or more IP addresses, one or more MAC addresses, any other network address identifier, embedded device descriptive information block (static or programmable), security key, security signature algorithms, passwords or other secure authorization information, service processor (or similar device client or agent software) identifier or settings or version, device type identifier, browser (e.g., http, https, WAP, other browser client) header information or similar identifier, browser token information or similar identifier, browser cookie information or similar identifier, embedded browser instructions, portal-client (e.g., interface or communication agent that connects to a network portal used at least in part for provisioning or activation for the device or by the user) header information or similar identifier, portal-client token information or similar identifier, portal-client cookie information or similar identifier, embedded portal-client instructions, service provider, OEM, master agent (service distributor), VSP, device service owner identifier, distributor or master agent, and/or any information the network can use to authorize network admission, provision the device, provision the network, activate service, authorize, associate or enable the device with a provisioning sequence, associate or enable the device with one or more service profiles, associate or assist the device with an activation sequence, associate or enable the device with an ambient profile or service experience, associate or enable the device with one or more service plans or service capabilities, associate the device with a service provider or service owner, associate the device with an OEM or master agent, associate the device with a distributor or master agent, or associate the device with a device group, user group or user.

[0547] In some embodiments, provisioning includes assigning, programming or embedding into the device and/or network the information to define the level of service activity, referred to as a service profile, that the device is authorized to receive. In some embodiments, provisioning also includes establishing the device settings and/or network settings to define an ambient activation experience in which the device user receives a set of services after (e.g., within a short period of time after) purchasing or otherwise obtaining or installing the device whether the device has or has not been registered and activated with the device user or device owner.

[0548] In some embodiments, ambient services or adaptive ambient services for a device (e.g., any type of device capable of communicating with a wireless network, including an intermediate networking device) or use of a service on a wireless network are provided. In some embodiments, the ambient experience is the user experience that is available at the time the device is sold in the event the user has not yet signed up for a service plan, or the device is not sold with a prepaid service plan or other required service plan. In some embodiments, an ambient service generally refers to a set of application access, network destinations, sources, and/or traffic control rules to enable an ambient service experience, and, in some embodiments, also includes a set of billing rules to keep an accounting of service usage for different service usages (e.g., various bill by account rules or service usage accounts). For example, the ambient experience is defined by an ambient service profile, an ambient service plan, the other service usage activity control policies, and/or the ambient service or ambient experience bill-by-account usage accounting and/or billing policies in effect in the network, on the device, on an intermediate networking device, or any combination thereof. For example, if the device service processor (e.g., on the device, the intermediate networking device, or both) is used in large part to define the ambient service profile, then the initial provisioning and activation settings in the service processor, and possibly the service controller, can define the user service upgrade offering choices, network destination access control possibilities, traffic control policies, mobile commerce transaction capabilities (e.g., which transaction websites, WAP sites or portals the user can access to purchase information, content, music, games and/or eBooks), possibly free news or weather or other modest bandwidth Internet services that are provided free of charge to entice the user into using/upgrading the service or using the transactions or viewing advertisements, what advertisements are displayed to the user or what advertisement based websites the user is exposed to, certain applications may have access while others are blocked (e.g., Internet based text services have access but email downloads do not), or other example service capabilities. Examples of the type of useful services that can be enabled with the ambient service techniques disclosed herein include the following embodiments. In some embodiments, a content purchasing service (e.g., books, news, magazines, music, video, games, and mobile applications) is facilitated in which the device access is partially, largely, or entirely limited to the device or network based applications, source/destination addresses, and/or content transfers required to properly implement the service, in which other applications, source/destination addresses and/or content types are partly, largely, or entirely blocked. In some embodiments, such ambient services can have service usage monitoring and accounting that is reported for one or more individual ambient services. For example, the service usage for a book storefront browsing and download service can be separately accounted for while other services such as a general Internet shopping or auction service, a music service, a picture upload and store/print service, a search and/or advertisement service can also each have individual service usage accounting, or in some cases, groups of services can have aggregate service usage accounting. In some embodiments, an ambient service is provided for the device prior to the time a user has paid for permanent or full time access services, which, for example, can include a service selection platform for allowing the device user to access certain limited network functions and/or resources, and to access those network resources necessary to choose a pay-for-service plan option. In some embodiments, the individual and/or group ambient service usage accounting can be transformed into one or more billing records in which the service usage for each ambient service is billed to an entity, which can be the business entity that provides the ambient service experience and/or transaction platform, or the end user, or the central service provider, or an MVNO service provider, or a distribution partner, or an OEM, or another entity interested in paying for one or more ambient services.

[0549] It will be apparent to one of ordinary skill in the art that allowing all of these services, and blocking other ambient user service attempts (e.g., unpaid large file size Internet downloads or uploads or movie viewing or other access that would consume bandwidth and cause the ambient service to be a potential source of losses for the service provider) is made possible by the service profile control capabilities of the service processor and/or the service controller. The bill by account embodiments, as discussed herein, in which each service activity can, for example, be separately tracked with the service monitor and other agents and server functions to produce a billing offset that allows categorization and mediation of different billing entities (accounts) provides the capability for the service provider to individually account for the costs of each ambient service element. This allows business models wherein the free access to the end user is paid for or partially paid for by one or more service provider partners who are billed for service access using the bill by account capabilities (e.g., the transaction partners pay for user access to their transaction experience and perhaps pay a revenue share for transaction billing, the advertising sponsored website partners pay for their access service share).

[0550] While the service control capabilities of the service processor and the bill by account service cost sharing and transaction revenue sharing in some cases can create a profitable ambient business model, in other cases, the ambient services can be a potential source of losses for the service provider. Accordingly, in some embodiments, the ambient service capabilities can be modified over time to reduce service cost to the service provider or VSP based on a variety of decision factors. For example, the user can have one level of traffic control for a period of time, and if the user has not signed up for service by the end of the period or if the user is no longer in good standing (e.g., based on various service usage criteria) for use of the service, the ambient service access is reduced (e.g., the transmission speed can be reduced or throttled, and/or the total volume of data transmitted can be reduced or throttled, possibly additionally according to time of day parameters and/or network busy state parameters) by changing the service control policy settings in the service processor, and the service level can be further reduced over time if the user continues to not sign up for service or the user does not create much transaction revenue. In some embodiments, this can limit or prevent users from “camping” on free ambient services without generating any meaningful revenue to fund the service, or viewing any advertising to fund the service. In some embodiments, a user can be throttled in such a manner until the user executes a “useful activity” or a “preferred activity” (e.g., a purchase, viewing advertising, answering a questionnaire, signing up for a service, accepting a beta trial, and/or earning valued customer points), and after a useful or preferred activity occurs, then the access capabilities of the device are increased. As another example, the recursive throttling algorithms discussed herein can be utilized to one or more of the service activities offered in ambient service mode so that the user experiences what full speed service is like, and if the user continues consuming appreciable bandwidth with the service activity, then the activity is throttled back to reduce costs until or unless the user selects a pay-for-service plan (or accumulates sufficient service access points as described herein). In these examples, the service processor or service controller can issue the user a notification explaining that their service is currently free so their usage is being throttled, and if they desire to receive better service, service plan upgrade offers can be delivered to the user interface (UI). In some embodiments, the level of access (e.g., ambient service bandwidth and/or transfer limits, reachable addresses beyond the ambient service, and/or bandwidth or transfer limits for open Internet usage and/or email usage, text usage) is increased as the user increases the number of useful or preferred activities (e.g., the user accumulates “service access points,” which are then spent on access activities). It will now be apparent to one of ordinary skill in the art that the various ambient service parameters including various provisioning and activation processes used to provide an ambient service, can also be managed by various virtual service provider (VSP) techniques. For example, this allows the same service controllers and service processor solutions to be used to define a wide range of ambient experiences for various device groups or user groups that are controlled by different VSPs.

[0551] Similarly, rather than controlling ambient service profile settings using the device assisted services functions and/or VSP functions to control the service controller, service processor, provisioning and activation settings, various other embodiments call for the ambient service profile settings to be controlled by various network based service activity control equipment as similarly described herein and/or by various intermediate networking devices. For example, depending on the level of service control and service monitoring sophistication (e.g., advanced DPI (Deep Packet Inspection), TCP (Transmission Control Protocol) session aware techniques, or other service aware techniques), some, much, most or all of the above described ambient services functionality can be implemented using network based service controls and various VSP management and control techniques. Similarly, in some embodiments, service processor, provisioning and activation settings, and the ambient service profile settings can also be (at least in part) controlled by various intermediate networking devices. In some embodiments, network equipment that can provide ambient service controls include, for example, service gateways, routers, charging functions, HLRs, home agents, proxy servers, and other network equipment as would be apparent to one of ordinary skill in the art.

[0552] Whether the ambient service monitoring and control apparatus is implemented with device assisted service techniques, network based techniques, or a combination of both, various embodiments described herein provide for adaptive ambient service embodiments that address the dynamic (e.g., non-static) nature of Internet service access needs (e.g., allowable source/destination and/or application lists, blocked source/destination and/or application lists, traffic control policies for each source/destination and/or application).

[0553] Providing an ambient service profile for an ambient service can be complicated by the variable nature of network addresses and offered services such as, for example, the Internet. For example, a central service provider, MVNO provider or VSP may desire to provide ambient service access to a given web site partner's web service, in exchange for a business deal with the website partner that motivates the service provider to provide the ambient access. In this example, the ambient access is intended to enable access (either wide open or throttled) to the website partner's collection of URLs (and possibly one or more applications) associated with the service, while blocking or differentially throttling access to other network destinations and/or applications not associated with the web site partner services. A problem can arise in this example whenever the website partner changes the addresses and/or domains associated with the website services, because any static access list and access list policies generally makes a static list impractical. In such cases, the adaptive ambient service embodiments described herein provide a solution to these and other problems, whether the adaptive ambient access controls and/or traffic controls are implemented with device assisted service apparatus, network based apparatus, or a combination of both.

[0554] As another example, an ambient service profile for a transaction service provider can include that service provider's domain or web site as an allowed destination. However, there are often inline advertisements provided by ad servers and/or partner sites that should also be included in the set of allowed destinations in the ambient service profile, and these are often dynamic or frequently changing. As another example, an ambient service provider may not want to allow access to sites that typically involve relatively high data usage (e.g., streaming and/or downloading of video content), while allowing other sites that result in less bandwidth intensive service usage activities. As another example, during a session a user may attempt to surf out of the ambient service, such as when the user attempts to access a website or service that is not an allowed or pre-approved destination in the ambient service profile (e.g., a search site can be the pre-approved ambient service, but the ambient service partner paying for the search service access may desire to also allow and pay for user click-through to search results and/or advertising offers, or, for example, an ambient shopping service sponsor may desire to also pay for click-through to vendor partners sites to provide a purchase transaction opportunity to the user). Moreover, the defined ambient service profile quickly stagnates as various applications and destinations, for example, change over time or on each request/usage (e.g., new applications become available and/or web site content and link changes occur daily if not hourly and/or are dynamically generated using well known web site techniques). Thus, what is needed are adaptive techniques for providing an adaptive ambient service.

[0555] Accordingly, in some embodiments, adaptive ambient services using an adaptive ambient service profile are provided. In some embodiments, a flexible and efficient adaptive ambient service control is provided by using an intelligent element in the network that performs one or more of the following functions: (1) beginning with an initial list of allowable ambient service device access behaviors (e.g., addresses/URLs, applications and/or content types, in some cases, with a set of traffic control policies that are differentiated as discussed above), (2) as the user accesses the ambient service, determine if the access behavior of the device is within or outside of the desired ambient service access and/or traffic control policies (e.g., determine if the access behavior is properly associated with the desired ambient services and/or service policies), (3) for those access behaviors that are within the desired ambient service policies, expand the list of allowable ambient service device access behaviors to include the new behaviors that are desired and/or preferred (e.g., new sub-domains, advertising content sources, transaction partner addresses, and/or desired surf-outs), (4) for those device access behaviors that are outside of the desired/preferred ambient service policies (e.g., are not associated or beneficially associated with the desired/preferred ambient service), expand the list of blocked or differentially throttled ambient service device access behaviors to include the new behaviors that are undesired or less desired (e.g., not preferred). In some embodiments, the intelligent network element used to adapt the ambient service control is included in one or more network equipment functions (e.g., service gateways, routers, charging gateways, HLRs, AAA, base station, service controller, and/or other network equipment functions). In some embodiments the intelligent network element used to adapt the ambient service control is included in the device and/or intermediate networking device service processor. In some embodiments, the intelligent network element used to adapt the ambient service control is included in a combination of the device (and/or intermediate networking device) and one or more network equipment functions.

[0556] In some embodiments, a flexible and efficient adaptive ambient service is provided using a baseline (e.g., a basic starting point) of an adaptive ambient service profile that includes default or previously defined (e.g., by an ambient service provider, network provider, VSP, or another entity) allowable access list and disallowed access list for the ambient service, such as to various applications, destinations, sources, traffic control rules, and/or bill by account rules or a combination thereof. In some embodiments, the ambient service profile is an automated and a self-evolving service profile using various techniques, such as those described herein.

[0557] In some embodiments, an adaptive ambient service includes providing an ambient service profile. In some embodiments, the ambient service profile includes ambient service allowed access rules and ambient service disallowed access rules. In some embodiments, the ambient service profile further includes ambient service monitored access rules, in which access to, for example, certain applications or destinations is allowed but is considered suspect or unknown, and thus, such access is monitored (e.g., until that application or destination is reclassified under an ambient service allowed access rule or ambient service disallowed access rule). In some embodiments, the ambient service allowed/disallowed/monitored access rules include IP addresses, domains (e.g., URLs for web sites), or any other unique network destination or application or source identifiers. In some embodiments, the ambient service rules provide differentiated traffic control rules. In some embodiments, the differentiated traffic control rules provide differentiated bandwidth and/or total data transfer limits according to traffic control policy elements, such as activities associated with the main ambient service functions (e.g., the main partner website or a transaction service), activities associated with secondary ambient service functions (e.g., a secondary surf-out website or a less desired service activity), activities transferring different content types, activities associated with different applications, activities based on time of day, activities based on network busy state, activities that require higher or lower QOS (Quality Of Service), and/or other activities.

[0558] In some embodiments, the ambient service allowed access rules and/or ambient service disallowed access rules are pushed to (e.g., published, at predefined times, during low service usage times or periods of low service usage activities, or upon request) the device or the intermediate networking device (e.g., any type of networking device capable of communicating with a device and a network, including a wireless network, example intermediate networking devices include a femto cell, or any network communication device that translates the wireless data received from the device to a network, such as an access network) from the network (e.g., an element in the network that securely provides such data, such as a service controller for the ambient service). In some embodiments, the ambient service allowed access rules and/or ambient service disallowed access rules are pulled by (e.g., at predefined times, during low service usage times or periods of low service usage activities, or upon request) the device or the intermediate networking device from the network (e.g., an element in the network that securely provides such data, such as a service controller for the ambient service).

[0559] In some embodiments, the device or intermediate networking device includes techniques for automatically adapting the service profile based on ambient service usage and thereby updates the ambient service allowed access rules, the ambient service monitored access rules, and/or ambient service disallowed access rules locally. Device access activities that fall into the monitored access rules are those activities that are determined not to be disallowed (as of that point in time) and are allowed to take place while the intelligent adaptive service element tests the activities on the monitored access rules list to determine if they should be moved to the allowed access rules list, should be moved to the disallowed access rules list, or should remain on the monitored access rules list for further testing and/or observation. In this way, a useful and friendly user experience can be maintained as the adaptive ambient service rules undergo “training” to accommodate dynamic changes to the ambient service sites/applications. The device or intermediate networking device can then periodically provide the updated ambient service allowed access rules, ambient service monitored access rules, and/or ambient service disallowed access rules with the network using various network communication techniques, such as those described herein. In some embodiments, the device periodically synchronizes its locally stored ambient service allowed access rules, ambient service monitored access rules, and/or ambient service disallowed access rules with the network using various network communication techniques, such as those described herein. In some embodiments, the training for one or more of the three lists occurs on the device. In some embodiments, the training for one or more of the three lists occurs in the network. In some embodiments, the training for one or more of the three lists occurs partly on the device and partly in the network (e.g., depending, in some cases, on the device (such as the computing/memory capacity of the device), network bandwidth, and/or any other architecture criteria).

[0560] It will now be apparent to one of ordinary skill in the art that the various ambient service parameters, including the provisioning and activation processes used to create the ambient service activation, can also be managed by the VSP apparatus and processes described herein. For example, this allows the same service controllers and service processor solutions to be used to define a wide range of ambient experiences for various device groups or user groups that are controlled by different VSPs.

[0561] Similarly, rather than controlling the ambient service profile settings using the VSP functions to control the service controller, service processor, provisioning and activation settings, other embodiments call for the ambient service profile settings to be controlled by the network based service activity control equipment as similarly discussed herein. Depending on the level of service control and service monitoring sophistication (e.g., highly advanced DPI or service aware techniques), some, much, most or all of the above described ambient services functionality can be implemented using network based service controls and the VSP management and control embodiments described herein.

[0562] In some embodiments, an adaptive ambient service includes implementing an ambient service profile for assisting control of a communications device use of an ambient service on a wireless network, in which the ambient service profile includes various service policy settings, and in which the ambient service profile is associated with an ambient service plan that provides for initial access to the ambient service with limited service capabilities prior to activation of a new service plan; monitoring use of the ambient service based on the ambient service profile; and adapting the ambient service profile based on the monitored use of the ambient service. In some embodiments, these techniques are performed by the communications device (e.g., using a service processor), a network element/function (e.g., using a service controller, proxy server, and/or other network elements/functions/devices), and/or an intermediate networking communications device and, in some embodiments in various combinations with each other and/or with other functions/elements on the network/in communication with the network. In some embodiments, the service policy settings include one or more of the following: access control settings, traffic control settings, billing system settings, user notification with acknowledgement settings, user notification with synchronized service usage information, user privacy settings, user preference settings, authentication settings, admission control settings, application access settings, content access settings, transaction settings, and network or device management communication settings.

[0563] In some embodiments, the ambient service profile is implemented at least in part by a proxy server, in which the monitored use of the ambient service based on the ambient service profile is performed at least in part by the proxy server, and in which the proxy server communicates the ambient service traffic to the communications device. In some embodiments, the ambient service plan allows for access to the ambient service with limited service capabilities that are limited based on one or more of the following: period of time, network address, service type, content type, application type, QOS class, time of day, network capacity (e.g., network busy state), bandwidth, and data usage. In some embodiments, the ambient service plan is a low cost or free trial service plan that is bundled or provided as an option for purchase at a point of sale of the communications device. In some embodiments, the communications device is activated prior to a point of sale of the communications device, and the ambient service plan is associated with the communications device during activation. In some embodiments, the ambient service plan is associated with the communications device during one or more of the following: a manufacture of the communications device, a distribution of the communications device, or a point of sale of the communications device. In some embodiments, the ambient service plan includes an option to purchase a new service plan for the communications device, in which the new service plan includes additional service capabilities. In some embodiments, the ambient service profile is programmable by one or more of the following: a manufacturer, a service provider, a distributor, a virtual service provider, and a device manager.

[0564] In some embodiments, the ambient service is a transaction based service, in which service usage for the ambient service by the communications device is not billed, and in which electronic commerce based transactions performed using the communications device are billed as transaction based charges. In some embodiments, the ambient service is a transaction based service, in which electronic commerce based transactions performed using the communications device are billed as transaction based charges, and in which at least a portion of service usage costs are billed to one or more of the following: an advertiser, a transaction provider, a mobile virtual network operator, a virtual service provider, and an ambient service provider.

[0565] In some embodiments, the communications device is a mobile communications device or an intermediate networking device, and the ambient service includes one or more Internet based services. In some embodiments, the communications device is a mobile communications device, and the ambient service includes one or more Internet based services, and the mobile communications device includes one or more of the following: a mobile phone, a PDA, an eBook reader, a music device, an entertainment/gaming device, a computer, laptop, a netbook, a tablet, and a home networking system. In some embodiments, the communications device includes a modem, and the processor is located in the modem.

[0566] In some embodiments, the various techniques for adaptive ambient services are performed (e.g., at least in part) on the device (e.g., device 100) and/or on an intermediate networking device (e.g., using a service processor 115 and an ambient service profile). For example, the various techniques for adaptive ambient services can be performed on a processor of the device, and the ambient service profile can be securely stored locally on the device using various techniques for secure execution and storage.

[0567] In some embodiments, the various techniques for adaptive ambient services are performed on the device or on the intermediate networking device with assistance or verification from the network (e.g., a service controller 122 executed on any network element, in which the service controller 122 is in secure communication with the device/intermediate networking device, including the service processor 115 executed on the device/intermediate networking device). In some embodiments, adaptive ambient services are performed on the device or on the intermediate networking device with assistance or verification from the network (e.g., using a service controller for maintaining a centralized set of ambient service allowed access rules and/or ambient service disallowed access rules, and a superset of all ambient service monitored access rules, working cross device population). In some embodiments, the service controller 122 or other network element(s) assist the device for implementing these techniques for adaptive ambient services (e.g., cross device, cross URL/domain usage patterns/monitoring, publishing centralized set of ambient service allowed access rules, ambient service monitored access rules, and/or ambient service disallowed access rules, including, for example, compromised and/or hacked URLs). In some embodiments, the service controller 122 or other network element(s) assist the device for implementing these techniques for adaptive ambient services by verifying the device maintained set of ambient service allowed access rules, ambient service monitored access rules, and/or ambient service disallowed access rules. In some embodiments, the service controller 122 or other network element(s) assist the device for implementing these techniques for adaptive ambient services by verifying the device monitored service usage with CDR service usage using various techniques, for example, such as those described herein. In some embodiments, the service controller 122 or other network element(s) assist the device for implementing these techniques for adaptive ambient services by verifying the device monitored service usage by IP address (e.g., using CDR by traffic destination).

[0568] In some embodiments the various techniques for adaptive ambient services are performed on the network (e.g., a gateway, router or any other network element using, for example, deep packet inspection (DPI) on the monitored (non-encrypted) network traffic).

[0569] In some embodiments, a device is suspended based on inactivity, or the device is placed in a suspended service state or suspended account state, so that the network does not get bogged down with a significant number of devices and credentials that are inactive. For example, this can also result in a portion of the device credentials being assigned back to an available pool rather than reserved for that particular device (e.g., phone numbers if phone numbers are scarce). The device account and/or activation state can be re-activated when the device comes back online. For example, the suspend state can be a simple suspension of services without changing the account status, in which case the re-activation process can be automatically completed as a subset or entire set of the activation sequence that occurs when the device is initially used as described herein. The suspend state can also involve changing the account status to inactive, in which case the re-activation process can automatically reconfigure the account status back to an active state when the device re-accesses the network. For example, the suspend state can involve de-assigning or possibly re-claiming a portion of the device credentials. If a portion of the credentials is de-assigned, then when the device re-accesses the network credentials can be automatically re-assigned as described in various embodiments described herein.

Provisioning and Activation

[0570] In some embodiments, automated provisioning and activation includes automation of one or more of the following functions: (1) programming device credentials or partial credentials and recording them in a database (or providing same when they are programmed into the device), (2) associating these credentials with the proper provisioning and/or activation actions to be taken on the device and in the network, (3) directing the device to the proper activation function (e.g., activation server) sequence when it attempts to connect to the network, (4) completing provisioning of the device, (5) programming the AAA, billing system, gateways, mobile wireless center and other network equipment to the proper initial device service control settings, and (6) establishing a service account for the device.

[0571] In some embodiments, improved processes for activating service for a device or user with a network service provided by a central provider network, an MVNO network or a VSP on the central provider network are provided. In some embodiments, activation includes one or more of the following: a process or result of associating a service account with device or user credentials; with the service account potentially further being associated with a service profile defining the service activities that the device is authorized to access; creating or updating a service usage or billing record and associating it with the service account to create a service plan; and/or initiating service to the device or user in which the network equipment allows access to the appropriate level of service activities. In some embodiments, VSP embodiments include the provisioning and activation apparatus embodiments of any or all forms.

[0572] In conventional mobile device provisioning systems, the provisioning and activation process required to create a user service account and enable the device to access the desired level of service activities can limit mass market, low cost or user friendly applications of the device or service, because the process can often be cumbersome, time consuming and/or expensive for the service provider, service owner, master agent (service distributor), MVNO, VSP and/or user. Accordingly, the various embodiments for provisioning and activation described herein simplify the provisioning and activation process for mobile devices. In some embodiments, provisioning and activation for the device and/or the network accommodates a wide variety of device types and service profile types, with the capability to perform the provisioning and activation at a number of points in the manufacturing, distribution, sales and usage progression for the device, and the ability to either pre-activate before first device use or very quickly activate during first device use (or during some later use of the device).

[0573] In some embodiments, as described herein, the term provisioning generally refers to those actions/processes associated with programming the device with credentials or other device settings or software installations used to later activate the device, as well as, in some embodiments, creating database entries and other credential associations in the network so that the network and/or device have the information used to recognize the device or credentials and implement the service policies in the service profile and/or service plan once the service profile and/or service plan are activated. In some embodiments, as described herein, the term activation generally refers to the process of creating or selecting the service plan and/or service profile, programming the settings that are used in each (e.g., required) network function and/or each (e.g., required) device function so that the system can properly associate the device credentials with the appropriate service activity policies, and then admitting the device onto the network. The term activation can also refer in some embodiments to the creation of a user or device service account, in some cases, with user or device owner information or billing information. In some embodiments, the process of provisioning amounts to assigning credentials to the device and programming a portion or all of the credentials on the device, entering a portion or all of the credentials in the various necessary network equipment databases so that the network components are capable of identifying the device and associating it with the network based portion of the admission, traffic processing, service monitoring, billing, service limits and other policies that are eventually defined by the service profile and service plan.

[0574] Further examples of the network based service profile policies include network access level, traffic routing, service monitoring, service limits and actions taken upon reaching service limits. Once the service profile is created and activated during the activation process, the device credentials and the associated service profile are communicated throughout the necessary network elements so that each element can implement its part of the network portion of the service profile policies. This process of propagating the service profile settings to all the required network equipment components is a portion of what is referred to herein as activation in accordance with some embodiments. In some embodiments, the activation process includes associating the credentials with the proper service plan and/or service profile, and possibly completing the process of programming the device functions and/or network functions so that the device can be admitted to the appropriate level of network services. In some embodiments, activation also includes the service processor software settings, configurations or installs for each function or agent in the service processor to implement its part of the service profile, service plan, service billing or transaction billing policies. In some embodiments, activation also includes the creation of entries in the various service account databases and/or billing databases to create a user account or device owner account for the purpose of managing the user choices for service plan and other account information storage and management aspects, such as maintaining status information, maintaining the central service profile configuration, conducting reconciliation and billing exchanges, service usage history, and/or account history.

[0575] In some embodiments, the term credentials generally refers to the set of information parameters that the network and/or device uses (e.g., requires) to admit the device onto the network and associate it with the appropriate service profile and/or service plan. For example, the credentials can include one or more of the following: phone number, device identification number, MEID or similar mobile device identifier, hardware security device ID, security signature or other security credentials, device serial number, device identification and/or credential information via security hardware such as a SIM, one or more IP addresses, one or more MAC addresses, any other network address identifier, embedded device descriptive information block (static or programmable), security key, security signature algorithms, passwords or other secure authorization information, service processor (or similar device client or agent software) identifier or settings or version, device type identifier, browser (e.g., http, https, WAP, other browser client) header information or similar identifier, browser token information or similar identifier, browser cookie information or similar identifier, embedded browser instructions, portal-client (e.g., interface or communication agent that connects to a network portal used at least in part for provisioning or activation for the device or by the user) header information or similar identifier, portal-client token information or similar identifier, portal-client cookie information or similar identifier, embedded portal-client instructions, service provider, OEM, master agent (service distributor), VSP, device service owner identifier, distributor or master agent, and/or any information the network can use to authorize network admission, provision the device, provision the network, activate service, authorize, associate or enable the device with a provisioning sequence, associate or enable the device with one or more service profiles, associate or assist the device with an activation sequence, associate or enable the device with an ambient profile or service experience, associate or enable the device with one or more service plans or service capabilities, associate the device with a service provider or service owner, associate the device with an OEM or master agent, associate the device with a distributor or master agent, or associate the device with a device group, user group or user. In some embodiments, at least some of the credentials are unique to the device, and, in some embodiments, groups of devices share one or more aspects of the credentials. In some embodiments, the term permanent credentials generally refers to the set of credentials that includes at least a subset that are intended to be assigned to a device or user on a permanent basis. In some embodiments, the term temporary credentials generally refers to the set of credentials that includes at least a subset that are intended to be assigned to a device or user on a temporary basis. In some embodiments, temporary credentials are eventually replaced by permanent credentials. In some embodiments, at least some elements in the temporary credentials (e.g., phone number and/or access or authorization security credential) are used for more than one device. In some embodiments, the temporary credentials are recycled from one or more devices and used for one or more other devices, for example, when they remain unused for a period of time or when they are replaced with permanent credentials on one or more devices. It should not be inferred from the term permanent credentials that permanent credentials are never recycled, for example, when the user discontinues service or use of the credentials. Also, the term temporary credentials does not imply that temporary credentials are always temporary. In some embodiments, partial credentials or pre-activation credentials generally refer to a subset of credentials that are to gain access to limited network services for the purpose of provisioning of credentials and/or activation of a service plan or service profile. For example, prior to a phone number being assigned, a device can gain access to a limited set of network server destinations in which embedded information contained in the device (e.g., the partial credentials) is provided to the server, the server associates that information with the proper additional credentials (including the phone number) to assign to the device and/or associates the information with the proper service profile to activate service. In this example, partial credentials can include device type, OEM, service provider, VSP, device identification number, SIM, service processor configuration or some other information used by the server to determine what the credentials should be and the proper service profile.

[0576] In some embodiments, a permanent service account generally refers to the service account that is permanently associated with the user and/or device. For example, this account includes an association with the device or user credentials, user information or billing information, service profile, billing profile, network authorization status and other aspects that define the device or user service policies and billing policies. In some embodiments, the term temporary service account generally refers to a service account that is temporarily set up and associated with the device before some or all of the required permanent account information is available or entered for a device or user. For example, this account can be set up with an association with an actual user, or can be set up with a mock user or unassigned user association so that the network and billing system can recognize the credentials, authenticate the device, admit the device, provide the proper level of service activity control according to the service profile associated with the temporary service account, or collect the service activity usage information for various network and billing system accounting needs before actual user information or billing information has been entered into the network systems. For example, a temporary service account can make it possible or easier to use existing billing systems or other network systems to provide simplified provisioning, simplified activation or ambient services. A temporary service account can also become a permanent service account by replacing mock user or unassigned user information with actual user information, or a temporary service account may need to be replaced by a permanent service account when actual user information needs to be entered into the network systems, possibly including the billing or service profile databases.

[0577] In some embodiments, temporary or permanent device credentials and other information used/required for provisioning the device are generated with apparatus located at the manufacturer or in the distribution channel as discussed below. In some embodiments, the apparatus includes a local onsite server that typically shares some aspects of the provisioning information (e.g., phone number, phone number range, MEID or MEID range, SIM number or SIM number range, IP address or IP address range, MAC address or MAC address range, other secure device credential elements) with a network provisioning database. In some embodiments, the apparatus includes a server terminal, and the aforementioned portion of the credentials is generated by the network and shared with the local provisioning apparatus. In some embodiments, as will be discussed below, the provisioning credentials are in part generated in the network and shared with the device while it is connected online to an activation server (e.g., activation server 160) that is connected to the access network. Similarly, there can be activation servers connected to apparatus in the manufacturing or distribution channel that service device activation, or over the air or over the network apparatus connected to an activation server, which in turn connects to the device, can be used to accomplish activation programming of the network and device as further discussed below.

[0578] In some embodiments, when a device is provisioned and entered into the network provisioning database, it is associated with the automatic provisioning and/or activation sequence the device is intended to go through once it connects to the network or to the apparatus that will complete the process. In some embodiments, one or more device parameters (e.g., service owner, device type, OEM, plan type, IP address, security credential and/or software version) are used to determine what the appropriate network provisioning steps and/or settings are for completing the provisioning and/or activation process, and this association information is stored in the network provisioning database for propagation of the provisioning profiles or activation profiles to the various network equipment elements. In some embodiments, the network provisioning database is provided (e.g., in the network) that associates the pre-activation provisioning information (e.g., generated, as described herein, at time of manufacture, sometime during distribution, by the user on a website by a sales associate or other activation assistant, or by the network when a new device enters the automatic activation process). For example, the pre-activation provisioning information informs the network whether or not to let the device onto an activation sequence when the device attempts access, and in some cases, also instructs the network to direct the device to a specific activation sequence including, for example, an activation server (or other activation sequencing apparatus) sequence as described herein. In some embodiments, a central database is queried by other network equipment or the central database is included in one or more of the network elements (e.g., the AAA server and/or billing system, mobile wireless center 132), or the database is copied in part or in whole in various network elements (e.g., the central database, AAA server, mobile wireless center, billing system and/or gateways).

[0579] In some embodiments, propagating the network equipment provisioning information for a given device or group of devices is accomplished with a network provisioning system that has access to the network provisioning database and is capable of programming the appropriate network equipment. In some embodiments, this network equipment is referred to as “network management” equipment or “network provisioning” equipment. In some embodiments, there are several functions that take part individually or in concert, including, for example, the AAA server 121, service controller 122 (either with device based/assisted services through the service processor related embodiments or with network only embodiments as described herein), the mobile wireless center 132 (e.g., including the home location register (HLR) or other similar function referred to by other industry terms), the activation server(s) 160, other network provisioning or management equipment attached to or associated with the billing database system, and/or some other equipment apparatus. In some embodiments, the local database on the device, database in the AAA server and/or database elsewhere in network is provisioned to inform the gateway of the process for handling the pre-provisioned device according to, for example, the credentials. For example, if the device is not recognized or not authenticated onto the access network as an activated device with associated active service profile and/or service plan, the device connection or communication can be directed (or routed) to a generic activation server that provides an activation sequence that is not necessarily determined by one or more of the specific device credential elements, partial credential elements, device profile or partial device profile that define something specific about the activation sequence for the device. In another example, in which the device is not recognized or authenticated as an activated device with associated service profile and/or service plan, the device can be directed (or routed) to an activation service (or other activation sequencing apparatus) that uses some part of the credentials or range of partial credentials or a portion of a partial or complete device profile to determine a desired pre-determined device specific or device group specific activation sequence that is implemented by a specific activation service sequence or other activation sequence apparatus. In another example, in which the device is not recognized or authenticated as an activated device with associated active service profile and/or service plan, a portion of the device credentials or partial credentials can be used as a look-up index into a database that determines what the specific device activation sequence should be, and the device can be directed (or routed) to a specific activation server sequence or other activation sequencing apparatus.

[0580] In some embodiments, a database in the AAA server or database elsewhere in network is provisioned to inform the gateway what to do with a pre-provisioned device according to the credentials. For example, devices can be authenticated (for activated devices), routed to activation servers (or other activation sequencing apparatus) or denied access. In some embodiments, the AAA server (and/or other network elements) provide the above discussed look-up function for the above gateway description in which a lookup database, locally stored or stored in a central database, is queried to provide secondary routing information to the specific or generic activation servers.

[0581] In some embodiments, the pre-provisioned database is located in the billing system. In some embodiments, the billing system accesses the pre-provisioned database (e.g., stored on the billing system or another network element) for the purpose of setting up temporary accounts or permanent accounts and associating those accounts with pre-activation status, activated free ambient or activated paying customer.

[0582] In some embodiments, for zero activation, all the required pre-provisioning or programming of the above network elements, or others, is coordinated by the network provisioning system at some point after the partial or full device credentials have been associated with the device or reserved for a particular device type or service type. In some embodiments, the network provisioning system also coordinates the information to or from the device provisioning apparatus that is described elsewhere.

[0583] In view of the various embodiments described herein, it will be appreciated that many of the automated or background provisioning, activation and ambient embodiments described herein can be accomplished with network based approaches, device based approaches, or network/device combination/hybrid based approaches. For example, when the access control for the provisioning process is accomplished in the device (e.g., a device based approach), the activation server can be located anywhere on the Internet, and the device will ensure that the activation process is conducted with the activation server while blocking other traffic from occurring. As another example, some or all of the ambient provisioning programming steps become steps to program the access control, traffic control, application control, bill by account rules, and/or other aspects in the service processor or service controller as described herein.

[0584] In some embodiments, the provisioning apparatus described herein can be a computer located in the user's home or business, and the user or an IT manager has access to a website that provides the provisioning information, in which the computer serves as the provisioning or software programming apparatus. In some embodiments, the network itself, possibly through an activation server 160, website or other interface to the device, becomes the provisioning apparatus, in some cases, with the assistance of software on the device to affect the programming of provisioning information from the network or the communication of device credentials or other information to the network. For example, this software can be a background process that runs without user interaction, a portal/widget program, a web browser based program, a WAP browser based program, and/or any other program that provides a counterpart function to the network functions effecting the provisioning (e.g., activation server). In some embodiments, the activation server either initiates a specific provisioning sequence if device software is present to assist or routes to a website for manual entry if there is no software present.

[0585] FIG. 8 illustrates another network architecture including a system located in the manufacturing or distribution chain for the device that provides the device provisioning or partial provisioning, and any pre-activation required for the device to later activate on the network in accordance with some embodiments. Device credential, software and settings server 6420 provides a link to the network functions that generate or provide device credentials, and/or associate device credentials with activation profiles or pre-activation profiles in the network equipment (e.g., the billing system 123, service controller device control system 6225, gateways 410-1, 420-1, base station, credential generation and association server 6410, activation server 160, service download control server 1660 and/or other network apparatus). For example, the link between the device credential, software and settings server 6420 to the central provider core network equipment can be over the Internet 120 (e.g., a secure link over the Internet) as shown or over another connection such as a leased line. The device credential, software and settings server 6420 obtains credentials or partial credentials from the network apparatus that generates them, illustrated by the credential generation & association server 6410. Credential generation & association server 6410 need not be directly connected to the central provider core network 110 as shown, but can be located elsewhere (e.g., in another location connected by a secure Internet link). Credential generation & association server 6410 assigns credentials, or partial credentials, for use by device credential, software and settings server 6420. When these credentials are assigned to a device, they are programmed, loaded or otherwise associated with the device by device credential provisioning apparatus 6430, which is connected to the device wirelessly or via a wire line connection.

[0586] In some embodiments, a device software loading and programming apparatus 6440 provides software loading or device settings functions that form a portion or all of the provisioning or pre-provisioning device configuration, or form a portion or all of the device activation profile configuration, or form the device service owner, master agent or VSP device assignment or signature, and in some embodiments, using an activation tracking service (ATS) system. As discussed herein, the ATS monitors network connections and aspects of traffic that provide insight into which networks the device 100 is gaining access to, in some embodiments, for the purpose of ensuring that an OEM, master agent, device service owner or VSP is being compensated for devices that activate on a service provider network. In some embodiments, the ATS agent connects to a server counterpart that records and, in some embodiments, also analyzes the service or network connection information to make a determination of the type of access service the device is receiving and, in some cases, determine which networks the device is activated on. In some embodiments, the ATS is installed on the device in a manner that makes it difficult to tamper with or remove so that the entity that is intended to get credit for device service activation does get credit (e.g., the ATS agent can be loaded into secure memory, it can be installed with software that makes it difficult to de-install, it can be installed on the modem possibly in secure memory, it can be installed in the BIOS, it can be installed deep in the OS kernel, it can be installed with one or more additional device agents that monitor the ATS agent and alert a network function or re-install it if tampered with). The SIM inventory 6450 is provided to illustrate that, in some embodiments, hardware elements (e.g., a SIM security module as shown) or hardware configurations are also installed or manipulated in device 100 and these operations and the recording of the resulting associations form a portion of the provisioning or pre-provisioning process.

[0587] In some embodiments, at the time the credentials or partial credentials are loaded, programmed, set, installed, read from the device or otherwise recorded, they are, in some cases, all associated together in a database that allows for later identification of the device and its appropriate provisioning and/or activation process through such associations. For example, this can involve reading device parameters such as MEID, MAC address, device type, or other information that is associated with the information being loaded or configured on the device. As discussed herein, this credential configuration and association information is stored in the network equipment responsible using it to configure the network to activate the device in one of the various embodiments disclosed herein.

[0588] Some embodiments include tying some or all of the activation provisioning steps and information settings together into a database that defines a higher level activation profile for a group of users(/devices), and a server is used to perform device and equipment programming for the devices in the group, including, for example, associating the following device information into the group definition: credentials, service owner or master agent, provisioning information and/or activation profile. Some embodiments further provide for this device group information being distributed to the various network equipment components required to activate the devices as discussed elsewhere. In some embodiments, this programming and device group association is accomplished using the VSP workstation server 4910. For example, a device can be manufactured and distributed in a manner that provides flexible assignment of the device to a group that is assigned to an activation profile or a service owner.

[0589] In some embodiments, multiple activation servers 160 are provided (as shown), which illustrates that there can be multiple device activation servers 160 each with a different device activation experience and potentially controlled by a different VSP, service owner, service provider, OEM or master agent. As discussed herein, there are several ways that a device 100 can be routed to the proper activation server 160 so that the device provisioning and activation process can be completed. In some embodiments, all devices that are not activated are re-directed (or routed) to an activation server that reads one or more parameters in the device credentials. The device credential information can be determined either through the device identification information associated with the access network connection itself (e.g., MEID, IP address, phone number, security credentials, or other credentials identified for a device that gains access with the network), or with the aid of the device in a pre-arranged query-response sequence. The device can then be re-directed (or routed) to the appropriate activation server for that device, device group, device service owner or VSP. In some embodiments, the same process described above can be accomplished with a single re-direction from a service gateway 420-1 or 410-1, or another router enable network element. In some embodiments, the gateway or network element itself decodes the device credential information as described herein and performs the correct re-direct (or route) to the appropriate activation server 160 for that device. In some embodiments, the activation server 160 can be incorporated directly into the gateway 420-1 or 410-1, the base station or other network component. In some embodiments, the activation server 160 can be incorporated into the service controller 122 or the service controller device control system 6225.

[0590] In some embodiments, apparatus other than the activation server are used to facilitate provisioning of credentials or partial credentials, or activation, during manufacturing or device distribution, and, for example, these apparatus can augment, supplement, compliment or replace the activation server function. Such apparatus include, for example, device programming equipment (e.g., device credential provisioning apparatus 6430, device software loading and programming apparatus 6440 or SIM inventory 6450), equipment that is networked into a central provider, MVNO or VSP database (e.g., device credential, software and settings server 6420) to gain access to provisioning information or activation information that is programmed into a device or group of devices, or to place device credential or partial credential information in a network database for later recognition, or to receive or communicate security information such as certificates for devices or SIM modules that will later be used to complete provisioning or complete activation or gain access to a network. For example, these apparatus, or any other apparatus including the activation server, can be networked into a service provider network or device database, an MVNO network or device database or a VSP network or device database. In some embodiments, programming of the device credentials or other information associated with the service processor or device is provided, so that, for example, the device can be recognized by an activation server or similar network function at a later point in time so that provisioning or activation can be completed in an automated manner, potentially with reduced or no user involvement, that provides a provisioning or activation configuration that is in some way unique for the service provider or service provider partner, device type, user group, VSP, MVNO, master agent or other entity. In some embodiments, this programming is provided in a manner that is difficult to change without the proper authorization so that the device is properly associated with the proper “service owner” or master agent (e.g., for the purpose of activation incentive payments). For example, as discussed herein, various approaches can be applied to the device credential or other settings or software provisioning so that the settings or software are secure or protected, or so that if the software is removed, replaced or modified it is reported or replace or restored. In some embodiments, VSP control of the provisioning, partial provisioning or activation of devices is provided during manufacture or at different points in the distribution channel. As discussed herein, some of these embodiments allow the central provider to offer to service partners (e.g., VSPs, MVNOs, master agents, and/or OEMs) similar types of control for device activation experience design or device service assignment control (e.g., sometimes referred to as service provider device locking so that other service providers cannot provide primary access to the device) during the manufacturing or distribution process that are possible with devices manufactured and distributed for the central service provider.

[0591] In some embodiments, the device is provisioned before the user obtains the device with permanent credentials, temporary credentials or partial credentials. In this case, the necessary credential programming of the device occurs during manufacture, at some point in the device distribution, such as at a distribution depot or in a store, or at the point of sale or point of shipment. In some embodiments, provisioning of network information as discussed above is used, and the network information is provisioned at the same time, before or after the device information is provisioned. In some embodiments, the device provisioning information is programmed with dedicated apparatus that connects to the device either with wires or wirelessly. For example, the dedicated apparatus can be local to the location where the device is being provisioned, or it can be partially or entirely networked into a database or provisioning solution located elsewhere and operated by the central provider, a VSP, OEM or other entity. For example, the apparatus to program the network portions of the provisioning information can also be networked and the operators who set up the required network programming for a device or group of devices may be in the vicinity of the servers that host the provisioning and management tools or they may network into the servers. In some embodiments, provisioning system operators have full or partial control of any device provisioning equipment associated with the entity they work for (e.g., OEM, VSP or master agent) but only have remote access via secure terminal, secure website or other techniques to network into a central provider or VSP server farm in which they control or partially control the network portion of provisioning capabilities for that subset of devices that are assigned to the entity they work for with (e.g., OEM, VSP or master agent).

[0592] In some embodiments, provisioning is accomplished over the air on the mobile access network for mobile devices, or over the wired access network or WLAN connection for wired access networks, either before the user receives the device or after the user receives the device. In some cases, the device can be connected to general purpose equipment, such as a computer to perform the programming required to complete provisioning. In the cases in which the device is provisioned at point of sale or after point of sale, the device provisioning can be triggered by a user initiated sequence, or can be initiated by an automated background sequence at any time after the device is powered on. In such cases, in some embodiments, partial credentials that include information such as device type, OEM or service provider are used to assist in determining how to complete the provisioning, and the information can also include secure information, certificate or signature programmed into the partial credentials that is required for the network to perform the provisioning of the remaining credential information in the device and possibly the network. In some embodiments, any network information used/required to provision the device or service is generated at the time the partial credentials are determined rather than beforehand.

[0593] In some embodiments, the device is activated for service before the user obtains the device with permanent credentials, temporary credentials or partial credentials, or with a permanent service account or a temporary service account. For example, in this case, the necessary steps of provisioning and activating service for the device can occur during manufacture, at some point in the device distribution, such as at a distribution depot or in a store, or at the point of sale or point of shipment. In some embodiments, the steps for activating service include one or more of the following: provision the device (e.g., with permanent, temporary or partial credentials), provision the necessary network databases and equipment to prepare them to recognize the device and associate it with the service profile and/or service plan, create or select the service account (e.g., permanent or temporary service account), select or create the service profile and/or service plan, program any elements in the device required to activate service (e.g., account ID, device aspects of the service profile and/or service plan), and program the necessary network databases and equipment with the required associations of device credentials and service profile and/or service plan policy settings. In some embodiments, the device oriented programming portions of the service activation steps occur at the same time, before or after the network oriented programming portions of the service activation steps.

[0594] In some embodiments, the device activation information is programmed with dedicated apparatus that connects to the device via a wireless or wire line connection. For example, the dedicated apparatus can be local to the location where the device is being provisioned, or the dedicated apparatus can be partially or entirely networked into a database or service activation solution located elsewhere and operated by the central provider, a VSP, OEM or other entity. For example, the apparatus to program the network portions of the activation information can also be networked and the operators who set up the required network programming for a device or group of devices can be in the vicinity of the servers that host the service activation and management tools or they can network into the servers. In some embodiments, activation server tools operators have full or partial control of any device activation apparatus associated with the entity they work for (e.g., OEM, VSP or master agent) but only have remote and partial access via secure terminal, secure website or other techniques to network into the network portion of the activation tools that are controlled by the central provider or VSP. The server tools operators can be restricted in some embodiments to providing network activation information or settings only for those devices or device groups that are assigned to the entity they work for with (e.g., OEM, VSP or master agent). For example, the device control group restriction can be accomplished with a secure database that has secure sub-partitions for one or more entities so that they cannot impact the control of one another's network activation settings but can control their own devices. In this way, a centralized set of activation tools resources controlled by a central provider, VSP or other entity can be partitioned so that different entities can have partial or full control of the activation service definition for devices or groups of devices without impact or risk to others who share the network and activation tools resources.

[0595] In some embodiments, activation is accomplished with an over the air interface to a mobile device, or over the wired access network or WLAN connection for wired access networks, either before the user receives the device or after the user receives the device. In some cases, the device can be connected to general purpose equipment such as a computer to perform the programming required to complete activation. In the cases in which the device is activated at point of sale or after point of sale, the final device activation process can be triggered by a user initiated sequence, or can be initiated by an automated background sequence at any time after the device is powered on. In such cases, some embodiments call for a temporary service account that is used to bring the device onto the network before the user has input the information necessary to create a permanent service account. In some embodiments, a temporary or permanent service account can be applied to the device at the time the device reaches the network, and the type of account, service profile and/or service plan can be influenced (e.g., partially determined or informed) or determined by information embedded in the device credentials or partial credentials, such as device type, device ID, SIM, OEM or service provider. For example, the device credentials can also include secure information, certificate or signature that can be required by the network to perform the activation steps for temporary or permanent service account status. In some embodiments, in which the device is activated in this manner before the user information is available, or before the user has selected a pay for service plan, the service profile and service plan are set up for ambient services as described herein.

[0596] In some embodiments, the device is activated during the manufacturing or distribution process, and then the activated device status is suspended. Once the temporary or permanent service account is set up, with appropriate service profile and/or service plan and temporary or permanent credentials, in some networks and billing systems the service can often be more easily resumed once suspended as compared to provisioning and activating the device from scratch. The device is then later resumed (or re-activated) when some event triggers the resume process, such as when it ships to the end user or when the end user attempts to use it. This process prevents the network from needing to manage credentials and accounts for devices that have been activated but are not yet on the network.

[0597] In some embodiments, provisioning is accomplished at least in part with temporary credentials in a manner that is automated and convenient for the user or device owner. In some embodiments, at least some subset of the temporary credential elements replaced at a later point in time by permanent credential elements in a manner that is also automated and convenient for the user or device owner. In some embodiments, the temporary credential set is pre-programmed into the device along with a temporary or permanent service account including service profile during the manufacturing or distribution process so that the device is activated with temporary credentials when it ships. In some embodiments, the aforementioned pre-programming is performed for the network via a secure set of server access equipment that networks into the network databases used to define the service profile and/or the service plan. In some embodiments, a subset of the temporary credentials is recycled once it is replaced, if a temporary service account is not activated or used after some period of time, if a permanent account is not activated or used after some period of time, or if the credentials subset is revoked from the device for some other reason.

[0598] In some embodiments, more than one device is assigned one or more elements of the temporary credentials, such as the phone number, which may be limited in supply. In some embodiments, a network will accept more than one set of temporary credentials, one or more redundant elements, for two or more different devices. In some embodiments, a device that has two or more temporary credential sets, in which at least a subset of the credential elements are different for the sets, so that if one set of credentials has elements that are already being used to access the network, then one or more reserve sets can be drawn upon to gain access to the network.

[0599] In some embodiments, the temporary credentials are used to log onto the network to conduct an over the air or over the network activation process in which an activation server reads at least a portion the device credentials to determine some aspect of how the device service profile. In some embodiments, the aforementioned over the air activation process is accomplished in the background without user intervention. In some embodiments, the over the air activation process is initiated when the user first attempts to use the device or when the user first attempts to access the network or upon user request or approval. In some embodiments, the over the air activation process is initiated using a temporary service account for the device and/or network to gain access to the network. In some embodiments, the over the air activation process is initiated after the user has entered the information required to create a permanent user account into the device or into the network. In some embodiments, the user is required to enter the aforementioned user information before using the device or using some aspect of the device. In some embodiments, the temporary service account is replaced by a permanent service account some time after the user has entered the necessary information to create a permanent account into the device or network. In some embodiments, the over the air activation process is initiated using a permanent service account assignment for the device and/or network to gain access to the network.

[0600] In some embodiments, the service profile is assigned to the device and/or network during the aforementioned over the air activation to be a pay for service profile with a free trial period. In some embodiments, the service profile assigned to the device and/or network during the aforementioned over the air activation includes pre-pay, post-pay, session based pay or pay as you go options for service. As will be apparent to one of ordinary skill in the art, various embodiments disclosed herein are particularly well suited for control or pre-pay services. In some embodiments, the service profile that is assigned to the device and/or network during the aforementioned over the air activation is an ambient service profile providing service access before all the user information is available to assign a permanent account. In some embodiments, the service profile that is assigned to the device and/or network during the aforementioned activation is an ambient service profile providing a service upgrade selection option interface to the user. In some embodiments, the service profile that is assigned to the device and/or network during the aforementioned activation is an ambient service profile providing transaction services to the user. In some embodiments, the service profile that is assigned to the device and/or network during the aforementioned activation is an ambient service profile providing bill by account functionality for the network. In some embodiments, the service profile that is assigned to the device and/or network during the aforementioned activation is an ambient service profile providing some amount of free networking or information service to entice the user to use the other ambient services. In some embodiments, the aforementioned ambient service is at least partially implemented with device based service activity control or control assistance. In some embodiments, the aforementioned ambient service is at least partially implemented by gateways, routers or switches in the network that are programmed according to the ambient access profile for the device to implement the ambient policies for network access control, routing control, traffic control or service monitoring and reporting for bill by account.

[0601] In some embodiments, activation is accomplished at least in part with a temporary service account in a manner that is automated and convenient for the user or device owner. In some embodiments, at least some subset of the temporary service account is replaced at a later point in time by permanent service account subset in a manner that is also automated and convenient for the user or device owner. In some embodiments, the temporary service account settings (e.g., including the service profile settings and/or the service plan settings) are pre-programmed into the device along with a temporary or permanent credentials set during the manufacturing or distribution process so that the device is activated with temporary credentials when it ships. In some embodiments, the aforementioned pre-programming for the network is performed via a secure set of server access equipment that networks into the network databases used to define the service profile and/or the service plan. In some embodiments, the device is suspended once it is activated but before the user is using it, and then resumed before or commensurate with the point in time that the user begins to use it. In some embodiments, some subset of the temporary service account is recycled once it is replaced, if the temporary service account is not used after some period of time, if the temporary service account is not upgraded to a permanent service account after some period of time, or if the activation is revoked from the device for some other reason. In some embodiments, more than one device is assigned to the same temporary service account. In some embodiments, a network accepts more than one device on the same temporary service account. In some embodiments, a device includes or is associated with two or more temporary service accounts, in which at least a subset of the temporary service account elements are different, so that if one account is already being used to access the network then one or more reserve accounts can be drawn upon to gain access to the network. In some embodiments, the temporary service account is associated with a temporary credentials set. In some embodiments, the temporary service account is associated with a permanent credentials set.

[0602] In some embodiments, un-activated devices are detected by the network routing equipment (e.g., service gateways or routers in hierarchical networks or base stations with embedded gateways in flat networks) and the device routing is programmed to re-direct un-activated devices to an activation server network destination. For example, the activation server can first inspect the information associated with the device to determine if the device belongs to the list of devices, device types or device groups that the network is programmed to provide access to. For example, the information used to determine this can include device type, service provider, phone number, device ID, SIM ID or configuration, secure information used to qualify the device, IP address, MAC address, user, user group, VSP, OEM, device distributor, service distributor (master agent), service processor presence or configuration, presence or configuration of other software or hardware. There can also be some activation definition information embedded in the credentials, or associated with some portion of the credentials, or programmed additionally on the device that informs the activation server as to the service profile and/or service plan and/or service account that should be established for the device. If activation information (the service profile, service plan and/or service account information) is found through association with the device credentials (e.g., device ID, phone number, IP address, MAC address, SIM or other security credentials) rather than being read directly from information embedded in the device or device credentials, then the pertinent aspects of the credentials can be used as a cross reference to look up the service plan and/or service profile information stored in a database networked to or within the activation server. The activation information can include information to define a wide variety of service plans and service profiles that when properly implemented on the network functions, and perhaps device if necessary, can provide for a wide range of service activity policies, service billing policies, transaction billing policies and service account types that can be associated with the device over the air or over the network.

[0603] In some embodiments, once the activation server has determined the activation information from the device or from a look up based on some aspect of the device credentials, then the activation server initiates the necessary network settings and billing database entries to be programmed by sending the service profile instructions to the network provisioning and activation apparatus and the service plan instructions to the billing system. In some embodiments, the activation server can then also send the any necessary service profile and/or service plan settings required for the device to a provisioning and activation support software function on the device, such as various embodiments of the service processor, so that the device provisioning and activation can be completed. The provisioning can be with permanent credentials or temporary credentials, and the service account that is set up may be permanent or temporary. In some embodiments, the activation process described above is completed perhaps before the user has entered some or all of the user information necessary to set up a permanent service account, and, in these cases, a temporary service account can be set up. In some cases, the activation process can be completed in the background before the user has completed an attempt to access the network and the service profile can be set up to provide ambient services to a temporary service account. In some embodiments, the user is required to enter the information required to establish a permanent service account prior to gaining full use of the device, either on the device, on a computer or in the store, so that by the time the user begins using the device the above activation embodiments can provide for ambient services activation with permanent account status so that the user can purchase a service upgrade or any transaction without entering any more account information.

[0604] In some embodiments, a device status is changed from a temporary service account to a permanent service account. If the device is activated with a temporary service account, and the user information is available to set up a permanent account, then if the billing system rules and interfaces allow for such, the user information can be changed from the mock information to the actual user information while maintaining the same account identifiers in the billing system. If the billing system will not allow for such, then the user information can be used to establish a new account, the device credentials can be re-associated with the new account, in some cases, after modifying one or more of the device credential parameters, and the network functions can be re-programmed as required, and, in some cases, the device can be re-programmed as required to accommodate the new permanent account.

[0605] In some embodiments, code on the device pulls a temporary or permanent set of credentials. When the credentials are pulled, the network associates the device with an ambient service profile according to one or more of the following: embedded device information identifying device type, service owner (e.g., VSP), user group, or user, or device ID is cross referenced to a database that is populated some time from manufacturing time to post sale where the database provides information identifying device type, service owner (e.g., VSP), user group, or user. The device is then re-directed accordingly (e.g., for device based this is a matter of setting the policies or loading the software for the service processor, for the network based approach this is a matter of populating the routing tables and service profile). For example, credentials can be re-cycled after a period of time, and/or some portion of the credentials can be redundant with other devices. For example, this is essentially a dynamic service for (temporarily) assigning device credentials, and the duration of the temporary credential validity for that device ID can be time limited to give the user time to activate a real account or a free trial, session limited, or a longer duration of time that is perhaps refreshed each time the device logs on. For example, the device could also already have permanent or temporary credentials but not have a service account. The above process can be used to assign a temporary or permanent service account as well. Once the service account is assigned and the appropriate service profile is propagated to the network elements, the device can then be directed to or use the appropriate activation profile service activities or the appropriate ambient service activities.

[0606] In some embodiments, the device is activated in the background in a manner that is virtually transparent to the user. For example, at some point in the distribution channel, the device is programmed to seek the activation server system described above as soon as it is turned on, or as soon as some other event occurs like the user using the device or the user attempting to gain access. When the pre-programmed event is triggered, the device connects to the network and the gateways or routers re-direct the device to an activation server, as discussed above. As also described herein, the activation server either derives information from the device that informs the server what service the device should be activated with, or the server derives that information from a database look up with a portion of the device credentials as the cross reference parameter. Once the activation server has determined the activation information from the device or from a look up based on some aspect of the device credentials, then the activation server causes all the necessary network settings and billing database entries to be configured/programmed by sending the service profile instructions to the network provisioning and activation apparatus and the service plan instructions to the billing system. In some embodiments, the activation server can then also send the any necessary service profile and/or service plan settings required for the device to a provisioning and activation support software function on the device, such as various embodiments of the service processor, so that the device provisioning and activation can be completed. For example, the provisioning can be with permanent credentials or temporary credentials, and the service account that is set up can be permanent or temporary.

[0607] In some embodiments, background activation is performed using the aforementioned activate/suspend process. At some point in the distribution channel, the device is programmed to seek to resume service as soon as it is turned on, or as soon as some other event occurs like the user using the device or the user attempting to gain access. When the pre-programmed event is triggered, the device attempts to connect to the network and the gateways or routers re-direct the device to an activation server as described herein. As also described herein, the activation server either derives information from the device that informs the server that the device is ready to resume service, or the server derives that information from a database look up with a portion of the device credentials as the cross reference parameter. Once the server is aware of this information, it sends a message to resume service to the billing system, or other network function that controls the suspend/resume function, and the service is resumed.

[0608] In some embodiments, background activation is performed as described below. The service processor and the credentials are pre-programmed during the manufacturing or distribution process to provide the desired service profile support and/or billing profile support for the desired initial ambient service. As described herein, this programming can be accomplished with dedicated apparatus at the manufacturer or distribution depot. Furthermore, the party responsible for defining the service (e.g., typically the central provider, OEM, VSP, distributor or master agent) can network into the service processor programming apparatus to control service processor and/or credential programming for all or a subset or group of the devices or device types locally available. The service processor enabled device is programmed to seek the activation server system described above as soon as it is turned on, or as soon as some other event occurs like the user using the device or the user attempting to gain access. In some embodiments, the activation server is the access control server previously discussed or the access control server can act in concert with another server that performs the activation function. When the pre-programmed event is triggered, the device connects to the network and the gateways or routers re-direct the device to the activation server. As also described herein, the activation server can communicate with the service processor to verify the service processor security credentials, agents and configuration.

[0609] In some embodiments, if the activation server determines that the pre-programmed settings stored in the service processor need to be modified to provide the latest version of the desired service, or if the service processor agent software needs to be updated, then this can be accomplished prior to completing the activation process. Once the service processor configuration and settings are confirmed, the activation server causes the necessary network settings and billing database entries to be programmed by sending the service profile instructions to the network provisioning and activation apparatus and the service plan instructions to the billing system. Given that the service processor can perform some or much of the service activity control or control assistance, the service control options are generally larger than without the service processor, and there can be less configuration to perform for other networking equipment to complete the provisioning and activation process. The provisioning can be with permanent credentials or temporary credentials, and the service account that is set up can be permanent or temporary.

[0610] In some embodiments, pre-programming and pre-activation of devices with temporary credentials and a temporary service account are used to ship devices that are pre-activated. Given that the credentials are temporary and can be recycled when the permanent credentials are assigned, concerns about using up too many pre-assigned credentials are reduced. In embodiments in which a portion of credentials elements can be used for multiple devices, this concern is further reduced. If there is a concern about too many activated devices being assigned that are not actually active and generating service revenue, then the suspend/resume process discussed herein can be employed. In some embodiments, the temporary credentials and/or temporary account can be replaced with permanent credentials and/or account assignments at any time as follows. When a pre-programmed event in the device is triggered, then the device initiates a program that seeks the aforementioned activation server or another server that has the capability of fulfilling the device request to exchange the temporary credentials for permanent credentials and/or exchange the temporary account for a permanent account. The event that triggers the credential exchange can be the same or different than the event that triggers the service account exchange. The service account exchange can typically be triggered by the point in time that the user enters account information.

[0611] In some embodiments, the aforementioned ambient service is partly implemented with a combination of the techniques for pre-provisioning during manufacturing or distribution and at least partially implementing the service activity control (e.g., access control, routing policy, traffic control, usage limits, and/or policy for usage limit overage) required for implementing ambient using the service policy provisioning capabilities in the data path gateways, routers or switches in the network. The gateways, router or switches are pre-programmed as discussed herein according to the ambient access profile for the device to implement the ambient policies for network access control, routing control, traffic control or service monitoring and reporting for bill by account. In some embodiments, the provisioning credential elements are not all pre-programmed before the device ships, but a subset of the credential elements are programmed using the activation server technique discussed herein. This over the air automated provisioning is combined with the activation server reading the device credentials to derive the service activity control settings for the gateways, routers or switches that will result in the desired ambient services activity controls.

[0612] In some embodiments, the aforementioned ambient service is implemented with a combination of the techniques for pre-activation during manufacturing or distribution and at least partially implementing the service activity control (e.g., access control, routing policy, traffic control, usage limits, and/or policy for usage limit overage) required for implementing ambient using the service policy control capabilities in the data path gateways, routers or switches in the network. The gateways, router or switches are programmed to recognize the pre-activated device credentials as discussed herein according to the ambient access profile for the device to implement the ambient policies for network access control, routing control, traffic control or service monitoring and reporting for bill by account. In some embodiments, the device activation profile and/or service account are not pre-programmed in the network and/or the device before the device ships but the activation profile and/or service account are programmed using the activation server technique discussed herein. This over the air automated provisioning is combined with the activation server reading the device credentials to derive the service profile activity control settings for the gateways, routers or switches that results in the desired ambient services activity controls.

[0613] In some embodiment, a VSP capability is enabled by providing a secure network connection to the service policy settings tools that define the device pre-provisioning settings, the device pre-activation service profile settings, the network equipment service activity control policy settings (e.g., access control, routing policy, traffic control, usage limits, and/or policy for usage limit overage), and the network billing system database. By providing server tools that enable all these settings to be controlled (or perhaps only observed in the case of the billing system) by a secure workstation or secure website interface that networks into the equipment that programs the settings, and providing for a secure partitioning of the devices that can be controlled by a given secure workstation or secure website interface, a central provider can provide VSP services to multiple entities who all have different device and service plan combinations that they desire different flavors of ambient services for. These techniques can also be extended beyond ambient to any device/service profile/service plan combo the VSP desires to create. In some embodiments, the networking equipment is implemented to secure device service group domains in which the service policies for a group of devices can be controlled. In some embodiments, the pre-provisioning and pre-activation techniques are substituted with the over the air activation server techniques discussed herein, and a secure device group partition capability is provided in the activation server as well so that the activation server device group partition control capabilities can be added to the secure device group partition control capabilities of the network gateways, routers and/or switches, the device programming tools and the billing system to form a VSP partition solution for over the air activation of various device/service plan combinations. In some embodiments, the device groups are relatively small so that beta trials of arbitrarily large or small size can be designed and implemented by defining a service control group as described above, and after fine tuning and perfecting the beta trial settings the device group can be expanded to publish the automated provisioning and activation service settings to a larger user or device group for production services.

[0614] In some embodiments, device based service activity control assistance (e.g., based on the various service processor embodiments described herein) is combined with simplified provisioning techniques described herein so that service processor enabled devices can be shipped with pre-provisioned credentials (temporary or permanent) or can obtain credentials in an automated manner that is convenient and efficient for the user or device owner. In some embodiments, the service processor embodiments in combination with the manufacturing and supply chain credentials and provisioning apparatus described elsewhere provide various approaches for provisioning pre-provisioned service processor enabled devices. In some embodiments, the service processor embodiments in combination with the activation server variants discussed above provide various approaches for over the air or over the network simplified post-sale provisioning for service processor enabled devices. For example, these embodiments can also be used for ambient services given that as discussed herein the service processor has capability to implement service profile policies for deep control of ambient service activity control.

[0615] In some embodiments, provisioning includes provisioning partial device credentials that include, for example, a secure certificate that is used to authorize full credential provisioning and/or activation by performing a process for a later look-up/validation of the full device credentials. For example, the look-up/validation of the full device credentials can be performed by a gateway, router or similar network device that re-directs to a provisioning server and/or activation server or other network components that either: (1) recognizes the partial credentials that serve as a reference to direct the device communication to a specific provisioning/activation server determined from the partial credentials; or (2) does not recognize the partial credentials, and directs the device communication to a less specific provisioning/activation server that is not necessarily associated with a reference to the partial credentials.

[0616] In some embodiments, if the partial device credentials (e.g., temporary or permanent credentials) are being used for provisioning, then the partial credentials are read (e.g., and/or other credentials can be looked up based on the partial credentials as described above). The device is authorized if the proper credentials and/or secure certificate is present. The device credential provisioning is then completed (e.g., using activation server commands or settings to a device based software and/or hardware element), and the credentials are, in some cases, also communicated to the various network equipment elements.

[0617] In some embodiments, if the partial device credentials are being used for activation, then partial or full device credential provisioning is performed, such as described above. A service account (e.g., temporary or permanent service account) is created or looked up based on the partial device credentials (e.g., a user account associated with the device through embedded partial or full credentials or a look up process, or based on a dynamically created/assigned temporary account associated with the device through embedded partial or full credentials). An initial service profile and, in some cases, an initial service plan (e.g., service control policy settings including a billing profile) are determined from embedded information and/or using a look up process (e.g., based on the device type and/or partial or full device credentials). The device is then programmed to enable access with the service profile and plan, and, in some cases, the various network components/elements are programmed to enable the service profile and plan, and, in some cases, proper entries in the billing system are made or confirmed, and the device credentials are, thus, activated for service.

[0618] In some embodiments, the above described provisioning and/or activation processes are performed with the provisioning server(s) and/or activation server(s) in the background with reduced, minimal or no user input required, for example, after the device is sold to the user and the user turns on the device so that by the time the user attempts to access the service using the device, the provisioning and/or activation process is already completed.

[0619] In some embodiments, device based service activity control assistance (e.g., based on the service processor embodiments) is combined with simplified activation techniques described herein so that service processor enabled devices can be shipped with pre-activated accounts (temporary or permanent), or can obtain activated account status in an automated manner that is convenient and efficient for the user or device owner. In some embodiments, the service processor embodiments in combination with the manufacturing and supply chain activation and provisioning apparatus described elsewhere provide various approaches for pre-activated service processor enabled devices. In some embodiments, the service processor embodiments in combination with the activation server variants discussed above provide various approaches for over the air or over the network simplified post-sale account activation for service processor enabled devices. These embodiments can also be used for ambient services given that as discussed herein the service processor has capability to implement service profile policies for deep control of ambient service activity control.

[0620] As discussed herein, in some embodiments for activation, the network AAA (or other network function) either recognizes one or more aspects of a pre-activated device credentials and routes the pre-activated device communication to an activation server that is appropriate for that device (routing information either derived through look up of the credential aspect or by obtaining the required information directly from the credential itself), or the AAA (or other network function) does not recognize the credentials and routes the device communication to an activation server for unrecognized device credentials. In either case, in some embodiments, one or more of the credential aspects can then be used to perform a secondary determination of what provisioning and/or activation sequence to perform in association with the device, or which activation server sequence the device should be directed to. For example, one or more device credential aspects can be read and used as a cross-reference to determine a routing for the device communication (or the information required for routing can be in the device credential information itself) so that the device can be routed to the appropriate activation server sequence.

[0621] In some embodiments, an activation server sequence can be determined at least in part by using a browser server or a portal (e.g., http server, https server, WAP server or another standard or custom protocol server for a browser, embedded or automated browser or a portal client in the device). In some embodiments, the browser server is an http or https server. The pre-activated device communication can be routed to the https server in a manner similar to that described above, and the server can read the information embedded in the https communication to determine the device credential information required to initiate the correct provisioning completion and/or activation sequences. For example, the https header information, tokens, cookies or other secure information communicated over https from a secure embedded client on the device (or user) can either provide the activation server with the information required to perform the cross-reference to an appropriate provisioning and/or activation sequence, or the https embedded information or the embedded client (or user) information can instruct the activation server on which services the device is to be provisioned and/or activated on and any necessary device or user information (e.g., device owner and/or billing information) can be exchanged, or the device might be provisioned and/or activated first on a free ambient service with temporary or permanent credentials or account.

[0622] In some embodiments, the service processor can be combined with the pre-provisioning and pre-activation techniques described above to create an ambient service solution that will work on roaming networks in which the central provider or VSP has no control or minimal control over the network elements. For example, the device includes a service processor pre-programmed for ambient service activity control as discussed herein, and the device credentials and other settings are pre-provisioned and pre-activated for the central provider network, all of which is described in numerous embodiments disclosed herein. Provided that the service provider has a roaming agreement with other service providers, or provided that the device may gain access to the roaming network, when the device is roaming it will be capable of ambient connectivity with bill by account functionality and all the other features of ambient. Furthermore, as also discussed herein, the ambient service activity control policies can be different for different roaming networks to accommodate the varying network costs and performance. Also, for example, it would be permissible to sign up for initial services or additional upgrade services with the central provider while roaming on the roaming partner network. One of ordinary skill in the art will appreciate that this also allows for creating a VSP or MVNO for the purpose of creating a clearing house for central provider service activations according to geography or user choice. By using a global multi-mode modem module, and maintaining service agreements with a multitude of carriers, the MVNO or VSP can provide consistent ambient services across multiple carriers and multiple geographies while still maintaining a good degree of cost control. Using bill by account capabilities, it is also possible to have an activation agreement where a roaming service provider agrees to refund the cost of ambient roaming. From the ambient service platform, the VSP or MVNO can then provide service purchase options to the user based on the carrier networks available to the device, or the VSP or MVNO can broker the user off to any of the carriers by activating the device onto the carriers main central provider service.

[0623] Accordingly, these embodiments provide flexible capabilities for activating a device or group of devices with a broad range of service profiles and service plans by simply programming the device with the proper credentials at some time during manufacturing or distribution, or simply programming a database associated with the network so that a portion of the device credentials can be used to look up the desired service profile and service plan. For example, various activation embodiments described herein are highly convenient for the end user and need not, in many cases, involve any human intervention.

[0624] The service processor 115, service controller 122, policy implementation, and/or profile implementation, and various embodiments disclosed herein are applicable to conventional communication products as well as machine to machine applications. For example, if the machine to machine device includes a service processor 115 with an activated account, then the service profile settings can be optimized for machine communications to provide only the limited access required to support the particular machine to machine application. This allows for cost optimized access services and prevents the machine to machine device or access modem from being misappropriated and used for some other service access than that intended. For example, by programming the machine to machine communications device at time of manufacture or during distribution with credentials or partial credentials that provide for automated provisioning and activation as described herein, the device can be automatically provisioned and activated on the service network with a service account when deployed, thus eliminating the need for costly or time consuming human intervention. The various embodiments that make it simpler to design, manufacture, test and deploy devices may also be equally applied to machine-to-machine devices. These embodiments include the service processor 115, developer's kit, and the automated provisioning and activation management tools among others. Also, the service analysis and test tools and the virtual service provider embodiments can also be applied to machine-to-machine applications.

User Interfaces

[0625] FIG. 58 illustrates a representative generic UI arrangement 10220 including a display of service plan and/or service plan bundle information in the partitions 10214 of the partition area 10206 of the UI 101. Three different partitions 10214 include information on three different service plan categories 10222 available to and/or subscribed to and/or accessible to the user of the mobile wireless communication device 100. Information displayed includes a service plan category 10222 and a status 10224 for the service plan category 10222. Representative service plan categories 10222 include voice services, message services, data services, and application specific services. Representative status 10224 information includes a summary of service plans subscribed to, a number of distinct service plans of the service plan category 10222 subscribed to, specific service plans available, etc. In some embodiments, the status 10224 indicates that no service plans of a particular service plan category 10222 type are currently subscribed to. As illustrated in FIG. 58, in some embodiments, an alert 10226 is provided in addition to the status 10224 information for a service plan category 10222. In some embodiments, the alert 10226 provides the user of the mobile wireless communication device 100 with an indication of a change (or an impending change) in the status 10224 of one or more service plans in the service plan category 10222. In some embodiments, the alert 10226 also provides other information in a summary but easily understood form that can prompt the user of the mobile wireless communication device 100 to select to obtain additional information for the particular service plan category 10222 with which the alert 10226 is associated.

[0626] FIG. 59 illustrates a representative generic UI arrangement 10230 including a banner area 10232 between the secondary area 10212 and the partition areas 10206. In some embodiments, the banner area 10232 can be positioned anywhere on the UI 101 of the mobile wireless communication device. In some embodiments, the banner area can be placed temporarily over another area of the UI 101, e.g., for a limited time. In some embodiments, the banner area 10232 can provide one or more service plan promotions or advertisements for service plans, service plan bundles and/or features of service plans or service plan bundles available to the user of the mobile wireless communication device 100. In some embodiments, the banner area 10232 can provide a scrolling advertisement area in which information provided by service providers and/or third parties are displayed to the user of the mobile wireless communication device 100. The generic UI arrangement 10230 illustrated in FIG. 59 includes four service plan categories 10222 arranged in a matrix of partitions. Adjacent to the partition area that includes the service plan categories 10222, in some embodiments, a set of featured service plans 10234 (and/or service plan bundles) can be displayed. In some embodiments, information displayed for featured service plans 10234 is provided by service providers or by third parties with whom the featured service plans 10234 are associated.

[0627] FIG. 60 illustrates a representative generic UI arrangement 10240 including a set of service plans 10244 (or service plan bundles) for a particular selected sub-category 10246 within a particular category. A selection area 10242 includes several different sub-categories that can be individually selected and beneath which can be displayed available service plans 10244 for the selected sub-category 10246. The number of sub-categories 10246 available can be more than can be displayed simultaneously within the selection area 10242 of the UI 101, and the selection area can be scrollable in one or more directions to view additional sub-categories 10246. The arrangement 10240 illustrated in FIG. 60 can provide the user of the mobile wireless communication device 100 access to numerous different service plans (or service plan bundles) from which to select for additional information, review and subscription. Selecting one of the service plans 10244, the user of the mobile wireless communication device 100 can access additional information as shown in FIG. 61.

[0628] FIG. 61 illustrates a representative generic UI arrangement 10250 including information about a particular service plan (or service plan bundle). An identifier for the service plan (e.g., a service plan name) can be displayed in the secondary area 10212. The service plan can be a service plan 10244 for a particular service plan category selected from the UI arrangement 10240 shown in FIG. 60 or from a featured service plan 10234 selected from the UI arrangement 10230 shown in FIG. 59. Several partition areas 10206 can provide a narrative description of the service plan 10234/10244, specific parameters that define the service plan 10234/10244, and key features of the selected service plan 10234/10244. In addition, one or more applications 10254 that can be associated with or applicable to the service plan 10234/10244 can also be displayed. The selection area 10242 can provide one or more actions 10252 that the user of the mobile wireless communication device 100 can choose for the selected service plan 10234/10244. In some embodiments, actions 10252 include a selection to choose to subscribe to the selected service plan 10234/10244. Actions 10252 can also include requests for additional information, requests to modify (if possible) the service plan 10234/10244 and requests to decline the service plan 10234/10244. Actions 10252 in the selection area 10242 can also relate to navigation among service plans 10234/10244 for a particular service plan category 10222 (e.g., “next” plan, “previous” plan).

[0629] FIG. 62 illustrates a representative generic UI arrangement 10260 including information about several service plans or service plan bundles to which a user of the mobile wireless communication device 100 can be subscribed. The different service plans (labeled Plans A, B, and C) in the partitions 10214 of the partition area 10206 can represent a service plan within a single category of service plans (e.g., voice, messaging or data). The service plans illustrated can also represent service plans for individual applications or access to particular services (e.g., Facebook, Yahoo, Netflix, Amazon, etc.). Service plan bundles can also be displayed and can include multiple service plans from different service plan categories. As illustrated in the selection area 10242, a user of the mobile wireless communication device 100 can select to see service plans or service plan bundles that are active, i.e., currently subscribed to, or expired, i.e., previously subscribed to. The user can also select “match” in the selection area 10242 to view service plans or service plan bundles that can correspond to services to which the user of the mobile wireless communication device 100 can likely be interested in subscribing to. Service plans or service plan bundles can be matched based on numerous criteria, including but not limited to current service usage, previous service usage, search history, responses to interview questions, or other criteria that can gauge analytically a user's potential interest in features provided by various service plans or service plan bundles.

[0630] For a displayed service plan or service plan bundle, a minimal amount of summary information can be provided in the partition 10214. Important information can be overlaid on the summary information, e.g., a usage indication 10262 as shown for “Plan B” or an alert indication 10226 as shown for “Plan C.” The usage indication 10262 can provide a basic view of an amount of service usage already used in a current accounting time period for the service plan or service plan bundle. The usage indication 10262 can also provide a basic view of an amount of service usage remaining in the current accounting time period for the service plan or service plan bundle. The alert indication 10262 can highlight a service plan or service plan bundle that requires attention from the user of the mobile wireless communication device 100, e.g., an impending expiration of the service plan or service plan bundle, or a service usage rate that can overrun the current allocation for service usage in the current accounting time period.

[0631] FIG. 63 illustrates a representative generic UI arrangement 10270 including information about several mobile wireless communication devices associated with one or more device groups for the user of the mobile wireless communication device 100. Each of the mobile wireless communication devices in the one or more device groups can be summarized in a partition 10214 of the partition area 10206. Additional information, e.g., usage information 10262 and/or alert notifications 10226 can be provided in, on, near to, or overlaid on the summary information of the partition 10214 for the mobile wireless communication device 100. Usage information 10262 can include consumed and/or available service usage information for one or more service plans and/or service plan bundles to which the particular mobile wireless communication device 100 subscribes. In some embodiments, service plans or service plan bundles can be shared among multiple mobile wireless communication devices 100, and the usage information 10262 can represent combined service usage information for a shared service plan or service plan bundle of a device group and/or individual service usage information available to the particular mobile wireless communication device 100. Alert notifications 10226 can indicate to the user of the mobile wireless communication device critical information that can require the user's attention.

[0632] FIG. 64 illustrates a representative UI arrangement 10280 including information for “Help” to provide to the user of the mobile wireless communication device 100. Indicia 10202, e.g., as provided for by an operating system on the mobile wireless communication device 100, are displayed in the top area 10205. Additional indicia, e.g., the logo 10216 that can be customized for a particular service provider, are displayed in the secondary area 10212. Selectable buttons 10284 can be included in both the secondary area 10212 and in the bottom area 10208. Selectable topics 10282 related to “Help” can be arrayed within the partition area 10206. The user of the mobile wireless communication device 100 can access this representative UI arrangement 10280 by selecting the “?” button in the secondary area (or by a number of other ways). The bottom area 10208 can include a number of selectable buttons 10284 that can provide additional information, e.g., by expanding the bottom area 10208 using the vertical ellipsis illustrated. The selectable buttons 10284 can also include navigation features such as a “return” button, a “home” button, and direct access to select applications.

[0633] FIG. 65 illustrates a representative UI arrangement 10290 including information for “Contact Support” to provide to the user of the mobile wireless communications device 100. The partition area 10206 can include a set of selectable responses 10282 that can enable messaging and/or contacting appropriate entities to provide support to the user of the mobile wireless communication device 100.

[0634] FIG. 66 illustrates a representative summary chart 10300 of a set of UI screens through which a user of the mobile wireless communication device 100 can navigate. The summary chart 10300 as shown is representative only and not intended to be limiting on the number of different screens and topics available through the UI 101 of the mobile wireless communication device 100. When the mobile wireless communication device 100 is provisioned with one or more service plans or service plan bundles, a home screen can provide a base from which more detailed information on services available to and/or devices associated with the mobile wireless communication device 100 can be retrieved. The home screen can provide direct access through the UI 101 to a summary of service plans, service plan bundles, devices, and accounts for the mobile wireless communication device 100. The home screen can also provide access to a “Store” of additional service plans and service plan bundles that are available to the mobile wireless communication device 100. In addition, “Help” information and “Settings” information can be accessed directly from the “Home” screen.

[0635] From a summary screen for “Plans,” “Devices,” “Accounts,” or “Store,” the user of the mobile wireless communication device 100 can view additional details (as illustrated by the “View” boxes). The user of the mobile wireless communication device 100 can also manage service plans, service plan bundles, individual mobile wireless communication devices 100, particular accounts associated with the mobile wireless communication device 100 (or other mobile wireless communication devices 100) and shop for additional services and products. Access to manage or purchase can include additional layers of security, e.g., password protected, as indicated by the asterisk “*” in FIG. 66.

[0636] FIG. 67 illustrates a representative “Home” screen 10310 that can be presented through the UI 101 of the mobile wireless communication device 100. As shown in FIG. 67, three categories 10222 of service plans can be explored. The mobile wireless communication device 100 can be not associated with any particular service plans or service plan bundles, as indicated by the status 10224 for each of the three categories 10222 illustrated in FIG. 67. Service plans in one or more of the categories, e.g., a “Voice” service plan, a “Text” messaging service plan, or a “Internet” data access service plan can be discovered, researched, reviewed and/or added to the mobile wireless communication device 100.

[0637] FIG. 68 illustrates another representative “Home” screen 10320 that can be presented through the UI 101 of the mobile wireless communication device 100. In some embodiments, the “Home” screen 10320 is reached by the user of the mobile wireless communication device 100 selecting an icon for a service plan management application through the UI 101 of the mobile wireless communication device 100. Four different partitions 10214 can provide access for the user to subscribed service plans and/or service plan bundles (“Plans”), associated mobile wireless communication devices (“Devices”), specific account information (“Account”) and a store for viewing and purchasing additional service plans, service plan bundles and service plan supplements (“Add-on Plans”). Service plans and service plan bundles presented through the UI 101 can include a variety of “base” service plans or “base” service plan bundles, at least one to which the user of the mobile wireless communication device 100 can subscribe. Service plans and service plan bundles can also include service plans that can be shared among multiple mobile wireless communication devices 100. Service plans and service plan bundles can also include “customizable” service plans and service plan bundles that can be tailored to suit the user of the mobile wireless communication device 100. Service plan supplements can be appended to one or more subscribed to service plans and/or service plan bundles. Supplemental service plans can provide access to specific services. Supplemental service plans can also provide for use of specific applications. Supplemental service plans can also provide for one time use or for recurring usage.

[0638] FIG. 69 illustrates another representative “Home” screen 10325 that can be presented through the UI 101 of the mobile wireless communication device 100, similar to the “Home” screen 10320 shown in FIG. 68. The screen 10325 in FIG. 69 replaces the “Add-On Plans” partition 10214 with a “Store” partition 10214. In some embodiments, the “Store” partition provides access a variety of recurring and one-time service plans and service plan bundles to which the user of the mobile wireless communication device 100 can subscribe. The screen 10325 also includes an optionally displayed notification message indicating that the user of the mobile wireless communication device 100 has not received any recent alerts.

[0639] FIG. 70 illustrates another representative “Home” screen 10330 that can be presented through the UI 101 of the mobile wireless communication device 100. The four partitions 10214 can provide access for the user of the mobile wireless communication device 100 to service plans and service plan bundles (“Plans & Sharing”), associated mobile wireless communication devices (“Lines & Devices”), specific account information (“Account”) and a set of help screens and/or customer support (“Help”). In some embodiments, the mobile wireless communication device 100 is associated with a particular “line” (e.g., a “phone number” through which communication can be sent and received and associated for accounting.) In some embodiments, the mobile wireless communication device 100 is associated with multiple lines. In some embodiments, multiple mobile wireless communication devices 100 are associated with a particular line. Management of multiple mobile wireless communication devices 100 and associated lines can be accessed through the “Lines & Devices” partition 10214. In some embodiments, the mobile wireless communication device 100 can share and/or assign a portion (including all) of a service plan or service plan bundle among one or more other mobile wireless communication devices 100. In some embodiments, access to service plans and service plan bundles available to and/or subscribed to and/or accessible by the mobile wireless communication device can be reached through the “Plans & Sharing” partition 10214. In some embodiments, sharing and/or assignment of service plans and service plan bundles can also be reached through the “Plans & Sharing” partition 10214.

[0640] Access to select information through the UI 101 of the mobile wireless communication device 100 can be restricted for privacy and security reasons. For example, access to account information, or access to purchase service plans or service plan bundles, or access to share service plans or service plan bundles can require use of a password. FIG. 71 illustrates a representative UI screen 240 through which an account password can be entered to provide the user of the mobile wireless communication device 100 access to the restricted information.

[0641] FIG. 72 illustrates a representative “Home” screen 10350 in which the bottom area 10208 of the “Home” screen 10320 is expanded by selecting the vertical ellipsis to reveal additional buttons. The additional buttons illustrated in the bottom area 10208 of the “Home” screen 10350 can include access to alert notifications (“Recent Alerts”), access to configuration settings (“Settings”) for the mobile wireless communication device, and access to “Help.” The expandable bottom area 10208 can provide an area for additional useful buttons without cluttering the “Home” screen 10350 with too much information simultaneously. The expandable bottom area 10208 can be included as part of other representative screens of the UI 101 on the mobile wireless communication device 100 and need not be limited to the “Home” screen 10350 illustrated in FIGS. 68 and 72. (For example, FIGS. 64 and 65 also include the expandable bottom area 10208.)

[0642] FIGS. 73, 74, 75, and 76 illustrate representative screens that may be presented through the UI 101 of the mobile wireless communication device 100 to the user when selecting the “Plans” partition 10214 of FIGS. 68 and 72 and/or the “Plans & Sharing” partition 10214 of FIG. 70. A set of service plans or service plan bundles may be presented to the user through the UI 101 of the mobile wireless communication device 100 and may provide information about the set of service plans or service plan bundles organized into a number of parallel “tabs.” The tabs can present different information about service plans and service plan bundles to the user of the mobile wireless communication device 100. In some embodiments, the user can review service plans or service plan bundles subscribed to presently as well as previously subscribed to service plans or service plan bundles. In some embodiments, the user can manage subscription to and sharing of service plans or service plan bundles through one or more of the presented screens. In some embodiments, the user can track service usage of one or more of the service plans or service plan bundles. In some embodiments, the user can view a service usage history for one or more presently subscribed to or previously subscribed to service plans or service plan bundles.

[0643] FIG. 73 illustrates a representative screen 10400 that provides information to manage service plans for the mobile wireless communication device 100. The service plan management screen 10400 shown can be accessed by selecting the “Plans” partition 10214 of FIGS. 68 and 72. Equivalent screens can also be reached by selecting the “Plans & Sharing” partition 10214 of FIG. 70. The secondary area 10212 of screen 10400 includes several different “tabs” (of which a “Manage” tab and a “Track” tab are visible, while additional tabs can also be available, e.g., by scrolling to view the additional tabs.) The “Manage” tab of the “Plans” screen can provide a summary of service plans or service plan bundles available to, subscribed to, or accessible by the user of the mobile wireless communication device 100. The service plans or service plan bundles can be organized into one or more different groups according to relevant characteristics of the service plans or service plan bundles. For example, a base service plan bundle can include a set of service plans that provide services to which the user of the mobile wireless communication device 100 subscribes for a specified repeated time period. The base service plan bundle can include several individual service plans, such as a voice service plan with access to voice communication for a number of minutes each time period. The base service plan bundle can also include a messaging service plan providing a capability to receive and transmit a number of messages each time period. (Messages can be text messages as illustrated, or more generally can be messages of one or more media types, e.g., audio messages, picture messages, video messages, and multimedia messages.) The base service plan bundle can also include a quantity of data units (e.g., 260 MB as shown) that can be transmitted and received through the wireless network for one or more applications or operating system services. The mobile wireless communication device 100 can also include a number of additional service plans or service plan bundles that apply for a specified time period, e.g., a monthly pass to access an Internet site or service. The mobile wireless communication device 100 can also include a number of additional service plans or service plan bundles that apply for a specified usage, e.g., a single use service plan to download and view a movie.

[0644] As shown in FIG. 73, a summary of current service usage for several different service plans of a base service plan bundle can be shown on the “Manage” screen 10400 as well as accumulated service usage charges for each respective service plan included in the service plan bundle. Selecting an arrow within a specific service plan area can access additional detailed information about the specific service plan. The user of the mobile wireless communication device 100 can also access screens by which the base service plan bundle can be changed by selecting a change icon. Supplemental service plans, e.g., monthly passes and single use service plans, can be added to the base service plan bundle by the user of the mobile wireless communication device 100 by selecting the add icon. The user of the mobile wireless communication device 100 can also select a service plan bundle (or a constituent service plan, or a stand-alone service plan) to share with one or more other wireless communication devices 100.

[0645] FIG. 74 illustrates a representative screen 10410 that provides information to track service usage for the base service plan bundle. A user of the mobile wireless communication device 100, in some embodiments, may access the screen 10410 to track service plan usage by selecting the “Track” tab of screen 10400 or screen 10410. A similar screen may be provided for information about any of the service plans or service plan bundles to which the user of the mobile wireless communication device 100 can use. Additional details of usage for a specific service plan, or for a service plan bundle, can be accessed by selecting the service plan or service plan bundle through the UI 101 of the mobile wireless communication device 100. The service usage details can include a representation of the amount of service usage consumed and a remaining (and/or total) allocation for each service plan (or service plan bundle). As shown in FIG. 74, the base service plan bundle includes an allocation of 131 minutes for a voice service plan of the base service plan bundle, an allocation of 391 text messages for a messaging service plan of the base service plan bundle, and an allocation of 260 Mbytes for a data service plan of the base service plan bundle. For each of the service plans illustrated, none of the allocation to the service plans has been used. As service usage occurs, an up-to-date value for service usage consumption can be displayed. In some embodiments, one or more device agents in the mobile wireless communication device 100 can determine the service usage consumption. In some embodiments, one or more network elements of one or more wireless networks, through which the mobile wireless communication device 100 can communicate, can determine the service usage consumption. In some embodiments, both device agents in the mobile wireless communication device 100 and network elements can determine the service usage consumption. In some embodiments, progress bars illustrate in real time (or near real time) actual service usage consumption for service plans and/or service plan bundles. In some embodiments, a finer breakdown of service usage for a service plan is presented. In some embodiments, a summary of service usage for certain types of service activities is presented. In some embodiments, the summary of service usage spans multiple service plans.

[0646] FIG. 75 illustrates another representative screen 425 for tracking service usage of service plans and service plan bundles subscribed to by a user of the mobile wireless communication device 100. Screen 425 illustrates that the base service plan bundle includes two constituent service plans, a voice service plan having 150 minutes available in a subscription time period of which 4 minutes have been used, and a text messaging service plan having 450 text messages available in a subscription time period of which 5 text messages have been used. For the screen 425 shown in FIG. 75, the user of the mobile wireless communication device 100 also subscribes to a monthly Facebook service plan with unlimited access to Facebook and a single use Internet data access service plan having 125 MB available of which 8 MB has been used. In some embodiments, additional information for each of the subscribed to service plans and service plan bundles, including individual service plans within base service plan bundles, can be selected to determine additional detailed service usage information for the particular service plan or service plan bundle selected. In some embodiments, the user can display the detailed information of the particular service plan or service plan bundle on the UI 101 of the mobile wireless communication device 100 by selecting the “right arrow” displayed for the particular service plan or service plan bundle.

[0647] FIG. 76 illustrates a representative screen 10414 that provides detailed service usage information for the single use “Internet 125” data access service plan shown in on the screen 10412 of FIG. 75. In some embodiments, the detailed service usage information provides a breakdown of the service usage for the time period of the particular service plan or service plan bundle according to different appropriate sub-categories. In the representative screen 10414, the service usage detail for the “Internet” access plan provide a breakdown according to several different specific applications, namely for a YouTube application, a Maps application, an Email application, a Gallery application, and a summary for “All Other Applications.” In some embodiments, the detailed breakdown is displayed according to one or more other criteria, e.g., websites, network addresses, application type, time period, geographic location, or any other sub-categorization that can be useful to the user of the mobile wireless communication device 100 to track or analyze service usage. In some embodiments, the detailed breakdown provides service usage amounts for each sub-category. In some embodiments, the detailed breakdown provides a percentage of total service usage for each sub-category.

[0648] In some embodiments, notification messages are displayed on the UI 101 of the mobile wireless communication device 100 in response to alerts. In some embodiments, notification messages are triggered based on service usage for one or more service plans or service plan bundles. In some embodiments, a service usage notification is displayed when service usage for a particular service plan or a service plan bundle reaches a specified level, e.g., at 60%, 80%, and/or 100% of available service usage. FIG. 77 illustrates a representative screen 10415 that provides summary service usage tracking information for a set of service plans for the mobile wireless communication device 100. Screen 10415 illustrates a single use Internet data access plan labeled “Internet 25” having 20 MB of 25 MB available service usage consumed. In some embodiments, a notification message is displayed to alert the user that 80% of available service usage for the particular service plan has been consumed.

[0649] FIG. 78 illustrates a representative screen 10416 that provides a notification message alerting the user of the mobile wireless communication device 100 that a particular service plan has reached 80% service usage. In some embodiments, the notification message provides options for the user to purchase additional service usage. In some embodiments, the presented options are targeted to the service usage based on the particular service plan. In some embodiments, the notification message provides service plans based on a previous service usage, a present service usage, and/or a service usage history. Screen 10416 illustrates a notification message alerting the user of the option to adjust an allowance for a base service plan bundle, e.g., by adjusting or adding to a service plan included within a base service plan bundle. Screen 319 also provides the user an opportunity to add on specific targeted service plans and/or service plan bundles. In some embodiments, the notification message includes service offers that “up-sell” to the user service plans or service plan bundles having higher service usage capacity and higher service usage cost. The “up-sell” notification message provides a service provider opportunity to increase revenue targeted specifically to users that require the increased capacity service plans and service plan bundles, e.g., based on tracking of service usage of service plans and service plan bundles for the mobile wireless communication device 100. Screen 10416 includes two specific add on data access service plans, each having a different service usage capacity and service usage cost. In addition, screen 10416 includes selectable buttons for adjusting the base service plan bundle and to view additional add-on service plans.

[0650] In some embodiments, a service provider can sponsor a set of service plans and/or service plan bundles on the mobile wireless communication device 100. In some embodiments, a service plan or service plan bundle in the set of sponsored service plans and/or service plan bundles can be available for a pre-determined period of time and provide a limited introduction to a service. In some embodiments, the set of sponsored service plans and/or service plan bundles can be automatically subscribed to during an activation process for the mobile wireless communication device 100. In some embodiments, the set of sponsored service plans and/or service plan bundles can be pre-loaded into the mobile wireless communication device 100. In some embodiments, applications associated with the set of sponsored service plans and/or service plan bundles can be pre-loaded into the mobile wireless communication device 100 during a manufacturing process. In some embodiments, one or more sponsored service plans and/or service plan bundles can be associated with one or more applications in the mobile wireless communication device. In some embodiments, association of the one or more applications with the sponsored service plans and/or service plan bundles can occur during activation of the mobile wireless communication device 100.

[0651] FIG. 79 illustrates a representative screen 10417 displaying a number of applications loaded into the mobile wireless communication device 100. In some embodiments, one or more of the applications displayed are pre-loaded into the mobile wireless communication device 100. In some embodiments, one or more of the applications displayed are loaded into the mobile wireless communication device 100 during an activation process for the mobile wireless communication device. In some embodiments, the pre-loaded or activation loaded applications can offer a sponsored service plan or service plan bundle for access to services using the application.

[0652] FIG. 80 illustrates a representative screen 10418 that provides tracking information for several application-specific service plans on the mobile wireless communication device 100. In some embodiments, one or more of the application specific service plans illustrated by screen 10418 can be pre-loaded or loaded during activation to the mobile wireless communication device 100. In some embodiments, a service plan associated with an application displayed on screen 10418 provides a service associated with the application for a limited time. In some embodiments, a service plan associated with an application displayed on screen 10418 can be “upgraded” from a sponsored service plan to a subscription service plan. In some embodiments, the sponsored service plan provides for limited service usage, e.g., access to only a limited set of content, network destinations, limited for a period of time, etc., while the subscription service plan provides for more extensive service usage. In some embodiments, a service plan associated with an application displayed on screen 10418 can provide a limited amount of service usage. In some embodiments, a notification message can be displayed to a user of the mobile wireless device 100 through the UI 101 offering an “upgrade” to a subscription service plan when a pre-determined level of service usage for a sponsored service plan occurs.

[0653] FIG. 81 illustrates a representative screen 10420 that provides information for several applications available to the user of the mobile wireless communication device 100. Selecting the “Connect” tab of screen 10410 or screen 10420 can access the displayed screen 10420. The user of the mobile wireless communication device 100 can access one of the available applications by selecting one of the icons displayed on screen 10420, e.g., establishing a “voice” connection by selecting the “phone” icon to use a “phone” application.

[0654] FIG. 82 illustrates a representative screen 10430 that provides a summary of a history of service usage for various service plans to which the user of the mobile wireless communication device is presently subscribed to (and/or previously subscribed to) during a particular time period. As shown in FIG. 82, a history of service usage for six different service plans are shown. A “usage” indication (e.g., as shown by the embedded bar graphs in each service plan) can be displayed for each service plan along with a summary of service usage amounts and accumulated service usage cost. An allocation for each service plan for the particular time period can also be displayed. The graphical bar displays can represent an amount of service usage consumed out of a total allocation for the service plan. As illustrated by FIG. 82, the user of the mobile wireless communication device 100 can retrieve easily a summary of service usage for multiple service plans, including both current and past subscribed to service plans.

[0655] Three different voice service plans are illustrated in the screen 10430, including a 360 minute talk service plan of which 45 minutes have been consumed, and two talk service plans that have been completely consumed (Talk 30 and Talk 400). A 1000 text messaging service plan is also illustrated with only 9 text messages consumed. For a 450 MB data access service plan, a total of 320 MB are shown as consumed. Screen 10430 also illustrates a summary for a single use application specific plan that provides access for a limited time period (one day) to a particular application (Gmail). As indicated, the single use application specific Gmail plan has been consumed a number of days previously. Service plan cost information is also provided for each service plan. This service plan cost information can represent the total subscription cost or an accumulated cost for the applicable time period. Other service plan cost accounting breakdowns and usages can be determined and also displayed. Selecting an arrow button associated with a particular service plan can access details for the particular service plan.

[0656] FIG. 83 illustrates a representative screen 10440 that provides details of service usage for a selected service plan (the Data 450 plan shown in FIG. 82). The user of the mobile wireless communication device 100 can access the detailed service usage history by selecting the particular service plan from screen 10430. The service usage history screen 10440 can provide a summary of the service plan usage, relevant time periods for when service usage occurred, applicable time periods for when the service plan is/was valid. The service usage history screen 440 can also provide a breakdown of service usage and/or service usage cost by users and/or mobile wireless communication devices 100 for a service plan shared among multiple users and/or multiple mobile wireless communication devices 100. The service usage history screen 10440 can also provide a summary of service usage costs for the service plan.

[0657] FIG. 84 illustrates a representative screen 10450 that provides a summary of notification alerts provided to the user of the mobile wireless communication device 100. In some embodiments, the user of the mobile wireless communication device 100, accesses the notification alert summary screen 10450 by selecting the recent alerts button displayed in the expanded bottom area 10208 (as illustrated in FIG. 72). The user of the mobile wireless communication device can view message contents for each notification alert as well as a time and date associated with the particular notification alert. In some embodiments, settings for notification alerts can be accessed through the notification alert screen 10450 by selecting a “Notification Settings” button. In some embodiments, the displayed list of notification alerts can be cleared by selection a “Clear List” button.

[0658] FIG. 85 illustrates a representative overlay screen 10460 that provides the user of the mobile wireless communication device 100 multiple options for setting a time period over which notification alerts are retained. The notification history settings overlay can be accessed, in some embodiments, by selecting the “Notification Settings” button illustrated in FIG. 84.

Presenting Information about Voice, Messaging, and Data Services on Mobile Wireless Communication Devices

[0659] FIG. 3, as described above, illustrates the network management system 10601, in accordance with some embodiments, including device management system 170-1 to assist in defining locations of the UI 101 of the mobile wireless communication device 100 where one or more service launch objects are placed.

[0660] In general, a UI location management service provider entity utilizes the apparatus shown in FIG. 3 to establish a discovery level (explained below) for one or more “service launch objects” on the mobile wireless communication device 100 or on a group of mobile wireless communication devices 100 with UI placement (location) and notification messaging functions managed by a device based UI location manager agent 132-1, which is in turn managed by the device management system 170-1. The term “UI location management service provider” is sometimes used herein interchangeably with carrier, referring to a carrier of access services who has control of the UI location management apparatus. In some embodiments, the UI location management service provider is a network access carrier (e.g., a wireless network carrier such as Vodafone, Verizon, T-Mobile, Sprint, or AT&T, or a cable network carrier such as Comcast, etc.). In some embodiments, the UI location management service provider is a third party who provides the location services but does not control or own the access network assets (e.g., an application store or marketplace provider such as Apple or Android/Google, a search services entity such as Google or Bing, or a third-party UI location management entity, etc.). While it is often advantageous for a carrier or application store/marketplace provider to be the UI location management service provider, any entity that controls the UI location management apparatus shown in FIG. 3 controls the UI location management service and therefore controls the discovery level for one or more service launch objects on one or more mobile wireless communication devices in a device group.

[0661] “Service launch object discovery level” refers to the level of priority a service launch object (explained below) receives relative to gaining the attention of a user of the mobile wireless communication device 100 in order to encourage selection or launch of the service, content or application associated with the service launch object. A high discovery level generally implies a premium UI location for the service launch object (e.g., a prominent UI service launch partition, home screen, or permanent launcher bar). A high discovery level also generally implies highlighted service launch object icon features and/or prominent or frequent service launch object notification messages. A low discovery level implies less prominent service launch object UI location and service launch object notification messaging (e.g., location in the device application stable or perhaps even only on an application store/marketplace location, with perhaps no notification messaging or a one time notification message the first time the service launch object icon is displayed to the user).

[0662] A “service launch object” is an object on the UI 101 of the mobile wireless communication device 100 that the user can select (e.g., “click on,” “open,” etc.) to initiate a device service 138-1 (e.g., an application) or a network service 120-1. In some embodiments, selection of the service launch object initiates the service by launching an application that is associated with the service launch object, directing an application (such as a browser or portal application) to a particular network destination that is associated with the service launch object, opening a folder with one or more additional service launch object choices for the user to select from, providing the user with a notification regarding service status or service plan permissions for this service, providing the user with payment or service account configuration options to enable the service, and/or providing the user with means to download an application from the application download server 140-1 and launch the device service 138-1 or the network service 120-1. A service launch icon can be a graphic, a text string, a UI user entry field or any other means for the user to choose to activate a service launch object.

[0663] FIG. 67 illustrates an example of a home screen 10310 displayed on the user interface 101 of the mobile wireless communication device 100 (e.g., a tablet, smart phone, cell phone, or any other type of mobile wireless communication device 100). The screen 10310 of FIG. 67 is an example of a screen 310 that a user might see after he or she has purchased the mobile wireless communication device 100, but before he or she has purchased or otherwise acquired any service plans. FIG. 67 illustrates that the home screen 10310 contains various indicia 10202 related to the mobile wireless communication device 100. These indicia 10202 include the type of network to which the mobile wireless communication device 100 is connected (3G in FIG. 67), a signal strength (four bars shown in FIG. 67), a battery charge level, time, etc.

[0664] Below the top area 10204 of the screen presenting information about the mobile wireless communication device is a region that, in the example of FIG. 67, includes three categories 10222 of service plans the user is invited to purchase or otherwise acquire: “Voice,” “Text,” and “Internet.” In the example of FIG. 67, “Voice” refers to service plans providing voice, “Text” refers to service plans providing messaging (e.g., SMS, MMS), and “Internet” refers to service plans providing data services (e.g., access to the Internet). As would be appreciated by a person having ordinary skill in the art, other categories and category names are possible, and more or fewer categories can be displayed or presented. In some embodiments, the service provider may specify, through the SDC 135 or through the device management system 170-1, that the categories 10222 are color-coded, e.g., the voice portion of the screen may be red, the text portion of the screen may be green, and the Internet portion of the screen may be blue. The service provider may also specify, through the SDC 135 or through the device management system 170-1, the displayed icons and how, if at all, those icons change (e.g., as time passes, based on network state, based on type of network to which the mobile wireless communication device is connected, based on a state of the mobile wireless communication device, etc.).

[0665] Each of the “Voice,” “Text,” and “Internet” regions/icons shown in FIG. 67 is configured so that a user may view more information about the service plans in a category 10222 (e.g., information about service plans the user has purchased or otherwise acquired) by selecting one of the regions/icons, e.g., by tapping within the “Voice,” “Text,” or “Internet” areas of the display screen or by some other means, such as by using a voice command, a shortcut key, a key press, a button, etc. Several figures that will be presented later illustrate the types of information that a user may access by selecting one of the categories.

[0666] Below the three service plan categories shown in FIG. 67, in the bottom area 10208, are user-selectable icons that are configured to allow a user to view information about a user account, to view a catalog of services or service plans, and to view settings for the mobile wireless communication device 100.

[0667] In some embodiments, a user who attempts to place a phone call, send a text message, or access the Internet from the mobile wireless communication device 100 in the state shown in FIG. 67 (e.g., with no associated service plans) is informed that he or she cannot do so because the mobile wireless communication device 100 does not have (is not associated with) any service plan that accommodates the desired activity. In some embodiments, the notification is a message displayed on the user interface 101 screen, e.g., as a pop-up message or through a different screen. In some embodiments, the notification is an audible message. In some embodiments, the notification is an audible noise. In some embodiments, the notification is a vibration of the mobile wireless communication device. In some embodiments, the notification is configured by the service provider using the SDC 135 or using the device management system 170-1. In some embodiments, the content of the notification or a notification policy specifying how and when the notification should take place is obtained from a network element (e.g., by pull or push). In some embodiments, the content of the notification is stored locally on the mobile wireless communication device 100, and the service processor 115 or a device agent detects that the user is attempting a service activity for which there is no service plan, accesses the notification content, and presents the notification to the user.

[0668] FIG. 86 illustrates an embodiment of a screen 10470 that may be displayed when a user selects the “Catalogue” region of FIG. 67. In some embodiments, a catalog is displayed on screen 10470 providing information on service plans available for the mobile wireless communication device 100. In some embodiments, the catalog displayed includes a combination of one or more paid service plans, sponsored service plans, free service plans, featured service plans, service plan promotions, and targeted service plans. At the top of the catalog page/screen 10470 is an optional banner area that may be used, in some embodiments, to present information such as advertisements, promotions, marketing materials, or any other content. In some embodiments, the banner area displays content specified by a service provider using the SDC 135 or using the device management system 170-1. For example, a service provider could choose to display one or more advertisements in the banner area. FIG. 86 illustrates the banner area showing an advertisement for a voice plan with 2 hours of talk time, anywhere in the United States, for $2.49. The advertisement shown in FIG. 86 also indicates that the plan expires 1 month after purchase. In some embodiments, the content of the banner area is static, such as one advertisement or a collage comprising several advertisements; a service provider logo; or any other content. In some embodiments, the banner area displays content that changes based on one or more of: time of day, the passage of time, a network state (e.g., a level of congestion, etc.), a network type (e.g., Wi-Fi, cellular, roaming, etc.), geographic location of device, device state (e.g., the device is new, etc.), or any other criterion. For example, using the SDC 135 or using the device management system 170-1, a service provider or other party may specify a sequence of content for display in the banner area. In some embodiments, the banner area presents a “cover flow control” that a user can scroll through. In some embodiments, the user can earn credit against a service plan by viewing or scrolling through the content of the banner area. In some embodiments, some or all of the content of the banner area is obtained, either by the SDC 135 or by the device management system 170-1 or by the mobile wireless communication device 100, from an external source, such as, for example, an ad server. As will now be clear to a person having ordinary skill in the art in view of the disclosures herein, by using the SDC 135 or the device management system 170-1, the service provider can specify not only the features, ordering, and number of advertisements or content, but also how long each item of content appears in the banner area, and this flexibility leads to infinite possibilities to specify and manage the content of the banner area.

[0669] The embodiment of FIG. 86 shows that below the banner area of the catalog page are four user-selectable regions, labeled “Voice,” “Text,” “Internet,” and “Bundles.” These are the four categories of service plans offered by the service provider in the example embodiment of FIG. 86. As would be appreciated by a person having ordinary skill in the art, the number, labeling, and content of service plan categories may differ, and FIG. 86 simply presents an example. Another example of a possible category of service plans is Wi-Fi, e.g., a collection of available Wi-Fi hotspots. Additional figures, discussed below, will illustrate the information a user may access by selecting one of the plan category icons shown in FIG. 86.

[0670] Below the service plan category area of FIG. 86 is an area labeled “Featured Plans.” In some embodiments, using the SDC 135 or the device management system 170-1, a service provider, or a third party with access to at least a portion of the SDC 135 or the device management system 170-1, specifies one or more service plans that the service provider (or third party) wishes to promote, whether for the service provider's (third-party's) own benefit or as the result of a contract with a third party (e.g., a third party pays the service provider for a favorable placement of a service plan within the featured plans area). In the example of FIG. 86, the featured plan area contains three plans: Facebook for 1 hour for 10 cents, a 2-minute domestic calling plan for 10 cents, and a 10 MB data plan that expires in 24 hours for 25 cents. Using the SDC 135 or device management system 170-1, the service provider (or third party) can configure which plans appear in the featured plans area and the order in which the features plans are presented. Like the banner area, the content of the featured plans area may be static, or it may change based on a criterion or several criteria (e.g., based on one or more of a network state, a network type, a device state, a device type, a geographic location, etc.). For example, a service provider could use the SDC 135 or device management system 170-1 to specify that when the mobile wireless communication device 100 is a tablet, the featured plans will include e-readers, and the banner region will scroll through ten different plan, with each plan displayed for 5 seconds. As would be appreciated by a person having ordinary skill in the art, the featured plan area can contain service plans of the same types or of different types (e.g., one or more of voice, data, messaging, or any other conceivable plan type). It should now be clear in view of the disclosures herein that there are limitless possibilities for the content that may be displayed in the banner area.

[0671] FIG. 87 illustrates an example of a screen 10471 that might be displayed when a user selects the “Voice” area shown in FIG. 86. The example of FIG. 87 shows three voice service plans: a 2-minute domestic calling plan that costs 10 cents; a 15-minute domestic calling plan that costs 75 cents; and a 20-minute domestic calling plan that costs 80 cents. Although all of the voice service plans shown in FIG. 87 provide only for domestic calls, FIG. 87 is simply an example, and other voice service plans may provide for one or more of, for example, domestic calling, international calling, and voice over IP (VOIP) calling. FIG. 87 also shows two regions above the listing of voice service plans, labeled “Voice” and “Promo.” Using the SDC 135 or device management system 170-1, a service provider can configure not only user-paid service plans, but also promotional service plans, such as sponsored service plans (e.g., wherein the user's access is subsidized or entirely paid-for by a sponsor entity), which would appear when the user selects the “Promo” area of the display. The same sorts of configuration controls (e.g., number of service plans, order of display, whether static or dynamic, etc.) that can be used to control the content of the banner area can also be applied to control the presentation of the “Voice” and/or “Promo” service plans. In addition, other service plan categories can be established based on user preferences (e.g., based on content that the user accesses through the mobile wireless communication device or by entering information about the user's likes or preferences through the mobile wireless communication device). For example, there may be a category called “Suggested Plans,” in which are service plans that the user might want or like based on detected or entered user preferences.

[0672] FIG. 88 is an example of a screen 10472 that a user might see after selecting the 2-minute domestic calling plan shown in FIG. 87. FIG. 88 shows details of the 2-minute domestic calling plan, such as a description, an allowance, and the supported mobile wireless communication device applications.

[0673] FIG. 89 illustrates an example of a screen 473 that might be displayed when a user selects the “Text” area shown in FIG. 86. FIG. 89 shows three messaging service plans: a 2-message plan that costs 8 cents, a 500-message plan that costs $2, and a 5000-message plan that costs $5. The messaging service plans shown in FIG. 89 are simply examples; the messaging service plans that would actually be displayed are those configured by a service provider using the SDC 135 or device management system 170-1. Although FIG. 89 illustrates three text message service plans, plans within the “Text” category, in some embodiments, can also include both SMS and MMS plans.

[0674] FIG. 90 is an example of a detail screen 10474 that a user might see after selecting the 2-message text plan shown in FIG. 89. FIG. 90 shows details of the 2-message plan, such as a description, an allowance, and the supported mobile wireless communication device applications.

[0675] FIG. 91 illustrates an example of a screen 10475 that might be displayed when a user selects the “Internet” area shown in FIG. 86. In the embodiment of FIG. 91, the Internet service plans are displayed in categories that appear as user-selectable regions near the top of the screen 10475: “Social,” “General,” “News,” etc. In some embodiments, the particular categories, their order of display, and the service plans associated with them may be configured by a service provider or a third party using the SDC 135 or device management system 170-1. In FIG. 91, the “Social” area is highlighted, and the available plans are those that the service provider specified as “Social” plans. FIG. 91 shows five service plans available in the “Social” category: Facebook for 1 hour for 10 cents; Facebook for 24 hours for 25 cents; Twitter for 1 hour for 10 cents; Twitter for 24 hours for 25 cents; and YouTube for 1 hour, expiring in 1 day, for 25 cents.

[0676] FIG. 92 illustrates an example screen 10476 that might appear when a user selects the service plan labeled “Facebook for 1 hour for 10 cents” shown in FIG. 91. FIG. 92 shows details of the service plan, including a description, an allowance, and supported applications. In the example of FIG. 92, the service plan allows for one hour of Facebook access using the Facebook application and the Facebook Messenger application. Thus, as illustrated by FIG. 92, a service plan may be associated with more than one mobile wireless communication device application.

[0677] FIG. 92 contains a down arrow in the description field. FIG. 93 illustrates that when a user selects the down arrow, a full description appears. In the example of FIG. 93, the service provider has provided information about the applications that are associated with the service plan, and the service provider also warns the user about a fair usage policy applying, e.g., to give the service provider the ability to block a user's access if the user's use of the service plan is extremely high.

[0678] FIG. 94 illustrates a screen 10478 that might appear when a user selects the price area (“$0.10”) of FIG. 93. A new region labeled “Confirm” is shown in FIG. 94.

[0679] FIG. 95 illustrates a screen 10479 that might appear when a user selects the “Confirm” region of FIG. 94. The “Confirm” area changes to a symbol, such as a rotating circle, a progress bar, or any other content that indicates to the user that the purchase is in progress.

[0680] FIG. 96 illustrates a status screen 10480 that indicates a purchase of the Facebook for 1 hour plan is in progress. The screen 10480 of FIG. 96 may be accessed, for example, by a user swiping upward on the arrow that appears at the bottom of FIG. 67 while the purchase of FIG. 95 is in progress.

[0681] FIG. 97 illustrates a screen 10481 that might appear after the purchase of the Facebook for 1 hour plan has been purchased. The symbol/content that indicated to the user that the purchase was in progress has been replaced by the word “Purchased” so that the user knows the selected plan has been purchased.

[0682] FIG. 98 illustrates a status screen 10482 that provides notifications to the user. In the example of FIG. 98, the screen 10482 notifies the user that he or she has purchased two voice service plans (each of which is the same 2-minute domestic calling plan, thus giving the user two, 2-minute domestic calling plans) and the Facebook for 1 hour plan. The screen of FIG. 98 may be accessed, for example, by a user swiping upward on the arrow that appears at the bottom of FIG. 67.

[0683] Although the process of selecting and purchasing a service plan was explained in the context of an Internet plan (e.g., a Facebook for 1 hour plan), the same process can be used to enable a user to purchase a text service plan, a voice service plan, or a bundled service plan. As would be appreciated by a person having ordinary skill in the art, a bundled service plan is a service plan that includes more than one feature or type of service plan. For example, a bundled service plan might include a voice service plan, a text service plan, and an Internet service plan. As another example, a bundled service plan might include multiple Internet service plans. For example, a social network bundle service plan could include a Twitter service plan, a Facebook service plan, and a text service plan. The inventive concepts disclosed herein provide for a nearly limitless variety in service plans and service plan bundles, and the service plans shown are simply examples that are not meant to be limiting.

[0684] FIG. 99 illustrates an example of a home screen 10483 after a user has purchased one text service plan and two Internet service plans. The user can see from the home screen 10483 illustrated in FIG. 99 that he or she does not have any voice service plans, but that he or she has one text service plan that expires on Feb. 17, 2012, and that he or she has two Internet service plans, one of which expires on Jan. 24, 2012.

[0685] FIG. 100 illustrates an example of a home screen 10484 that warns a user that a service plan requires user attention. In FIG. 100, the user has no voice service plans, one text service plan, and two Internet service plans, and one of the Internet service plans requires the user's attention, as indicated by the text “1 plan requires your attention” and the triangular “warning” symbol. By selecting the “Internet” region/icon of the home screen 10484, the user can obtain additional information about the Internet service plan that requires user attention.

[0686] FIG. 101 illustrates an example of a home screen 10485 that warns a user that multiple service plans require user attention. In FIG. 101, the user has no voice service plans, two text messaging service plans, and three Internet service plans. As illustrated in FIG. 101, one of the text messaging service plans and one of the Internet service plans require the user's attention, as indicated by the text “1 plan requires your attention” and the triangular “warning” symbol shown in both the text messaging region/icon and in the Internet region/icon. By selecting the “Text” region/icon or the “Internet” region/icon of the home screen 10485, the user can obtain additional information about the test messaging service plan or the Internet service plan that requires the user's attention.

[0687] FIG. 102 illustrates an example of a screen 10486 that the user might access by selecting the “Internet” region/icon of the home screen shown in FIG. 101. The screen 10486 of FIG. 101 shows that the user has two Internet service plans: a 10 MB for 7 days usage Internet service plan, and a Pulse music service plan. FIG. 102 also shows a usage meter that indicates that the user has consumed 0.8 MB of the 10 MB allowed under the 10 MB for 7 days usage Internet service plan. FIG. 102 also illustrates that the user's Pulse music service plan requires attention, even though, according to the Pulse music usage meter, the user has not used that service plan.

[0688] FIG. 103 illustrates an example of a screen 10487 of information a user may access by selecting the Pulse music region of FIG. 102. FIG. 103 shows several details about the Pulse music service plan, including that the Pulse music service plan has a lifespan of 3 days, that it is a free service plan (e.g., a sponsored service plan) that provides for up to 30 MB of Pulse music for free, and that the user has not consumed any content associated with this service plan. The screen 10487 shown in FIG. 103 also indicates that the Pulse music service plan is about to expire, and it presents a “Catalog” button that the user may select to view the contents of the catalog (e.g., as shown in FIGS. 87, 88, 89, 90, 91, 92, 93, etc.). Although FIG. 103 illustrates only a “Catalog” button, other buttons can be provided. For example, recommended plans can be offered, where the recommendations may be based on an objective criterion (e.g., “We recommend that you buy this service plan, because it is being offered for half-price today”), based on the user's previous usage (e.g., “We recommend that you buy this service plan based on your previous usage”), or based on some other criterion (e.g., “We recommend that you buy this service plan because this is the most popular service plan among our subscribers”). In some embodiments, there is a “mini-menu” of service plans to pick so that the user can buy a new service quickly, without having to browse through many potential service plans.

[0689] FIG. 104 illustrates an example of a home screen 10488 that might appear when a user has one voice service plan, two text service plans, and two Internet service plans. In the example of FIG. 73, the home screen 10488 indicates that one of the text service plans and one of the Internet service plans require user attention.

[0690] FIG. 105 illustrates an example of a screen 10489 of information a user might access by selecting the voice plan area of FIG. 73. The screen 10489 in FIG. 105 provides information about the user's voice service plan and a service usage meter. FIG. 105 indicates that the user's voice service plan provides for 10 minutes of voice, of which the user has used 34 seconds.

[0691] FIG. 106 illustrates an example of a screen 10490 of additional information a user might access by selecting the voice service plan shown in FIG. 105. The screen 10490 shown in FIG. 106 indicates that the voice service plan provides for 10 minutes of voice, expiring after one month, and that the user paid $5.00 for the voice service plan. The screen in FIG. 106 also presents a service usage meter, where the user's service usage is rounded to the nearest minute. The service usage meter of FIG. 106 indicates that the user has used 1 minute of the 10 minutes allowed under the voice service plan.

[0692] FIG. 107 illustrates an example screen 10491 a user might access by selecting a field of FIG. 106, such as, for example, the service usage meter (counting bar) in the “Allowance” region (e.g., the arrow to the right of the bar suggests to the user that by selecting the counting bar, he or she can learn more). In the example of FIG. 107, the user can access information about his or her service usage of the voice service plan either in the form of a call log or by phone number. FIG. 107 illustrates an example of the information that might be displayed as a call log, and FIG. 108 illustrates an example of the information that might be displayed by phone number. In both FIGS. 107 and 108, the duration of each call is shown. It should be understood that the information may be presented in other ways, such as on a per-network basis (e.g., voice calls while roaming versus while on a home network, voice calls on Wi-Fi versus on a cellular network, etc.), time of day (e.g., voice calls during weekdays versus on weekends, etc.), or based on any other classification that can be used to distinguish between voice calls (e.g., long distance calls versus local calls, domestic calls versus international calls, premium-rate calls versus standard-rate calls, etc.).

[0693] FIG. 109 illustrates an example home screen 10493 for a user having one voice service plan, two text service plans, and two Internet service plans. In the example of FIG. 109, one service plan in each of the categories of voice, text, and Internet requires user attention.

[0694] FIG. 110 illustrates an example of a screen 10494 that a user may access by selecting the voice area of FIG. 109. The screen of FIG. 110 warns the user that he or she has used eight of the ten minutes of his or her 10-minute voice plan. The criteria for warning the user may be user-selected or set by a service provider (e.g., through the SDC 135 or device management system 170-1). If user-selected, the user's preferences regarding notifications and warnings may be set through the mobile wireless communication device 100 or any other means, such as a website or even through the SDC 135 or device management system 170-1, if the service provider has granted access to at least a portion of the SDC 135 or device management system 170-1. In the case of FIG. 110, either the user or service provider configured a notification trigger to warn the user when 8 of the 10 minutes of voice service have been used, and FIG. 110 illustrates the display of the warning.

[0695] FIG. 111 illustrates an example screen 10495 of information a user may access by selecting the “10 minutes of voice” area/icon of FIG. 110. In FIG. 111, the screen 10495 notifies the user that the voice service plan is nearing its usage limit, and that the user has used 8 of the 10 allowed minutes. The screen 10495 also presents a “Catalog” button that the user may select to view the contents of the catalog (e.g., as shown in FIGS. 87, 88, 89, 90, 91, 92, 93, etc.) and, for example, select another voice service plan.

[0696] In some embodiments, a user can determine service usage during a voice call, e.g., by viewing or otherwise accessing the service usage meter during the call. For example, in some embodiments, the user can tap the “Voice” region shown on the home screen (as shown in, e.g., FIG. 109) during a phone call to see the service usage meter incrementing during the call.

[0697] In some embodiments, the user receives an audible notification related to a service plan or usage of a service plan during a phone call. For example, in some embodiments, a user or a service provider establishes a service usage threshold, and the user receives an audible notification that the established threshold has been reached. The service usage threshold may be a number of minutes, a number of seconds, a cost, a percentage, or any other measure of usage. The notification may be any audible indicator, such as a tone, a bell, content of a sound file, a computer-generated voice, etc. In some embodiments, the notification is a vibration.

[0698] In some embodiments, the user receives a visual notification related to a service plan or usage of a service plan during a phone call. For example, in some embodiments, a user or a service provider establishes a service usage threshold, and the user receives a visual notification that the established threshold has been reached. The service usage threshold may be a number of minutes, a number of seconds, a cost, a percentage, or any other measure of service usage. The notification may be a text message, a pop-up, an e-mail, etc.

[0699] In some embodiments, the notification is audible/vibrating or visual based on the status of the mobile wireless communication device 100. For example, in some embodiments, the notification is audible or a vibration when the user is on a phone call with no connected devices such as a headset or a dock, and otherwise the notification is visual. In some embodiments, the form of the notification, or when or whether the notification occurs, can be configured by the user of the mobile wireless communication device 100. In some embodiments, the user configures the notifications through the user interface 101 of the mobile wireless communication device 100.

[0700] In some embodiments, in order to prevent the party on the other end of a voice connection from hearing the audible notification, a processor on the mobile wireless communication device 100 causes the microphone of the mobile wireless communication device 100 to be muted during the time that the audible notification is presented to the user of the mobile wireless communication device 100. In some embodiments, the microphone is muted when a user responds to the audible notification in an audible way, e.g., by pressing a dial pad button (which causes a DTMF tone).

[0701] FIG. 112 illustrates an example of a screen 10496 that a user may access by selecting the “Text” area of FIG. 109. The screen of FIG. 112 warns the user that he or she has used one of the two text messages included in the 2-message plan. The criteria for warning the user may be user-selected or set by a service provider (e.g., through the SDC 135 or device management system 170-1). If user-selected, the user's preferences regarding notifications and warnings may be set through the mobile wireless communication device 100 or any other means, such as a website or even through the SDC 135 or device management system 170-1, if the service provider has granted access to at least a portion of the SDC 135 or device management system 170-1. In the case of FIG. 112, either the user or service provider configured a notification trigger to warn the user when one of the two available text messages has been used. FIG. 112 also notifies the user that he or she has not used any of the text messages included in the user's 500-message text service plan.

[0702] FIG. 113 illustrates an example screen 10497 of additional information a user may access by selecting the “2 message plan” area/icon of FIG. 112. In FIG. 113, the screen notifies the user that the 2-message text service plan is nearing its usage limit, and that the user has used one of the two allowed text messages. The screen 10497 also presents a “Catalog” button that the user may select to view the contents of the catalog (e.g., as shown in FIGS. 87, 88, 89, 90, 91, 92, 93, etc.) and, for example, select another text messaging service plan. In addition, the screen presents a “Buy More” button that, in some embodiments, allows the user to repurchase the same service plan (i.e., purchase a second instance of the 2-message text service plan).

[0703] FIG. 114 illustrates an example screen 10498 a user might access by selecting the 2 Message Plan field/icon of FIG. 112. In the example of FIG. 114, the user can access information about his or her service usage of the text messaging plan either in the form of a message log or by phone number. FIG. 114 illustrates an example of the information that might be displayed as a message log, and FIG. 115 illustrates an example of the information that might be displayed by phone number. In both FIGS. 114 and 115, the number of messages is shown. It should be understood that the information may be presented in other ways, such as on a per-network basis (e.g., text messages while roaming versus while on a home network, messages sent/received on Wi-Fi versus on a cellular network, etc.), time of day (e.g., messages sent/received during weekdays versus on weekends, etc.), or based on any other classification that can be used to distinguish between messages.

[0704] FIG. 116 illustrates an example of an “upsell” screen 10505 that might be shown after the user has exhausted all of his or her text messaging service plans and subsequently attempts to send or receive a text message. The screen 10505 of FIG. 116 offers two text messaging service plans (a two-message service plan that costs 8 cents, and a 500-message service plan that costs $2.00), which are the two text messaging service plans the user previously had. The screen 10505 also offers the user an option to change his or her notification preference, which, as illustrated in FIG. 116, is always to be reminded of previously purchased service plans. FIG. 116 also shows that the user can select a different service plan than either of the offered service plans by viewing the catalog. Although FIG. 116 illustrates upsells for messaging service plans, as would be apparent to a person having ordinary skill in the art, upsells can be used for voice service plans and for data service plans, too. Furthermore, upsells can be audible (e.g., presented through a speaker of the mobile wireless communication device 100) or visual (e.g., presented through a display screen of the user interface 101 of the mobile wireless communication device 100).

[0705] In some embodiments, the mobile wireless communication device 100 presents an audible or visual upsell offer before a service plan has run out. In some embodiments, if a call is being placed (e.g., the user is dialing or preparing to place the call) and the number of minutes left on the voice service plan is below a threshold number of minutes, an audible notification prompts the user with an upsell audible message. In some embodiments, the audible upsell message provides the user with information about a service plan and prompts the user to select the service plan by pressing one or more keys on the keypad. In some embodiments, if a phone call is in progress when the number of minutes left on the voice service plan falls below the threshold, and the audible upsell notification was not played at the start of the call or before the call was placed, the audible upsell message is presented during the call. In some embodiments, the user may respond to the audible upsell by pressing a keypad button, and the service processor 115 or a device agent on the mobile wireless communication device 100 captures the DTMF tone to facilitate the user's purchase of the offered service plan. In some embodiments, the user receives an audible, vibrating, or visual purchase confirmation during the call, or, if the purchase failed, an audible, vibrating, or visual message that the purchase failed. In some embodiments, the microphone of the mobile wireless communication device 100 is temporarily disabled when audible notifications and user responses are entered so that the person on the other side of the phone call cannot hear the messages or the user's responses.

[0706] When the carrier network is incapable of supporting simultaneous voice and data communications, and a phone call is in progress, it may not be possible to complete the user's purchase of a service plan until the phone call has ended, because the network cannot support the data communications necessary to complete the purchase until after the voice call has ended. Therefore, in some embodiments, if the user responds positively to an upsell message presented during a phone call (e.g., by accepting the offered service plan or indicating a desire to purchase a new service plan), the service provider extends a “service lease” that allows the in-progress phone call to continue for some time period beyond the expiration of the current plan so that the user's phone call is not terminated abruptly at the expiration of the current service plan. The service lease gives the user the impression that the purchase of the new service plan was instantaneous, even though the actual purchase cannot be completed until after the user's call has ended. Because extending a service lease is, in essence, akin to extending credit to a user, in some embodiments, the time period is selected so that if the user's planned purchase of the new or offered service plan is unsuccessful (e.g., if the user's credit card is declined, or for any other reason), the cost of the service lease, which is borne by the service provider, is not significant. By providing a service lease, the service provider enhances the customer's experience and prevents user frustration caused by phone calls abruptly terminating, even though the user wanted to renew a service plan or purchase a new service plan.

[0707] In some embodiments, when the user accepts a service offer made while a call is in progress, the purchase process proceeds as soon as the voice call ends. When the purchase is successful, the service provider may then debit the new service plan for the service lease provided on the call that was in progress when the previous service plan expired.

[0708] In some embodiments, the user may configure aspects of audible upsells. For example, the user can disable audible upsells or specify that all upsells should be visual.

[0709] In some embodiments, upsell messages, whether audible, vibrating, or visual, are configured in the SDC 135 or device management system 170-1. In some embodiments, audible upsells are played as text-to-speech, or they are audio files.

[0710] Service leases can also be extended in other circumstances such as, for example, when the time required to complete the purchase of a service plan would inconvenience a user. In some embodiments, a service lease is extended to users who have exhausted their messaging plans but have initiated the purchase of a new service plan. The service lease is extended so that these users can continue to send text messages while the purchase process, which takes a finite amount of time, is being completed. In some embodiments, the number of messages the user is allowed to send under the service lease is selected so that if the purchase is unsuccessful, the cost to the service provider bearing the cost of the user's out-of-plan messages is reasonable.

[0711] As would be understood by a person having ordinary skill in the art in light of the disclosures herein, a service provider can use service leases in a variety of circumstances in order to enhance the user's experience without the service provider having to undertake a large financial risk. The examples presented herein (e.g., extending a service lease during an in-progress phone call and extending a service lease at the end of a messaging plan) are not meant to be limiting.

Service Plan Selection and Customization

[0712] FIG. 117 illustrates a representative screen 10500 that provides to the user of the mobile wireless communication device 100 a set of base service plan bundles from which to select a base service plan bundle to subscribe. In some embodiments, the base service plan bundle selection screen 10500 is accessed by selecting the change button/icon illustrated in FIG. 73. In some embodiments, the base service plan bundle selection screen 10500 is accessed when selecting the “Plans” partition 10214 illustrated in FIG. 68 and no base service plan bundle is presently subscribed to. In some embodiments, the base service plan bundle selection screen 10500 is accessed when selecting the “Plans & Sharing” partition 10214 illustrated in FIG. 70 and no base service plan bundle is presently subscribed to. Through the UI 101 of the mobile wireless communication device 100, the user can select from several different base service plan bundles, summaries of which can be displayed simultaneously to the user. The base service plan bundle selection screen 10500 illustrated in FIG. 117 shows three different base service plan bundles from a set of base service plan bundles available. The summaries of the base service plan bundles can include a title, a cost, and key features, e.g., an amount of service usage for each service plan included in the base service plan bundle. The user of the mobile wireless communication device 100 can select one of the base service plan bundles (e.g., the “Economy” plan) by selecting the “Select” button. The graphical display through the UI 101 can represent a virtual carousel of base service plan bundles through which the user can scroll to view different base service plan bundles available for subscription. The “largest” displayed base service plan bundle can be selected with the “Select” button. A summary of a comparison of a selectable base service plan bundle to a previously (or presently) subscribed to base service plan bundle can also be displayed through the UI 101. Numerous base service plan bundles can be available, and a limited number of base service plan bundles can be displayed simultaneously to the user through the UI 101. The virtual carousel graphical interface can provide for browsing by the user of the mobile wireless communication device 100 through the different base service plan bundles. The user can also customize a base service plan bundle by selecting the “Customize” button for a particular base service plan bundle.

[0713] While the representative embodiment presented in FIG. 117 illustrates customization of a base service plan bundle, any service plan bundle having any number of service plans can also be customized in a similar manner. The individual service plans of a service plan bundle can be presented to the user of the mobile wireless communication device 100 through the UI 101 simultaneously, grouped in like categories, individually, serially, or by any other presentable and navigable means. In some embodiments, the user of the mobile wireless communication device 100, through the UI 101, can select individual service plans of a service plan bundle. In some embodiments, the user can set parameters that define key characteristics of individual service plans included in a service plan bundle. In some embodiments, parameters of a service plan that can be set can include an amount of service usage, a time period, an application, an application type, a network communication end point, a traffic content type, a service cost, etc. In some embodiments, the user can set ranges for parameters of an individual service plan, a service plan bundle, or a set of service plans or service plan bundles.

[0714] FIG. 118 illustrates another representative screen 10510 that provides to the user of the mobile wireless communication device 100 a set of base service plan bundles from which to select a base service plan bundle to subscribe. At least a portion of the set of base service plan bundles from which the user can select can be displayed in a scrollable list. Each base service plan bundle available can be summarized with key relevant information, e.g., cost, features, etc. As with the carousel display shown in FIG. 117, one of the base service plan bundles can be selected using the “Select” button. In particular, the “shaded” displayed base service plan bundle can be selected with the “Select” button. In addition, a base service plan bundle can be customized using the “Customize” button.

[0715] FIG. 119 illustrates another representative screen 10520 that provides to the user of the mobile wireless communication device 100 a set of base service plan bundles from which to select a base service plan bundle to subscribe. At least a portion of the set of base service plan bundles from which the user can select can be displayed in a navigable array. Each base service plan bundle available can be summarized with key relevant information, e.g., cost, features, etc. As with the carousel display shown in FIG. 117 and the list display shown in FIG. 118, one of the base service plan bundles can be selected using the “Select” button. In particular, the “shaded” displayed base service plan bundle can be selected with the “Select” button. In addition, a base service plan bundle can be customized using the “Customize” button.

[0716] FIG. 120 illustrates a representative screen 10530 that provides to the user of the mobile wireless communication device 100 multiple selection options for each service plan included in a customizable base service plan bundle. The representative screen 530 can be accessed when selecting the “Customize” button in FIG. 117, 118 or 119. As shown in FIG. 120, a virtual carousel of selection options can be displayed for each individual service plan included in the base service plan bundle. A number of voice minutes, a number of text messages, and an amount of data service usage can be independently selected for each of the service plans included in the base service plan bundle. The user of the mobile wireless communication device 100 can select from multiple different options for each service plan included in the base service plan bundle. Key features and costs for each service plan can be displayed. A summary of key features selected for each of the service plans and an aggregate cost for a customized base service plan bundle can be displayed through the UI 101. In the representative screen 530, a customized base service plan bundle includes 150 minutes, 450 text messages, and 300 MB of data access. Individual service plan costs are provided. A total aggregate cost of $14.99 for the customized service plan bundle is also displayed to highlight the total cost to the user. A comparison of the total aggregate cost to a previous base service plan bundle cost can also be shown.

[0717] In some embodiments, all of the service plans included in a base service plan bundle can be customized. In some embodiments, only one of the service plans included in a base service plan bundle can be customized. In some embodiments, some of the service plans included in a base service plan bundle can be customized, and other service plans included in the base service plan bundle can be fixed. In some embodiments, a finite number of options can be available for a service plan included in the base service plan bundle. In some embodiments, a broad range of options (e.g., a “continuous” sliding scale) can be available for a service plan included in the base service plan bundle. In some embodiments, a service plan included in the base service plan bundle can be set to a zero amount, e.g., zero voice minutes, zero text messages, or zero Mbytes of data access. In some embodiments, a service plan included in the base service plan bundle can be set to an unlimited amount, e.g., unlimited voice minutes, unlimited text messages, or unlimited data access.

[0718] FIG. 121 illustrates a representative screen 10535 that provides to the user of the mobile wireless communication device 100 multiple options for each service plan included in a customizable base service plan bundle. For the example illustrated in screen 10535, the user can select a new base service plan bundle having no service plans, i.e., each service plan of the new base service plan bundle is selected to have zero service usage (and zero cost). In some embodiments, the user of the mobile wireless communication device 100 can select to have a “null” base service plan bundle. In some embodiments, the user of the mobile wireless communication device 100 can select individual service plans that suits the user's requirements without subscribing to a base service plan bundle.

[0719] FIG. 122 illustrates another representative screen 10540 that provides to the user of the mobile wireless communication device 100 multiple options for each service plan of a customizable base service plan bundle. The options presented to the user of the mobile wireless communication device 100 can be displayed as a selectable matrix arrayed in columns (as shown) or rows (not shown). The options can be also displayed as a scrollable list (not shown). The user of the mobile wireless communication device 100 can select a customizable base service plan bundle by selecting one option for each of the service plans to include in the base service plan bundle, e.g., an option for a voice service plan, an option for a text messaging service plan, and an option for a data service plan. A display of key features selected and a total cost for the customizable base service plan bundle can be shown. A comparison of key features (including cost) of the customizable base service plan bundle to a previously (or presently) subscribed to base service plan bundle can also be shown.

[0720] FIG. 123 illustrates another representative screen 10545 that provides to the user of the mobile wireless communication device 100 multiple options for each service plan included in a customizable base service plan bundle. In addition to the service plan options, a summary of recent service usage for each of the different categories of service plans available to the user is also presented. In some embodiments, the summary of recent service usage provides information for a time period length that matches the subscription time period for the customizable service plan bundle. In some embodiments, the summary of recent service usage provides information for a specific time period, e.g., for an hourly, daily, weekly, monthly, bi-monthly, quarterly or yearly time period. In some embodiments, the summary of recent service usage provides an average of service usage for the user over a particular time period. In some embodiments, the summary of recent service usage includes one or more indicators, e.g., alert icons, that highlight one or more differences between the service plans and previous service plans. In some embodiments, an alert icon highlights differences in service usage selection for a service plan compared with recent service usage. As illustrated in FIG. 123, an alert icon 10546 indicates to the user when an amount of recent service usage for a service plan exceeds a service usage amount available for a selected service plan. Alert icons, such as the alert icon 10546, can provide the user additional information to assist in selecting among options for service plans to include in a service plan bundle.

[0721] FIG. 124 illustrates a representative screen 10550 that provides through the UI 101 a summary of a changes to a base service plan bundle as selected by the user of the mobile wireless communication device 100. The new base service plan bundle and the old base service plan bundle are compared with both key features and costs summarized. The user of the mobile wireless communication device can confirm changes to the base service plan bundle by selecting the “Confirm” button. The base service plan bundle confirmation screen 10550 illustrated in FIG. 124 can be used when adding a new base service plan bundle, when changing from an existing base service plan bundle to a new base service plan bundle, and when selecting a customized base service plan bundle. In some embodiments, when the user of the mobile wireless communication device confirms the selected customized base service plan bundle, the new base service plan bundle is activated in real time (or near real time), providing an immediate customized service selection purchase experience.

[0722] In some embodiments, a service plan or service plan bundle is associated with a service identifier (service ID). In some embodiments, service plans and service plan bundles are associated with service IDs through a service design planning and management system such as the service design center 135, e.g., through an administrative terminal interface or through a sandbox interface attached thereto. In some embodiments, one or more service policies are associated with the service plans and service plan bundles. In some embodiments, service policies include rules for controlling and managing services provided to mobile wireless communication devices 100 (and/or users thereof), e.g., for service plans to which the user of the mobile wireless communication device 100 subscribes. In some embodiments, upon selection, customization, modification, and/or subscription to a service plan or service plan bundle, one or more service policies are obtained from one or more databases and distributed to one or more network elements, e.g., servers and/or databases, for controlling and/or managing communication services of the service plan or service plan bundle. In some embodiments, service policies for a service plan or service plan bundle include one or more of: access control policies, accounting policies, and notification policies. In some embodiments, service polices for a service plan or service plan bundle are associated with distinct service IDs. In some embodiments, policies for service plans are obtained from service policy storage databases based at least in part on one or more service IDs. In some embodiments, offers of service plans or service plan bundles provided to mobile wireless communication devices 100, e.g., during a service selection and/or service customization process, are associated with service IDs. In some embodiments, service plan offers include one or more of: service offer descriptors, service offer pricing, service offer graphics, service offer endpoints, and service offer conditions as described further herein. In some embodiments, elements of service offers are associated with service IDs and obtained from service offer storage databases based at least in part on one or more service IDs.

[0723] In some embodiments, a user of a mobile wireless communication device 100 selects a service plan through the UI 101 of the mobile wireless communication device 100, e.g., during a service plan selection, service activation, device initialization, or service setup process. In some embodiments, information for service offers are provided to the user of the mobile wireless communication device 100 by a service offer display and response system including one or more service IDs. In some embodiments, selection of the service plan by the user of the mobile wireless communication device 100 includes communication of a selected service ID from the mobile wireless communication device 100 to the service offer display and response system (or other network elements, e.g., the service controller 122, or a third-party service partner system). In some embodiments, selection of the service plan includes communication of an indication of a selected service plan to the service offer display and response system, and the service offer display and response system determines the service ID for the selected service plan. In some embodiments, service policies for the selected service plan are obtained from one or more storage databases of service policies for service plans based on the selected service ID. In some embodiments, a service policy provisioning system retrieves the service policies from the service policy storage databases using the selected service ID. In some embodiments, the service policy provisioning system distributes one or more service policies associated with the selected service plan to one or more network elements for controlling and managing services associated with the service plan selected by the user of the mobile wireless communication device 100. In some embodiments, the service policy provisioning system communicates a service policy for access control, obtained from the service policy storage database using the selected service ID, to one or more network elements responsible for access control of services for the mobile wireless communication device 100. In some embodiments, the service policy provisioning system communicates a service policy for accounting, obtained from the service policy storage database using the selected service ID, to one or more network elements responsible for accounting of services for the mobile wireless communication device 100. In some embodiments, the service policy provisioning system communicates a service policy for notification, obtained from the service policy storage database using the selected service ID, to one or more network elements responsible for providing notification services to the mobile wireless communication device 100.

[0724] In some embodiments, service plan offers and/or service plan policies are associated with service IDs through the service design center 135. In some embodiments, service plan bundles comprise a plurality of service plan elements, e.g., a voice service plan element, a messaging service plan element, and a data service plan element. In some embodiments, a service plan bundle is associated with a service ID for a unique combination of service plan elements. In some embodiments, one or more service plan elements of a service plan bundle can be customized, e.g., according to an offer of a plurality of options to a user and a selection by the user of the mobile wireless communication device 100. In a representative embodiment, a service plan bundle includes a voice service plan element having X different configuration options, a messaging service plan element having Y different configuration options, and a data service plan element having Z different configuration options. In some embodiments, the user of the mobile wireless communication device can selection one of the X different configuration options for the voice service plan element, one of the Y different configuration options for the messaging service plan element, and/or one of the Z different configuration options for the data service plan element to customize a service plan bundle. In some embodiments, the user can select from a total of X times Y times Z different combinations of service plan elements to customize the service plan bundle. In some embodiments, each combination of service plan elements is associated with a unique service ID. In some embodiments, only a subset of combinations of the total possible combinations of service plan elements is associated with a unique service ID. In some embodiments, only certain combinations of service plan elements are allowed. In some embodiments, customization of a service plan bundle by the user of the mobile wireless communication device 100 includes an explicit or implicit selection of a particular service ID that defines a particular combination of service plan elements for a service plan bundle. In some embodiments, the particular service ID is associated with a set of service plan policies to implement aspects of the services associated with the particular service ID. In some embodiments, the set of service plan policies are obtained from a service policy storage based on the particular service ID and distributed to one or more network elements for controlling and managing services for the customized service plan bundle identified by the particular service ID.

[0725] In some embodiments, service plan bundles can include a plurality of service plan elements, each service plan element associated with a service plan category. In some embodiments, a service plan category includes one or more service plan elements of a particular communication service type providing access to one or more communication services. In some embodiments, a service plan bundle includes a base service plan bundle including a voice service plan element and a data service plan element. In some embodiments, a service plan bundle includes a set of service plan elements, each service plan element for access to use one or more particular applications. In some embodiments, a service plan bundle includes a set of service plan elements, each service plan element for access to one or more particular network endpoints. As would be understood by a person of ordinary skill in the art, service plan bundles can combine service plan elements from multiple different service plan categories for service plans having diverse capabilities.

[0726] In some embodiments, service IDs include multiple fields, each field for representing a different service plan element and/or service plan category. In some embodiments, customization of a service plan element of a service plan bundle includes explicit or implicit selection of a value for a field in a service plan ID. In some embodiments, a set of service plan IDs are pre-stored in one or more of the mobile wireless communication device 100, the service controller 122, the service offer display and response system, service offer storage system, or service policy storage system. In some embodiments, a subset of service plan IDs are pre-stored in one or more of the mobile wireless communication device 100, the service controller 122, the service offer display and response system, service offer storage system, or service policy storage system. In some embodiments, selection of a customized service plan bundle includes selection of a unique service ID for the customized service plan bundle. In some embodiments, selection of a customization service plan bundle includes selection of values for different fields in a service ID.

[0727] In some embodiments, a customized service plan bundle is created “on the fly” during a service plan bundle selection and/or customization process. In some embodiments, a user of a mobile wireless communication device 100 selects multiple service plan elements for a customized service plan bundle, e.g., a voice service plan element, a messaging service plan element, and a data service plan element. In some embodiments, one or more network elements creates a customized service plan bundle based on the selection of particular service plan elements for the customized service plan bundle by the user of the mobile wireless communication device 100. In some embodiments, a new service ID for the customized service plan bundle is created and associated with the particular combination of service plan elements selected by the user of the mobile wireless communication device 100. In some embodiments, one or more service policies for the customized service plan bundle are created, retrieved, and/or obtained and distributed by a service policy provisioning system to one or more network elements, using at least in part the new service ID. In some embodiments, one or more service policies for controlling and/or managing services of the customized service plan bundle are communicated to the mobile wireless communication device 100, e.g., to be used by one or more device agents of a service processor 115 on the mobile wireless communication device 100. In some embodiments, the new service ID is stored with one or more of the service policies for the customized service plan bundle in a service policy storage database.

[0728] In some embodiments, a collection of customized service plan bundles is associated with a set of service IDs using a service design system, e.g., as part of the service design center 135. In some embodiments, each customized service plan bundle in the collection of customized service plan bundles is associated with a unique service ID. In some embodiments, service offers and/or service policies for a particular service plan bundle are associated with a particular service ID. In some embodiments, a set of service offers for the collection of customized service plan bundles is stored in a service offer storage system organized at least in part based on the set of service IDs. In some embodiments, a set of service policies associated with the customized service plan bundles is stored in a service policy storage system organized at least in part based on the set of service IDs. In some embodiments, a service offer and response system provides a user of a mobile wireless communication device 100 with one or more service offers that include at least a portion of the collection of customized service plan bundles. In some embodiments, the user of the mobile wireless communication device is presented options to customize service plan bundles. In some embodiments, the user selects one or more of the presented options to create a particular customized service plan bundle. In some embodiments, the particular customized service plan bundle is associated with a particular service ID. In some embodiments, one or more network elements determine a configuration of the particular customized service plan bundle. In some embodiments, the one or more network elements obtain the particular service ID for the particular customized service plan bundle. In some embodiments, a service policy provisioning system uses the particular service ID to obtain one or more service policies associated with the particular customized service plan bundle. In some embodiments, the service policy provisioning system provisions one or more network elements (and/or one or more device agents of a service processor in the mobile wireless communication device 100) with at least a portion of the one or more service policies. In some embodiments, the one or more service policies include service policies for access control, service accounting, and/or service notifications for the particular customized service plan bundle.

[0729] In some embodiments, a collection of base service plan bundles is associated with a set of service IDs using a service design system, e.g., as part of the service design center 135. In some embodiments, each base service plan bundle in the collection of base service plan bundles is associated with a unique service ID. In some embodiments, service offers and/or service policies for a particular base service plan bundle are associated with a particular service ID. In some embodiments, a set of service offers for the collection of base service plan bundles is stored in a service offer storage system organized at least in part based on the set of service IDs. In some embodiments, and a set of service policies associated the base service plan bundles is stored in a service policy storage system organized at least in part based on the set of service IDs. In some embodiments, a service offer and response system provides a user of a mobile wireless communication device 100 with one or more service offers that include at least a portion of the collection of base service plan bundles. In some embodiments, the user of the mobile wireless communication device is presented options to customize one or more of the base service plan bundles. In some embodiments, the user selects one or more of the presented options to create a particular customized service plan bundle. In some embodiments, the particular customized service plan bundle is associated with a particular service ID for a base service plan bundle. In some embodiments, the user selects one or more parameter values for service plan elements in the base service plan bundle. In some embodiments, the selected parameter values are communicated to a network system, e.g., the service offer display and response system. In some embodiments, the network system determines a configuration of the particular customized service plan bundle, e.g., based at least in part on the particular service ID for the base service plan bundle and the selected parameter values. In some embodiments, the network system obtains the particular service ID for the base service plan bundle. In some embodiments, a service policy provisioning system uses the particular service ID of the base service plan bundle to obtain one or more service policies associated with the base service plan bundle. In some embodiments, the service policy provisioning system modifies the service policies of the base service plan bundle based at least in part on the selected parameter values. In some embodiments, the modified service policies are associated with the particular customized service plan bundle for the user of the mobile wireless communication device 100. In some embodiments, the service policy provisioning system provisions one or more network elements (and/or one or more device agents of a service processor in the mobile wireless communication device 100) with at least a portion of the one or more modified service policies. In some embodiments, the one or more modified service policies include service policies for access control, service accounting, and/or service notifications for the particular customized service plan bundle.

[0730] FIG. 125 illustrates a representative notification message 10600 that is presented through the UI 101 of the mobile wireless communication device 100 when the user of the mobile wireless communication device 100 attempts to access a voice service for which a service plan is not presently available. The notification message 10600 informs the user of the mobile wireless communication device 100 that a request to establish a voice connection (e.g., a dialed voice call) cannot be completed, as there is no existing voice service plan associated with the mobile wireless communication device 100. The notification message 10600 can include one or more options to purchase a voice service plan. By selecting one of the presented options, the user of the mobile wireless communication device 100 can learn more and/or subscribe directly to a particular service plan that provides voice service. The options presented in the notification message 10600 to the user of the mobile wireless communication device 100 can be tailored based on a number of different criteria. In some embodiments, the options presented to the user include voice service plans based on previous service usage, present service usage, one or more dialed numbers, present geographic location, home network location, available local networks, roaming properties, etc. As illustrated in FIG. 125, voice service plans can be offered that correspond to use in different geographic locations. In some embodiments, the user is also presented an option to explore a catalog of available service plans.

[0731] FIG. 126 illustrates a representative notification message 10605 that is presented through the UI 101 of the mobile wireless communication device 100 when the user of the mobile wireless communication device 100 receives an incoming voice call for which a service plan is not presently available. In some embodiments, no service plan is available when no service plan has been purchased, when a service usage allocation for a current service plan has been entirely (or nearly entirely) consumed, when no service plan has been purchased for roaming, etc. The notification message 10605 can be presented as a result of one or more different notification trigger conditions. The notification message 10605 informs the user of the mobile wireless communication device 100 that a request to complete a voice connection (e.g., an incoming call) cannot be completed, as there is no existing voice service plan associated with the mobile wireless communication device 100. The notification message 10605 can include one or more options to purchase a voice service plan. By selecting one of the presented options, the user of the mobile wireless communication device 100 can learn more and/or subscribe directly to a particular service plan that provides voice service. The options presented in the notification message 10605 to the user of the mobile wireless communication device 100 can be tailored based on a number of different criteria. In some embodiments, the options presented to the user include voice service plans based on previous service usage, present service usage, one or more dialed numbers, present geographic location, home network location, available local networks, roaming properties, etc. As illustrated in FIG. 126, voice service plans can be offered that correspond to use in different geographic locations. In some embodiments, the user is also presented an option to explore a catalog of available service plans. Service plans available can include both recurring voice service plans and one-time voice service plans. Service plans available can also include service plan bundles that combine voice service plan elements with other service plan elements (messaging and/or data service plan elements). In some embodiments, the user of the mobile wireless communication device 100 is presented an option to purchase a voice service plan and accept the incoming call. In some embodiments, the user of the mobile wireless communication device 100 is presented an option to purchase a voice service plan and reject the incoming call. In some embodiments, purchase of the voice service plan can require additional information from the user of the mobile wireless communication device 100. In some embodiments, additional information can be obtained from the user through the UI 101 of the mobile wireless communication device 100 in advance of connecting the incoming call. In some embodiments, additional information can be obtained from the user through the UI 101 of the mobile wireless communication device 100 after the incoming call is completed.

[0732] In some embodiments a notification message is presented through the UI 101 of the mobile wireless communication device 100 when the user of the mobile wireless communication device 100 is engaged in a particular service activity, e.g., using a voice connection, a data connection, a messaging service, a particular application, a particular service through a data connection, etc. In some embodiments, the notification message provides a warning to the user of the mobile wireless communication device 100 that a service plan to which the current service activity is accounted is about to expire or has expired. In some embodiments, a simultaneous audio warning, voice overlay message warning, or vibration alert warning is provided in addition to or in place of the notification message to the user of the mobile wireless communication device 100. In some embodiments, the notification message is presented in the foreground as a “pop-up” message. In some embodiments, the notification message provides one or more options to purchase additional service during the service activity, e.g., purchase additional minutes or MB, purchase an additional service plan, purchase a new service plan, add a service plan element to a service plan bundle, or renew a current service plan. In some embodiments, the notification message provides actionable options to the user of the mobile wireless communication device 100 in order to continue the current service activity, e.g., keep a voice connection alive, keep a data connection active, continue use of a particular application, etc. In some embodiments, the user of the mobile wireless communication device 100 is presented an option to continue the present service activity as an extension of a previously expired (or about to expire) service plan. In some embodiments, the user of the mobile wireless communication device 100 is presented one or more service plan offers in addition to options to continue the current service activity (e.g., use a previous/current service plan for the current service activity and purchase a new service plan for future service activity). In some embodiments, the user of the mobile wireless communication device 100 is presented an option to purchase additional minutes or MB to continue the current service activity (e.g., a temporary “supplemental” service plan) only. In some embodiments, the user of the mobile wireless communication device 100 is presented an option to purchase additional minutes or MB to continue the current service activity (e.g., a temporary “supplemental” service plan) and options to purchase additional service plans for future service activity. In some embodiments, the user of the mobile wireless communication device 100 is presented the option to discontinue the current service activity, e.g., drop an active voice connection, and following discontinuation, the user is presented options to purchase service plans for one or more service activities. In some embodiments, the user of the mobile wireless communication device 100 is presented a notification message with options to restart a discontinued service activity after purchase of a service plan, e.g., reconnect a dropped voice connection, restart a particular application, or re-establish a data connection.

[0733] FIG. 127 illustrates a representative notification message 10607 presented through the UI 101 of the mobile wireless communication device 100 when the user is connected to an active voice connection and a current voice service plan, e.g., through which the active voice connection is used, is about to expire. In some embodiments, a similar representative notification message is provided for another service (data, messaging, video conference, etc.) for which an active connection or active service activity is interrupted by an expiring service plan. In some embodiments, the user is presented with one or more service plans through which the active connection can be continued. In some embodiments, the user can select through the UI 101 of the mobile wireless communication device 100 to purchase an offered service plan to continue the active connection. In some embodiments, the user can select to view a catalog of service plans that can provide for service activities representative of the active connection.

[0734] FIG. 128 illustrates a representative notification message 10609 presented through the UI 101 of the mobile wireless communication device 100 when an active voice connection is disconnected, e.g., as a result of an expired voice service plan. In some embodiments, a similar representative notification message is presented when an active connection for a service activity is interrupted by an expiring service plan. In some embodiments, the user is presented with one or more service plans through which a connection can be re-established. In some embodiments, the user can select through the UI 101 of the mobile wireless communication device 100 to purchase an offered service plan. In some embodiments, the notification message provides for reconnecting the previously active connection, e.g., dialing a dropped call, re-establishing a VoIP connection, re-establishing an interactive messaging session, etc. In some embodiments, the user can select to view a catalog of service plans that can provide for service activity representative of the previously active connection.

[0735] FIG. 129 illustrates a representative notification message 10610 presented through the UI 101 of the mobile wireless communication device 100 when the user of the mobile wireless communication device 100 attempts to use a text messaging service and a messaging service plan is not presently available. In some embodiments, no service plan is available when no service plan has been purchased, when a service usage allocation for a current service plan has been entirely (or nearly entirely) consumed, when no service plan has been purchased for a roaming network, etc. The notification message 610 can be presented as a result of one or more different notification trigger conditions. In some embodiments, the notification message informs the user of the mobile wireless communication device 100 that a request to send or receive a text message cannot be completed, e.g., as an existing data message service plan associated with the mobile wireless communication device 100 is depleted. The notification message 10610 can include one or more options to purchase additional text message units (e.g., as an “add on” supplemental messaging service plan or to change an existing messaging service plan within a base service plan bundle.) Options presented in the notification message 610 can be based on service usage history, a previous service usage, a present service usage, available network type, geographic location, and any other number of criteria that can be used to match an offered service plan with the attempt to use the text messaging service. The notification message can also include options to view one or more text messaging service plans that can recur for a specified time period (e.g., monthly text messaging service plans). The notification message can also include options to view one or more “one time” text-messaging service plans. Notification messages to purchase a service plan for a particular service activity, e.g., for a multi-media messaging service can also be presented as shown for text messaging services in FIG. 129. In some embodiments, the notification message can present options to purchase a service plan and accept an incoming text message or multi-media message (or equivalent). In some embodiments, the notification message can present options to purchase a service plan and reject the incoming text message or multi-media message. In some embodiments, purchase of a service plan can be completed before or after accepting and viewing an incoming text message or multi-media message.

[0736] FIG. 130 illustrates a representative notification message 10620 presented through the UI 101 of the mobile wireless communication device 100 when the user of the mobile wireless communication device 100 attempts to use a data access service that is not available. For example, the base service plan bundle to which the user currently subscribes can have no data access service plan included, or an associated data access service plan can be expired, or the associated data access service plan can be depleted. The notification message can present a number of options to the user to purchase a supplemental data access service plan. The notification message can also include an option to view data access service plans that are recurring on “one time” only. The notification message can also provide the user an option to adjust a base service plan bundle. Service plans presented in the notification message can include multiple options based on any number of criteria determined to match the attempt to use the data access service, as described above also for notification messages and for other services. By selecting one or the presented service plans presented in the notification message 10620, the user of the mobile wireless communication device 100 can immediately learn about and subscribe to a service plan that can provide access to the data access service attempted.

[0737] FIG. 131 illustrates a representative notification message 10625 that is presented through the UI 101 of the mobile wireless communication device 100 when the user of the mobile wireless communication device 100 attempts to access a service associated with a Facebook application that is not available. While the representative embodiment illustrated in FIG. 131 shows a notification message associated with attempting to access the Facebook application, similar notification messages can be presented for other application specific services, in some embodiments. In some embodiments, notification messages present offers tailored to a user's actions. In some embodiments, the notification message is presented through the UI 101 of the mobile wireless communication device 100 in response to different notification trigger criteria. For example, the base service plan bundle to which the user of the mobile wireless communication device 100 currently subscribes can have no general data access capability to access the Internet and no specific data access to access a Facebook website, portal, or server. Similarly, data access service plans associated with the mobile wireless communication device can be expired. Associated application specific Facebook service plans can also be expired. In some embodiments, the associated data access service plan is depleted. In some embodiments, the associated application specific Facebook service plan is expired. In some embodiments, the notification message presents options to through the UI 101 to purchase a supplemental application specific access service plan. In some embodiments, the notification present options through the UI 101 to purchase a general data (e.g., Internet) access service plan. The notification message can also include an option to view a catalog of access service plans that are recurring on “one time” only. The notification message can also provide the user an option to adjust settings for notifications associated with a specific application access service (e.g., Facebook access services). Through the UI 101, the user of the mobile wireless communication device 100 can be apprised of and explore multiple service plan options that can provide service access to a specific application or perform a specific service activity. The user of the mobile wireless communication device 100 can select to subscribe to one or more of the offered targeted service plans provided in the notification message. As a result, the user can enjoy access to services easily and quickly without requiring direct interaction with customer support through a service provider. Any number of relevant matching criteria based on service usage, service activity, service history, device type, device location, network type, network properties, etc. can be used to select the service plans presented in the notification message.

[0738] FIGS. 131, 132, 133, 134, and 135 illustrate representative screens that may be presented through the UI 101 of the mobile wireless communication device 100 to the user when selecting the “Add-On Plans” partition 10214 of FIGS. 68 and 72 and/or the “Plans & Sharing” partition 10214 of FIG. 70. A set of supplemental “add-on” service plans may be presented to the user through the UI 101. Information about the set of “add-on” service plans may be organized into a number of parallel “tabs,” each tab providing groupings of information to present to the user of the mobile wireless communication device 100 about service plans. In some embodiments, the user can view and select among “add-on” service plans organized according to a service plan category (e.g., voice service plans, messaging service plans, data service plans). In some embodiments, the user can view and select among “add-on” service plans organized according to a applicable geographic location (e.g., plans applicable for US, North America, Europe, International, etc.)

[0739] FIG. 132 illustrates a representative screen 10630 that provides through the UI 101 of the mobile wireless communication device 100 a summary of a set of featured service plans to which the user of the mobile wireless communication device 100 may subscribe. Selecting the “Featured Plans” tab in the secondary area 10212 of the UI 101 may access the set of featured service plans. Additional tabs may be included alongside the “Featured Plans” tab in the secondary area 10212 as shown. In some embodiments, the representative screen 10630 may be presented through the UI 101 when the user selects to view a catalog of service plans or service plan bundles by selecting the “Store” partition 10214 illustrated in FIG. 69. In some embodiments, the representative screen 10630 may be presented through the UI 101 when the user selects to view a catalog of service plans or service plan bundles by selecting the “Plans” partition 10214 illustrated in FIGS. 68 and 72. In some embodiments, the representative screen 10630 may be presented through the UI 101 when the user selects to view a catalog of service plans or service plan bundles by selecting the “Plans & Sharing” partition 10214 shown in FIG. 70. In some embodiments, the representative screen 10630 may be presented through the UI 101 when the user selects to view a catalog of service plans by selecting the “Add-On Plans” partition 10214 illustrated in FIGS. 68 and 72. In some embodiments, the representative screen 10630 may be presented when the user selects a “Catalog” button presented on another screen, on a marketing interceptor, or on a notification message. The user of the mobile wireless communication device 100 may obtain additional information about a specific featured service plan by selecting the particular featured service plan through the UI 101. Service providers may feature one or more service plans for a limited time period, to a specific set of users, to a particular set of mobile wireless communication devices 100, to a targeted device group, or to another set of users/devices. Featured service plans may provide a limited set of features for a low cost to entice the user to test out a service plan. One or more specific featured service plans can be prominently displayed in a banner area 10232 to highlight a particular featured service plan to the user of the mobile wireless communication device 100. In some embodiments, particular service plans displayed on the “Featured Plans” screen 10630 may depend on the previous screen from which the user navigated to the “Featured Plans” screen 10630. In some embodiments, the set of “Featured Plans” presented is tailored to the user of the mobile wireless communication device 100 based on knowledge of the user's service usage, based on indications from the user while browsing a catalog of service plans, based on answers to one or more “interview” questions presented to the user, or based on combinations of these. In some embodiments, the set of “Featured Plans” presented is updated regularly, e.g., each day to provide targeted service plans matched to time of day, day of week, time of year, holiday schedule, school schedule, work schedule or other time based criteria. In some embodiments, the set of “Featured Plans” presented is updated by a service provider and pushed to the mobile wireless communication device 100 through an over the air update. In some embodiments, the set of “Featured Plans” presented is updated by a third party. In some embodiments, screen 10630 includes an additional selectable input, e.g., a “button,” (not shown) that the user of the mobile wireless communication device 100 can select to “refresh” the set of “Featured Plans” displayed. In response to the “refresh” selection, an updated set of “Featured Plans” can be obtained and displayed to the user of the mobile wireless communication device 100.

[0740] FIG. 133 illustrates a representative screen 10640 that provides through the UI 101 of the mobile wireless communication device 100 a set of supplemental service plans for data access to which the user may subscribe. One or more service plans in the set of supplemental service plans may be added to an existing base service plan bundle as “data add on” service plans. Each data add on supplemental service plan may provide general data access or specific data access for one or more data applications or services. Each data add on supplemental service plan may provide access on a recurring subscription basis or for a limited “one time” time period. The set of data add on service plans illustrated in FIG. 133 is organized according to time period. In some embodiments, the set of available data add on service plans may be organized by application or by service provided. The user of the mobile wireless communication device 100 may select one or more of the data add-on service plans to obtain additional information and/or to purchase and subscribe to the one or more data add-on service plans. The UI 101 may provide a broad array of supplemental service plans, a subset of which may be displayed, while additional supplemental service plans may be accessed by directionally scrolling as required through the UI 101. As displayed on the screen 10640 of FIG. 133, a set of “One Week” service plans is presented, while a set of “One Day” service plans is not visible below the bottom of the screen 10640. A user of the mobile wireless communication device 100, in some embodiments, can navigate to the “One Week” service plans by providing an input through the UI 101 of the mobile wireless communication device 100. In some embodiments, selecting the title bars, e.g., “Monthly Subscription,” “One Week,” and “One Day” can expand the title bar to display a set of service plans of the type specified in the title bar. In some embodiments, selecting the title bar a second time can collapse the displayed set of service plans displaying only the title bar itself. As illustrated in screen 10640, the “Monthly Subscription” service plans are collapsed and not visible; the “One Week” service plans are expanded, visible and selectable; and the “One Day” service plans are expanded, and not selectable. In some embodiments, the user can “swipe” the UI 101 to view additional service plans displayed and/or displayable for the currently selected catalog tab. In some embodiments, “data add on” service plans are separated into two separate tabs based on subscription type, e.g., recurring service plans and “one-time” service plans.

[0741] FIG. 134 illustrates a representative screen 10645 that provides through the UI 101 of the mobile wireless communication device 100 information on a specific service plan selected from the representative catalog of “Data Add-On” service plans shown in the screen 10640 of FIG. 133. The screen 10645 of FIG. 134 may be presented to the user in response to the user selecting the “Maps & Nav for 1 Week” service plan presented on screen 10640 of FIG. 133. The screen 10645 provides details about the selected service plan including a brief description, an applicable time period, a data usage allowance, and a set of supported applications that can be used with the service plan. The screen 10645 also presents an option to the user of the mobile wireless communication device 100 to buy the particular service plan for the particular mobile wireless communication device 100. The screen 10645 also includes a partition area entitled “Share and Assign” that may provide the user of the mobile wireless communication device 100 selection options to share and/or assign the purchased service plan with other mobile wireless communication devices 100.

[0742] FIG. 135 illustrates a representative screen 10650 that provides through the UI 101 of the mobile wireless communication device 100 a set of data service plans to which the user may subscribe. The set of data service plans may be organized by a time period (as shown) or by another criteria suitable for displaying the set of data service plans. The set of data service plans may include service plans to supplement a base service plan bundle, i.e., an “add on” data service plan, and may also include data service plans providing access to specific applications or services, e.g., a “Facebook,” “Gmail,” or “Maps” data service plan. The user of the mobile wireless communication device 100 may select one or more of the data service plans to obtain additional information and/or to purchase and subscribe to the one or more data service plans displayed through the UI 101 of the mobile wireless communication device 100.

[0743] FIG. 136 illustrates a representative screen 10660 that provides through the UI 101 of the mobile wireless communication device 100 a set of text messaging service plans and voice service plans to which the user may subscribe. The set of service plans may be organized by a service category (as shown) or by another criteria suitable for displaying the set of service plans. The set of service plans may include service plans to supplement a base service plan bundle, e.g., an “add on” text messaging service plan or a voice “talk” service plan as shown. The user of the mobile wireless communication device 100 may select one or more of the text messaging service plans or voice service plans to obtain additional information and/or to purchase and subscribe to the one or more of the service plans displayed through the UI 101 of the mobile wireless communication device 100.

[0744] FIG. 137 illustrates a representative screen 10670 that provides through the UI 101 of the mobile wireless communication device 100 a set of international voice service plans to which the user may subscribe. The set of service plans may be organized by an applicable country or region (as shown) or by another criteria suitable for displaying the set of service plans. The set of service plans may supplement a service plan to which the user of the mobile wireless communication device 100 already subscribes, or may be added separately as a voice service plan to a base service plan bundle. The user of the mobile wireless communication device 100 may select one or more of the international voice service plans to obtain additional information and/or to purchase and subscribe to the one or more of the service plans displayed through the UI 101 of the mobile wireless communication device 100.

[0745] FIGS. 138-144 illustrate representative screens that may be presented through the UI 101 of the mobile wireless communication device 100 to the user when selecting the “Account” partition 10214 of FIGS. 68, 70, and 72. The user of the mobile wireless communication device 100 can obtain information about and manage payments for one or more service accounts associated with the user, the mobile wireless communication device 100 and one or more mobile wireless communication devices 100 associated with a device group. Access to viewing and managing account information can be password protected or otherwise provided with security features to restrict access through the UI 101 of the mobile wireless communication device 100.

[0746] FIG. 138 illustrates a representative screen 10700 that summarizes one or more invoices associated with one or more service plans, one or more users (subscribers), and one or more mobile wireless communication devices 100. Selecting the “Payments” tab, when the user views “Account & Billing” information, may access the information presented by screen 10700. As illustrated in FIG. 138, multiple invoices may be presented to a user of the mobile wireless communication device 100 through the UI 101, including a first invoice associated with a particular subscriber and a second invoice associated with one or more service plans. The user of the mobile wireless communication device 100 may access additional information about each of the individual invoices by selecting the particular invoice.

[0747] FIG. 139 illustrates a representative screen 10710 that presents additional detailed information for the second invoice shown on representative screen 700 of FIG. 138. Invoice details can include payments, purchases, and fees related to one or more service plans.

[0748] FIG. 140 illustrates a representative screen 10720 that summarizes account payment means, e.g., credit card information, associated with one or more service plans, one or more users (subscribers), and one or more mobile wireless communication devices 100. Selecting the “Account” tab, when the user views “Account & Billing” information, may access the information presented by screen 10720. Multiple payment means can be obtained, retrieved, managed and stored. The user of the mobile wireless communication device 100 can add a payment means by selecting the “Add” button. The user of the mobile wireless communication device 100 can also review and edit information about a payment means by selecting the particular payment means.

[0749] FIG. 141 illustrates a representative screen 10730 that details a particular payment means (e.g., credit card information). The user of the mobile wireless communication device 100 can input, review and update information related to the particular payment means through the UI 101 of the mobile wireless communication device 100. Some sensitive information, e.g., portions of or all digits of a credit card number, security codes, and expiration dates, can be obscured when presented through the UI 101 to provide added security.

[0750] FIG. 142 illustrates a representative screen 10740 that provides information about an account profile for a user of the mobile wireless communication device 100. The user of the mobile wireless communication device 100 can input, review and update information for the account profile through the UI 101 of the mobile wireless communication device 100. Some sensitive information, e.g., a password, can be obscured when presented through the UI 101 to provide added security.

[0751] FIG. 143 illustrates a representative screen 10750 that provides an alphanumeric interface through which the user of the mobile wireless communication device 100 can input and update the account profile information. The screen 10750 can be accessed, in some embodiments, by selecting the “Edit information” button illustrated on screen 10740 in FIG. 142.

[0752] FIG. 144 illustrates a representative screen 760 that provides an alphanumeric interface through which the user of the mobile wireless communication device 100 can update a password associated with an account. The screen 10760 can be accessed, in some embodiments, by selecting the “Change Password” button illustrated on screen 10740 in FIG. 142.

[0753] FIG. 145 illustrates a representative screen 10770 that provides information on a number of settings for the mobile wireless communication device 100 and administrative functions that may be accessed by the user of the mobile wireless communication device 100. The representative settings screen 10770 may be accessed, in some embodiments, by selecting the “Settings” button illustrated in the bottom area 10208 of FIG. 72. The user may change settings by selecting one or more different topics presented through the UI 101, including settings related to data transfers (“Background Data”) and notifications (“Reset reminder preferences” & “Notification history”). The user may also select to refresh operating system and/or application firmware (or software) stored on the mobile wireless communication device 100. The mobile wireless communication device 100 may communicate with one or more servers located in the wireless network to refresh itself. The user can also select to enable an “Activation Wizard” to guide the user through an activation process for the mobile wireless communication device 100, for a user of the mobile wireless communication device 100, and/or for a service account associated with the user and/or the mobile wireless communication device 100.

[0754] FIG. 146 illustrates a representative screen 10800 that summarizes information about mobile wireless communication devices 100, including users, service accounts and associated lines (e.g., phone numbers) that may be presented through the UI 101 of the mobile wireless communication device 100. The information presented on screen 10800 can be accessed, in some embodiments, by selecting the “Devices” partition 10214 illustrated in FIGS. 68 and 72.

[0755] FIG. 147 illustrates a representative screen 10810 that summarizes information about mobile wireless communication devices 100, including users, service accounts and associated lines (e.g., phone numbers) that may be presented through the UI 101 of the mobile wireless communication device 100. The information presented on screen 10810 can be accessed, in some embodiments, by selecting the “Lines & Devices” partition 10214 illustrated in FIG. 70.

[0756] FIG. 148 illustrates an exemplary message in a representative screen 10820, in accordance with some embodiments, that is presented through the UI 101 of the mobile wireless communication device 100 when the mobile wireless communication device 100 is not yet associated with a master service account. The message informs the subscriber that the mobile wireless communication device 100 is not associated with an existing service account and asks if the subscriber would like to create a new master service account or join this mobile wireless communication device 100 to an existing master service account. In some embodiments, the message informs the subscriber of an option to transfer a service account from a different device to the mobile wireless communication device 100. In some embodiments, the subscriber selects “New Account” and selects “Create.”

[0757] In some embodiments, when creating a new account for a mobile wireless communication device 100, the user of the mobile wireless communication device 100 is provided access to an activation server, e.g., through which to enter information for the new account, to view a catalog of service plans, to select a service plan, to customize a service plan, and/or to perform other device activation, service account activation, service provider selection, service selection and service activation tasks as described elsewhere herein. In some embodiments, access to the activation server is provided through a sponsored service (or “ambient” service) at no cost (or at reduced cost) to the user of the mobile wireless communication device 100, e.g., through a wireless cellular access network. In some embodiments, the sponsored/ambient service provides for limited communication between the mobile wireless communication device 100 and one or more service activation systems in order to proceed with establishing a new service account for the mobile wireless communication device 100. In some embodiments, the user of the mobile wireless communication device 100 provides information required to activate a service account during the activation process. In some embodiments, the user of the mobile wireless communication device enters user specific information and selects a service plan with which to use the mobile wireless communication device 100. In some embodiments, the user of the mobile wireless communication device is provided a pre-configured service plan catalog. In some embodiments, the pre-configured service plan catalog permits the user to select from a set of pre-configured service plan offers. In some embodiments, the user of the mobile wireless communication device 100 customizes one or more service plan elements of a selected service plan (e.g., to alter the pre-configured service plan to more closely match requirements of the user of the mobile wireless communication device 100.)

[0758] FIG. 149 shows a message that is presented, in some embodiments, as a result of selecting “Create” in FIG. 148. In this particular example, the subscriber may choose between a prepay account and a post-pay account. As would be appreciated by a person having ordinary skill in the art, a prepay account is established by depositing some amount of money (or money equivalent) in the account and debiting that amount of money as the subscriber uses for-fee services. With a post-pay account, on the other hand, the subscriber uses services on credit and is then billed for service usage after some period of time (e.g., after one month has passed). In the example shown in FIG. 149, the subscriber chooses a prepay account and enters information to establish the master service account. The subscriber then selects “Create.” In some embodiments, the subscriber is presented multiple screens in which to enter account information. In some embodiments, subscriber is presented an option to transfer all or part of account information from another account. In some embodiments, the subscriber is presented an option to transfer account information from a third-party service partner system (e.g., from an Apple ID account, an iTunes account, a iCloud account, a Google account, an Amazon account, or other account that can have requisite identification and/or credit information for the subscriber.)

[0759] FIG. 70, discussed earlier, shows a representative screen 10830 example of information that is presented, in some embodiments, through the user interface 101 of the mobile wireless communication device 100 after the subscriber has established a master service account for the mobile wireless communication device 100 (e.g., by following the procedure described above). In this representative screen 10830, there are four icons: “Lines & Devices,” “Account,” “Plans & Sharing,” and “Help.” In some embodiments, selecting “Lines & Devices” allows the subscriber to access information about mobile wireless communication devices 100 associated with the master service account. In some embodiments, selecting “Account” allows the subscriber to access information about the master service account. In some embodiments, selecting “Plans & Sharing” allows the subscriber to access information about available service plans and, if additional mobile wireless communication devices 100 are associated with the master service account, whether and how those service plans are shared among mobile wireless communication devices 100 in a device group.

[0760] When a subscriber selects the “Account” partition 10214 in FIG. 70, FIG. 150 illustrates a resulting display, in some embodiments. The display prompts the subscriber for the password associated with the master service account so that the user can view information about the account. After the subscriber enters the password, the subscriber selects “OK.” In some embodiments, a password or other credential is required in order to establish a new account. In some embodiments, a password or other credential is required to be entered in order to associate with an existing account. In some embodiments, a password or credential is associated with a set of permission levels that determine what account information the subscriber/user can enter and/or modify for a new or existing account. In some embodiments, a set of screens presented to the subscriber/user is dependent on the type of credential and/or password entered by the subscriber/user during the account setup process. In some embodiments, additional information is obtained from the subscriber/user to be used for supplemental authentication. In some embodiments, a set of security questions is presented to the user/subscriber through one or more screens on the mobile wireless communication device 100. In some embodiments, answers to at least one of the set of security questions is used for supplemental authorization, e.g., when accessing a service management system or a customer support system.

[0761] FIG. 151 illustrates a representative screen 10850 of information that is presented to the subscriber who provides the correct account password. The subscriber can access information about the account history by selecting either “Transactions and Balance” or “Usage.” The subscriber can access information about billing and payments by selecting “Payment methods,” “Top up now,” or “Configure Top up.” The subscriber can access other information about the account by selecting “Account Information.”

[0762] FIG. 152 illustrates an example of a display 10860 that is presented when the subscriber selects “Payment Methods.” Although FIG. 152 illustrates the situation in which a subscriber pays by credit card, as would be appreciated by a person having ordinary skill in the art, many other payment schemes are possible, including, for example, debit cards, automated clearing house (ACH) transactions, direct debit from an account at a financial institution, PayPal, Scratcher, e-Money, or another form of virtual money. It is also possible that the payment method comprises other consideration, such as credits a subscriber earned in some manner (e.g., by viewing advertisements, for accepting an offer, etc.).

[0763] In the example of FIG. 152, the payment method is a credit card, and the subscriber selects a credit card type and enters information in various fields. The subscriber enters his or her name in the “Name” field; the credit card number in the “Card Number” field; the credit card's expiration date in the “Expiration” fields; the credit card's security code in the “Security Code” field; the subscriber's address in the “Address” field; and a nickname for the credit card in the “Payment Nickname” field. In this example, the subscriber can also choose to remove the credit card or use the credit card as the default payment method. The subscriber completes entry of the payment information by selecting “Update.”

[0764] FIG. 153 illustrates a representative screen 10870 displaying that when the subscriber now selects “Payment methods” in FIG. 151, the credit card entered through the display shown in FIG. 152 is listed (in this example as the default payment method). This screen also invites the subscriber to enter an additional payment method by selecting “Add a new payment method.”

[0765] FIG. 154 is an example of a screen 10880 that is presented, in accordance with some embodiments, when the subscriber selects “Top up now” from the display 10850 shown in FIG. 151. As shown in FIG. 154, the subscriber's master service account balance is $100. The subscriber has the option to add funds to the subscriber's prepay account. As shown in FIG. 154, the subscriber may choose to add $10, $20, $50, or $100 to the account balance. The subscriber's default payment method (“VISA-1111”) is presented as the payment source. By selecting “Top up” with the selections shown in FIG. 154, the subscriber will add $10 to the account balance of $100, thus resulting in a total balance of $110. After selecting “Top up,” the subscriber would be able to select “Refresh Balance” to confirm that the account balance is $110.

[0766] FIG. 155 illustrates an example of a screen 10890 presented when a subscriber selects “Configure Top up” shown in FIG. 151. As shown in the example of FIG. 155, the subscriber may choose to “top up” (e.g., add funds to) the account when the balance is less than a particular value (“Balance is less than _{——————}”), on a particular day each month (“Every month on the _{——————}”), or manually (“No auto top up”). The subscriber selects an amount for the top up and a payment source and selects “Update” to complete the configuration. Although FIG. 155 illustrates an example in which the user tops up the account using a credit card, other sources to top up are possible, including, for example, debit cards, automated clearing house (ACH) transactions, direct debit from an account at a financial institution, PayPal, Scratcher, e-Money, or another form of virtual money. It is also possible that the payment method comprises other consideration, such as credits a subscriber earned in some manner (e.g., by viewing advertisements, for accepting an offer, etc.).

[0767] Although FIGS. 152 through 155 described the configuration and management of a prepay account, it should be noted that, in some embodiments, the subscriber may alternatively configure the master service account to be a post-pay account. In some embodiments, the subscriber configures the master service account to be a post-pay account and is billed later for services. In some embodiments, the subscriber does not have to enter payment information to set up a post-pay account. In some embodiments, the service provider bills the subscriber with a post-pay account at a regular interval (e.g., monthly). In some embodiments, the service provider bills the subscriber after the subscriber has accumulated a particular amount of charges (e.g., after the subscriber has accumulated $5 of charges).

[0768] FIG. 147 illustrates a representative screen 10810 of information that is presented, in accordance with some embodiments, when the subscriber who has established a master service account selects “Lines & Devices” from the screen 330 shown in FIG. 70. As indicated by FIG. 147, there is only one mobile wireless communication device 100 associated with the master service account (“Jeff Master”).

[0769] In some embodiments, the mobile wireless communication device 100 can be preconfigured for use with a new service account or an existing service account or to transfer an existing service account for an existing device to the new mobile wireless communication device 100, e.g., by entering information through access to a website, an application portal or other access method to a service management system for a network operator, service provider, and/or third-party service partner. In some embodiments, during the account setup process, the user/subscriber is presented options to associate the mobile wireless communication device 100 with one or more existing accounts maintained by third-party service partners, e.g., with an Apple ID account, an iTunes account, iCloud account, a Google account, an Amazon account, or account external to the service provider/mobile network operator. In some embodiments, the user/subscriber is presented options to establish an account with a third-party service partner, information for establishing the account is obtained through the UI 101 of the mobile wireless communication device 100, and information for establishing and/or associating with the third-party service partner service account is forwarded to network systems maintained and/or managed by the third-party service partner.

[0770] In some embodiments, the mobile wireless communication device 100 is supplied to the user/subscriber with a default account setup. In some embodiments, the mobile wireless communication device 100 is supplied to the user/subscriber with a “starter” account and a set of one or more initial “trial” services. In some embodiments, the mobile wireless communication device 100 is supplied to the user/subscriber with a portion of account information supplied through an initial account setup process, and additional information is collected from the user/subscriber during a final account setup process. In some embodiments, the mobile wireless communication device 100 is supplied without an assigned phone number, and a phone number is assigned during the setup process. In some embodiments, the user/subscriber is offered a selection of phone numbers from which to select a phone number for the mobile wireless communication device 100. In some embodiments, the mobile wireless communication device 100 is supplied with an assigned phone number, and the user/subscriber is offered an option to replace the assigned phone number with a different phone number. In some embodiments, the user/subscriber is presented options for phone numbers to assign to the mobile wireless communication device 100 based at least in part on information provided during an account setup process. In some embodiments, phone numbers presented for selection to the user/subscriber are based on geographic region information (e.g., based on a determination of the location of the mobile wireless communication device 100 during the account setup process). In some embodiments, phone numbers presented for selection to the user/subscriber are based on geographic information supplied directly or indirectly by the user/subscriber (e.g., a current phone number, address, zip code, area code or other identifying information).

[0771] In some embodiments, the account setup process includes a guided tutorial of screens for how to use the mobile wireless communication device 100. In some embodiments, the guided tutorial can be access by the user/subscriber of the mobile wireless communication device 100 at any time after the account setup process. In some embodiments, account setup process requires that at least one service plan be associated with the mobile wireless communication device 100 (e.g., pre-configured and/or selected during the account setup process). In some embodiments, the account setup process can be separate from a service selection process.

[0772] FIG. 156 illustrates a representative screen 10900 of information this is presented, in accordance with some embodiments, when a user of the mobile wireless communication device 100 selects to add a device to an existing service account. In some embodiments, the user of the mobile wireless communication device 100 is presented an option to add the mobile wireless communication device 100 to an already established service account. In some embodiments, the user of the mobile wireless communication device 100 is presented an option to transfer a service account from a different mobile wireless communication device 100 to the current mobile wireless communication device 100, e.g., when upgrading a mobile wireless communication device 100. In some embodiments, the user of the mobile wireless communication device 100 is presented an option to transfer selected aspects of a service account (e.g., a phone number or credit information) and to enter other aspects for a new service account. In some embodiments, user of the mobile wireless communication device 100 selects the option to add the mobile wireless communication device 100 to an existing service account and selects an actionable button to continue with a service activation process for the mobile wireless communication device 100. In some embodiments, the mobile wireless communication device 100 connects to an activation server in order to continue a process for adding the mobile wireless communication device 100 to an existing service account. In some embodiments, one or more screens are presented through the UI 101 to the user of the mobile wireless communication device 199 to provide for identifying the existing service account with which to associate the mobile wireless communication device 100. In some embodiments, one or more screens are presented to provide for authenticating that the user of the mobile wireless communication device 100 has the authority to associate the mobile wireless communication device 100 with the existing service account. In some embodiments, connection to the activation server uses a “sponsored” service (or “ambient” service) that provides for limited communication with the activation server (and/or one or more other service activation systems) in order to complete establishing an association between the mobile wireless communication device 100 and the existing service account.

[0773] In some embodiments, the mobile wireless communication device 100 provides one or more credentials to the activation server to identify the mobile wireless communication device 100 and/or the user thereof. In some embodiments, the activation server identifies the mobile wireless communication device 100 and/or the user thereof using at least in part the provided one or more credentials and determines one or more existing service accounts with which the mobile wireless communication device 100 can be associated. In some embodiments, one or more credentials provide for a “hardware” based identification of the mobile wireless communication device 100 (e.g., IMEI, MEID, MAC, etc.). In some embodiments, one or more credentials provide for an identification of a “subscriber/user” of the mobile wireless communication device 100 (e.g., IMSI, MSID, MSIDSN, MDN, IPv4/6 address, etc.). In some embodiments, the one or more credentials provide for a combination of device identification and subscriber identification. In some embodiments, the one or more credentials include a login ID and/or a password (or other equivalent security identification). In some embodiments, the one or more credentials include a unique code provided separately to the user of the mobile wireless communication device 100 (e.g., a barcode, a QR code, an authentication key, a pairing code, a sequence of alphanumeric characters, an image for scanning/photographic/optical recognition, a printed card, etc.). In some embodiments, one or more of the credentials are provided with a newly purchased mobile wireless communication device 100. In some embodiments, one or more credentials are provided in advance or after purchase of the mobile wireless communication device 100, e.g., through access to a website, application portal or other online service. In some embodiments, one or more credentials are stored in a cloud-based server and are retrievable by the user of the mobile wireless communication device 100. In some embodiments, one or more credentials are provided on a separate mobile wireless communication device 100 (or other computing device having a display and/or communication capabilities), and the user of the mobile wireless communication device 100 obtains the one or more credentials from the separate mobile wireless communication device 100, e.g., through a wireless, wired, optical, near field communication, infrared or other communication method.

Adding Devices to Master Service Account

[0774] Having used one mobile wireless communication device, hereinafter referred to as the “master device” (“Jeff Master” in FIG. 147), to establish a master service account and configure payment options, including a payment source and, if desired, an automated top up of master service account funds, in some embodiments, the subscriber is able to add other mobile wireless communication devices 100, hereinafter called “child devices,” to the master service account and create a device group. It should be noted that the designation of the mobile wireless communication device used to set up the master service account as a “master device” is for illustrative purposes. As will be appreciated by a person having ordinary skill in the art in light of this disclosure, once a master service account has been established, the capabilities of and permissions granted to the mobile wireless communication devices associated with that master account can be modified. Thus, a device that was originally a “master” device can be made a child device, and a device that was originally a child device can be promoted to a master device. The use of the terms “master” and “child” herein is merely to improve readability. As would be appreciated by a person having ordinary skill in the art, whether a device is a “master” or a “child” is dependent on the capabilities of and permissions granted by a subscriber to that device.

[0775] In some embodiments, the “master” device is referred to as a “primary” device. In some embodiments, the “child” device is referred to a “secondary” device. In some embodiments, the “master” device has a different set of capabilities and/or permissions for managing devices within the device group compared to the “child” device. In some embodiments, the “master” device has a different set of capabilities and/or permissions for modifying aspects of service plans associated with devices in the device group compared to the “child” device. In some embodiments, a device can provide for different users to log into and use the device. In some embodiments, properties of a device can depend on the type of user logged into user the device. In some embodiments, a device can operate as a “master” device when a “master” user logs into the device. In some embodiments a device can operate as a “child” device when a “child/non-master” user logs into the device.

[0776] In some embodiments, the device group is a set of associated devices without a designated “master” device. In some embodiments, an administrator manages service plans and/or permission capabilities for devices in the device group. In some embodiments, different devices in the device group have different permission capabilities that determine what properties of service plans, control of services, sharing of service plans, assignment of service plans, and other service management that a user of the device can set for itself and for other devices in the device group. In some embodiments, different devices can be categorized according to a hierarchy of permission capabilities, e.g., a “master” device that can set and modify a maximum set of properties, a “child” device that can set and modify a minimum set of properties, and “intermediate” devices having a range of service plan configuration setting and modification capabilities in between the “master” device and the “child” device. In some embodiments, the “child” device has no access to set or modify service plan configurations for itself or other devices in the device group. In some embodiments, the “master” device has access to set or modify service plan configurations for itself and all other devices in the device group. In some embodiments, an “intermediate” device has access to set or modify service plan configurations for itself and one or more other devices in the device group.

[0777] In some embodiments, in addition to (or in place of) device permission capabilities, user of mobile wireless communication devices can have different permission capabilities. In some embodiments, an individual user can have a user credential and service capabilities of mobile wireless communication devices that the user can access depend on the user credential. In some embodiments, an individual user can belong to a user group of multiple users, and the user group can have a set of permission capabilities that determines communication service capabilities of users of the user group. In some embodiments, a “master” user or an “administrator” manages permission capabilities for a user or a user group. In some embodiments, the master user controls service account information for service accounts with which devices can be associated. In some embodiments, a user is associated with a service account in addition to (or in place of) associating the device with the service account. In some embodiments a user credential determines access to services for the user when using one or more wireless communication devices 100. In some embodiments, the user provides a user credential to a mobile wireless communication device 100 (e.g., through a UI 101), and service capabilities available to the user for the mobile wireless communication device 100 are determined at least in part by the provided user credential. In some embodiments, a user credential provides for unique identification of the user. In some embodiments, a user credential provides for unique identification of a user group with which the user is associated. In some embodiments, a subscriber management system (e.g., maintained by a network operator, service provider, and/or third-party service partner) includes information about users, user groups, devices, and/or device groups. In some embodiments, an access service system determines service access permissions for a user of a mobile wireless communication device 100 based at least in part on information stored in the subscriber management system and/or provided by the mobile wireless communication device 100 (and/or a user thereof). In some embodiments, a user of the mobile wireless communication device 100 “logs in” to use services of a mobile wireless communication device 100. In some embodiments, the set of service capabilities available to the user of the mobile wireless communication device 100 depends on a set of service permissions associated with the user, the mobile wireless communication device 100, a user group, a device group, or a combination of these. In some embodiments, based on an identification of the user, a set of permission capabilities (e.g., stored in the subscriber management system and/or in the mobile wireless communication device 100) determines at least in part what services (and/or capabilities of services) are available to the user while using the mobile wireless communication device 100.

[0778] In some embodiments, a user provides a “login” credential, e.g., through a UI 101 of the mobile wireless communication device 100, and at least an aspect of the “login” credential is provided to a service management system. In some embodiments, at least a portion of the “login” credential is stored in the mobile wireless communication device 100 and/or in the service management system. In some embodiments, information is communicated by the service management system to the mobile wireless communication device 100 to determine, at least in part, a set of service capabilities the user of the mobile wireless communication device 100 can use while logged into the mobile wireless communication device 100. In some embodiments, service capabilities for the user of the mobile wireless communication device 100 depend on one or more of: an identity of the user, permission capabilities associated with the user, an identity of a user group with which the user is associated, permission capabilities associated with the user group, an identification of the device, permission capabilities associated with the device. In some embodiments, a mobile wireless communication device 100 can operate according to permission capabilities for services associated with a user that is logged into the mobile wireless communication device 100. In some embodiments, a mobile wireless communication device 100 can operate as a “master” device when a “master” user is logged into the mobile wireless communication device 100. In some embodiments, a mobile wireless communication device 100 can operate as a “child” device when a “child” user is logged into the mobile wireless communication device 100. In some embodiments, permission capabilities associated with the user logged into the mobile wireless communication device 100 determine a set of services that the user can access or purchase (e.g., for the device, for a device group, or for another device). In some embodiments, permission capabilities associated with the user logged into the mobile wireless communication device 100 determine what settings (e.g., of the device, of services, of users, of user groups, of device groups) the user can access and set. In some embodiments, a configuration of the mobile wireless communication device 100 is adjusted based on the particular user logged into the mobile wireless communication device 100.

[0779] In a representative embodiment, a “master” user logs into a “child” mobile wireless communication device 100, e.g., a “child” device used by or intended for use by a “child” user. In the representative embodiment, the “master” user modifies a setting for a service associated with the “child” user and/or the “child” device, e.g., to upgrade or downgrade a service. In the representative embodiment, the “master” user logs out of the “child” device, thereby removing capability to modify settings for services (or configure the device to have a limited capability to modify settings for services). In the representative embodiment, the “master” user has capabilities to modify one or more settings of services for the “child” device, while the “child” user does not have capabilities (or different capabilities than the “master” user) to modify the one or more settings of services for the “child” device. In some embodiments, the “child” device acts as a “master” device while the “master” user is logged into the device and as a “child” device when the “child” user is logged into the device. In some embodiments, the device defaults to having a “child” device capability and attains one or more aspects of a “master” device capability when a “master” user logs into the device.

[0780] In some embodiments, user credentials determine at least in part service capabilities available to the user of the mobile wireless communication device 100. In some embodiments, user credentials determine at least in part access to, control of, management of, and/or features of services for the mobile wireless communication device 100. In some embodiments, the user credential provides for an “authorization” of the user to access and use various communication services through the mobile wireless communication device 100. In some embodiments, a service account is associated with a user of the mobile wireless communication device 100. In some embodiments, accounting of service usage for the mobile wireless communication device 100, e.g., by a service processor 115, a service controller 122, a service management system, or a combination of these, associates the service usage for the user with a “user” service account. In some embodiments, service usage accounted for the mobile wireless communication device 100 is associated with the user logged into the mobile wireless communication device 100 and is applied to one or more service accounts of the user. In some embodiments, each particular user of a mobile wireless communication device 100 has access to service capabilities based at least in part on identification of the particular user when logged into the mobile wireless communication device 100. In some embodiments, service usage is assigned to different service accounts for different users of the same mobile wireless communication device 100, e.g., based on which user is logged into the mobile wireless communication device 100 when accruing service usage for services through the mobile wireless communication device 100. In some embodiments, a user logs into a device, receives permissions for using the device, uses one or more services through the device, and accounting of service usage of the one or more services are allocated to particular service accounts (e.g., associated with the user) based at least in part on the particular user logged into the device.

[0781] In some embodiments, a user that purchases a mobile wireless communication device 100 is a “master” user of the mobile wireless communication device 100 by default. In some embodiments, the “master” user can control aspects of services available to and capabilities of the mobile wireless communication device 100. In some embodiments, the “master” user can specify one or more specific users that can log into and use the mobile wireless communication device 100. In some embodiments, the “master” user can specify services and capabilities of the mobile wireless communication device 100 for a specific user of the mobile wireless communication device 100. In some embodiments, the “master” user can determine one or more of: what services the specific user can access through the mobile wireless communication device 100, what aspects of services or capabilities of the mobile wireless communication device 100 the specific user can manage, or what services the specific user of the mobile wireless communication device 100 can purchase and/or download. In some embodiments, the “master” user enters one or more credentials to a service management system, and the service management system provides service management capabilities for the “master” user based at least in part on the entered one or more credentials. In some embodiments, the “master” user enters the one or more credentials through access to a website. In some embodiments, the “master” user enters the one or more credentials through the UI 101 of a mobile wireless communication device 100. In some embodiments, the “master” user enters the one or more credentials through an application of the mobile wireless communication device 100. In some embodiments, the “master” user enters the one or more credentials and configures permission capabilities of a mobile wireless communication device 100 in advance of purchasing (or during a purchase process for) the mobile wireless communication device 100. In some embodiments, the service management system includes a service controller 122, a service processor 115, a service design center 135, or a combination thereof. In some embodiments, the service management system is maintained by a network operator, a service provider, and/or a third-party service partner.

[0782] In some embodiments, a user enters one or more credentials (e.g., device credentials, user credentials, device group credentials, user group credentials) into a mobile wireless communication device 100, e.g., using an application on and/or through the UI 101 of the mobile wireless communication device 100. In some embodiments, the mobile wireless communication device 100 communicates to a service controller 122 the one or more credentials. In some embodiments, the service controller 122 communicates with a network system that determines one or more service policies for the user of the mobile wireless communication device 100 based at least in part on the one or more credential. In some embodiments, the service controller 122 communicates with a network system that provisions one or more service policies based at least in part on the one or more credentials. In some embodiments, the service controller 122 communicates the one or more credentials to the network systems that determine and/or provision service policies for the user of the mobile wireless communication device 100. In some embodiments, provisioning service policies includes setting one or more network-based policies for network access, e.g., in a policy control and rules function (PCRF) network element and/or a policy control enforcement function (PCEF) network element. In some embodiments, provisioning service policies includes setting one or more device-based policies, e.g., policies for a service processor 115 or a PCEF function in the mobile wireless communication device 100. In some embodiments, provisioning service policies includes setting options for purchasing service plans, setting service plan offers, and/or setting permission capabilities for accessing service plans for the mobile wireless communication device 100 and/or the user thereof. In some embodiments, provisioning service policies includes setting management allowances for the mobile wireless communication device 100 and/or the user thereof. In some embodiments, provisioning service policies includes setting notification policies for the mobile wireless communication device 100 and/or the user thereof. In some embodiments, the one or more credentials entered by the user to the mobile wireless communication device 100 determine at least in part an “out of box experience” when initializing, setting up, configuring, and/or using the mobile wireless communication device 100. In some embodiments, an “out of box experience” refers to initializing, setting up, and/or otherwise configuring a mobile wireless communication device 100, e.g., upon initial purchase or receipt by a user of the mobile wireless communication device 100. In some embodiments, the user of the mobile wireless communication device 100 is presented a set of options for selecting a service provider, establishing a service account, selecting a service plan, and/or configuring the mobile wireless communication device 100 based at least in part on the one or more credentials. In some embodiments, initial service provider, service account activation, and/or service plan selection depend on the one or more credentials. In some embodiments, information presented and/or requested through one or more screens on the UI 101 of the mobile wireless communication device 100, e.g., during a device setup or configuration process, depend at least in part on the one or more credentials. In some embodiments, notifications provided to the mobile wireless communication device 100 depend at least in part on the one or more credentials. In some embodiments, a set of service account management options presented to the user of the mobile wireless communication device 100 depends at least in part on the one or more credentials. In some embodiments, a catalog of service plans offered to the user of the mobile wireless communication device 100 depends at least in part on the one or more credentials. In some embodiments, options available within a service plan offered to the user of the mobile wireless communication device 100 depend at least in part on the one or more credentials. In some embodiments, options to customize a service plan offered to the user of the mobile wireless communication device 100 depend at least in part on the one or more credentials.

[0783] In some embodiments, the one or more credentials include a user credential, a device credential, or a combination of these. In some embodiments, the one or more credentials include a “master” credential, a “child” credential, or a combination of these. In some embodiments, the one or more credentials include a common credential, e.g., a credential common to more than one user. In some embodiments, the one or more credentials include a “child” user credential combined with an aspect of a “master” user credential, e.g., used together as a set of credentials. In some embodiments, the user enters a first credential for use during a device configuration and/or service activation process and a second credential for use after establishing the device configuration and/or activating service for the mobile wireless communication device 100. In some embodiments, the first credential is a “master” user credential and the second credential is a “child” user credential. In some embodiments, a “master” user specifies the one or more credentials. In some embodiments, a service management system provides the one or more credentials. In some embodiments, the one or more credentials include elements provided by the “master” user and other elements provided by the service management system. In some embodiments, each user of a mobile wireless communication device 100 is provided a unique credential. In some embodiments, a “master” user specifies a credential for another user of the mobile wireless communication device 100. In some embodiments, the “master” user communicates a credential for another user of the mobile wireless communication device 100 to the service management system. In some embodiments, a first user of the mobile wireless communication device 100 specifies at least a first portion of a credential for the first user, and a second user of the mobile wireless communication device 100 provides at least a second portion of a credential for the first user. In some embodiments, the first user specifies a credential for the first user, and a second user communicates the credential specified by the first user to the service management system. In some embodiments, the second user communicates the credential specified by the first user with another credential (e.g., a credential for a “master” user) to the service management system. In some embodiments, the first user is a “master” user and the second user is a “child” user.

[0784] In some embodiments, the mobile wireless communication device 100 provides one or more screens to the user of the mobile wireless communication device 100 through the UI 101, e.g., during device activation, service activation or other configuration process. In some embodiments, the mobile wireless communication device 100 provides the user an option to join the mobile wireless communication device 100 to a new service account or an existing service account as part of a service account setup process for the mobile wireless communication device 100. In some embodiments, the mobile wireless communication device 100 provides the user an option to join the mobile wireless communication device 100 with an existing service plan or set up a new service plan as part of a service account setup process. In some embodiments, upon selection by the user to join the mobile wireless communication device 100 to an existing service account or to an existing service plan, the mobile wireless communication device 100 presents a screen to determine the type of user, e.g., a “master” user, or “non-master” (child, other) user. In some embodiments, when the user indicates being a “master” user, the mobile wireless communication device 100 presents a request to enter a credential, e.g., to confirm that the user is a “master” user. In some embodiments, when the user indicates being a “non-master” user, the mobile wireless communication device 100 presents a request to enter a credential, e.g., to confirm that the user is a “non-master” user. In some embodiments, the mobile wireless communication device 100, alone or in conjunction with a service management system, uses the credential to confirm the type of user. In some embodiments, the mobile wireless communication device 100 provides a particular “out of box experience” for the user of the mobile wireless communication device 100 based at least in part on the credential. In some embodiments, the service account setup (and/or device setup) process branches to different sets of screens based on the type of user as determined at least in part based on the credential. In some embodiments, the credential entered by the user provides for identification of the user. In some embodiments, the credential entered by the user provides for identification of another user. In some embodiments, the credential entered provides for identification of a service account. In some embodiments, the credential entered provides for identification of a service account and a particular user of the service account. In some embodiments, the credential entered provides for identification of a service account, a particular user, and a set of permissions/levels for the particular user. In some embodiments, the credential entered provides for identification of a service account and a particular user, and the mobile wireless communication device 100, alone or in combination with a service management system, obtains a set of permissions/levels for the particular user. In some embodiments, the set of permissions/levels for the particular user determine at least in part aspects of service account management, device management, service control, available services, and/or service features for the particular user. In some embodiments, the set of permissions/levels provide for a specific level of service control for the user of the mobile wireless communication device 100. In some embodiments, the set of permissions/levels provides for a specific level of device and/or service management. In some embodiments, the set of permissions/levels is stored at least in part in the mobile wireless communication device 100, and/or in a service management system maintained by a network operator, service provider, and/or third party service partner. In some embodiments, a user obtains a substantially equivalent service experience on different mobile wireless communication devices 100 based on the entered credential. In some embodiments, the mobile wireless communication device 100 and/or one or more network elements are configured to provide a particular set of services to the user based at least in part on the entered credential.

[0785] In some embodiments, the mobile wireless communication device 100 provides one or more screens through the UI 101 as part of a service activation process, a device activation process, and/or a device configuration process. In some embodiments, a user of the mobile wireless communication device 100 is presented options to join an existing service account or to establish a new service account. In some embodiments, upon choosing to join the existing service account, the user enters one or more credentials. In some embodiments, based at least in part on the one or more credentials, a type of user is determined (e.g., a “master” user or a “non-master” user). In some embodiments, based at least in part on the one or more credentials, a set of permissions/levels for the user is determined. In some embodiments, a specific “out of box experience” is provided to the user based at least in part on the one or more credentials. In some embodiments, a set of service accounts to join is presented to the user of the mobile wireless communication device 100, e.g., based at least in part on the one or more credentials. In some embodiments, a set of service plans to purchase is presented to the user of the mobile wireless communication device 100, e.g., based at least in part on the one or more credentials. In some embodiments, a set of user groups to join is presented to the user of the mobile wireless communication device 100, e.g., based at least in part on the one or more credentials. In some embodiments, the user of the mobile wireless communication device 100 is automatically joined to a service account, subscribed to a service plan, joined to a device group, joined to a user group, and/or otherwise configured for service based at least in part on the one or more credentials.

[0786] In some embodiments, a default “out of box experience” for a user of a mobile wireless communication device 100 is as a “non-master” user. In some embodiments, a user of the mobile wireless communication device 100 is presented options to join an existing service account or to establish a new service account. In some embodiments, upon choosing to join an existing service account, the user enters one or more credentials, e.g., a credential associated with the existing service account. In some embodiments, the user of the mobile wireless communication device 100 is presented an option to continue the service activation process, the device activation process, and/or the device configuration process as a “master” user or as a “non-master” user. In some embodiments, upon selection of continuing as a “master” user, the user is prompted to enter a credential providing for authorization as a “master” user. In some embodiments, upon entering a “master” credential, the service activation process, the device activation process, and/or the device configuration process continues as for a “master” user rather than as a “non-master” user. In some embodiments, the mobile wireless communication device 100, alone or in combination with a service management system, verifies the credential authorizes the user as a “master” user.

[0787] In some embodiments, a default “out of box experience” for a user of a mobile wireless communication device 100 is as a “master” user. In some embodiments, a user of the mobile wireless communication device 100 is presented options to establish permissions/levels for the mobile wireless communication device 100 and/or for particular user of the mobile wireless communication device 100. In some embodiments, the user enters one or more credentials to indicate “master” user status and to specify aspects of permissions/levels of services and/or capabilities of the mobile wireless communication device 100 and/or for one or more users thereof. In some embodiments, the mobile wireless communication device 100 requires entry of one or more credentials in order to establish or modify permissions/levels of services and/or capabilities of the mobile wireless communication device 100 and/or of one or more users thereof. In some embodiments, the “master” user having supplied one or more credentials that confirm authorization to set permissions/levels, the “master” user specifies one or more of: a device configuration, a device permission/level, a user permission/level, a set of service plans available to a user of the mobile wireless communication device 100, a set of types of service plans available to a user of the mobile wireless communication device 100, a set of applications available to a user of the mobile wireless communication device 100, or a set of restrictions/permissions to apply to service usage for one or more services on the mobile wireless communication device 100. In some embodiments, the “master” user determines service plan types, application types, or aspects of permissions to use services and/or applications through the mobile wireless communication device for the mobile wireless communication device 100 and/or for a user thereof. In some embodiments, the “master” user determines restrictions on service usage of the mobile wireless communication device 100 and/or for a user thereof. In some embodiments, the “master” user configures the mobile wireless communication device 100 for use of one or more particular service plans when used by another user.

[0788] In some embodiments, a “master” user provides one or more credentials to indicate authority to configure service for a mobile wireless communication device 100, and one or more network elements assist in permitting the “master” user to configure the mobile wireless communication device 100. In some embodiments, the “master” user enters one or more credentials. In some embodiments, an activation server (e.g., as part of a service controller 122) verifies the one or more credentials and provides permission for the “master” user to configure service for the mobile wireless communication device 100. In some embodiments, the activation server denies permission for the “master” user to configure service for the mobile wireless communication device 100, when the “master” user does not provide proper credentials.

[0789] In some embodiments, a “master” user provides one or more credentials to indicate authority to configure service for a mobile wireless communication device 100, and one or more device elements assist in permitting the “master” user to configure the mobile wireless communication device 100. In some embodiments, the “master” user enters one or more credentials. In some embodiments, a service processor 115 in the mobile wireless communication device 100 verifies the one or more credentials and provides permission for the “master” user to configure service for the mobile wireless communication device 100. In some embodiments, the service processor 115 denies permission for the “master” user to configure service for the mobile wireless communication device 100, when the “master” user does not provide proper credentials.

[0790] In some embodiments, a “master” user provides one or more credentials to indicate authority to configure service for a mobile wireless communication device 100, and a combination of one or more network elements and one or more device elements assist in permitting the “master” user to configure the mobile wireless communication device 100. In some embodiments, the “master” user enters one or more credentials. In some embodiments, a network-based service controller 122 in combination with a device-based service processor 115 verifies the one or more credentials and provides permission for the “master” user to configure service for the mobile wireless communication device 100. In some embodiments, the network-based service controller 122 in combination with the device-based service processor 115 denies permission for the “master” user to configure service for the mobile wireless communication device 100, when the “master” user does not provide proper credentials.

[0791] In some embodiments, a mobile wireless communication device 100 provides for one or more different users to “log in” to the mobile wireless communication device 100. In some embodiments, the mobile wireless communication device 100 determines service and/or device capabilities for a user of the mobile wireless communication device 100 based at least in part on an identity of the “logged in” user. In some embodiments, the mobile wireless communication device 100 determines service and/or device capabilities for the user of the mobile wireless communication device based at least in part on one or more credentials entered by the user of the mobile wireless communication device 100. In some embodiments, the mobile wireless communication device 100 determines service and/or device capabilities for the user of the mobile wireless communication device based at least in part on a combination of an identity of the “logged in” user and on one or more credentials entered by the “logged in” user of the mobile wireless communication device 100. In some embodiments, the mobile wireless communication device 100 uses an identity of the “logged in” user, one or more credentials provided by the “logged in” user, or a combination thereof to determine at least in part service and/or device management capabilities for the “logged in” user, e.g., permission to establish and/or modify services for the mobile wireless communication device or a user thereof.

[0792] In some embodiments, a “master” user can establish one or more user credentials (master or non-master type) and/or configure permission controls associated with the one or more user credentials. In some embodiments, the “master” user can establish and/or configure user credentials through a service management system. In some embodiments, the “master” user can “log in” to the service management system from a mobile wireless communication device 100. In some embodiments, the “master” user can “log in” to the service management system through a separate computing system. In some embodiments, the “master” user can “log in” to the service management system to establish or configure permission controls for a mobile wireless communication device 100 (e.g., for a device credential associated with the mobile wireless communication device 100). In some embodiments, the “master” user can modify permission controls associated with a mobile wireless communication device 100, a device credential, a user of a mobile wireless communication device 100, a user credential, a device group, a device group credential, a user group, or a user group credential. In some embodiments, the “master” user can promote or demote permission controls for a user or for a mobile wireless communication device 100. In some embodiments, the “master” user can establish, configured and/or modify permissions controls through one or more account management screens of a service management system, e.g., provided by a service design center 135. In some embodiments, the “master” user connects to the service design center 135 through a terminal or through a “sandbox” that provides access to establish and/or modify properties of particular users, user groups, devices, device groups, service plans, and/or service plan catalogs. In some embodiments, the “sandbox” provides for a limited set of capabilities to the “master” user to establish and/or modify service properties, user properties, and/or device properties.

[0793] In some embodiments, a user of a mobile wireless communication device 100 provides a credential (e.g., a user credential, a device credential, a user group credential, or a device group credential) that provides for an identification of the user, of a device, of a user group, of a device group, or of a combination thereof. In some embodiments, the credential provides for determining one or more service management capabilities for the user. In some embodiments, the credential provides for determining or more service capabilities for the mobile wireless communication device 100 or for the user thereof. In some embodiments, the credential provides for determining permissions/levels for the mobile wireless communication device 100 or for a user thereof. In some embodiments, providing a credential includes scanning a QR code or capturing an image of a credential. In some embodiments, an image is captured from a printed object (e.g., paper, card, etc.). In some embodiments, an image is captured from a display screen. In some embodiments, the credential is provided for an image capture through a website. In some embodiments, the credential is provided for an image capture by communicating a message, e.g., an email, to the user of the mobile wireless communication device 100. In some embodiments, the credential is provided for an image capture by communicating to an application on the mobile wireless communication device 100. In some embodiments, providing a credential includes transferring a credential between two different mobile wireless communication devices 100. In some embodiments, the credential is transferred using a wired, wireless (Wi-Fi or cellular), optical, infrared, or near field communication connection.

[0794] In some embodiments, a user of a mobile wireless communication device 100 can join a device or a user of a device to an existing service account or to share a service plan by scanning a QR code or capturing an image of a credential. In some embodiments, the image of the credential is captured from a printed object or from a display screen. In some embodiments, the credential is provided using a fear field communication from a card or from another device. In some embodiments, the credential is provided through a wired connection or through a wireless connection (e.g., Wi-Fi or cellular).

[0795] In some embodiments, during establishment of a new service account or when joining a device or user to an existing service account, an amount of credit is provided to the service account (e.g., for the user or for the device or both). In some embodiments, a user of a mobile wireless communication device 100 provides credit information, e.g., by entering information through one or more screens displayed through the UI 101 of the mobile wireless communication device 100. In some embodiments, a user provides credit to a service account by scanning a pre-paid card, a QR code, a bar code, or capturing an image using the mobile wireless communication device 100. In some embodiments, the user provides credit to the service account by receiving a near field communication. In some embodiments, credit information is captured by the mobile wireless communication device 100 and subsequently transferred to a service management system in the network, e.g., an accounting, billing, and/or charging system. In some embodiments, the credit information is transferred to a third-party management system (e.g., an iTunes of Application Store account). In some embodiments, a website provides a QR code to the user of the mobile wireless communication device 100 that can be scanned by the mobile wireless communication device 100. In some embodiments, a separate computing device scans the QR code that is displayed on the mobile wireless communication device 100. In some embodiments, the mobile wireless communication device 100 scans the QR code displayed on a separating computing device. In some embodiments, credit information is transferred between mobile wireless communication devices 100 using a wired or wireless connection, e.g., a Wi-Fi, Bluetooth, cellular access, USB, infrared, or near field communication connection. In some embodiments, credit information is transferred from a third-party management system to a billing system of a service provider and/or network operator.

[0796] In some embodiments, a network system, e.g., a service controller 122 or an activation server, cooperates with one or more device agents, e.g., as part of a service processor 115, in a mobile wireless communication device 100 to join the mobile wireless communication device 100 to an existing service account. In some embodiments, the network system cooperates with the one or more device agents based on a set of inputs received through the UI 101 of the mobile wireless communication device 100. In some embodiments, the mobile wireless communication device 100 is pre-configured, e.g., during manufacture, distribution or at a sales point, to include a sponsored or ambient service access to the network system, e.g., to an activation server. In some embodiments, the sponsored or ambient service access provides for a limited service usage amount in time and/or data units available for the mobile wireless communication device 100 to communicate. In some embodiments, the sponsored or ambient service access provides for communication with particular network endpoints, network addresses and/or websites. In some embodiments, the sponsored or ambient service access provides for communication through particular wireless radio access network systems of one or more network operators and/or service providers. In some embodiments, the sponsored or ambient service access provides for connection to and communication with one or more network elements for device activation, service plan selection, service plan activation, device management and/or service plan management. In some embodiments, the mobile wireless communication device 100 communicates one or more credentials, e.g., a device credential, a user credential, a device group credential, a user group credential, or a combination of these, to the one or more network elements. In some embodiments, the one or more network elements determine the mobile wireless communication device 100 has limited access permission to communicate with the one or more network elements, e.g., with an activation server, for device activation and/or service activation based on the one or more credentials. In some embodiments, the mobile wireless communication device 100 is supplied to a user pre-configured to communicate with the activation server. In some embodiments, the mobile wireless communication device 100 communicates a device credential to the activation server, which in turn recognizes the device credential is associated with limited access permissions to communicate with the activation server. In some embodiments, the activation server cooperates with one or more device agents in the mobile wireless communication device 100 to provide an offer to join the mobile wireless communication device 100 to an existing service account through the sponsored or ambient service connection. In some embodiments, the one or more device agents accept user input, e.g., through the UI 101 of the mobile wireless communication device 100, to join the mobile wireless communication device 100 to an existing service account. In some embodiments, the offer from the activation server to join an existing service account includes one or more specific service accounts to which the mobile wireless communication device 100 can join. In some embodiments, the activation server provides the one or more specific service accounts based on the device credential. In some embodiments, the one or more device agents direct the mobile wireless communication device 100 to an activation server website. In some embodiments, the activation server website accepts user input to join the mobile wireless communication device 100 to an existing service account. In some embodiments, the one or more device agents provide an application on the mobile wireless communication device 100 that interfaces to the activation server (e.g., by communicating with an application portal). In some embodiments, the one or more device agents provide a configuration natively on the UI 101 of the mobile wireless communication device 100 through which information can be displayed to the user and collected from the user to join the mobile wireless communication device 100 to the existing service account. In some embodiments, the one or more device agents collect input from the user through the UI 101 using an application and/or native UI configuration and communicate at least a portion of the collected information to a network element, e.g. the activation server. In some embodiments, the activation server accepts information input by the user using the application and/or native UI configuration from the one or more device agents of the mobile wireless communication device, e.g., for joining the mobile wireless communication device 100 to the existing service account.

[0797] In some embodiments, the one or more network elements, e.g., the activation server, obtain a first set of credentials, e.g., a device credential and/or a device group credential, from a mobile wireless communication device 100 and subsequently obtain a second set of credentials, e.g., a user credential, a user group credential, and/or a service account credential. In some embodiments, the one or more network elements use the first set of credentials to determine authorization to provide limited network access to the mobile wireless communication device 100 for device activation and/or service activation. In some embodiments, the one or more network elements use the first set of credentials to determine one or more service accounts to which to offer the mobile wireless communication device 100 to join. In some embodiments, the one or more network elements provide to the mobile wireless communication device 100 an offer to join the mobile wireless communication device 100 to an existing service account without specifying particular service accounts. In some embodiments, the one or more network elements provide to the mobile wireless communication device 100 an offer to join the mobile wireless communication device 100 to a set of one or more particular service accounts. In some embodiments, the user of the mobile wireless communication device 100 chooses to join the mobile wireless communication device 100 to an existing service account, e.g., an unspecified service account or a specific service account. In some embodiments, the one or network elements obtain a request from the mobile wireless communication device 100 to join an existing service account. In some embodiments, the one or more network elements obtain a second set of credentials, e.g., a user credential, a user group credential, and/or a service account credential from the user of the mobile wireless communication device 100. In some embodiments, the one or more network elements uses the second set of credentials to determine, at least in part, authorization of the mobile wireless communication device 100 and/or the user thereof to join the mobile wireless communication device 100 to an existing service account. In some embodiments the second set of credentials includes a user credential specific to the user of the mobile wireless communication device 100. In some embodiments, the second set of credentials includes a user credential different from the user of the mobile wireless communication device 100, e.g., the user enters a different user's credential. In some embodiments, the second set of user credentials includes a password. In some embodiments, the password corresponds to an existing service account to which the user seeks to join the mobile wireless communication device 100. In some embodiments, the second set of credentials includes a “master” user credential. In some embodiments, the one or more network elements requires that the second set of credentials includes a “master” user credential in order to join the mobile wireless communication device 100 to an existing service account. In some embodiments, the second set of credentials includes only the “master” user credential. In some embodiments, the second set of credentials includes a user credential, and permissions/levels associated with the user credential determine, at least in part, whether the user is authorized to join the mobile wireless communication device 100 to an existing service account. In some embodiments, the one or more network elements use the second set of credentials to determine a set of specific service accounts to which the mobile wireless communication device 100 can be joined. In some embodiments, the one or more network elements communicate the set of specific service accounts to the mobile wireless communication device 100. In some embodiments, the one or more network elements obtain a selection of one of service accounts in the set of specific service accounts with which the user indicates to join the mobile wireless communication device 100.

[0798] In some embodiments, one or more network elements, e.g., an activation server, uses one or more credentials to identify a mobile wireless communication device 100 and/or a user thereof and associated the device and/or user with a service account. In some embodiments, the activation server provisions network elements and/or the mobile wireless communication device 100 in order for the mobile wireless communication device 100 to use one or more services in association with the service account. In some embodiments, the activation server retrieves information about the mobile wireless communication device 100 and/or user thereof from one or more databases using the one or more credentials. In some embodiments, the one or more credentials include a device credential, a device group credential, a user credential, a user group credential, a “master” user credential, a service account credential, and/or other credentials to identify and/or authorize the mobile wireless communication device 100 and/or user thereof to join with an existing service account (and/or establish a new service account). In some embodiments, the activation server uses the retrieved information to determine provisioning for the mobile wireless communication device 100 and/or the user thereof In some embodiments, the activation server provisions permissions in one or more network elements and/or the mobile wireless communication device 100 to control access to wireless access networks and/or services provided through wireless access networks. In some embodiments, the activation server provisions permissions into an access control apparatus, e.g., in a wireless access network or a wireless core network. In some embodiments, the activation server provisions an accounting apparatus, e.g., in the wireless network, to associate the mobile wireless communication device 100 with the existing service account. In some embodiments, the activation server provisions the accounting apparatus to include service usage for one or more services used by the mobile wireless communication device 100 with the existing service account. In some embodiments, the activation server determines whether the existing service account is configured to allow the mobile wireless communication device 100 to join the existing service account. In some embodiments, the activation server determines whether the existing service account is configured to allow additional mobile wireless communication devices 100 to join the existing service account. In some embodiments, permissions for the existing service account limit the number of mobile wireless communication devices 100 that can be joined with the existing service account. In some embodiments, permissions for the existing service account restrict joining to a particular device group, a particular type of device, and/or a particular user group (set of users). In some embodiments, the activation server provides for a notification message to be sent to a particular mobile wireless communication device 100, e.g., a “master” user's device, or to a particular user, e.g., to a “master” user of one or more devices; the notification message indicating that a request by the mobile wireless communication device 100 to join with the existing service account. In some embodiments, the activation server joins the mobile wireless communication device 100 to the existing service account only when receiving an “affirmative” response from the “master” user device and/or the “master” user. In some embodiments, the existing service account is associated with one or more “master” users and/or “master” user devices. In some embodiments, notification messages for joining an existing service account are sent to one or more of the “master” users and/or “master” user devices by the activation server when a mobile wireless communication device 100 requests to join the existing service account.

[0799] In some embodiments, one or more network elements, e.g., an activation server, provision one or more other network elements, e.g., network access control server/database, service-billing server/database, service accounting server/database, and/or service notification server/database, to join a mobile wireless communication device 100 (and/or user thereof) with an existing (or new) service account. In some embodiments, provisioning includes adding one or more credentials, e.g., a device credential, a user credential, or a combination thereof, to a permissions database, associating the mobile wireless communication device 100 (and/or user thereof) with the existing (or new) service account. In some embodiments, provisioning includes adding one or more credentials to an accounting database, associating the mobile wireless communication device 100 (and/or user thereof) with the existing (or new) service account. In some embodiments, provisioning includes adding one or more credentials to a notification database, associating the mobile wireless communication device 100 (and/or user thereof) with the existing (or new) service account. In some embodiments, provisioning includes adding one or more credentials to a billing database, associating the mobile wireless communication device 100 (and/or user thereof) with the existing (or new) service account.

[0800] FIG. 156 illustrates a display 10900 that results, in some embodiments, when the subscriber attempts to use a child device that is not yet associated with the master device, any other devices, a device group, or the master service account. In this particular example, the information presented through the child device is the same as the information presented through the master device in the example of FIG. 148. As would be appreciated by a person having ordinary skill in the art, the information presented may differ, and the child device may display more or less information than the master device. Because the subscriber has already established a master service account, as described above, the subscriber selects “Existing Account” to indicate that the subscriber wishes to add the child device to the master service account. The subscriber selects “Next” to proceed.

[0801] In accordance with some embodiments, FIG. 157 illustrates a representative display 10910 that results when the subscriber selects “Next” in FIG. 156. The child device presents information that enables the subscriber to “link” (i.e., pair, associate, etc.) the child device with the master device and to add the child device to the master service account. In some embodiments, such as the example shown in FIG. 157, the information is displayed on the child device's user interface. In some embodiments, the information is included in a text message or an e-mail message received by the child device or by the master device or by the subscriber. In some embodiments, for security purposes, the provided information expires after a particular time period, and the display provides a countdown timer to indicate how long the subscriber has to complete the linking procedure. In some embodiments, there is no countdown timer. In some embodiments, the information that allows the subscriber to link the child device to the master service account is a bar code, a quick response (QR) code, or a sequence of alphanumeric characters (e.g., a password). In some embodiments, the information is an instruction for the subscriber to perform some type of action, such as holding the child device in proximity to the master device to allow the information transfer from the child device to the master device. There are many ways the information can be transferred, including, for example, infrared beaming, Bluetooth exchange, and text message exchange. As would be appreciated by a person having ordinary skill in the art, there are many types and forms of information that can enable the linking of the child device to the master device (and to the master service account), and the examples provided herein are not intended to be limiting.

[0802] FIG. 158 illustrates a representative screen 10920 of information that is presented on the master device, in accordance with some embodiments, when a subscriber attempts to link a child device to the master device (and master service account). In the example of FIG. 158, the subscriber is instructed to enter, through the master device user interface, the information that enables the subscriber to link the child device to the master device. In some embodiments, the subscriber enters the information by using the master device to scan the information presented through the child device (e.g., by using the master device to scan a barcode, QR code, or alphanumeric string displayed on the child device). In some embodiments, the subscriber manually enters (e.g., by typing) the information into the master device. In some embodiments, the subscriber holds the master device in proximity to the child device to allow a near-field communication transfer, a beam transfer, or some other wireless information transfer to occur. As would be appreciated by a person having ordinary skill in the art, the information transfer could also be accomplished through a wired transfer, e.g., through a personal computer or another device connected by a USB connection, an Ethernet connection, or another wired connection. As would be appreciated by a person having ordinary skill in the art, there are many ways to enter the information to allow the child device to join the master account, and the examples provided herein are not intended to be limiting.

[0803] FIG. 159 illustrates a representative screen 10930 displayed by the master device after the subscriber has entered the information that allows the child device to be linked to the master device and its associated master service account. In this example, the pairing code shown in FIG. 157 has been transferred to the master device, whether by manual entry, by scanning, or by some other method. The subscriber completes the joining process by selecting “Add now.”

[0804] FIG. 160 illustrates a representative screen 10940 displaying an example message presented through the master device's user interface after the subscriber has selected “Add now” in FIG. 159. The master device message indicates that the subscriber has successfully added a new device to the master service account. The message also invites the subscriber to learn how to share service plans among devices associated with the master service account.

[0805] FIG. 161 illustrates a representative screen 10950 displaying an example message presented through the child device's user interface after the subscriber has selected “Add now” from FIG. 159. The child device indicates that it has been added to the master service account.

[0806] FIG. 162 illustrates a representative screen 10960 displaying that, in accordance with some embodiments, the subscriber can view all devices associated with the master service account by selecting “Lines & Devices” from the display of FIG. 70. As illustrated by FIG. 162, there are two devices associated with the master service account: “Jeff Child” and “Jeff Master.” Although FIG. 162 presents an example in which there is only one master device in the device group, there can be more than one master device in a device group, and each master device can be configured so that it can, but need not necessarily, manage child devices in the device group.

[0807] In addition to establishing multiple master devices and permissions associated with each, the subscriber can establish permission privileges for added devices. FIG. 163 illustrates a representative screen 10970 displaying an example of permission privileges the subscriber can grant to a child device in accordance with some embodiments. In some embodiments, a subscriber grants full control to an added device. In some embodiments, a device with full control can manage the master service account, add or remove devices from the master service account, and purchase service plans. In some embodiments, a device with full control has the capabilities of a master device. In some embodiments, a subscriber grants an added device the ability to purchase service plans, but not the ability to configure or manage the master service account or the devices in the device group. In some embodiments, a subscriber grants no privileges to an added device. In some embodiments, a user of a device with no privileges cannot purchase service plans or view or manage the master service account.

[0808] FIG. 164 illustrates a representative screen 10980 of information presented through the UI 101 of the mobile wireless communication device 100 that summarizes details for the subscriber “Jeff Dev.” In some embodiments, the subscriber has full control of permissions and can purchase service plans, share service plans, assign service plans, manage service plans, and otherwise administrate aspects of service plans associated with the mobile wireless communication device 100. In some embodiments, the subscriber can also manage aspects of service plans for other mobile wireless communication devices 100, e.g., those associated with a device group for which the mobile wireless communication device 100 has full permissions control. In some embodiments, the permissions control for the mobile wireless communication device 100 (or for another device to which the permissions control screen can be directed) can be altered by selecting the “Change” button illustrated in FIG. 164. In some embodiments, a set of parental controls can be instituted for the mobile wireless communication device 100 and/or the subscriber and/or a particular user. In some embodiments, parental controls can be applied to wireless cellular network connections only. In some embodiments, parental control scan be applied to both wireless cellular network connections and wireless local area network (e.g., Wi-Fi) connections. In some embodiments, particular wireless networks on which to apply and enforce parental control are selected using one or more options through the UI 101 of the mobile wireless communication device 100. In some embodiments, a time period is selected that determines when to apply particular parental controls to the mobile wireless communication device 100 or to services accessible by a user of the mobile wireless communication device 100.

[0809] In some embodiments, permission controls for a mobile wireless communication device and/or a user thereof can determine a set of applications that can be used and/or configurations for the set of applications. In some embodiments, the set of applications is restricted to service usage with particular service usage buckets. In some embodiments, the set of applications is restricted to access particular network destination endpoints and/or website addresses and/or application portals. In some embodiments, the set of applications is restricted to subset of users of the mobile wireless communication device 100. In some embodiments, a “master” user of the mobile wireless communication device 100 has access to use any application on the mobile wireless communication device 100, while a “non-master” user of the mobile wireless communication device 100 has access to use only a specific “white list” of applications on the mobile wireless communication device 100, and/or the “non-master” user of the mobile wireless communication device 100 is denied access to use a specific “black list” of applications on the mobile wireless communication device 100. In some embodiments, permission controls for use of applications by a “non-master” user of the mobile wireless communication device 100 can be combined with permission controls based on other service usage criteria, e.g., based on time of day/day of week/type of day, based on network type, based on available service plans, and/or based on available service usage amounts within service plans. In some embodiments, the mobile wireless communication device 100 and/or one or more network elements maintain a “white list” and/or a “black list” of applications. In some embodiments, a device agent (e.g., of a service processor 115) in the mobile wireless communication device 100 detects an attempt to use and/or an actual use of a particular application by the mobile wireless communication device 100 and/or by a “non-master” user thereof. In some embodiments, the device agent compares the particular application to a “white list” of allowed applications for the mobile wireless communication device 100 (and/or for the particular “non-master” user thereof) and blocks use of the particular application when the particular application is not on the “white list” of allowed applications. In some embodiments, use of applications on the mobile wireless communication device 100 (and/or by a “non-master” user of the mobile wireless communication device 100) is restricted to a set of applications provided in the “white list” of applications. In some embodiments, a “master” user configures the “white list” of applications and/or the “black list” of applications through the UI 101 of a mobile wireless communication device 100, through an application on the mobile wireless communication device 100, and/or through a website accessible through the mobile wireless communication device 100. In some embodiments, the “white list” of allowed applications and/or the “black list” of disallowed applications are configured though a service management system, e.g., the service design center 135. In some embodiments, one or more network elements, e.g., the service controller 122, detects use of an application by the mobile wireless communication device 100 (and/or a “non-master” user thereof), compares the application to a “white list” of allowed applications for the mobile wireless communication device 100 (and/or a “non-master” user thereof), and blocks data traffic for the application when the application is not on the “white list” of allowed applications. In some embodiments, permission controls for access to network endpoints and/or websites can be applied to the mobile wireless communication device 100 and/or a “non-master” user thereof as described above for applications. In some embodiments, a “white list” of allowed network endpoints and/or websites can be maintained and used to apply permission controls as described herein for applications. In some embodiments, a “black list” of disallowed network endpoints and/or websites can be maintained and used to apply permission controls as described herein for applications.

[0810] In some embodiments, a device agent (e.g., of a service processor 115) of the mobile wireless communication device 100 detects an attempt to download an application by the mobile wireless communication device 100 and/or by a “non-master” user thereof. In some embodiments, the device agent compares the application to a “white list” of allowed applications and permits download of the application only if the application is on the “white list” of allowed applications. In some embodiments, device agent compares the application to a “white list” of allowed applications and blocks download of the application if the application is not on the “white list” of allowed applications. In some embodiments, the device agent compares the application to a “black list” of disallowed applications and blocks download of the application if the application is on the “black list” of disallowed applications. In some embodiments, applications can be downloaded from a specific set of servers/websites only, e.g., as specified in the “white list” of allowed applications or in a separate “white list” of allowed servers and/or websites. In some embodiments, downloading of an allowed application can be blocked when the mobile wireless communication device 100, and/or a “non-master” user thereof, attempts to download the application from a disallowed server/website. In some embodiments, the mobile wireless communication device 100 and/or one or more network elements maintain a “black list” of disallowed servers/websites.

[0811] In some embodiments, one or more device agents on a first mobile wireless communication device 100, and/or one or more network elements, alone or in combination, monitor service usage of applications for the first mobile wireless communication device 100 (and/or of a “non-master” user thereof). In some embodiments, notification of attempted or actual usage of one or more applications by the first mobile wireless communication device 100 (and/or by the “non-master” user thereof) is provided to a second mobile wireless communication device 100 and/or to a “master” user, e.g., for a device group to which the first and second mobile wireless communication devices belong. In some embodiments, the notification message to the second mobile wireless communication device 100 (and/or to the “master” user thereof) includes an option to approve or disapprove usage of the one or more applications by the first mobile wireless communication device 100 (and/or for the “non-master” user thereof). In some embodiments, the one or more device agents use a “white list” of allowed applications and/or a “black list” of disallowed applications to determine, at least in part, when to provide for a notification message be sent to the second mobile wireless communication device 100 (and/or to the “master” user thereof). In some embodiments, a “master” user configures the first mobile wireless communication device 100 to provide notification messages about service usage activities for the first mobile wireless communication device 100 and/or for particular “non-master” users thereof. In some embodiments, the “master” user is notified of an attempted use, an actual use, an attempt to download, and/or an actual download of an application. In some embodiments, notification is provided to the “master” user at least in part based on a “white list” of allowed application and/or a “black list” of disallowed applications. In some embodiments, a notification message is provided to the second mobile wireless communication device 100, and/or to a “master” user thereof, to approve or disapprove download of an application by the first mobile wireless communication device 100, and/or by a “non-master” user thereof.

[0812] In some embodiments, a “master” device obtains or can view a service usage log and/or service usage history for a “non-master” device. In some embodiments, the “master” device obtains or can view a set of service activities undertaken by a “non-master” device (and/or a “non-master” user thereof). In some embodiments, the “master” device (and/or the “master” user for a device in a device group) can receive copies of messages (e.g., SMS text messages and/or MMS multi-media messages) sent and/or received by a “non-master” device (and/or by a “non-master” user of a device in a device group). In some embodiments, the “master” device can obtain copies of voice messages, websites visited, applications used, and/or other logs of service activities for a “non-master” device (and/or for a “non-master” user thereof).

[0813] In some embodiments, a “master” mobile wireless communication device 100 (and/or a “master” user thereof) maintains a “white list” of allowed applications for a “non-master” mobile wireless communication device 100 (and/or for a “non-master” user thereof). In some embodiments, the “master” mobile wireless communication device 100 (and/or the “master” user thereof) maintains a “black list” of disallowed applications for the “non-master” mobile wireless communication device 100 (and/or for the “non-master” user thereof). In some embodiments, the “master” user is permitted to add to, modify, delete from, update, or otherwise change the “white list” and/or the “black list” for the “non-master” device (and/or for the “non-master” user thereof). In some embodiments, changes to the “white list” and/or to the “black list” are provided to the “non-master” device by provisioning a policy to the “non-master” device and/or to one or more network elements to enforce the policy. In some embodiments, the “master” device (and/or “master” user thereof) provides one or more credentials, e.g., an application credential or an application identifier, to one or more network elements, the one or more credentials providing authorization for provisioning the “non-master” device to detect and control use of the application. In some embodiments, the “master” device (and/or the “master” user thereof) selects a “white list” of allowed applications from a pre-configured “white list” of allowed applications, e.g., through a service management system, directly from a “master” device, through an application on the “master” device, or through a website. In some embodiments, the service management system is maintained by a network operator, a service provider, or a third-party service partner. In some embodiments, the service management system provides a set of pre-configured “white lists” of applications to the “master” device/user from which to select a “white list” of allowed applications for a “non-master” device/user. In some embodiments, the set of pre-configured “white lists” of allowed applications is organized based on particular criteria, e.g., for particular networks, based on particular types of usage, for particular device types, or based on age appropriateness. In some embodiments, the set of pre-configured “white lists” of allowed applications provides for a particular set of service activities according to a particular service activity category, e.g., “white lists” of allowed applications for voice, data, video, social networking, gaming, etc. In some embodiments, the “white lists” of allowed applications include a combination of applications appropriate for a particular age range and/or based on one or more application ratings. In some embodiments, the “white list” of allowed applications includes a set of applications recommended for an age range or a particular type of “non-master” user. In some embodiments, the “white list” of allowed applications provides a pre-configuration for a mobile wireless communication device 100 for a “non-master” user having a combination of applications, e.g., one or more gaming applications, educational applications, limited voice applications, limited messaging applications. In some embodiments, the “white list” of allowed applications includes permission limits that apply to the one or more applications included in the “white list” of allowed applications, e.g., pre-configured time of day/day of week restrictions. In some embodiments, the “master” device/user can customize a pre-configured “white list” of allowed applications, e.g., to select one or more subsets of applications to include in the white list of allowed applications. In some embodiments, the “master” device/user provides one or more credentials to indicate authorization to customize the pre-configured “white list” of allowed applications. In some embodiments, the “master” device/user can configure the “non-master” device to download automatically a set of applications according to a pre-configured “white list” of allowed applications for use on the “non-master” device.

[0814] In some embodiments, a network system, e.g., an application store maintained by a third-party service partner, provides for selection of application packages for mobile wireless communication devices 100. In some embodiments, the network system provides one or more pre-configured packages of applications. In some embodiments, the network system provides information for the one or more pre-configured packages of applications, e.g., an indication of application type, an indication of age appropriateness for an application, a cost for an application (or use thereof), or other criteria by which a “master” user can determine to select one of the pre-configured packages of applications to download to a “non-master” device. In some embodiments, the network system provides recommendations of pre-configured packages of applications for different categories of users and/or devices, e.g., based on an age appropriate combination of applications included in the pre-configured package of applications. In some embodiments, the “master” user can review, select, purchase, and/or download a pre-configured package of applications for a mobile wireless communication device 100, e.g., for a “non-master” device and/or for a “non-master” user of the device. In some embodiments, the network system provides one or more sponsored applications or packages of sponsored applications. In some embodiments, the “master” user can review, select, purchase and/or download one or more sponsored applications and/or application packages for the mobile wireless communication device 100, e.g., for a “non-master” device and/or for a “non-master” user of the device. In some embodiments, the service usage of sponsored applications can be accounted for separately from service usage of non-sponsored applications. In some embodiments, accounting for service usage of sponsored applications uses one or more device agents (e.g., in a service processor 115) of the mobile wireless communication device 100 on which the sponsored applications are used. In some embodiments, accounting for service usage of sponsored applications includes monitoring service usage of sponsored applications by one or more network elements. In some embodiments, accounting for service usage of sponsored applications includes determining an offset or deduction of service usage for a service account with which the mobile wireless communication device 100 is associated. In some embodiments, service usage for sponsored applications is accounted to a service account associated with a sponsor. In some embodiments, sponsored service usage for sponsored service applications provides for a reduced cost or no cost use of the application on the mobile wireless communication device 100, and/or by a user thereof.

[0815] FIG. 165 illustrates a representative notification message overlay 10990 that can be presented through the UI 101 of the mobile wireless communication device 100 in response to selecting the “Change” permissions button of FIG. 164. In some embodiments, as illustrated, full control of permissions or no control of permissions may be selectable. In some embodiments, limited control of permissions may also be selectable.

[0816] FIG. 166 illustrates a representative screen 1000 that provides for a user of the mobile wireless communication device 100 to establish parameters for a “curfew” that can affect services available to a user of the mobile wireless communication device 100. A “curfew” can represent a time period during which access to services can be restricted or altered from those services available during an unrestricted time period. Restrictions can be applied to one or more service plans subscribed to (and/or accessible by) the user of the mobile wireless communication device 100. The curfew is customizable and the user of the mobile wireless communication device 100 may provide a label for the customized curfew. The user can select particular service plans, e.g., a voice plan, a text-messaging plan, and a data access plan, to which restrictions may be applied. Particular time periods can be specified for when the restrictions apply. In some embodiments, time periods can be specified by selecting days of the week to apply the curfew restrictions as illustrated in FIG. 166.

[0817] FIG. 167 illustrates a representative screen 1010 that provides for the user of the mobile wireless communication device 100 to set times of day during which the curfew restrictions apply. In some embodiments, times of day for each day of the week may be set individually. In some embodiments, times of day for specific dates may be set individually. In some embodiments, specific times, e.g., 6:30 P.M. to 9:30 P.M., can be set. In some embodiments, specific time periods can span more than one day and/or specific dates. FIG. 167 illustrates selectable “buttons” to specify days and hours. Alternative input displays, e.g., sliders, menus, lists, arrays, or other means to display and select days, dates, hours and other time periods may also be used. In some embodiments, curfews (or other permission control constructs) use information on schedules (e.g., holidays, school years, work schedules, etc.) to present options to specify time periods to apply (or allow) restrictions. In some embodiments, white lists are provided that can supersede curfews and permissions control to allow full access to one or more services to communicate with particular users and/or numbers and/or network addresses and/or email addresses and/or messaging identifiers. In some embodiments, black lists are provided that restrict access to services irrespective of permissions control settings.

[0818] FIG. 168 illustrates a representative screen 1015 that provides for the user of the mobile wireless communication device 100 to set exceptions to curfews. In some embodiments, the representative screen 1015 can be presented in response to the user of the mobile wireless communication device 100 selecting the “Edit” button illustrated on screen 1010 shown in FIG. 167. In some embodiments, the user of the mobile wireless communication device can retrieve or add a “white list” of specific phone numbers and/or email addresses, SMS/MMS address identifiers, and/or specific applications. The “white list” can over-ride an established curfew, e.g., permitting phone calls, emails, messages to specific individuals or accounts, and/or use of specific applications.

Sharing Service Plans

[0819] Having added another device to the master service account, the subscriber can manage all devices in the device group and can share one or more service plans among devices in the device group. The subscriber can also assign a service plan from a master device to a child device. In some embodiments, service plans are designed to be shareable, assignable (see below), or not shareable. In some embodiments, service plans are designed using a service design center, e.g., the service design center 135 illustrated in FIG. 1, and the sharing properties are entered through the service design center. In some embodiments, a service plan has an attribute that determines whether it is shareable. In some embodiments, service plans that are shareable are automatically shared when devices are added to the master service account. In some embodiments, service plans that are shareable are not automatically shared when devices are added to the master service account.

[0820] FIG. 169 illustrates a representative screen 1100 presenting an example of a service plan bundle, called “Starter Plan,” that has been purchased from the master device. The illustrated service plan bundle includes service plans for 100 text messages, 20 hours of application use, and 250 minutes of phone calls.

[0821] In some embodiments, the subscriber can view information about shared service plans and can share service plans by selecting “Plans & Sharing” from the screen shown in FIG. 70. FIGS. 170 and 11C illustrate that before sharing the “Starter Plan,” all of the “250 Minutes of Talk” service plan is allocated to the master device (“Jeff Master”), and that none of the “250 Minutes of Talk” service plan is allocated to the child device that is now also associated with the master service account. In some embodiments, selecting the “250 Minutes of Talk” service plan in the screen 1110 shown in FIG. 170, launches the screen 1120 shown in FIG. 171. By selecting “Share this plan” from the screen 1120 illustrated in FIG. 171, the subscriber can share the “250 Minutes of Talk” service plan with another device.

[0822] FIG. 172 illustrates a representative screen 1140 presenting an example of plan sharing options available to the subscriber, in some embodiments. In the example shown in FIG. 172, the subscriber can choose “Simple” or “Advanced” sharing, and the subscriber can choose which device(s) in a device group will be able to share the selected service plan. In some embodiments, “Simple” sharing allows all selected devices to share the service plan with no limits on their individual usage. Thus, all selected devices share in the usage of an aggregate amount of a resource (e.g., a total number of bytes or a total period of time). FIG. 173 illustrates a representative screen 1150 displaying that, after a simple share of “250 Minutes of Talk,” both the master device (“Jeff Master”) and the child device (“Jeff Child”) are authorized to use up to 250 minutes of the service plan.

[0823] Rather than simply sharing a service plan among multiple mobile wireless communication devices, which may not prevent “hogging” of the allocation provided by the service plan by individual devices, it may be desirable to allocate discrete portions of a service plan to different mobile wireless communication devices within the device group. For example, a parent who has purchased a service plan that includes 500 voice minutes and 100 text messages per month might want to allocate 100 of the voice minutes and 40 text messages to each of her two children's mobile phones. FIG. 174 illustrates a representative screen 1160 for “Advanced” service plan sharing in accordance with some embodiments. As shown in FIG. 174, the subscriber can make less than all of the shared service plan available to mobile wireless communication devices in the device group. In FIG. 174, the master device is allowed to use the entire service plan allocation, whereas the child device is not allowed to use any of the service plan allocation. In FIG. 175, however, the subscriber has enabled the child device to use up to fifty percent of the “250 Minutes of Talk” service plan allocation. The master device is still allowed to use up to all of the “250 Minutes of Talk” service plans allocation, however. Thus, the master device may still “hog” the service plan's allocation, but the subscriber has ensured that the child device cannot use more than half of the service plan's allocation.

[0824] FIG. 176 illustrates a representative screen 1180 displaying that, following the “Advanced” share illustrated in FIG. 175, the master device may use up to all of the “250 Minutes of Talk” service plan allocation, whereas the child device may only use up to 125 minutes or half of the “250 Minutes of Talk.”

[0825] FIG. 177 illustrates a representative screen 1180 for a master device with a service plan called “iStoryBooks” that is available to the master device (“Jeff Master”) but not to the child device (“Jeff Child”). FIG. 177 is representative of a situation in which a parent purchased the service plan using the master device.

[0826] As would be appreciated by a person having ordinary skill in the art, there are many ways a service plan could be shared among devices. For example, the subscriber could allocate a certain percentage or amount (e.g., number of minutes, number of texts, number of bytes, etc.) of a service plan to each device associated with the master service account such that the sum of all individual allocations is equal to the total allowed by the service plan.

[0827] As would also be appreciated by a person having ordinary skill in the art, the subscriber may choose to share different service plans differently among devices in the device group. Similarly, when the subscriber has purchased a service plan bundle, such as “Starter Plan,” the subscriber may choose to share constituent service plans of the service plan bundle differently (e.g., a parent may choose to share 80% of the text messages but only 50% of the voice minutes with a child), or she may choose to share all service plans included in a service plan bundle in the same way (e.g., a parent may allow a child to use up to 50% of each service plan included in the service plan bundle.)

[0828] In some embodiments, the subscriber chooses to place limits on a service usage amount (e.g., impose a cap or specify an allocation) that can be consumed by a particular device in the device group, e.g., by entering a specific service usage limit using the master device or by using another device and providing a credential that indicates that the subscriber has permission to set service usage limits. By providing a limit for a service usage amount, the subscriber can prevent the particular device from “hogging” the service plan. In some embodiments, the particular device that is limited is the master device. In some embodiments, the particular device that is limited is a child device in a device group shared with the master device. In some embodiments, the particular device is another device in a device group shared with the master device. In some embodiments, the particular device is a device managed by a system administrator.

[0829] In some embodiments, the subscriber specifies a “micro-lease” allocation, wherein a device (master or child) is provided an allocation of service usage, and the device subsequently requests an additional allocation after the initial allocation is exhausted.

[0830] In some embodiments, the master device monitors usage by devices in the device group and changes one or more plan-sharing parameters based on the monitored usage. In some embodiments, the master device revokes an allocation when the master device determines that the allocation is not being used, or when the master device determines that another device has a greater need for the allocation. In some embodiments, the master device changes an allocation (i.e., increases or decreases an allocation) based on a metric. In some embodiments, the metric is an amount of usage (or a failure to use a service plan) during a time period. In some embodiments, the metric is an expected usage during a time period. In some embodiments, the metric is based on service plan usage by one or more other devices in the device group. In some embodiments, the master device reapportions a service plan or an allocation of a service plan to one or more devices based on a determination that the reapportionment will reduce waste of the service plan.

[0831] In some embodiments, the subscriber specifies one or more parameters to assist the master device in managing plan sharing. In some embodiments, the master device manages plan sharing without subscriber involvement.

[0832] In some embodiments, the subscriber allocates a maximum amount of a service plan for a period of time and establishes a “metering” of the total during a sequence of time periods (e.g., a total of 100 text messages during a month and no more than 25 text messages per week). In some embodiments, the subscriber allocates an initial allocation to a child device and then allocates an additional allocation (e.g., a smaller allocation) when the child device exhausts the initial allocation.

[0833] In the examples provided herein, none of the “Starter Plan” service plan bundle had been consumed when the subscriber shared the service plan bundle with another device. In some embodiments, had a portion of the service plan bundle been consumed prior to sharing, the subscriber would only be able to share what service usage allocation remained of the service plan bundle. In some embodiments, each service plan within a service plan bundle can be shared individually.

[0834] In some embodiments, a service activity can be associated with a specific service plan. In some embodiments, a service activity can be associated with multiple service plans. In some embodiments, service usage for a service activity can be counted against different service plans according to a hierarchy of the different service plans. In some embodiments, the user of the mobile wireless communication device can determine an order for the hierarchy in which different service plans can be allocated service usage for one or more service activities. In some embodiments, service usage for service activities can be counted against a set of service plans according to one or more properties of the service plans in the set of service plans, e.g., based on a cost incurred or an applicable time period for the service plans. In a representative embodiment, service usage for service activities can be allocated to free service plans first. In some embodiments, service usage for service activities can be allocated in a manner to minimize service cost. In some embodiments, service usage for service activities can be allocated among service plans according to when the service activity occurs. In some embodiments, service usage for service activities can be allocated to application specific service plans before generic service plans, e.g., allocate “Facebook” service usage to a “Facebook” specific service plan before allocating “Facebook” service usage to an “Internet access” data service plan.

Shared Service Plan Permissions

[0835] As described above, in some embodiments, service plans can be shared among multiple devices in a device group. In some embodiments, a “primary” device (or a user with permissions capabilities) in the device group can share a service plan with a “secondary” device in the device group and can restrict service usage of the “secondary device” that can be allocated to the shared service plan to a specific subset of service activities. In some embodiments, the “primary” device can determine a set of particular applications or a set of particular network destinations that can be used by the “secondary” device and that can be allocated to the shared service plan. In some embodiments, the user establishes sharing and permission controls through the “primary” device. In some embodiments, the user establishes sharing and permission controls through the “secondary” device. In some embodiments, the user establishes sharing and permission controls through a website or web portal or through an application interface. In some embodiments, the user establishes sharing and permission controls through a network service provider console, e.g., through an interface of a service design center.

[0836] In some embodiments, a “primary” device and a “secondary” device in a device group share a service plan, e.g., a data service plan having a fixed allocation of data service usage (an X GB shared data plan), a data service plan having “unlimited” allocation of data service usage (an “unlimited” shared data plan), or a service plan bundle, e.g., an “unlimited” talk, “unlimited” text and “unlimited” data plan, or an “unlimited” talk, “unlimited” text and a fixed allocation of data (an unlimited talk & text and X GB shared data plan). In some embodiments, a first set of permission controls can be applied to the shared service plan that applies to all devices in the device group. In some embodiments, a second set of permission controls can be applied to the shared service plan that applies only to a subset of devices in the device group. In some embodiments, a “primary” device can establish the second set of permission controls for one or more “secondary” devices in the device group. In some embodiments, a shared bucket of service usage allocation (e.g., a shared amount of data) can have different restrictions applied for different devices in a device group. In some embodiments, the shared bucket of service usage allocation can be unrestricted for a “primary” device and be restricted for a “secondary” device. In some embodiments, the shared bucket of service usage allocation can be restricted to a first set of service activities for the “primary” device and be restricted to a second set of service activities for the “secondary” device. In some embodiments, the “primary” device can share or assign the bucket of service usage allocation to the “secondary” device and establish restrictions as to how the bucket of service usage allocation can be used by the “secondary” device. In some embodiments, the “primary” device can restrict the “secondary” device to use the bucket of service usage allocation with a particular application (or set of applications). In some embodiments, the “primary” device can restrict an amount of service usage from the bucket of service usage allocation that the “secondary” device can use, and also restrict use of the service usage from the bucket of service usage by the “secondary” device to a particular set of service activities, e.g., only particular applications can be used by the “secondary” device when using the shared bucket of service usage allocation. In a representative embodiment, a parent can share a “family” data plan with other family members and restrict usage of the shared “family” data plan for one or more family members to particular applications. In a representative embodiment, the parent can restrict a child's usage of a shared bucket of service usage allocation (e.g., a portion of a shared family data plan) to use with only one or more particular applications.

[0837] In some embodiments, permission controls for restricting usage of a shared bucket of service usage allocation to a set of applications for a particular device in a device group are managed at least in part by a service processor 115 in the particular device and/or by one or more network elements, e.g., a service controller 122. In some embodiments, permission controls for a “secondary” device are communicated to the “secondary” device by the one or more network elements and implemented at least in part by the service processor 115 on the “secondary” device. In some embodiments, the service processor 115 of the “secondary” device communicates information about service usage by the “secondary” device to the one or more network elements, e.g., the service controller 122. In some embodiments, the service usage information includes information about service usage for applications used, websites accessed, network endpoints communicated with, contacts (phone numbers, messaging identifiers, email addresses, etc.) communicated with. In some embodiments, the one or more network elements determine whether permission controls have been tampered with based at least in part on the service usage information. In some embodiments, the one or more network elements compare service usage reports from the device to service usage reports generated within the network to determine whether permission controls for the “secondary” device have been defeated. In some embodiments, the service processor 115 in the “secondary” device obtains information from one or more network elements to verify integrity of the permission controls for restricting usage of the shared bucket of service usage allocation. In some embodiments, the service processor 115 monitors usage of particular applications and communicates usage of the particular applications to one or more network elements to verify permission to use the particular applications by the “secondary” device and/or by a user thereof. In some embodiments, In some embodiments, the service processor 115 obtains information of usage of the particular application from one or more network elements and uses the information to verify permission to use the particular application on the “secondary” device and/or by a user thereof. In some embodiments, the service processor 115 compares service usage reports generated in the “secondary” device with service usage reports obtained from one or more network elements in order to verify proper operation of permission controls for restricting service usage of a shared bucket of service usage allocation by the “secondary” device and/or by a user thereof. In some embodiments, the service processor 115 compares permission control settings stored in the “secondary” device to a set of permission control settings for the “secondary” device stored in one or more network elements to verify integrity of the permission control settings. In some embodiments, one or more network elements compare permission control settings stored in the “secondary” device to a set of permission control settings for the “secondary” device stored in one or more network elements to verify integrity of the permission control settings. In some embodiments, upon detection that one or more permission controls have been improperly modified, (e.g., the integrity of the permission controls is compromised), the service processor 115, alone or in combination with one or more network elements (e.g., the service controller 122), disallows service usage of one or more applications by the “secondary” device and/or a user thereof. In some embodiments, a “master” user (e.g., for a device group to which the “secondary” device belongs) reconfigures the permission controls for the “secondary” device to allow usage of one or more of the disallowed applications. In some embodiments, one or more network elements examine data traffic from the “secondary” device to verify integrity of permission controls on the “secondary” device. In some embodiments, the one or more network elements use deep packet inspection (DPI) to examine data traffic and/or to classify the data traffic. In some embodiments, the one or more network elements compare the data traffic to a “white list” of supported applications (and/or application servers, network endpoints, website names/addresses) for the “secondary” device and/or the user thereof. In some embodiments, the one or more network elements block data traffic of the “secondary” device, when the data traffic is destined for application servers and/or network endpoints that are not included in (and/or supported by) the “white list” of supported applications. In some embodiments, one or more network elements examine one or more properties of data traffic to determine whether the data traffic is allowed based on permission controls established for the “secondary” device. In some embodiments, the one or more properties of data traffic examined by the one or more network elements include one or more of: data type, application type, specific application, network endpoint, originating network address, destination endpoint address, website type, website address, network type, network state, or a time of day. In some embodiments, permission controls for the “secondary” device are specific to a user logged into the “secondary” device. In some embodiments, the one or more network elements provide for a notification message to be sent to the “secondary” device that indicates blocking of data traffic. In some embodiments, the notification message includes a reason for blocking of data traffic. In some embodiments, the notification message includes an option to request “unblocking” of the data traffic, e.g., by sending a second notification message to a “master” device (or “master” user) for the device group to which the “secondary” device belongs. In some embodiments, the one or more network elements provide for sending a notification message to a “master” device and/or “master” user of a device group to which the “secondary” device belongs indicating the blocked data traffic. In some embodiments, the notification message to the “master” device/user includes information about the blocked data traffic, e.g., a specific application used, a network endpoint, a website accessed and/or other specific information about blocked data traffic. In some embodiments, the notification message to the “master” device/user includes an option to “unblock” the data traffic, e.g., to modify the permission controls for the “secondary” device.

[0838] In some embodiments, permission controls for a “secondary” device can include restrictions that apply to any shared service plan on the “secondary” device. In some embodiments, permission controls for a “secondary” device can include restrictions that apply only to a subset of shared service plans on the “secondary” device. In some embodiments, permission controls for a “secondary” device can include restrictions that apply to a specific shared service plan on the “secondary” device. In some embodiments, restrictions that apply to one or more shared service plans for a “secondary” device include a “black list” of excluded service activities. In some embodiments, the “black list” includes a set of phone numbers, a set of messaging identifiers, a set of network addresses, a set of websites, a set of Internet links, and/or a set of applications. In some embodiments, restrictions that apply to one or more shared service plans for a “secondary” device include a “white list” of allowed service activities. In some embodiments, the “white list” includes a set of phone numbers, a set of messaging identifiers, a set of network addresses, a set of websites, a set of Internet links, and/or a set of specific applications. In some embodiments, restrictions that apply to one or more shared service plans for a “secondary” device include a set of time/day/date restrictions. In some embodiments, a particular service activity for a “secondary” device is permitted only for a specific subset of shared service plans. In some embodiments, permission restrictions apply for a “secondary” device for all service plans, for a subset of service plans, for a specific service plan, for all service activities, for a subset of service activities, for a specific service activity, and/or for a combination of these on the “secondary” device.

[0839] In some embodiments, a “secondary” device (e.g., a “non-master” device) can be configured to always have permission to perform a specific set of service activities. In some embodiments, the “secondary” device can be configured to have access to a set of emergency services through one or more of: voice connections, text (short message service) messaging connections, multi-media message service connections, or use of specific applications. In some embodiments, the “secondary” device can be configured to always have access to a set of phone numbers, e-mail addresses, SMS/MMS identifiers, and/or use of particular applications on or through the “secondary” device. In some embodiments, the “secondary” device can have access to call or text a set of emergency numbers stored in the “secondary” device and/or in a network element. In some embodiments, the “secondary” device can have permission to connect through voice, text, video, other messaging services, email, voice mail, video mail, video chat, or through use of one or more applications to a “primary” device (e.g., a “master” device). In some embodiments, the “secondary” device belongs to a device group and can have permission to connect through voice, text, video, other messaging services, email, voice mail, video mail, video chat, or through use of one or more applications to one or more other devices in the device group, e.g., all devices in the device group, “master” devices of the device group, or a specific subset of devices in the device group.

[0840] In some embodiments, a service processor 115 in the mobile wireless communication device 100, e.g., a “child/secondary/non-master user” device, alone or in combination with one or more network elements, e.g. a service controller 122, assists in verifying the integrity of permission controls for the mobile wireless communication device 100, e.g., managing “white lists” and or “black lists” as described herein. In some embodiments, the mobile wireless communication device 100 communicates information about permission controls, e.g., copies of “white lists” and/or “black lists,” to one or more network elements, e.g., a service controller 122 or a service management system. In some embodiments, information on permission controls, e.g., “master user” copies of “white lists” and/or “black lists” are maintained by a network element and information about permission controls, e.g., “child/secondary/non-master user” copies of “white lists” and/or “black lists” are compared to verify integrity of permission controls in use on the “child/secondary/non-master user” mobile wireless communication device 100. In some embodiments, information about permission controls include white lists, black lists, time based control lists, network based control lists, application lists, website lists, contact lists, and/or service usage activity lists are maintained in the mobile wireless communication device 100 and periodically or on-demand communicated, at least in part, to a network element to verify their integrity. In some embodiments, the service processor 115 verifies integrity of permission control lists using information provided from a network element, e.g., based on information for permission control lists of the mobile wireless communication device 100 stored in one or more network elements.

[0841] In some embodiments, a service processor 115 in the mobile wireless communication device 100, alone or in combination with one or more network elements, e.g., a service controller 122 communicatively coupled to a wireless access network, assists in implementing permission controls for itself or for another mobile wireless communication device 100 in a device group. In some embodiments, one or more device agents in the mobile wireless communication device 100, alone or in combination with one or more network elements assist in implementing the permission controls for service activities of shared service plans. In some embodiments, the service processor 115 and/or the one or more device agents in the mobile wireless communication device 100 assist in implementing permission controls for a service activity with shared service plans by one or more of the following: identifying traffic for the service activity, classifying traffic for the service activity, assigning traffic for the service activity to a service plan, allowing traffic for the service activity, blocking traffic for the service activity, controlling traffic for the service activity, and managing traffic for the service activity. In some embodiments, the service processor 115 and/or the one or more device agents in the mobile wireless communication device 100 associate traffic with a shared service plan and/or with a specific subset of service activities.

[0842] In some embodiments, one or more permission policies include one or more permission rules to manage service activities for shared service plans among devices in a device group. In some embodiments, a permission policy applies to all shared service plans available to a device in a device group. In some embodiments, a permission policy applies to a subset of shared service plans available to the device in the device group. In some embodiments, a permission policy apples to all devices in a device group. In some embodiments, a permission policy applies to a subset of devices in a device group. In some embodiments, a permission policy applies to any device used by a specific user (subscriber) in a device group. In some embodiments, a permission policy applies to a subset of devices used by a specific user (subscriber) in a device group. In some embodiments, a permission policy applies to all service activities for a specific user (subscriber) in a device group. In some embodiments, a permission policy applies to a subset of service activities for a specific user (subscriber) in a device group. In some embodiments, a permission policy allows one or more service activities for a particular service plan and disallows one or more service activities for a different service plan. In a representative embodiment, a permission policy allows video streaming through a “YouTube” specific application service plan and disallows video streaming through a general “Internet Access” service plan. In a representative embodiment, a permission policy allows access only to a particular subset of network destinations (e.g., a defined set of websites) through a shared general “Internet Access” service plan. In a representative embodiment, a permission policy allows voice services to a specific set of phone numbers (e.g., a “first list”) to be allocated to a shared general “Voice” service plan and disallows voice services to another specific set of phone numbers (e.g., a “second list”) to be allocated to the shared general “Voice” service plan. As would be appreciated by a person of ordinary skill in the art, a variety of permission policies can be applied to restrict service activities for one or more shared service plans.

[0843] In some embodiments, a shared service plan for a device in a device group is restricted to a subset of service activities based on a set of one or more permission policies. In some embodiments, the set of one or more permission policies includes one or more of: a service provider (carrier) level permission policy, a device group level permission policy, a device subgroup level permission policy, a device level permission policy, a user group level permission policy, a user subgroup level permission policy, a user level permission policy, an application group level permission policy, and a specific application level permission policy. In some embodiments, a device group includes multiple devices associated with a service account. In some embodiments, a device subgroup includes a subset of devices of a device group. In some embodiments, a user group includes a set of users associated with a service account. In some embodiments, a user subgroup includes a subset of users of a user group. In some embodiments, one or more permission policies are applied to a service activity by (1) applying permission policies that apply to all service plans, (2) determining one or more applicable service plans for the service activity, and (3) applying permission policies for the determined one or more applicable service plans. In some embodiments, notifications are provided to one or more users, devices, and/or administrators when a service activity is restricted by a service policy. In some embodiments, when service activity is restricted, notifications are provided to a user of the device on which the service activity is restricted. In some embodiments, when service activity is restricted, notifications are provided to another user (e.g., a user of a “master” device) or to an administrator of a device group. In some embodiments, restriction of service activity includes one or more of: allowing, blocking, rate limiting, limiting to a pre-determined service usage amount, and restricting service usage to a pre-determined time period.

[0844] In some embodiments, operating system software in a mobile wireless communication device assists in implementing restrictions on service activities for shared service plans. In some embodiments, an application associated with service activity management on the mobile wireless communication device assists in implementing restrictions on service activities for shared service plans. In some embodiments, a particular application on the mobile wireless communication device assists in implementing restrictions on service activities associated with the particular application for shared service plans. In some embodiments, the application assists in identifying traffic associated with a shared service plan. In some embodiments, the application assists in providing permission for a service activity to occur. In some embodiments, the application assists in permitting access to one or more service activities. In some embodiments, one or more device agents communicate with the application to implement a permission policy. In some embodiments the one or more device agents communicate with the application through an application programming interface (API). In some embodiments, the application applies a permission policy to control traffic associated with a service activity. In some embodiments, an application level permission policy includes a set of rules that apply to a specific application on the mobile wireless communication device. In some embodiments, an application is aware of the application level permission policy and assists in implementing the application level permission policy. In some embodiments, an application is not aware of the application level permission policy and does not directly assist in implementing the application level permission policy. In some embodiments, the application determines permissions that apply to service activities associated with the application when the application is started. In some embodiments, the application determines permissions that apply to service activities associated with the application when a service activity is attempted. In some embodiments, the application determines permissions that apply to service activities associated with the application during a service activity. In some embodiments, the application allows service activities to use information stored locally in the mobile wireless device (e.g., stored in a local cache) and restricts service activities from using remote information (e.g., through a wireless connection to a remote location).

[0845] In some embodiments, one or more network elements communicatively coupled through a wireless access network to a mobile wireless communication device 100 assist in implementing restrictions on service activities for shared service plans. In some embodiments, the one or more network elements identify one or more traffic flows associated with a particular service activity. In some embodiments, the particular service activity is associated with a particular application. In some embodiments, the one or more network elements identify a traffic flow using one or more of the following: an application identifier in a packet in the traffic flow, “side information” associated with the traffic flow, patterns of access for the traffic flow, packet headers in the traffic flow, virtual or literal flow tags in the traffic flow, network destination endpoints for the traffic flow, logical traffic channels associated with the traffic flow, and an application portal, gateway, or website associated with the traffic flow. In some embodiments, the one or more network elements provide “HTTP” return codes to the mobile wireless communication device. In some embodiments, the return codes provide additional information about reasons for denial of a service activity. In some embodiments, the one or more network elements provide notifications associated with permissions of service activity through an in-band messaging capability. In some embodiments, the one or more network elements provide notifications through an out-of-band messaging capability, e.g., through a text messaging system. In some embodiments, the one or more network elements maintain data packets associated with a restricted service activity awaiting a response from the user of the mobile wireless communication device, e.g., in response to a notification message. In some embodiments, the one or more network elements discard data packets associated with a restricted service activity.

[0846] In some embodiments, the one or more network elements assisting in implementing restrictions on service activities for shared service plans include a proxy server and/or an application portal. In some embodiments, the network elements include mechanisms to account for traffic associated with restricted service activities for one or more mobile wireless communication devices. In some embodiments, the one or more network elements classify traffic for service activities. In some embodiments, the one or more network elements define a shared service usage “bucket” that is shared by one or more devices in a device group. In some embodiments, the one or more network elements limit service activities to allocate to the shared service usage “bucket.” In some embodiments, the one or more network elements limit service activities to a subset of all service activities available to the mobile wireless communication device. In some embodiments, the one or more network elements implement service activity restrictions for shared service plans using one or more functions including: a deep packet inspection (DPI) function, a traffic detection function (TDF), a policy control rules function (PCRF), a policy control enforcement function (PCEF). In some embodiments, the one or more functions are implemented in one or more of: a gateway, a router, a server, and a proxy server.

[0847] In some embodiments, the one or more network elements communicatively assist in implementing restrictions on service activities for shared service plans by classifying traffic using a PCEF function in a gateway GPRS service node (GGSN) or equivalent network level service node. In some embodiments, a network element implementing the PCRF function provides a set of rules bases to one or more network elements to assist in implementing restrictions on service activities for shared service plans. In some embodiments, the set of rules bases includes a set of rating groups. In some embodiments, the rating groups are organized into an ordered hierarchy that determines in what order different rating groups apply to identifying, classifying and restricting traffic for a service activity. In some embodiments, traffic is classified to a specific rating group, and each rating group in the set of rules bases includes a set of rules that determine permissions for service activities. In some embodiments, the set of rules determines actions that occur when a service activity is detected and classified to the rating group. In some embodiments, service plans are associated with one or more specific rating groups. In some embodiments, when a service activity is classified to a particular rating group, one or more rules in the set of rules for the particular rating group are applied to the service activity. In some embodiments, when a service activity does not match a rating group, one or more of the following actions occurs: (1) search for a match of the service activity to additional rating groups, (2) restrict the service activity, e.g., disallow the service activity, and (3) provide notification messages to the user of the mobile wireless communication device when service activity is restricted.

[0848] In some embodiments a first network element, e.g., a PCRF, provides a rules base including a set of rules for one or more rating groups to a second network element, e.g., a gateway such as the GGSN, that tracks service usage of mobile device users (subscribers) according to the rating groups. In some embodiments, the gateway requests an allocation quota of service usage from a third network element, e.g., an online charging system (OCS), that maintains information about users (subscribers), service accounts, service usage allowances, subscriber groups, accounting rules, and/or charging rules. In some embodiments, the third network element provides an allocation quota of service usage to the gateway in response to the request for the allocation quota. In some embodiments, the allocation quota is associated with a specific user (subscriber). In some embodiments, the allocation quota is associated with a specific user (subscriber) that belongs to a specific device group (user group, subscriber group). In some embodiments, the allocation quota response from the third network element provides information that maps subscribers to a subscriber group (or equivalently, a device to a device group). In some embodiments, the gateway tracks service usage based on the supplied subscriber group information. In some embodiments, the gateway manages service usage tracking based on both an identification of an individual subscriber (user, device) and an identification of a subscriber group (user group, device group) to which the individual subscriber belongs. In some embodiments, the gateway uses two rules bases, one for a subscriber group and another rules base for an individual subscriber. In some embodiments, a service provider maintains the rules bases. In some embodiments, an administrator having service provisioning privileges maintains the rules bases. In some embodiments, the gateway restricts service activities for shared service plans by applying a rules base for a subscriber group followed by applying a rules base for an individual subscriber. In some embodiments, the gateway applies permissions rules to a service activity by applying a carrier level permissions policy, a subscriber group level permissions policy, and a subscriber level permissions policy. In some embodiments, the gateway performs one or more of the following actions: identify traffic associated with an individual subscriber, determine a subscriber group to which the individual subscriber belongs, obtain a subscriber group permission policy, apply the subscriber group permission policy to the traffic, obtain a subscriber permission policy, and apply the subscriber permission policy to the traffic.

[0849] In some embodiments, subscriber group permission policies and/or subscriber permission policies that apply to service activities for shared service plans are established and/or modified through a user interface. In some embodiments, the user interface is provided through a device associated with a device group. In some embodiments, the user interface is provided through a “primary device” in the device group. In some embodiments, the user interface is provided through a “secondary device” in the device group. In some embodiments, the user interface is provided through a website. In some embodiments, the user interface is provided through a network operator console, e.g., a service design center interface. In some embodiments, through the user interface, a set of one or more applications is associated with a shared service plan. In some embodiments, the set of one or more application is associated with a service usage allocation of the shared service plan. In some embodiments, the set of one or more applications associated with the service usage allocation of the shared service plan can consume a portion of the service usage allocation of the shared service plan. In some embodiments, one or more properties of service usage sharing for the shared service plan are defined through the user interface. In some embodiments, limitations on service usage for a device in a device group are defined through the user interface. In some embodiments, limitations for a particular device in the device group for a particular shared service plan are defined through the user interface. In some embodiments, a service usage classification that can access a shared service usage “bucket” is defined through the user interface. In some embodiments, restrictions on particular actions permitted for an application that shares service usage of a shared service usage “bucket” are defined through the user interface. In some embodiments, the shared service usage “bucket” is defined through the user interface. In some embodiments, aspects of a permission policy for a particular user (subscriber) and/or particular device in a device group are defined through the user interface. In some embodiments, aspects of a permission policy for a user group (subscriber group) and/or a device group are defined through the user interface.

[0850] In some embodiments, one or more devices in a device group include a service processor, e.g., including one or more device agents as described herein, that provides for assisting with communication service control and management, e.g., assisting to implement service plan sharing, assignment and/or permission controls as described herein. In some embodiments, one or more devices in a device group do not include a service processor, or includes only a “basic” version of a service processor, and the one or more devices use one or more applications in the device for one or more aspects of communication service control and management, e.g., including assisting to implement service plan sharing, assignment and/or permission controls as described herein. In some embodiments, a “primary device” of a device group shares, assigns and/or configures permission controls for one or more service plans to a “secondary device” of the device group. In some embodiments, service plan sharing, assignment, and/or permission controls for shared/assigned service plans use at least in part a service processor in the “primary device” and/or the “secondary device.” In some embodiments, service plan sharing, assignment and/or permission controls for shared/assigned service plans use at least in part an application on the “primary device” and/or on the “secondary device.”

[0851] In some embodiments, a “primary device” and a “secondary device” of a device group each include a service processor. In some embodiments, the service processors in the “primary device” and the “secondary device” assist in implementing service plan sharing, service plan assigning and/or permission controls for shared/assigned service plans. In some embodiments, service plan sharing, assignment and/or permission controls (restrictions) for shared/assigned service plans are communicated by the service processor of the “primary device” to a network service controller (or other applicable network element), which in turn communicates directly or indirectly with the service processor of the “secondary device” to implement the shared, assigned, and/or restricted service plans.

[0852] In some embodiments, the “primary device” includes a service processor, and the “secondary device” does not include a service processor (or only a “basic” service processor) and instead includes an application for communication service management. In some embodiments, the service processor in the “primary device” assigns service plans, shares service plans, and/or manages permission controls for assigned and/or shared service plans using its service processor to communicate with a network element (e.g., a service controller). In some embodiments, one or more network elements (e.g., server and/or application portal and/or service management system) configure an application on the “secondary device” (or an associated application resource, file or setting) to implement service plan sharing, assignment and/or permission controls for shared/assigned service plans on the “secondary device” as specified by the “primary device” to the network element (e.g., the service controller).

[0853] In some embodiments, the “primary device” does not include a service processor (or only a “basic” service processor) and instead includes an application for communication service management. In some embodiments, the “secondary device” includes a service processor. In some embodiments, the “primary device” assigns service plans, shares service plans, and/or manages permission controls for assigned and/or shared service plans using the application to communicate with an application portal, website, or a network element (e.g., a server or a service management system) that communicates directly or indirectly (e.g., through a service controller) with the service processor of the “secondary device.” In some embodiments, the service processor of the “secondary device” assists in implementing service plan sharing, assignment and/or permission controls for shared/assigned service plans on the “secondary device” as specified by the “primary device.”

[0854] In some embodiments, the “primary device” and the “secondary device” each do not include a service processor (or only a “basic” service processor) and instead each include an application for communication service management. In some embodiments, the “primary device” assigns service plans, shares service plans, and/or manages permission controls for assigned and/or shared service plans using the application to communicate with an application portal, website, or a network element (e.g., a server or a service management system). In some embodiments, one or more network elements (e.g., server and/or application portal and/or service management system) configure an application on the “secondary device” (or an associated application resource, file or setting) to implement service plan sharing, assignment and/or permission controls for shared/assigned service plans on the “secondary device” as specified by the “primary device.”

[0855] In some embodiments, the “primary device” and/or the “secondary device” include both a service processor and one or more applications for communication service management. In some embodiments, the “primary device” uses the service processor, an application, or an application in conjunction with the service processor to share service plans, assign service plans, and/or set permission controls of shared/assigned service plans for the “secondary device.” In some embodiments, the “primary device” communicates information for service plan sharing, assignment and/or permission controls for shared/assigned service plans with a network element, a service controller, an application portal, or a website using the application, the service processor or a combination of both. In some embodiments, the “secondary device” receives service plan sharing, assignment and/or permission controls for shared/assigned service plans specified by the “primary device” from a network element, a service controller, an application portal, and/or a website. In some embodiments, the service processor in the “secondary device,” an application in the “secondary device” or a combination of both assist in implementing the service plan sharing, assignment, and/or permission controls for the shared/assigned service plans as specified by the “primary device.”

[0856] In some embodiments, the “primary device” communicates service plan sharing, assignment and/or permission controls for shared/assigned service plans to a website that causes a service processor in the “secondary device” to implement the sharing, assignment and/or permission controls for the shared/assigned service plans. In some embodiments, the “primary device” communicates service plan sharing, assignment and/or permission controls for shared/assigned service plans to a website that causes one or more network elements to configure an application (or an associated application resource, file or setting) in the “secondary device” to implement the sharing, assignment and/or permission controls for the shared/assigned service plans.

Assigning Service Plans

[0857] In some embodiments, a subscriber may want to allocate the entirety of a service plan to a child device, leaving none of the service plan available to the master device. For example, a parent might purchase a service plan that is of great interest to her child but of no interest to the parent. In some embodiments, therefore, a subscriber may assign a service plan from one device in the device group to another device in the device group. In some embodiments, a service plan must be assignable to be assigned. In some embodiments, whether a service plan is assignable is configured using a service design center. In some embodiments, a service plan has an attribute that determines whether it is assignable. In some embodiments, a service plan is assignable but not shareable. In some embodiments, a service plan is shareable but not assignable. In some embodiments, a service plan is both shareable and assignable. In some embodiments, a service plan is neither shareable nor assignable. In some embodiments, one or more permission policies that can apply to a shared service plan can also apply to an assigned service plan.

[0858] FIG. 178 illustrates a representative screen 1200 for a master device that has a service plan (“iStoryBooks”) that is available to both the master device and the child device. FIG. 178 is representative of a situation where the service usages of the shared service plan by the master device and the child device are presented on the master device (e.g., through user interface 101). In the embodiment shown in FIG. 178, the service usage of the master device is separated from the service usage of the child device. In some embodiments, the service usage can be consolidated into a single progress bar. In some embodiments, where the service usage is consolidated into a single progress bar, the service usage amounts from the master and the child device are represented with different colors, dividers, labels, or some other visual cue to delineate the service usage associated with the different devices.

[0859] FIG. 179 illustrates a representative screen 1210 for a master device that has a service plan (“iStoryBooks”) that is available to both the master device and the child device. FIG. 179 is representative of a situation where the service usages of the shared service plan by the master device and the child device are displayed on the master device and the service usage is displayed as a percentage of a service usage allocation relative to a service plan allocation limit. In the embodiment illustrated in FIG. 179, the service usage of the master device is separated from the service usage of the child device. In some embodiments, the service usage can be consolidated to display on a single progress bar. In some embodiments, where the service usage is consolidated on a single progress bar, the service usage amounts from the master device and the child device are represented with different colors, dividers, labels, or some other visual cue to delineate the service usage of the different devices.

[0860] FIG. 180 illustrates a representative screen 1220 for a master device with a service plan that is available to both the master device and the child device. FIG. 180 is representative of a situation where the service usage is displayed by application and application service usage is shown for each device that is associated with the shared service plan. In some embodiments, the service usage can be consolidated on a progress single bar. In some embodiments, where the usage is consolidated on a single progress bar, the service usage amounts from the master device and the child device are represented with different colors, dividers, labels, or some other visual cue to delineate the service usage of the different devices.

[0861] FIG. 181 illustrates a representative screen 1230 for a master device with a service plan that is available to both the master device and the child device. FIG. 181 is representative of a situation where the service usages of the shared service plan per network end-point (e.g., domain, IP address, URL, etc.) by the master and the child devices are presented on the master device, and the service usage display is displayed as service usage per network end-point. In the embodiment of FIG. 181, the service usage of the master device is separated from the service usage of the child device. In some embodiments, the service usage can be consolidated on a single progress bar. In some embodiments, where the service usage is consolidated on a single progress bar, the service usage amounts from the master device and the child device are represented with different colors, dividers, labels, or some other visual cue to delineate the service usage of the different devices.

[0862] FIG. 182 illustrates a representative screen 1240 for a master device with a service plan that is available to both the master device and the child device. FIG. 182 is representative of a situation where the service plan has time of day usage measurements and the usage is displayed by time-of-day categories (e.g., peak and off-peak), and usage by time-of-day category is shown for each device that is associated with the shared service plan. In some embodiments, the service usage can be consolidated on a single progress bar. In some embodiments, where the service usage is consolidated on a single progress bar, the service usage amounts from the master device and the child device are represented with different colors, dividers, labels, or some other visual cue to delineate the service usage of the different devices.

[0863] FIG. 183 illustrates a representative screen 1250 for a master device with a service plan that is available to both the master device and the child device. FIG. 183 is representative of a situation where the service usage is displayed by network type and service usage by network type is shown for each device that is associated with the shared service plan. In some embodiments, the service usage can be consolidated on a single progress bar. In some embodiments, where the service usage is consolidated on a single progress bar, the service usage amounts from the master device and the child device are represented with different colors, dividers, labels, or some other visual cue to delineate the service usage of the different devices.

[0864] FIG. 184 illustrates a representative screen 1260 for a master device with a service plan that is available to both the master device and the child device. FIG. 184 is representative of a situation where the service plan includes QoS Level service usage measurements, the service usage is displayed by QoS Level (e.g., streaming and interactive), and service usage by QoS Level is shown for each device that is associated with the shared service plan. In some embodiments, the service usage can be consolidated on a single progress bar. In some embodiments, where the service usage is consolidated on a single progress bar, the service usage amounts from the master device and the child device are represented with different colors, dividers, labels, or some other visual cue to delineate the service usage of the different devices.

[0865] As would be appreciated by a person having ordinary skill in the art, there are many different examples, combinations, and permutations of shared service usage displays and the examples presented herein are meant to be illustrative and not intended to be limiting.

[0866] FIG. 185 illustrates a representative screen 1270 displaying that the “iStoryBooks” service plan is currently available only to the master device (“Jeff Master”). By selecting “Assign this plan,” the subscriber can assign the “iStoryBooks” service plan to another device in the device group.

[0867] FIG. 186 illustrates a representative screen 1280 that results from selecting “Assign this plan” in accordance with some embodiments. By selecting “Jeff Child” and selecting “Apply,” the subscriber assigns the “iStoryBooks” service plan to the child device.

[0868] FIG. 187 illustrates a representative screen 1290 displaying that after the subscriber selects “Apply” from the display shown in FIG. 186, the “iStoryBooks” service plan has been assigned to the child device and is no longer available to the master device.

[0869] FIG. 188 illustrates a representative screen 1300 displaying that although the “iStoryBooks” service plan has been assigned to the child device, the subscriber can reassign the service plan by selecting “Assign this plan.” For example, a parent could temporarily remove the “iStoryBooks” service plan from her child's device if she needed to.

[0870] Although FIG. 186 indicates that in some embodiments, the entirety of a service plan is assigned to a single device (i.e., either “Jeff Master” or “Jeff Child”), in some embodiments, a subscriber assigns a single service plan to more than one device. For example, a subscriber who has two children, each of whom has a mobile wireless communication device 100, can assign “iStoryBooks” to both children's mobile wireless communication devices 100. The children would then share the service plan. In some embodiments, when a subscriber assigns a service plan to multiple devices, the subscriber specifies how the service plan will be shared by the multiple devices (e.g., using the terminology of FIG. 172, in a “Simple” or “Advanced” manner).

[0871] As will be appreciated by a person having ordinary skill in the art in light of the disclosures herein, a difference between a subscriber assigning a service plan to one or more devices and the subscriber sharing the service plan is that, in some embodiments, a shared service plan remains visible on the master device as a service plan that is available to the master device, whereas an assigned service plan does not remain visible on the master device as a service plan that is available to the master device.

[0872] It should now be apparent to a person having ordinary skill in the art that there are many unique and interesting ways a subscriber can share and assign service plans, and the examples herein are not intended to be limiting.

Monitoring Usage and Transactions

[0873] In addition to adding devices to the master service account, sharing service plans, and assigning service plans, subscribers may track usage and access usage history by selecting “Usage” from the display 850 shown in FIG. 151. For example, FIG. 189 illustrates a representative screen 1310 showing that a subscriber may access child device usage (in this case, usage by “Jeff Child”) through the child device. FIG. 189 shows that the child device has used only one minute of the 20 hours of application use, and none of the “iStoryBooks” service plan.

[0874] The subscriber may track usage for all devices or for just the master device from the master device by selecting “Usage” from the screen 850 illustrated in FIG. 151. For example, FIGS. 190 and 191 illustrate representative screens 1320 and 1330 showing usage for the categories of voice and data, respectively. According to FIG. 190, all “250 Minutes of Talk” remain available.

[0875] FIG. 192 illustrates a representative screen 1340 showing the master device's presentation of usage of the “20 Hours of Applications” plan by each device in the device group during a particular time period (in this example, the month of June 2012).

[0876] In addition to viewing information about service usage, in some embodiments, the subscriber can access information about transactions. FIG. 193 illustrates a representative screen 1350 of information available to a subscriber who selects “Transactions and Balance” from the screen 850 illustrated in FIG. 151. In FIG. 193, the transactions from the month of June 2012 are presented. They included a user initiated top-up and two service plan purchases (“Starter Plan” and “iStoryBooks”). As shown in FIG. 193, following these transactions, the subscriber's master account has a balance of $93.56.

[0877] In some embodiments, a child device sends a message to a master device when a usage allocation is exhausted (e.g., when the child device has exhausted its share of a service plan) or when a particular milestone is met (e.g., when the child device has only two minutes of talk time left). In some embodiments, the child device sends a message to a master device, and the master device presents a notification to the subscriber to provide information about the service usage event on the child device. In some embodiments, the master device suggests a solution to the service usage event, such as by presenting an offer to the subscriber, such as an offer to purchase an additional service plan or an offer to assist the subscriber in modifying the parameters of a shared service plan.

[0878] In some embodiments, a child device sends a message to a master device when a user of the child device has attempted an unauthorized service usage. For example, in some embodiments, if a user of a child device attempts to send a text message, but the child device does not have an allocation of text messages, the child device sends a message to the master device to report that the child device attempted to send a text message. In some embodiments, the child device sends a message about an attempted unauthorized service usage to the master device without interaction with or input from a user of the child device. In some embodiments, the master device presents an offer to the subscriber, such as an offer to purchase an additional service plan or an offer to assist the subscriber in modifying the parameters of a shared service plan.

[0879] In some embodiments, the child device presents a notification through its user interface when a user of the child device attempts an unauthorized service usage. In some embodiments, a user of a child device subject to an allocation (e.g., a maximum number of text messages) who exhausts the allocation can send a message to one or more master devices to request an additional allocation. In some embodiments, the child device assists a user of the child device in requesting a service plan or additional resources from the subscriber.

[0880] In some embodiments, a subscriber can access the master service account from a device that is not a master device, but is associated with the master service account, by logging into the master service account (e.g., through screens such as those shown in FIGS. 70 and 71). This functionality may be useful for when a master device is not immediately accessible, but the subscriber wishes to share a service plan, modify service plan sharing for one or more service plans, or assign a service plan.

[0881] In some embodiments, a subscriber can gift a service plan or a portion of a service plan to a mobile wireless communication device 100 that is not within the device group but that is capable of receiving the gift. For example, in some embodiments, a subscriber can gift a service plan or a portion of a service plan to a device outside a first device group but within a second device group.

[0882] In some embodiments, a user of child device with no purchase capability can, from the child device, request that the master device grant the child device access to a service. For example, in some embodiments, when a user of a child device attempts to use or access a service that is not authorized, the child device will present a notification that indicates the child device is not authorized for the service. In some embodiments, the notification facilitates the child device requesting access from the master device (e.g., the notification includes a button called “Request Access From Master.” In some embodiments, the master device receives the request and presents a notification through the master device's user interface, thus allowing the subscriber to grant or deny access to the requested service. In some embodiments, the master device sends a message to the child device indicating whether the request was granted or denied. In some embodiments, after receiving the message from the master device, the child device presents a notification through a user interface to indicate whether the request was granted or denied.

[0883] FIG. 194 illustrates a representative screen 1400 that presents information through the UI 101 of the mobile wireless communication device 100 that summarizes account usage details for a particular service plan (“Talk 150” as shown). An amount of total service usage for all mobile wireless communication devices 100 that share the “Talk 150” service plan is provided. The user of the mobile wireless communication device 100 can share the available service usage allocation of the service plan with other mobile wireless communication devices 100 (and/or users thereof) by selecting the “Change” button or by selecting the “Share this plan” button. As illustrated, the entirety (100%) of the service plan is allocated to “Jeff Dev,” the account owner of the mobile wireless communication device 100.

[0884] FIG. 195 illustrates a representative screen 1410 that provides the user of the mobile wireless communication device 100 with options to share all or a portion of the service usage associated with the service plan (e.g., “Talk 150” illustrated in FIG. 194.) The user of the mobile wireless communication device 100 can select a percentage of service usage allocation for the service plan, ranging from 10% to 100%, to share with another mobile wireless communication device 100. In some embodiments, service usage allocations of service plans may be apportioned in discrete percentage increments. In some embodiments, service usage allocations of service plans may be specified by a number of distinct units (e.g., minutes, seconds, hours, message units, Megabytes, Gigabytes, Kilobytes, etc.) In some embodiments sharing of one or more service plans can be restricted by permissions controls.

Multi-Device Enrollment

[0885] The following section presents several embodiments that provide for adding one or more devices to a master service account, device group, or multi-device service plan.

[0886] In some embodiments, two or more mobile devices are associated with a master account with the service provider (e.g., a single party is responsible for all network-access service usage charges incurred by a group of mobile devices, such as in a family service plan, an enterprise service plan, any type of multi-device service plan, etc.). For ease of explanation, it is assumed that the party responsible for the master account has access to or uses a “master device,” and the other devices that are associated with the master account (or with the master device) are “secondary devices.” In some embodiments, the master device is a mobile device, such as a smart phone, a tablet, a laptop, an ultrabook, etc. In some embodiments, each secondary device is a mobile device, e.g., a smart phone, a tablet, a laptop, an ultrabook, etc.

[0887] In some embodiments, there are multiple master devices. In some embodiments, a user enrolls a mobile device as a master device by entering credentials on the master device. In some embodiments, the user enrolls an additional master device by entering one or more settings on an existing master device. In some embodiments, the designation of an additional mobile device as a master device is verified with a secondary confirmation (e.g., an e-mail message with a link that the user must click to complete the enrollment of the master device, a text link, etc.).

[0888] In some embodiments, the party responsible for the master account manages the master account, and adds or deletes secondary devices, through the master device. In some embodiments, the master device is configured to assist in enrolling new devices by displaying an “add a device” screen or page, and the master user may interact with that screen or page to add a device to a device group managed by or associated with the master user. In some embodiments, the look and feel of the enrollment screen or page, and the configurations of the information fields, is configured by a service provider through the SDC 135 or device management system 170-1. In some embodiments, the page or screen is pushed to a master device. In some embodiments, when the master user attempts to initiate adding a device through the master device, the master device pulls some or all of the content of the screen or page from a network element (e.g., a service controller 122, a server, a website, etc.).

[0889] FIG. 196 shows an example of a user interface screen 1420 that the user of a master device may use to enroll additional devices in the master account in accordance with some embodiments. Using a keypad, keyboard, voice recognition, or any other means that allow the user to enter information into an information field, the user enters his or her name in one field of a screen on the user interface of the master device, a device identifier in a second field, a device group identifier in a third field, and a device group password in a fourth field. The master user then completes enrollment by selecting the “Enroll” button or field. As would be appreciated by a person having ordinary skill in the art, the fields shown in FIG. 196 are simply examples; more or fewer fields may be provided, and the enrollment page or screen may contain different or other information that assists in enrolling mobile devices in a master account. As would also be appreciated by a person having ordinary skill in the art, the device identifier can be any identifier that uniquely identifies a mobile device, such as, for example, a phone number, device identification number, device security signature or other security credentials, device identification and/or security hardware such as a SIM, device type identifier, one or more IP addresses, one or more connection MAC addresses, any other address identifier, device service owner or VSP identifier, device OEM, device distributor or master agent, and/or any other information the network can use for admission control, authorization control, identifying the device with a service profile, identifying the device with an initial activation, identifying the device with a service plan or authorized set of service activity capabilities, identifying the device with a service provider or service owner, identifying the device with an OEM or master agent, identifying the device with a distributor or master agent, or identifying the device with a user group or user.

[0890] As would be appreciated by a person having ordinary skill in the art, the master device can also be configured to assist in removing secondary devices from the master account by displaying a “delete a device” screen or page, and the master user may interact with that screen or page to delete a device from a group managed by or associated with the master user. The “delete a device” screen or page can be configured using the SDC 135 or device management system 170-1, and the fields it contains may be similar to those presented on the “add a device” page, such as the example fields shown in FIG. 196.

[0891] In some embodiments, users of would-be secondary devices can initiate enrollment of their mobile devices, and the user of the applicable master device receives a notification that a request has been made to add a secondary device to a device group associated with the master account. In some embodiments, a user of a would-be secondary device initiates the addition of the would-be secondary device through a user interface of the device (e.g., by launching an application or configuring a setting). In some such embodiments, the would-be secondary device sends a message to a network element (e.g., a service controller) indicating that the would-be secondary device has requested to be added to a device group. In some embodiments, after receiving the message from the would-be secondary device, the network element configures a notification message containing information about the would-be secondary device. The network element then assists in sending the notification message to the appropriate master device. In some embodiments, the notification message provides information about the would-be secondary device so that a user of the master device can determine whether to allow the would-be secondary device to be added to the master account or otherwise associated with the master device.

[0892] In some embodiments, the master device can receive a request to be added to a device group or to the master account directly from the would-be secondary device. In some embodiments, the master device operates as an intermediate networking device (e.g., a Wi-Fi hotspot), and the would-be secondary device is an end-point device that has established a connection to the master device.

[0893] FIG. 197 illustrates an example of a user interface screen 1430 presented to a user of the master device after a user of a would-be secondary device initiates enrollment of that device. Information about the would-be secondary device is provided in a first field of the screen. This information can include one or more of a device type, device identifier, etc. Information about the user of the would-be secondary device is provided in a second field. This information may include the user's name (as shown in FIG. 197) or other information to identify the person or entity requesting that the device be added to the master account. An optional third field provides information about the device group to which the would-be secondary device is asking to be added, in case the master user manages more than one device group. The master user is also presented with buttons or fields that allow him or her to approve the addition of the secondary device or to decline to add the secondary device. In some embodiments, if the master user indicates that he or she would like to approve adding the would-be secondary device, the master user is prompted for a password or some other information to verify the master user's identity. In some embodiments, the password prompt is presented when the master user selects the “Yes” button of FIG. 197. In some embodiments, the password prompt is included in the same page/screen as shown in FIG. 197.

[0894] In some embodiments, the master device receives information from a network element (e.g., a service controller, server, etc.) about one or more secondary devices associated with the master account. In some embodiments, the information received from the network element includes one or more of: usage of bulk (e.g., unclassified) data, usage of voice services, usage of text services, usage against a service plan bundle, usage for an app plan, usage for a classification of service (e.g., by application program (app), network destination, user or device, etc.), etc.

[0895] In some embodiments, a master device user can access usage summary information, representing the aggregate use by all devices associated with the master account (e.g., including all master devices and all secondary devices). The usage may be per service plan (e.g., all use of a shared Facebook service plan by all devices, all use of a VOIP service plan by all devices, etc.), or the usage may be a bulk measure (e.g., all data usage by all devices, or all voice usage by all devices). In some embodiments, a master device user can access usage information for a particular device or user. This usage information may be per service plan or bulk or per app/network destination.

[0896] In some embodiments, the master device can set usage notification limits or triggers for other devices. In some embodiments, the master device sends the limits or triggers to a network element (e.g., service controller, server, etc.), and the network element then sends the limits or triggers to the secondary users or devices. In some embodiments, the network element sends the limits or triggers to other master devices. In some embodiments, a master device receives from a network element (e.g., a service controller, server, etc.) notifications when secondary devices reach the limits or when the triggers are satisfied.

[0897] In some embodiments, a master device can select the service plans or set service permissions, limits, or restrictions on usage by secondary devices. In some embodiments, the master device can set roaming permissions or limits one secondary device usage of one or more classifications of services (e.g., no YouTube while roaming, but Facebook is allowed, etc.), service plans (e.g., use of Google Maps is allowed, but text messages are not, etc.), or service plan bundles.

[0898] In some embodiments, the master device can choose to allocate a particular service plan or service allocation (e.g., a particular amount of bulk data usage) to one or more secondary devices associated with the master account.

[0899] In some embodiments, the master device receives re-up requests (e.g., a request to replenish a service usage allowance) on behalf of a secondary device or user. In some embodiments, the master device can present, through a user interface, a way for the master user to respond to re-up requests. In some embodiments, the master user enters a credential or password and information about how much additional service is authorized. In some embodiments, the master device sends the authorization to a network element (e.g., service controller or server).

[0900] In some embodiments, the master device sets time-of-day usage restrictions for one or more classifications of service. In some embodiments, the master device can set application permissions (e.g., use of Facebook is not allowed during school hours, phone calls are not permitted after 9:00 P.M., etc.). In some embodiments, the master device can set network permissions or restrictions for one or more classifications of service. In some embodiments, the master device can accept and respond to requests to modify usage permissions or to remove usage restrictions (e.g., a secondary device indicates that a user requests to make a phone call during a time when phone calls ordinarily would not be permitted).

[0901] In some embodiments, the master user enters restrictions or modifications to permissions through the master device user interface, and the master device sends information about the restrictions or permission modifications to a network element (e.g., a service controller, server, etc.) The network element then determines the control policy that needs to be in place for each affected mobile device, based on the information from the master device. The network element then facilitates the enforcement of that policy, for example, by sending a modified control policy to the affected mobile devices (e.g., for implementation by a service processor on a mobile device) or by provisioning network equipment (e.g., a deep-packet inspection element, a gateway, etc.) to implement the desired control policy.

On-Device Multi-Device Service Sign-Up

[0902] FIG. 198 illustrates a system configuration 1500 that enables a master-subscriber-initiated on-device multi-device service sign-up procedure in accordance with some embodiments. FIG. 199 illustrates a representative flow chart 1510 illustrating an exchange of messages and processing of messages by the master device, the secondary device, the sign-up request processor and the subscriber management system illustrated in the system configuration 1500 of FIG. 198. FIG. 199 illustrates a representative embodiment for the subscriber of the master device to add a secondary device to the master service account, device group, or multi-device service plan. Additional embodiments are also discussed further herein.

[0903] In some embodiments, the master device subscriber initiates the linking process. In some embodiments, the master device subscriber (e.g., via a device agent 1001A) requests a one-time token from the sign-up request processor 9002. The sign-up request processor 9002 verifies with the subscriber management system 9004 that the subscriber associated with the master device 100A has permission to add additional devices to the master service account, device group, or multi-device service plan (e.g., by verifying a username and/or password, credential, etc.). The sign-up request processor 9002 generates a one-time token, associates it with the master subscriber (e.g., device credential, user credential, account credential, etc.), stores the token and the credential in the database 117 (labeled DB) and then delivers the token to the master subscriber (via the device agent 1001A). The master subscriber shares the one-time token with the intended secondary subscriber (e.g., via email, SMS, MMS, an image that can be scanned (e.g., bar code, QR Code, etc.), sound file, NFC, “bump,” Bluetooth message, etc.). The secondary subscriber enters the one-time token (via the device agent 1001B) on his device 100B. There are many ways the secondary subscriber can enter the one-time token, e.g., by scanning an image, sending or receiving or opening an email attachment, sending or receiving or opening an SMS, sending or receiving or opening an MMS attachment, sending or receiving or opening a sound file, through a near field communication (NFC), through a “bump” with another device (e.g., a master device), using a Bluetooth message, etc. The device agent 1001B sends the entered token information plus its (e.g., device, user, etc.) credential (e.g., 2^nd credential shown in FIG. 199) from the secondary device 100B to the sign-up request processor 9002. The sign-up request processor 9002 looks up the token in the database 117 and obtains the master device credential (e.g., 1^st credential shown in FIG. 199). The sign-up request processor 9002 sends the master device credential, the secondary device credential and a request to join the secondary device 100B to the master service account, device group, or multi-device service plan to the subscriber management system 9004. The subscriber management system 9004 de-provisions (if necessary) the secondary device 100B from its current plan and adds it as a subscriber onto the master service account, device group, or multi-device service plan (e.g., for voice, text and data). (De-provisioning the secondary device 100B from its current plan is not shown explicitly in FIG. 199, but de-provisioning can occur, in some embodiments, before adding the secondary device 100B to the intended master service account, device group or multi-device service plan.) The subscriber management system 9004 provisions the network elements to recognize that the secondary device 100B is now associated with the master service account, device group, or multi-device service plan. The master device subscriber and secondary device subscribers both receive a notification that the devices are associated with the master service account, device group, or multi-device service plan.

[0904] Optionally, in some embodiments, the network (or the master subscriber) can assign usage quotas to the secondary device 100B. In some embodiments, the master device subscriber shares the token with the secondary device 100B by displaying, on the master device 100A screen, an image that can be scanned, and the secondary device 100B's device agent 1001B scans the image (e.g., with a built-in camera and scanning software). In some embodiments, the master device 100A's device agent 1001A displays a PIN code on the master device 100A and the secondary device subscriber enters that PIN code into the secondary device 100B via the device agent 1001B. In other embodiments, the master device 100A shares the token with the secondary device 100B via a Bluetooth link, a near-field communication (NFC), a “bump,” or any other type of communication that allows devices in relatively close proximity to communicate with each other.

[0905] In some embodiments, the sign-up request processor 9002 does not send the token back to the master device 100A, but instead sends it directly to secondary device 100B to enable the secondary device subscriber to accept the “invitation” to be added to the share plan. In this embodiment, when the secondary device subscriber accepts the invitation, the token is sent back to the sign-up request processor 9002 as described above, and the provisioning process occurs.

[0906] In some embodiments, the master device subscriber initiates the share request from a web-site. In this embodiment, the process is very similar to the process where the share request is initiated from the master device 100A. In this embodiment, the master mevice subscriber logs into a secure website or portal and enters the necessary information to initiate the sharing request (e.g., his account number, user credential, device credential, etc.) and the request is then processed in the same manner as if the request originated from the master device 100A.

[0907] In some embodiments, the token is a PIN and the PIN is delivered out-of-band to the secondary device subscriber (e.g., via SMS, email message, etc.). In some embodiments, the secondary device subscriber calls an interactive voice recognition (IVR) system and enters the PIN. The IVR obtains the PIN (e.g., through DTMF tones or through voice-to-text processing) and delivers it to the sign-up request processor 9002. From there, the process continues as if the request were handled by the device agent 1001B on the secondary device 100B.

[0908] In some embodiments, the token is a PIN and the PIN is delivered out-of-band to the secondary device subscriber (e.g., via SMS, email message, etc.). In some embodiments, an IVR system automatically calls the secondary device subscriber (at a phone number specified by the master device subscriber in the share request or on the secondary device 100B itself, etc.). The secondary device subscriber then enters the PIN (e.g., using DTM voice-to-text processing) on the IVR and the IVR delivers the PIN to the sign-up request processor 9002. From there, the process continues as if the request were handled by the device agent 1001B on the secondary device 100B.

[0909] In some embodiments, the master device 100A is a first device that has a master device credential provisioned into a network access service permission system by a subscriber management system 9004 to provide for master device access network services in accordance with a multi-device service plan, and the secondary device 100B is a second device that has a secondary device credential provisioned into the network access service permission system by the subscriber management system 9004 to provide for secondary device access network services in accordance with a multi-device service plan.

[0910] In some embodiments, the master device credential is provisioned into the network access service permission system before the secondary device credential is provisioned into the network access service permission system. In some embodiments, the secondary device credential is provisioned into the network access service permission system before the master device credential is provisioned into the network access service permission system. In some embodiments, the secondary device credential and the master device credential are provisioned at the same time into the network access service permission system.

[0911] In some embodiments, the sign-up request processor 9002 is located in the carrier network. In some embodiments, the sign-up request processor 9002 is located in a third-party provider network (e.g., device OEM, VSP, MVNO, device OS provider, Voice over IP (VoIP) provider, etc.).

[0912] The system configuration 1500 of FIG. 198 also enables a secondary-subscriber-initiated on-device multi-device service sign-up procedure in accordance with some embodiments. FIG. 200 illustrates a representative flow chart 1520 illustrating an exchange of messages and processing of messages by the master device 100A, the secondary device 100B, the sign-up request processor 9002 and the subscriber management system 9004 illustrated in the system configuration 1500 of FIG. 198. FIG. 200 illustrates a representative embodiment for a subscriber of the secondary device 100B to request the subscriber of the master device 100A to add the secondary device 100B to the master service account, device group, or multi-device service plan. Additional embodiments are also discussed further herein.

[0913] The secondary device subscriber (via the device agent 1001B) sends a request to the sign-up request processor 9002 requesting to be added as a device to the master device 100A's master service account, device group, or multi-device service plan. The request includes the secondary device 100B's and/or user's credential (e.g., MEID, IMEI, IMSI, MSID, phone number, account number, etc.) and a credential for the master device 100A's account (e.g., MEID, IMEI, phone number, IMSI, MSID, account number, etc.). (The secondary device 100B and/or user's credential is labeled as “2^nd credential” in FIG. 200. The credential for the master device 100A's account is labeled as “1^st credential” in FIG. 200.) The sign-up request processor 9002 verifies with the subscriber management system 9004 that the subscriber of the master device 100A has permissions to add additional devices to the master service account, device group, or multi-device service plan (e.g., by verifying a credential, etc.). In some embodiments, the sign-up request processor 9002 saves the master device 100A and secondary device 100B and/or user information in the database 117. The sign-up request processor 9002 generates a request and delivers it to the master device subscriber (e.g., via SMS, email, PIN code, message to the device agent 1001A on the master device 100A, etc.). The master device subscriber receives the request, responds to the request via the device agent 1001A (e.g., enters his credentials, enters the PIN code, etc.). The device agent 1001A delivers the response to the sign-up request processor 9002. The sign-up request processor 9002 looks up the master device credential (labeled as “1^st credential” in FIG. 200) in the database 117 and obtains the secondary device credential. The sign-up request processor 9002 sends the master device credential, the secondary device credential and a request to add the secondary device 100B to the master service account, device group, or multi-device service plan to the subscriber management system 9004. In some embodiments, the subscriber management system 9004 de-provisions (if necessary) the secondary device 100B from the secondary device's current plan and adds the secondary device 100B as a subscriber onto the master service account, device group, or multi-device service plan (e.g., for voice, text and data). (De-provisioning of the secondary device 100B from the secondary device's current plan, if needed, is not shown explicitly in FIG. 200.) The subscriber management system 9004 provisions the network elements to recognize that the secondary device 100B is now associated with the master service account, device group, or multi-device service plan. The master device subscriber and secondary device subscriber each receive a notification that that the devices are now associated with the master service account, device group, or multi-device service plan. Optionally, the network (or the master device subscriber) can assign usage quotas to the secondary device 100B.

[0914] FIG. 201 illustrates a system configuration 1530 enabling a secondary device 100B to be added to a master service account, device group, or multi-device service plan without the use or involvement of a master device in accordance with some embodiments. FIG. 202 illustrates a representative flow chart 1540 illustrating an exchange of messages and processing of messages by the master device 100A, the secondary device 100B, the sign-up request processor 9002 and the subscriber management system 9004 illustrated in the system configuration 1530 of FIG. 201. FIG. 202 illustrates a representative embodiment for a subscriber of the secondary device 100B to request to add the secondary device 100B to the master service account, device group, or multi-device service plan without the use or involvement of the master device 100A. Additional embodiments are also discussed further herein.

[0915] The master device subscriber enters his credentials on secondary device 100B (via the device agent 1001B). (The master device subscriber credentials are labeled “1^st credential” in FIG. 202.) In some embodiments, the device agent 1001B sends a request including the master device subscriber credential (e.g., username, password, account number, phone number, etc.) and a secondary device credential (e.g., MEID, IMEI, MSID, IMSI, phone number, secondary device subscriber account number, etc.) to the sign-up request processor 9002 requesting the secondary device 100B be added as a device to the master service account, device group, or multi-device service plan. (The secondary device credential is labeled “2^nd credential” in FIG. 202.) In some embodiments, the request includes the secondary device 100B or secondary device and/or user's credential (e.g., MEID, IMEI, IMSI, MSID, phone number, account number, etc.) and a credential for the master device 100A's account (e.g., MEID, IMEI, phone number, IMSI, MSID, account number, etc.). The sign-up request processor 9002 verifies with the subscriber management system 9004 that the subscriber of the master device 100A has permissions to add additional devices to the master service account, device group, or multi-device service plan (e.g., by verifying a credential, etc.). The sign-up request processor 9002 sends the master device credential, the secondary device credential and a request to join the secondary device 100B to the master service account to the subscriber management system 9004. The subscriber management system 9004 de-provisions (if necessary) the secondary device 100B from the secondary device 100B's current plan and adds the secondary device 100B to the master service account, device group, or multi-device service plan (e.g., for voice, text and data). The subscriber management system 9004 provisions the network elements to recognize that the secondary device 100B is now associated with the master service account, device group, or multi-device service plan. The master device subscriber and secondary device subscriber each receive a notification that that the devices are now associated with the master service account, device group, or multi-device service plan. Optionally, the network (or the master device subscriber) can assign usage quotas to the secondary device 100B.

[0916] In some embodiments, the sign-up request processor 9002 is located in the carrier network. In other embodiments, it is located in a third-party provider network (e.g., device OEM, VSP, MVNO, device OS provider, VoIP provider, etc.).

[0917] FIG. 203 illustrates a system configuration 1550 that enables the enrollment of a secondary device 100B entirely from a master device 100A in accordance with some embodiments. FIG. 204 illustrates a representative flow chart 1560 illustrating an exchange of messages and processing of messages by the master device 100A, the secondary device 100B, the sign-up request processor 9002 and the subscriber management system 9004 illustrated in the system configuration 1550 of FIG. 203. FIG. 204 illustrates a representative embodiment for adding the secondary device 100B to the master service account, device group, or multi-device service plan entirely from the master device 100A. Additional embodiments are also discussed further herein.

[0918] In some embodiments, the master device subscriber enters a secondary device credential (e.g., IMSI, MSID, IMEI, MEID, phone number, etc.) (via the device agent 1001A). (The secondary device credential is labeled “2^nd credential” in FIG. 204.) The device agent 1001A sends a request including the master device subscriber credential (e.g., username, password, account number, phone number, IMSI, MSID, IMEI, MEID, etc.) and the secondary device credential (e.g., MEID, IMEI, MSID, IMSI, phone number, etc.) to the sign-up request processor 9002 requesting the secondary device 100B be added to the master service account, device group, or multi-device service plan. (The master device subscriber credential is labeled “1^st credential” in FIG. 204.) The sign-up request processor 9002 verifies with subscriber management system 9004 that the subscriber of the master device 100A has permission to add additional devices to the master service account, device group, or multi-device service plan (e.g., by verifying a credential, etc.). The sign-up request processor 9002 sends the master device credential, the secondary device credential and a request to add the secondary device 100B to the master service account, device group, or multi-device service plan to the subscriber management system 9004. The subscriber management system 9004 de-provisions (if necessary) the secondary device 100B from its current plan and adds it to the master service account, device group, or multi-device service plan (e.g., for voice, text and data). The subscriber management system 9004 provisions the network elements to recognize that the secondary device 100B is now associated with the master service account, device group, or multi-device service plan. The master device subscriber and secondary device subscriber each receive a notification that that the devices are associated with the master service account, device group, or multi-device service plan. Optionally, in some embodiments, a network element (e.g., provisioning or policy management) or the master device subscriber can assign usage quotas to the secondary device 100B.

[0919] In some embodiments, prior to sending the “add” request to the subscriber management system 9004, the sign-up request processor 9002 may send a validation request to the secondary device 100B (via the device agent 1001B) or secondary device subscriber to confirm the change and wait for the response before performing the “add” action. In some embodiments, the request is an SMS, a call from an IVR system, an email, a notification on the device (via the device agent 1001B), etc.

[0920] In some embodiments, the master device subscriber adds the secondary device 100B to the master device subscriber's share plan prior to the secondary device being activated. In some embodiments, the master device subscriber adds the secondary device to the master device subscriber's share plan at the time that the secondary device is being provisioned or activated.

[0921] In some embodiments, where the secondary device is added to the master service account, device group, or multi-device service plan prior or during the activation process, the sign-up request processor 9002 delivers a notification to the secondary device subscriber indicating that the device has been associated with the master service account, device group, or multi-device service plan. In some embodiments, the notification is delivered to the device agent for presentation through a user interface of the secondary device. In some embodiments, the notification is delivered as an SMS, MMS, voice message (either live or IVR), or email. In some embodiments, the notification requires the secondary device subscriber to acknowledge the notification prior to associating the secondary device with the master service account, device group, or multi-device service plan. In some embodiments, the secondary device subscriber is automatically associated with the master service account, device group, or multi-device service plan without the secondary device subscriber having to confirm the notification.

[0922] In some embodiments, the sign-up request processor 9002 is located in the carrier network. In other embodiments, it is located in a third-party provider network (e.g., device OEM, VSP, MVNO, device OS provider, VoIP provider, etc.).

Service Plan Sharing with Allowance Limits

[0923] In some embodiments in which a service plan is shared, the master device subscriber may wish to only share a portion of the total service plan with a secondary device subscriber. In some embodiments, the sharing process includes a step where the master device subscriber defines what portion or portions of the service plan (voice service plan, messaging service plan, data access service plan, etc.) are to be shared with the secondary device subscriber. In some embodiments, the portions represent a set of services less than all of the services offered by the service plan to be shared. In some embodiments, the portions are represented by imitations expressed in voice minutes, long distance minutes, international calling destinations, international calling minutes, number of text messages, number of MMS messages, access to specific data services (e.g., website, domain, content type (e.g., streaming audio, streaming video, VoIP, etc.), quality-of-service (QoS) rated services, protocol type, general data access in time or usage (e.g., MB, kB, etc.), application usage, content downloads, content uploads, 3G access, 4G access, Wi-Fi access, etc.), time periods (e.g., days of the week, specific hours in a day, or total hours in a day, total hours in a week, total days in a month, etc.), or other units that are applicable to the shared portion of the service plan. In some embodiments, the portions can be expressed as percentage of the service plans' service usage allowance for a category of service (e.g., 5% of the voice minute allowance, 20% of the data allowance, etc.) or absolute values (e.g., 20 minutes of voice, 100 messages, 5 MB of data, 5 hours of data use, 1 hour of VoIP calling, 30 minutes of media streaming, etc.). In some embodiments, the sharing limits are set up with the initial offer to share. In some embodiments, the sharing limits are set up after the plan has been shared with the secondary device. In some embodiments, in which sharing limits are set up with the initial offer to share, the sharing attributes may be stored in the sign-up request processor database and associated with the sharing token. When the secondary device subscriber is provisioned onto the sharing plan, the sharing attributes are also communicated to the subscriber management system 9004 along with the “add” request.

[0924] In some embodiments, the master device subscriber may purchase an add-on service plan for the secondary device subscriber and allocate (e.g., assign) the entire add-on service plan to the secondary device subscriber (e.g., the secondary device subscriber gets an add-on service plan that provides additional service usage quota for a service that the secondary device subscriber uses more frequently than other users (e.g., an application-specific (e.g., facebook, email, etc.) service plan, an additional allocation of voice minutes or text messages, etc.). In some embodiments, the master device subscriber adds certain capabilities (that might be offered at a discount) to certain users so that those users do not consume the quotas of the shared service plan while using these activities. For example, a master device subscriber might share a non-streaming data plan with a secondary device subscriber, but the secondary device subscriber desires to stream data (e.g., by watching a video, listening to streaming audio, video conferencing, etc.) The master device subscriber may purchase an audio/video streaming-capable service plan and assign that service plan to the secondary device, but not to other devices. This allows the secondary device subscriber to stream data without the master device subscriber having to purchase a larger streaming capable plan.

Sharing with Curfews

[0925] In some embodiments in which a service plan is shared, the master device subscriber may wish to set curfews (e.g., no messaging between 10:00 P.M. and 6:00 A.M., email data access only during school hours, no voice calls except certain numbers during the school day (e.g., numbers on a “whitelist”), no international long distance calls, etc.) associated with the secondary device as part of the sharing process. In some embodiments, these curfews provide limits on usage of certain aspects of the shared portion of the service plan and thus provide for further control service plan sharing. In some embodiments, the service plan sharing process includes a step where the master device subscriber defines the curfews on the portion or portions of a service plan (voice service plan, messaging service plan, data access service plan, etc.) that are to be shared with the secondary device. The curfews can be expressed as limits on certain aspects of the service plan during certain time periods (no text messaging from 10:00 P.M. until 6:00 A.M. Monday-Friday, only allow voice calls to a certain set of numbers during school hours, no Hulu videos after 8:00 P.M., etc.), maximum usage of an aspect of a service plan during a time period (e.g., maximum of 30 minutes of voice calling per day on weekdays, maximum of 20 MB of Facebook during school hours, no text messaging on Mondays, etc.). In some embodiments, the curfews restrict certain types of access during a specified interval. In some embodiments, the curfews limit certain types of access during a specified interval. In some embodiments, the curfews are set up with the initial offer to share. In some embodiments, the curfews are set up after the secondary device subscriber has been joined to a shared service plan. In some embodiments in which the curfews are set up with the initial offer to share, the curfew attributes are stored in the sign-up request processor database and associated with the sharing token. When the secondary device subscriber is provisioned onto a shared service plan, the curfew attributes are communicated to the subscriber management system 9004 along with the “add” request. In some embodiments, curfews are combined with sharing limits (e.g., 100 MB of data usage during the service plan cycle and no data usage allowed during school hours, etc.).

User-Established Quotas/Curfews/Limitations on Service Usage

[0926] In some embodiments, a user may want to set quotas, curfews or limitations on his own service usage. One motivation for doing this may be cost related (e.g., a user wants to ensure a service plan allowance is not exhausted before the end of the service plan cycle, or a user wants to prevent overages, a user's company subsidizes only a certain percentage of service plan usage and the user does not want to exhaust his portion of the allowance, etc.), but there may be other reasons. In some embodiments, the notification enables the secondary subscriber to request additional service from the master subscriber when the notification is triggered. In some embodiments, the notification enables an automatic purchase (or re-purchase) of a specified service plan. In some embodiments, the automatic purchase of a service plan also delivers a notification to the master subscriber. In some embodiments, the notification that is delivered to the master subscriber is delivered via email, SMS, MMS, a message on the master device's device agent 1001, a message on a portal, or a message on a website. In some embodiments, the user interacts with the device agent 1001 on his device to set the desired service controls. The device agent 1001 communicates the service limits to the subscriber management system 9004 (either directly or via an intermediate element), and the subscriber management system 9004 provisions the controls to the appropriate enforcement elements. In some embodiments, the control elements are network elements (e.g., policy controller, policy charging and rules function (PCRF), policy charging enforcement function (PCEF), etc.). In some embodiments, the control elements are device-based agents/elements. In some embodiments, the control agents/elements exist both in the network and on the device.

Notifications

[0927] In some embodiments, the master device subscriber may desire to set up notifications for secondary users to alert them when they are reaching plan allowances, their individual quota allowances, plan time elapsed or remaining, usage velocity (e.g., rate of service usage), etc. In these types of embodiments, the master device user can, from his device or from an alternative device (e.g., a secondary device, another device associated with the master service account, device group, or multi-device service plan, a website visited from a computer or tablet, etc.) to set up these notifications. In some embodiments, the notifications can also include actions or offers to modify an aspect of service usage (e.g., turn off or block certain services because an allocated quota is running out, or because a service is expensive while roaming, etc.). In other embodiments, the notifications can include an action to also inform the master device subscriber of a secondary device subscriber's activity within the service. In some embodiments, this alert to the master device subscriber can also include a request from the secondary device subscriber to increase his quota allocation, purchase additional service and assign an additional allocation to him, re-allocate other users' quotas on the service towards this particular secondary user, etc. In some embodiments, these notifications can be initiated because a particular secondary user is not using much of his allocated quota, and the notification is sent to the master device subscriber to inform him of the condition and allow the master device subscriber to reallocate the quota as the master device subscriber deems appropriate (e.g., the subscriber may give more service allocation to a different user (including himself) since the particular secondary device subscriber is not going to use his allocation based on current usage velocity (e.g., the average rate of data consumption over a period of time (e.g., one hour, one day, one week, etc.)) trends).

[0928] In some embodiments, the master device subscriber uses an application (e.g., application locally on his device, a website from a computer, an application on a secondary device subscriber's device, etc.) to configure the notifications. In some embodiments, the master device subscriber enters a login credential, an account number, a phone number, etc. to identify him as someone who is authorized to make changes to the account. Once logged in, the master device subscriber interacts with the application to set up the desired notifications for the specific secondary device subscriber (or users). In some embodiments, the notifications are configured to be the same for all secondary device subscribers. In some embodiments, the notifications are specific to each secondary device subscriber. In some embodiments, the notifications are specific to a subset of secondary device subscribers. For example, in an enterprise scenario, there may be groups of users based on their position or function within the enterprise (e.g., sales, executive, field service, etc.). Each group of users may have different sets on notifications configured by the master device subscriber because each group of users may have different aspects of a service plan shared with them. For example, a sales group and a field service group may have a larger allocation of service usage for maps and navigation services and there could be notifications for service usage within that particular allocation for those groups, so they know if they are running out of that type of service. In a family share scenario, the children might have limited access to a social networking application during school hours (e.g., 10 MB, 30 minutes, etc.) and the master device subscriber sets a notification to notify the child when she is reaching her daily limit. In some embodiments, the notification that is configured is delivered to the specific user of the service (e.g., the child, etc.). In some embodiments, the notification is delivered to the master device subscriber. In some embodiments, the notification is delivered to both the master device subscriber and the specific user of the service. Once the notifications are configured, they are sent to the subscriber management system 9004. The subscriber management system 9004 provisions the notification type, parameters, text, actions, etc. to the various elements that are responsible for implementing the notification policy. In some embodiments, the elements are network-based elements (e.g., OCS, PCRF, PCEF, notification element, etc.). In some embodiments, the elements are device-based agents (e.g., agents for local usage counting, local classification and policy management, local notification agent, etc.). In some embodiments, the elements are located in both the network and the device (e.g., accounting and policy control in the network, notification agent on the device, etc.). Once the elements are provisioned, the notification policy is associated with the appropriate subscribers (e.g., the one or more secondary device subscribers) and enabled when the subscriber is actively using the services.

[0929] As discussed previously, in some embodiments, the notification is actionable by either the secondary device subscriber or the master device subscriber. For example, in an enterprise scenario, when the user is reaching the limit of an enterprise-paid service, the notification can include an option for the secondary device subscriber to purchase additional service just for him (e.g., not shared with other users). In some embodiments, the notification action is to alert the master device subscriber so he can take action (e.g., purchase additional shared service, purchase service just for that user, reallocate usage quotas, etc.). In some embodiments, the notification to the master device subscriber includes an option to purchase additional service. In some embodiments, the additional service includes shared service (e.g., additional usage for all subscribers on the shared account). In some embodiments, the additional service is specifically for the subscriber whose usage profile generated the notification. In some embodiments, the additional service is for a specific subset of subscribers on the shared service plan. In some embodiments, the master device subscriber has the option to decline the additional service offer. In some embodiments, the action taken by the master device subscriber (e.g., additional service purchased, no additional service purchased, etc.) is communicated to the secondary device subscriber. In some embodiments, the communication is via email, SMS, MMS, a message delivered to the device agent 1001 on the secondary device, a message displayed on a portal, or a message displayed on a website.

[0930] In some embodiments, the system is configured to detect when the device agent 1001 on the secondary device has been tampered with. In some embodiments, tampering includes removal of the device agent 1001, modification of the device agent, or modification of the configuration data used by the device agent. In some embodiments, this is achieved by detecting that the device agent on the secondary device has not sent a heartbeat message (e.g., a message configured to inform a network element that the device agent is present and operating properly, where such messages are possibly sent periodically or upon request by the network element) to the sign-up request processor 9002 (or other monitoring network element) or to the device agent 1001 on the master device in the configured time interval. In some embodiments, the detection is achieved by inspecting traffic to or from the secondary device and determining if the inspected traffic conforms to the controls that are expected to be enforced (e.g., whether there is data usage when data curfews are in place, whether there is a voice call to a non-whitelisted number when a voice curfew is in place, etc.). In some embodiments, detecting tampering is achieved by verifying a device agent credential, software signing key, software hash, software configuration integrity, software configuration hash, operating system (OS) credential, OS software hash, or OS signing key. In some embodiments, the detection occurs on the secondary device. In some embodiments, the detection occurs on the master device. In some embodiments, the detection occurs in the Network. In some embodiments, the detection is performed by two or more elements (e.g., missing heartbeat message between the secondary device and a network element). In some embodiments, when it has been detected that tampering has occurred on the secondary device, a notification is sent to the master device user. In some embodiments, the notification is delivered directly to the master device via, for example, SMS, device agent notification, email or IVR phone call. In some embodiments, the notification also includes an alert sound to bring immediate attention to the notification. In some embodiments, the notification is displayed on top of all other UI elements on the master device. In some embodiments, the notification is delivered to other account entities in addition to the master. In some embodiments, the notification is delivered to multiple account entities.

[0931] In some embodiments, the master device credential is provisioned into the network access service permission system to provide a master device user with a higher level of control over multi-device service plan configuration, and the secondary device credential is provisioned into the network access service permission system to provide a secondary device user with a lesser degree of control over multi-device service plan configuration. In some embodiments, the secondary device credential is provisioned into the network access service permission system to provide a secondary device user with a higher level of control over multi-device service plan configuration, and the master device credential is provisioned into the network access service permission system to provide a master device user with a lesser degree of control over multi-device service plan configuration. In some embodiments, the master device credential and the secondary device credential are provisioned into the network access service permission system to provide the same degree of control over multi-device service plan configuration to a user of the master device and a user of the secondary device.

[0932] In some embodiments, the control over multi-device service plan configuration comprises the ability to approve or initiate purchasing, upgrading, downgrading or discontinuing a service plan or a multi-device service plan. In some embodiments, the control over multi-device service plan configuration comprises the ability to approve or initiate adding or deleting one or more devices associated with the master service account, device group, or multi-device service plan. In some embodiments, the control over multi-device service plan configuration comprises the assignment of or approval of a service usage allowance for one or more devices capable of receiving services in accordance with the multi-device service plan. In some embodiments, the service usage allowance comprises a voice, text or data usage allowance for one or more wireless access networks. In some embodiments, the allowance comprises an allowance on one or more applications or one or more application types that may be used on one or more wireless access networks. In some embodiments, the allowance comprises a time of day or time period allowance during which one or more access network services may be used. In some embodiments, the allowance comprises an allowance for communication with one or more network end points or websites or one or more network endpoint types or website types over one or more wireless access networks. In some embodiments, the allowance comprises an allowance for one or more content types or traffic types on one or more wireless access networks. In some embodiments, the allowance comprises an allowance for one or more QoS levels on one or more wireless access networks. In some embodiments, the allowance comprises one or more roaming permission levels for one or more wireless roaming networks. In some embodiments, an allowance is implemented by provisioning an allowance policy instruction or allowance policy setting into one or more device agents on the device associated with the allowance. In some embodiments, the allowance is implemented by provisioning an allowance policy instruction or allowance policy setting into a device service processor on the device associated with the allowance.

[0933] In some embodiments, information defining at least an aspect of the allowance is obtained from one or more device agents on a master device. In some embodiments, information defining at least an aspect of the allowance is obtained from one or more device agents on a secondary device. In some embodiments, information defining at least an aspect of the allowance is obtained from a master device user or secondary device user input to a website or portal. In some embodiments, information defining at least an aspect of the allowance is obtained from an account owner input to a website or portal.

[0934] In some embodiments, the control over multi-device service plan configuration comprises the assignment of or approval of a service usage limit for one or more devices capable of receiving services in accordance with the multi-device service plan. In some embodiments, the service usage limit comprises a voice, text, or data usage limit for one or more wireless access networks. In some embodiments, the limit comprises a limit on one or more applications or one or more application types that may be used on one or more wireless access networks. In some embodiments, the limit comprises a time of day or time period limit during which one or more access network services may be used. In some embodiments, the limit comprises a limit on communication with one or more network end points or websites or one or more network endpoint types or website types over one or more wireless access networks. In some embodiments, the limit comprises a limit for one or more content types or traffic types on one or more wireless access networks. In some embodiments, the limit comprises a limit for one or more QoS levels on one or more wireless access networks. In some embodiments, the limit comprises one or more roaming limitations for one or more wireless roaming networks. In some embodiments, a limit is implemented by provisioning a limit policy instruction or limit policy setting into one or more network elements responsible for providing wireless access network permission for one or more wireless access networks to the device associated with the limit. In some embodiments, a limit is implemented by provisioning a limit policy instruction or limit policy setting into one or more network elements responsible for providing wireless access network permission for one or more wireless access networks to the device associated with the limit.

[0935] FIG. 205 illustrates a system configuration 1570 in accordance with some embodiments. In some embodiments, the master device 100A and secondary device 100B interact with the sign-up request processor 9002 (via the device agents 1001A and 1001B) to manage plan sharing. In some embodiments, the sign-up request processor 9002 interacts with the subscriber management system 9004 to complete a requested function. In some embodiments, the subscriber management system 9004 acts as the single interface point for the sign-up request processor 9002, and the sign-up request processor 9002 directs all of its queries and requests through the subscriber management system 9004. In some embodiments, the sign-up request processor 9002 makes “high level” requests to the subscriber management system 9004 (e.g., add a secondary device subscriber to a master service account, device group, or multi-device service plan, etc.) and the subscriber management system 9004 converts the “high level” request into a series of “low level” requests and workflows to the various elements needed to complete the requested action. In this manner, a service operator can make necessary changes to the “low level” processing while keeping the interface at the “high level” consistent. It also enables the service operator to support a multi-vendor configuration without having to expose the low-level requests and workflow details to the sign-up request processor 9002. In some embodiments, the sign-up request processor 9002 is a component of the subscriber management system 9004.

[0936] In some embodiments, such as the embodiment illustrated in FIG. 205, the permissions element 9012 verifies that the requestor (e.g., master device 100A subscriber) has the appropriate account permissions to initiate an action (e.g., request a subscriber be added to a master service account, device group, or multi-device service plan, remove a subscriber from a master service account, device group, or multi-device service plan, set quota and sharing limits for secondary device 100B subscribers, etc.). Additionally, in some embodiments, the provisioning element 9014 is responsible for provisioning the required elements based on actions requested by the sign-up request processor 9002 (e.g., add a secondary device 100B subscriber, remove a secondary device 100B subscriber, set a quota for a master device 100A or secondary device 100B subscriber, set a notification policy for a master device 100A or secondary device 100B subscriber, adjust a curfew, etc.). In some embodiments, when a request is made to the provisioning element 9014 by the sign-up request processor 9002, the provisioning element 9014 validates a credential to ensure that the requestor has the authority to perform the action (e.g., master device 100A subscriber can add a user, secondary device 100B subscriber can configure notifications, etc.). Additionally, in some embodiments, the provisioning element 9014 provisions the permissions element 9012 with updated account or subscriber level permissions (e.g., add or remove a subscriber from a shared account, grant or revoke certain account-level permissions to a secondary device 100B subscriber, grant or revoke certain subscriber-level permissions to a secondary device 100B subscriber, etc.). In some embodiments, the provisioning element 9014 also provisions the policy management (labeled “Policy Mgmt” in FIG. 205) element 9016 to set appropriate quotas, restrictions, events to monitor (e.g., attempting to perform an action that is not allowed either at the plan level or based on limits/restrictions set by the master device 100A subscriber that would then trigger a notification alert, etc.), etc. In some embodiments, the provisioning element 9014 provisions the usage accounting element 9018 with service plans associated with the account (shared and non-shared plans) and the subscriber IDs that are sharing the plans. In some embodiments, the usage accounting system 9018 is provisioned via a third party (e.g., device OEM, OS provider, retail partner, VSP, MVNO, etc.) server. In some embodiments, the usage accounting system 9018 is provisioned from a device agent 1001. In some embodiments, the usage accounting element 9018 is provisioned with rules regarding which services are free to the subscriber and which are not (e.g., sponsored services, carrier administration traffic, special phone numbers (e.g., 611, 911, operator customer support, retail partner, sponsored service partner, etc.)). In some embodiments, the usage accounting element 9018 is configured to report usage to a device agent 1001 on the subscriber devices. In some embodiments, the usage data information delivered to the device agent 1001 includes detailed usage information for each device associated with the master service account, device group, or multi-device service plan. In some embodiments, the usage information delivered to or displayed on the device is different for the master subscriber and the child subscriber. For example, in some embodiments, the master subscriber can view total plan usage, his own usage and usage by subscriber associated with the shared plan, while the child subscriber can only view his own usage.

[0937] In some embodiments, usage accounting 9018 and policy management 9016 interwork to meet a service policy objective (e.g., when usage within a service plan for a specific secondary device 100B subscriber hits a certain usage level, block further access to that service plan for that secondary device 100B). In some embodiments, the provisioning element 9014 also provisions the notification element 9020 with the details about notifications that need to be delivered to subscribers based on certain events. In some embodiments, these details include trigger identification, notification text and actions. In some embodiments, these details include other instructions that instruct the notification element 9020 (and, in some embodiments, the device agent 1001) on further workflow associated with a notification (e.g., a notification trigger identification that indicates that a service plan limit has been reached, the text to be shown to the subscriber when the condition occurs, the buttons to display on the notification (e.g., dismiss, purchase additional service, view product catalog, “snooze,” “don't remind me again,” etc.), and the action to take when specific buttons are selected (e.g., when the user selects “don't remind me again,” show these choices for when to remind him again (e.g., never, 1 hour, 2 hours, 4 hours, etc.)).

[0938] In some embodiments, the elements in FIG. 205 are located in the network. In some embodiments, the elements in FIG. 205 are located on the subscriber device 100. In some embodiments, some of the elements in FIG. 205 are located in the subscriber device 100, and some of the elements are located in the network.

[0939] In some embodiments, the elements in FIG. 205 work in a coordinated manner. For example, in some embodiments, notifications are triggered when certain policy events (managed by policy management 9016) or certain usage thresholds (managed by usage accounting 9018) occur. As would be appreciated by a person having ordinary skill in the art, there are many combinations of interworking between network elements that will achieve the desired coordinated events. Additionally, although FIG. 205 illustrates the elements as separate entities, the elements can be combined or further divided as appropriate for the particular implementation.

[0940] In some embodiments, a network system is configured to provision a multi-device service plan access network permission configuration into one or more access network permission control elements, the permission configuration allowing access network service permission in accordance with a multi-device service plan for at least a master device 100A and a secondary device 100B. In some embodiments, the provisioning of the secondary device 100B service permissions is accomplished by providing a secondary device credential and service permission information to a subscriber management system 9004 that configures a set of one or more wireless access network permissions on one or more wireless access network access control elements, the one or more wireless access network permissions comprising access control permissions for attempted or actual access traffic associated with the secondary device credential. In some embodiments, the one or more access network permission control elements comprise one or more device agents 1001B located on the secondary device 100B. In some embodiments, the one or more device agents 1001 comprise a service processor 115. In some embodiments, the one or more access network permission control elements comprise a subscriber management system 9004. In some embodiments, the one or more access network permission control elements comprise a service controller 122. In some embodiments, the one or more access network permission control elements comprise a network AAA system. In some embodiments, the one or more access network permission control elements comprise one or more of a network gateway, router, policy control enforcement function, gateway GPRS support node (GGSN), serving GPRS support node (SGSN), packet data serving node (PDSN), home location register (HLR), home subscriber server (HSS), packet data network gateway (PGW), serving gateway (SGW), traffic monitoring function, deep packet inspection (DPI) function, or home agent.

[0941] In some embodiments, the sign-up request processor 9002 is located in the carrier network. In other embodiments, it is located in a third-party provider network (e.g., device OEM, VSP, MVNO, device OS provider, VoIP provider, etc.).

[0942] It is sometimes desirable that a common application programming interface (API) be implemented to simplify or eliminate the details of what has to happen in one or more carrier networks, and to establish a finite set of pre-specified API commands to support a common multi-device service plan assignment system that works with a plurality of third-party on-device multi-device service plan sharing and assignment solutions. In some embodiments, the pre-specified API commands include such actions as activate a device onto a shared plan, add a device to a master service account, device group, or multi-device service plan, remove a device from a master service account, device group, or multi-device service plan, manage quotas for devices on a shared plan, manage notifications for devices on a shared plan, or assign specific plans to certain devices on a shared plan. As would be appreciated by a person having ordinary skill in the art, there are many types actions that can be defined, and the examples provided herein are not intended to be limiting.

[0943] In some embodiments, such as the embodiment illustrated in FIG. 206, there is one sign-up request processor 9002 that interconnects with multiple service operators via a common API 9022. Specifying common API 9022 enables the sign-up request processor 9002 to add new service operators without having to implement new interfaces to support the new service operators. In some embodiments, the subscriber has a common sign up experience regardless of his service operator. This allows a third party (e.g., device OEM, VSP, MVNO, device OS provider, VoIP provider, etc.) to define a user interface (UI) and process and implement that UI once in the sign-up request processor 9002 and/or device agent 1001 to enable the third party to offer a common experience across all of the service operators that it interworks with. For example, a device manufacturer may want to have a common service sign-up and sharing management UI and process for all of its products and desires that the common service sign-up and sharing management UI and process are implemented consistently across all of the service operators that are selling the manufacturer's products. Thus, in some embodiments, the device manufacturer provides the sign-up request processor 9002 and the common API 9022 and works with the service operators to have them implement the required functionality to support the on-device service sign-up and multi-device sharing functions. In some embodiments, the manufacturer implements, on the sign-up request processor 9002, common APIs for functions like add new service, delete service, add a device to a master service account, device group, or multi-device service plan, delete a device from a master service account, device group, or multi-device service plan, manage quotas on a shared plan, etc., and then provides a well-defined API, interface, and protocol (e.g., JSON, WSDL, etc.) to the interface 9022 with the individual service operators. In some embodiments, the interface protocol between the sign-up request processor 9002 and the service operator subscriber management system 9004 is a “high level” functional interface as described above and the subscriber management system 9004 implements a series of “low level” instructions to each of the affected operator elements (as described in the discussion of FIG. 205). In some embodiments, the subscribers sharing a service plan must be subscribed to the same service operator. In some embodiments where a centralized accounting function is implemented, the subscribers may be, but need not be, subscribed to different service operators, and the centralized accounting function tracks, manages and aggregates the service usage of all of the devices sharing the shared plan across all of the service operators. By leveraging a single sign-up request processor 9002, the sign-up request processor 9002 brokers the multi-device plan sharing, management and assignment requests across the different service operators.

[0944] FIG. 206 illustrates a system configuration 1580 including a network that the devices 100 use to communicate with the sign-up request processor 9002 in accordance with some embodiments. In some embodiments, the network 1100 is a common network regardless of the service operator that the subscriber is subscribed to. In other embodiments, each service operator uses its own network to enable the device to connect to the sign-up request processor 9002. In some embodiments, the network 1100 is a cellular network. In some embodiments, the network 1100 is a Wi-Fi network. In some embodiments, the network 1100 is a Wi-Fi network for one device and a cellular network for the other device.

[0945] In some embodiments, the sign-up request processor 9002 is located in the carrier network. In other embodiments, it is located in a third-party provider network (e.g., device OEM, VSP, MVNO, device OS provider, VoIP provider, etc.). In some embodiments, there is a plurality of sign-up request processors 9002. In some embodiments, each of the plurality of sign-up request processors 9002 conforms to the common API 9022 command set. In some embodiments, each of the plurality of sign-up request processors 9002 is associated with a subset of the entities requiring access to manage multi-device plan sharing and assignment. In some embodiments, these entities include device OEM, OS provider, VSP, MVNO, MNO, retail distribution partners, or sponsored service providers. In some embodiments, each of the entities requiring access to manage multi-device plan sharing and assignment implements its own UI, device agent 1001 and on-device workflows to enable the entity to customize the process to suit its needs without impacting the service operator interfaces.

[0946] Although FIG. 206 illustrates the API 9022 coupled with the sign-up request processor 9002, in some embodiments, the API 9022 is defined by each service operator (e.g., MNO, MVNO, VSP, etc.) and coupled with each service operator's subscriber management system 9004. In some embodiments, the sign-up request processor 9002 conforms to each service operator's API specification. In some embodiments, the service operator API exposes the “high level” requests (e.g., add subscriber to a master service account, device group, or multi-device service plan, remove subscriber from a master service account, device group, or multi-device service plan, allocate quotas, add curfew, remove curfew, add notification, delete notification, etc.) to the sign-up request processor 9002 and then converts the “high level” commands into the appropriate “low level” commands and workflow specific to that service operator.

[0947] In some embodiments, a party specifies a global API that defines a superset of required “high level” commands that entities use to manage multi-device plan sharing capabilities and then provide an internal framework to allow the individual service operators to convert the “high level” commands received from the sign-up request processor 9002 into the service operator-specific “low level” commands and workflows that apply to that service operator. In some embodiments, the party is an operator, a VSP, an MVNO, an OEM, an OS provider, a retail distribution partner, or any type of partner that would benefit from a consistent multi-device service management experience across multiple service providers.

Device Credentials

[0948] In some embodiments, a device comprises one or more wireless modems that enable the device to connect to at least a first wireless network and one or more device agents that: obtain a first device credential from a device credential storage element, the first device credential uniquely identifying the device; present a multi-device service plan sign-up message through a user interface of the device, the multi-device service plan sign-up message offering the user an option to associate the device with a master service account, device group, or multi-device service plan, the master service account, device group, or multi-device service plan comprising access service permissions to enable communication over the first wireless network by one or more devices; obtain a user input indicating that the user desires to associate the device with the master service account, device group, or multi-device service plan; and communicate the first device credential and the user input to a network element responsible for associating the device with the master service account, device group, or multi-device service plan.

[0949] In some embodiments, the device receives an acknowledgment that the device was successfully associated with the master service account, device group, or multi-device service plan. In some embodiments, the device receives the acknowledgment from a network element and presents the acknowledgment through a device user interface.

[0950] In some embodiments, the device receives an instruction that assists in associating the device with the master service account, device group, or multi-device service plan. In some embodiments, the device receives that instruction from a network element and executes the instruction to assist in associating the device with the master service account, device group, or multi-device service plan. In some embodiments, the instruction modifies an aspect of a device connection to the first wireless network. In some embodiments, the instruction modifies an aspect of a device access permission associated with communicating over the first wireless network. In some embodiments, the instruction modifies an aspect of the first device credential or a second device credential.

[0951] In some embodiments, the first device credential comprises one or more of a phone number, an IMSI, an MSID, a SIM identifier, an ESN, an MEID, an IMEI, a device identifier, a subscriber identifier, a service account identifier, a token, and a one-time token.

[0952] In some embodiments, at least a portion of the service plan sign-up message is obtained from a device system memory. In some embodiments, the at least a portion of the service plan sign-up message is pre-stored in the device system memory before the service plan sign-up message display sequence is initiated. In some embodiments, at least a portion of the service plan sign-up message is obtained from a network destination. In some embodiments, the at least a portion of the service plan sign-up message is obtained from a network element before the service plan sign-up message display sequence is initiated. In some embodiments, the at least a portion of the service plan sign-up message is obtained from a network element immediately prior to the service plan sign-up message display sequence being initiated. In some embodiments, the network element comprises a website, a portal, or a message server.

[0953] In some embodiments, the device obtains at least a portion of the service plan sign-up message from a push message sent by a network server. In some embodiments, the network server is a push server. In some embodiments, the device receives the push message over a secure push message control link. In some embodiments, the device assists in securing the push message control link by sharing the first device credential with a push message server and establishing an encrypted link in cooperation with the push message server.

[0954] In some embodiments, a network system receives a secondary device multi-device service plan sign-up request from a device agent 1001B on a secondary device 100B. In some embodiments, the multi-device service plan sign-up request comprises a master user credential and a secondary device credential. In some embodiments, the network system compares the master user credential to an account owner credential associated with a master service account, device group, or multi-device service plan. In some embodiments, if the comparison indicates that the master user credential and the account owner credential are consistent, the network system provides a provisioning instruction to a wireless access network control system to associate the secondary device 100B with access control permissions associated with the master service account, device group, or multi-device service plan.

[0955] In some embodiments, a network system receives a secondary device multi-device service plan sign-up request from a device agent 1001B on a secondary device 100B. In some embodiments, the multi-device service plan sign-up request comprises a master user credential and a secondary device credential. In some embodiments, the network system compares the master user credential to an account owner credential associated with a master service account, device group, or multi-device service plan. In some embodiments, if the comparison indicates that the master user credential and the account owner credential are consistent, the network system provides a provisioning instruction to a wireless access network accounting system to account service usage associated with the secondary device 100B to the master service account.

Sign-Up Requests

[0956] In some embodiments, a master device 100A comprises one or more device agents 1001A that receive a multi-device sign-up option message or request message from a network element to add a secondary device 100B to a master service account, device group, or multi-device service plan. In some embodiments, the one or more agents 1001A present the multi-device sign-up option message or request message to a user through a user interface of the master device 100A. In some embodiments, the one or more agents 1001A obtain a user response through the user interface and send the user response to the network element. In some embodiments, the user response comprises a master account-holder credential and an acknowledgment of the request to add the secondary device 100B to the master service account, device group, or multi-device service plan. In some embodiments, the master device 100A also sends a master device credential to the network element, the master device credential uniquely identifying the master device 100A. In some embodiments, the master device 100A communicates with the network element over a secure link. In some embodiments, the master device 100A receives the multi-device sign-up option message or request message request from the network element over the secure link. In some embodiments, the secure link comprises a secure push message link, and the master device 100A receives the message over the secure link by receiving a push message from a network push message server. In some embodiments, the master device 100A assists in securing the secure push message link by executing a link establishment process during which the master device 100A shares a master credential with the network push message server and, in cooperation with the network push message server, establishes an encrypted link.

[0957] In some embodiments, a network system receives a secondary device multi-device service plan sign-up option response message or request message from a secondary device agent 1001B on a secondary device 100B. In some embodiments, the network system communicates information about the secondary device multi-device service plan sign-up option response message or request message to a master device agent 1001A on a master device 100A. In some embodiments, the network system obtains a response to the information about the secondary device multi-device service plan sign-up option response message or request message from the master device agent 1001A. In some embodiments, if the response indicates that the secondary device service plan sign-up option response or request is granted or acknowledged, the network system provides a provisioning instruction to a wireless access network control system to associate the secondary device 100B with access control permissions associated with the master service account, device group, or multi-device service plan. In some embodiments, the network system also receives a device credential from the master device 100A in association with the response. In some embodiments, the network system includes a secure message link server that communicates the information about the secondary device multi-device service plan sign-up option response message or request message to the master device agent 1001A. In some embodiments, the network system includes a network push message server and the secure link comprises a secure push message link, and the network system communicates the information about the secondary device multi-device service plan sign-up option response message or request message to the master device agent 1001A by sending a push message from a network push message server. In some embodiments, the network system secures the network push message server by executing a push message link establishment process in which the network push message server obtains a device credential and, in cooperation with the master device 100A, establishes an encrypted link.

[0958] In some embodiments, a network system receives a secondary device multi-device service plan sign-up option response message or request message from a secondary device agent 1001B on a secondary device 100B. In some embodiments, the network system communicates information about the secondary device multi-device service plan sign-up option response message or request message to a master device agent 1001A on a master device 100A. In some embodiments, the network system obtains a response to the information about the secondary device multi-device service plan sign-up option response message or request message from the master device agent 1001A. In some embodiments, if the response indicates that the secondary device service plan sign-up option response or request is granted or acknowledged, the network system provides a provisioning instruction to a wireless access network accounting system to account service usage associated with the secondary device 100B to the master service account. In some embodiments, the network system also receives a device credential from the master device 100A in association with the response. In some embodiments, the network system includes a secure message link server that communicates the information about the secondary device multi-device service plan sign-up option response message or request message to the master device agent 1001A. In some embodiments, the network system includes a network push message server and the secure link comprises a secure push message link, and the network system communicates the information about the secondary device multi-device service plan sign-up option response message or request message to the master device agent 1001A by sending a push message from a network push message server. In some embodiments, the network system secures the network push message server by executing a push message link establishment process in which the network push message server obtains a device credential and, in cooperation with the master device 100A, establishes an encrypted link.

[0959] In some embodiments, a secondary device comprises one or more device agents that receive a request from a network element to add a secondary device to a master service account, device group, or multi-device service plan. In some embodiments, the one or more agents present the multi-device sign-up option message or request message to a user through a user interface of the secondary device. In some embodiments, the one or more agents obtain a user response through the user interface and send the user response to the network element. In some embodiments, the user response comprises a master account-holder credential and an acknowledgment of the request to add the secondary device to the master service account, device group, or multi-device service plan. In some embodiments, the response comprises a credential associated with a user of the secondary device and an acknowledgment of the request to add the secondary device to the master service account, device group, or multi-device service plan. In some embodiments, the secondary device sends a secondary device credential to the network element in association with the response. In some embodiments, the secondary device communicates with the network element over a secure link. In some embodiments, the secondary device receives the request from the network element over the secure link. In some embodiments, the secure link comprises a secure push message link, and the secondary device receives the request over the secure link by receiving a push message from a network push message server. In some embodiments, the secondary device assists in securing the secure push message link by executing a link establishment process during which the secondary device shares a secondary credential with the network push message server and, in cooperation with the network push message server, establishes an encrypted link.

[0960] In some embodiments, a network system receives a secondary device multi-device service plan sign-up request from a master device agent 1001A on a master device 100A. In some embodiments, the network system communicates information about the secondary device multi-device service plan sign-up request to a secondary device agent 1001B on a secondary device 100B. In some embodiments, the network system obtains a response to the information about the secondary device multi-device service plan sign-up option request from the secondary device agent 1001B. In some embodiments, if the response indicates that the secondary device service plan sign-up option request is granted or acknowledged, the network system provides a provisioning instruction to a wireless access network control system to associate the secondary device 100B with access control permissions associated with the master service account, device group, or multi-device service plan. In some embodiments, the network system is further configured to obtain a device credential associated with the master device 100A in association with the request. In some embodiments, the network system is further configured to obtain a device credential associated with the secondary device 100B in association with the response. In some embodiments, the network system includes a secure message link server that communicates the information about the secondary device multi-device service plan sign-up request to the secondary device agent 1001B. In some embodiments, the network system includes a network push message server and the secure link comprises a secure push message link, and the network system communicates the information about the secondary device multi-device service plan sign-up request to the secondary device agent 1001B by sending a push message from a network push message server. In some embodiments, the network system secures the network push message server by executing a push message link establishment process in which the network push message server obtains a device credential and, in cooperation with the secondary device 100B, establishes an encrypted link.

[0961] In some embodiments, a network system receives a secondary device multi-device service plan sign-up request from a master device agent 1001A on a master device 100A. In some embodiments, the network system communicates information about the secondary device multi-device service plan sign-up request to a secondary device agent 1001B on a secondary device 100B. In some embodiments, the network system obtains a response to the information about the secondary device multi-device service plan sign-up request from the secondary device agent 1001B. In some embodiments, if the response indicates that the secondary device service plan sign-up request is granted or acknowledged, the network system provides a provisioning instruction to a wireless access network accounting system to account service usage associated with the secondary device 100B to the master service account. In some embodiments, the network system obtains a device credential associated with the master device 100A in association with the response. In some embodiments, the network system obtains a device credential associated with the secondary device 100B in association with the response. In some embodiments, the network system includes a secure message link server that communicates the information about the secondary device multi-device service plan sign-up option response message or request message to the master device agent 1001A. In some embodiments, the network system includes a network push message server and the secure link comprises a secure push message link, and the network system communicates the information about the secondary device multi-device service plan sign-up option response message or request message to the master device agent 1001A by sending a push message from a network push message server. In some embodiments, the network system secures the network push message server by executing a push message link establishment process in which the network push message server obtains a device credential and, in cooperation with the master device 100A, establishes an encrypted link.

[0962] In some embodiments, a master device 100A comprises one or more device agents 1001A that present a user interface message offering to associate a secondary device 100B with a master service account, device group, or multi-device service plan. In some embodiments, the one or more device agents 1001A obtain an affirmative user response to the user interface message. In some embodiments, the one or more device agents 1001A obtain a secondary device credential and send an indication of the affirmative user response and the secondary device credential to a network element. In some embodiments, the one or more device agents 1001A obtain the secondary device credential from a user input obtained through the master device 100A user interface. In some embodiments, the one or more device agents 1001A obtain secondary device credential by communicating with the secondary device 100B through, for example, the first wireless network, Bluetooth, near-field communication, an object presented on the secondary device 100B user interface and captured by the master device 100A (for example, by a camera), an encoded sound signal, etc. In some embodiments, the one or more device agents 1001A obtain a user credential and send the user credential to the network element. In some embodiments, the one or more device agents 1001A obtain a master device credential and send the master device credential to the network element. In some embodiments, the one or more device agents 1001A obtain an indication of a user-established limit on service usage for the secondary device 100B. In some embodiments, the one or more device agents 1001A send information about the user-established limit on service usage to the network element. In some embodiments, the one or more device agents 1001A obtain a user-established permission level associated with the secondary device 100B. In some embodiments, the one or more device agents 1001A send information about the user-established permission level to the network element. In some embodiments, the one or more device agents 1001A obtain at least a portion of the user interface message offering to associate a secondary device 100B with a master service account, device group, or multi-device service plan from memory on the master device 100A. In some embodiments, the one or more device agents 1001A obtain at least a portion of the user interface message offering to associate a secondary device 100B with a master service account, device group, or multi-device service plan from a network element. In some embodiments, the network element is a website or a portal.

[0963] In some embodiments, a device 100A comprises one or more agents that present a user interface message offering an option to provide monetary credit (e.g., money or an equivalent) to a secondary device 100B. In some embodiments, the one or more agents accept a user response to the offer and provide the user response to a network element (e.g., by sending the user response to the network element).

[0964] In some embodiments, a network system communicates over a secure link with a master device agent 1001A on a master device 100A. In some embodiments, the network system obtains a request to provide monetary credit to a secondary device 100B. In some embodiments, the request includes a master user credential and a secondary credential identifying the secondary device 100B. In some embodiments, the network system determines if the master user credential is associated with the secondary credential, and, if it is, the network system provisions a monetary accounting system to provide monetary credit to the secondary device 100B.

[0965] In some embodiments, a device comprises one or more agents configured to present a user interface (UI) message offering an option to provide access usage credit to a secondary device 100B, accept a user input in response to the offer, and communicate the user input to a network element.

[0966] In some embodiments, a network system communicates over a secure link with a master device agent 1001A on a master device 100A. In some embodiments, the network system obtains a request to provide service usage credit to a secondary device 100B. In some embodiments, the network system obtains the request from the master device agent 1001A over the secure link. In some embodiments, the network system obtains a master user credential and a secondary device credential associated with the request and determines if the master user credential is associated with the secondary device credential. In some embodiments, if the master user credential is associated with the secondary device credential, the network system provisions a service usage accounting system to provide service usage credit to the secondary device 100B.

[0967] In some embodiments, a device system comprises one or more agents configured to present a user interface (UI) message offering an option to provide control of at least an aspect of a secondary device service permission level, obtain a user response to the offer, and communicate the user response to a network element.

[0968] In some embodiments, a network system communicates over a secure link with a master device agent 1001A on a master device 100A. In some embodiments, the network system obtains a request to control at least an aspect of a secondary device service permission level. In some embodiments, the network system obtains the request from the master device agent 1001A over the secure link. In some embodiments, the network system obtains a master user credential and a secondary device credential associated with the request and determines if the master user credential is associated with the secondary device credential. In some embodiments, if the master user credential is associated with the secondary device credential, the network system provisions a service permission control system to control the at least an aspect of the secondary device service permission level.

[0969] In some embodiments, a device system comprises one or more agents configured to present a user interface (UI) message offering an option to deny at least an aspect of a secondary device service permission level, obtain a user response to the offer, and communicate the user response to a network element.

[0970] In some embodiments, a network system communicates over a secure link with a master device agent 1001A on a master device 100A. In some embodiments, the network system obtains a request to deny at least an aspect of a secondary device service permission level. In some embodiments, the network system obtains the request from the master device agent 1001A over the secure link. In some embodiments, the network system obtains a master user credential and a secondary device credential associated with the request and determines if the master user credential is associated with the secondary device credential. In some embodiments, if the master user credential is associated with the secondary device credential, the network system provisions a service permission control system to deny the at least an aspect of the secondary device service permission level.

[0971] In some embodiments, a network system configures a notification regarding a secondary device usage level, wherein the notification to be delivered to a master device 100A. In some embodiments, the network system configures a usage level setting based on information from the master device 100A. In some embodiments, the network system configures the usage level setting based on information from website or portal. In some embodiments, the network system configures the usage level setting as part of a service plan provisioning interface.

[0972] In some embodiments, the usage level is associated with voice usage. In some embodiments, the voice usage is expressed in units of minutes. In some embodiments, the voice usage is expressed as a percentage of plan limit. In some embodiments, voice usage is expressed as a percentage of an allowance.

[0973] In some embodiments, the usage level is associated with text or SMS usage. In some embodiments, the text or SMS usage is expressed as a number of texts or SMS messages. In some embodiments, text or SMS usage is expressed as an object count. In some embodiments, text or SMS usage is expressed as a number of megabytes (MB). In some embodiments, text or SMS usage is expressed as a percentage of a plan limit. In some embodiments, a text or SMS usage is expressed as a percentage of an allowance (e.g., an allowance under a shared plan).

[0974] In some embodiments, the usage level is associated with data usage. In some embodiments, the data usage is expressed in MB. In some embodiments, the data usage is expressed as an amount of time. In some embodiments, the data is expressed as a percentage of a plan limit. In some embodiments, the data is expressed as a percentage of an allowance (e.g., an allowance under a shared plan).

[0975] In some embodiments, the usage level is for classification of data (e.g., a category of service activities less than all service activities available to the device). In some embodiments, the data classification usage expressed in MB. In some embodiments, the data classification is expressed as a usage during a period of time. In some embodiments, the data classification is expressed as a percentage of a plan limit. In some embodiments, the data classification is expressed as a percentage of an allowance (e.g., an allowance under a shared plan). In some embodiments, the classification of data is for one or more applications. In some embodiments, the classification is for one or more network end points. In some embodiments, the classification is for one or more voice services. In some embodiments, the classification is for one or more text messages or messaging services. In some embodiments, the classification is for one or more content types. In some embodiments, the classification is for roaming services (e.g., service usage while roaming, such as number of voice minutes used while roaming, amount of data used while roaming, etc.). In some embodiments, the classification is for home cellular network services (e.g., service usage while on a home cellular network, such as number of voice minutes used while roaming, amount of data used while roaming, etc.). In some embodiments, the classification is for Wi-Fi services (e.g., service usage while on one or more Wi-Fi networks, such as number of voice minutes used while on Wi-Fi networks, amount of data used while on Wi-Fi networks, etc.). In some embodiments, the classification is for one or more quality-of-service (QoS) levels or one or more QoS types. In some embodiments, the classification is for one or more traffic or content types (e.g., service usage for streaming video, service usage for streaming audio, service usage for a particular protocol, etc.). In some embodiments, the classification is for one or more time periods (e.g., service usage during the past day, week, month, etc.). In some embodiments, the classification is for one or more geographic areas or physical locations (e.g., service usage in Santa Clara County, service usage at the office, service usage at home, etc.). In some embodiments, classification is for one or more application types (e.g., service usage associated with user applications, service usage associated with social networking applications, service usage associated with video applications, etc.). In some embodiments, the classification is for one or more websites. In some embodiments, the classification is for one or more website types. In some embodiments, the classification is for one or more of categories of service usage, such as, for example, voice, text, data, gaming, video, browsing, chat, shopping, maps, audio, etc.

[0976] In some embodiments, a master device comprises one or more agents configured to receive secondary device usage level message and present information about the secondary device usage levels through a master device user interface (UI).

[0977] In some embodiments, a network system compares a pre-determined secondary device service usage limit with a measured secondary device service usage level associated with a secondary device 100B associated with a secondary device credential. In some embodiments, the network system determines if the measured secondary device service usage level exceeds the pre-determined secondary device service usage limit. In some embodiments, if the limit is exceeded, the network system obtains (e.g., configures, retrieves, etc.) a secondary device service usage message associated with the secondary device service usage limit. In some embodiments, the network system determines a master device credential of a master device 100A that is associated with the secondary device 100B and sends the secondary device service usage message to a master device agent 1001A on the master device 100A identified by the master device credential.

[0978] In some embodiments, a master device 100A comprises one or more agents configured to receive a secondary device usage level message and present information from or determined based on the secondary device usage level message through a master-device user interface. In some embodiments, the secondary device usage level message indicates that secondary device 100B is out of usage allocation. In some embodiments, the secondary device usage level message indicates that secondary device 100B is nearing a condition where it will be out of usage allocation. In some embodiments, the one or more agents also present an option to modify (e.g., increase or decrease) secondary device usage permissions or limits. In some embodiments, the one or more agents accept a user response to the option to modify the secondary device usage permissions or limits. In some embodiments, the one or more agents send the user response to a network element.

[0979] In some embodiments, a network system determines a usage level for a secondary device 100B. In some embodiments, the network system determines if secondary device usage level satisfies a pre-determined condition. In some embodiments, if the secondary device usage level satisfies the pre-determined condition, the network system determines a master device 100A that is associated with the secondary device 100B. In some embodiments, the network system determines (e.g., configures, obtains, etc.) a secondary device usage level message associated with the pre-determined condition sends the secondary device usage level message to the master device 100A. In some embodiments, the usage level message includes an option to increase a usage allowance for secondary device 100B. In some embodiments, the network system also obtains a master user response to increase the secondary device usage allowance. In some embodiments, the network system receives the master user response from the master device 100A. In some embodiments, the network system provisions one or more network elements to as needed to increase the secondary device usage allowance.

[0980] In some embodiments, the network system receives a secure request from a master account holder to add a first device to a master service account, device group, or multi-device service plan. In some embodiments, the secure request comprises a master account holder credential and a first device credential. In some embodiments, the network system confirms the master account credential and, after confirming the master account credential, provisions a network access system to provide the service usage or attempted service usage over a first wireless access network that is associated with the first device credential to support the access permissions associated with the master service account, device group, or multi-device service plan. In some embodiments, the request to add the first device to the master service account, device group, or multi-device service plan is obtained from a device agent on the first device. In some embodiments, the request to add the first device to the master service account, device group, or multi-device service plan is obtained from a device agent on a second device. In some embodiments, the request to add the first device to the master service account, device group, or multi-device service plan is obtained from a website or portal. In some embodiments, provisioning includes associating the first device credential to the master service account, device group, or multi-device service plan. In some embodiments, provisioning includes de-assigning the first device credential from a pre-existing service plan. In some embodiments, access permissions include one or more permissions for categories of service usage established by the master account holder.

[0981] In some embodiments, a network system receives a secure request from a master account holder to add a first device to a master service account, device group, or multi-device service plan, the secure request comprising a master account holder credential and a first device credential. In some embodiments, the network system confirms the master account credential and provisions a network service usage accounting system to account service usage over a first wireless access network that is associated with the first device credential to the master account. In some embodiments, the request to add the first device to the master service account, device group, or multi-device service plan is obtained from a device agent located on the first device. In some embodiments, the request to add the first device to the master service account, device group, or multi-device service plan is obtained from a device agent located on a second device. In some embodiments, the request to add the first device to the master service account, device group, or multi-device service plan is obtained from a website or portal. In some embodiments, provisioning includes associating the first device credential to the master service account, device group, or multi-device service plan. In some embodiments, provisioning includes de-assigning the first device credential from a pre-existing service plan. In some embodiments, the request to add the first device to the master service account, device group, or multi-device service plan is obtained from a device agent on the first device. In some embodiments, the request to add the first device to the master service account, device group, or multi-device service plan is obtained from a device agent on a second device. In some embodiments, the request to add the first device to the master service account, device group, or multi-device service plan is obtained from a website or portal. In some embodiments, provisioning includes associating the first device credential to the master service account, device group, or multi-device service plan. In some embodiments, provisioning includes de-assigning the first device credential from a pre-existing service plan. In some embodiments, access permissions include one or more permissions for a category of service usage established by the master account holder.

[0982] In some embodiments, a network system obtains a secondary device access credit indication for a classification of service (e.g., a category of service usage) from a master device agent 1001A on a master device 100A and provisions an access control system to provide access credit for the classification of service for a secondary device 100B from a master device 100A, the classification of service less than all services available to the device. In some embodiments, the classification is for one or more applications. In some embodiments, the classification is for one or more network end points. In some embodiments, the classification is for one or more voice services. In some embodiments, the classification is for one or more text messages. In some embodiments, the classification is for one or more content types. In some embodiments, the classification is for roaming services. In some embodiments, the classification is for home cellular services. In some embodiments, the classification is for Wi-Fi services. In some embodiments, the classification is for one or more QoS levels or one or more QoS types. In some embodiments, the classification is for one or more traffic types. In some embodiments, the classification is for one or more time periods. In some embodiments, the classification is for one or more geographic areas or physical locations. In some embodiments, the classification is for one or more application types. In some embodiments, the classification is for one or more websites. In some embodiments, the classification is for one or more website types. In some embodiments, the classification is for one or more of voice, text, data, gaming, video, browsing, chat, shopping, maps, audio, etc.

[0983] In some embodiments, a network system obtains a secondary device access credit indication for a classification of service from a master account holder user interface (UI), the classification of service less than all services available to the device. In some embodiments, the master account holder UI is located on a master device 100A. In some embodiments, the master account holder UI comprises a website.

[0984] In some embodiments, the service controller 122 illustrated in FIG. 1 is the same as the sign-up request processor 9002 shown in FIGS. 198, 201, 203, 205, and 206. In some embodiments, the sign-up request processor 9002 is a function within service controller 122. In some embodiments, the sign-up request processor 9002 is co-located with the service controller 122. In some embodiments, the request to be added to the master service account, device group, or multi-device service plan is communicated to a network element, such as service controller 122 shown in FIG. 1 or the sign-up request processor 9002 shown in FIGS. 198, 201, 203, 205, and 206. In some embodiments, the request to be added to the master service account, device group, or multi-device service plan is communicated to a second device. In some embodiments, the second device is a master device 100A. In some embodiments, the master device 100A is the device associated with the primary service account holder (e.g., the subscriber who pays for the service). In some embodiments, the master device 100A is any device associated with the shared account that also has permissions to add additional devices or subscribers to the master service account, device group, or multi-device service plan. In some embodiments, the request to be added to the master service account, device group, or multi-device service plan is communicated over a wireless network. In some embodiments, the request to be added to the master service account, device group, or multi-device service plan is communicated over a wired network. In some embodiments, the request to be added to the master service account, device group, or multi-device service plan is communicated using a code or a unique display object presented through a user interface of the first device. In some embodiments, the request to be added to the master service account, device group, or multi-device service plan is communicated using an audio signal.

[0985] In some embodiments, the request to be added to the master service account, device group, or multi-device service plan includes a credential that provides for unique identification of the master service account, device group, or multi-device service plan. In some embodiments, the credential further includes a secure service plan information aspect (e.g., a password, a personal identification number, etc.) known only to a subscriber of the master service account, device group, or multi-device service plan. In some embodiments, the credential comprises information associated with an aspect of an account that is associated with the master service account, device group, or multi-device service plan.

[0986] In some embodiments, the first device includes a user interface, and the first device agent initiates the request to be added to the master service account, device group, or multi-device service plan based at least in part on a user input obtained through the user interface. In some embodiments, the user input includes information associated with at least one of: a credential that provides for unique identification of the first device; information that provides for identification of a user of the first device; information that provides for identification of a unique master service account, device group, or multi-device service plan; information that provides for identification of a user of a second device (e.g., a master device) that is associated with the master service account, device group, or multi-device service plan; and information that provides for identification of an account associated with the master service account, device group, or multi-device service plan.

[0987] In some embodiments, a first device agent installed on a first device is configured to communicate a request to add a second device to a master service account, device group, or multi-device service plan. In some embodiments, at least an aspect of the request is received from a network element, such as service controller 122 shown in FIG. 1 or the sign-up request processor 9002 shown in FIGS. 198, 201, 203, 205, and 206. In some embodiments, the request to add a second device to a master service account, device group, or multi-device service plan is communicated to a network element. In some embodiments, the request to add a second device to a master service account, device group, or multi-device service plan is communicated to the second device. In some embodiments, the first device is a master device, and the second device is a child device. In some embodiments, the first device is a child device, and the second device is a master device. In some embodiments, both the first device and the second device are master devices. In some embodiments, the request to be added to the master service account, device group, or multi-device service plan is communicated over a wireless network. In some embodiments, the request to be added to the master service account, device group, or multi-device service plan is communicated over a wired network. In some embodiments, the request to be added to the master service account, device group, or multi-device service plan is communicated using a code or a unique display object presented through a user interface of the first device. In some embodiments, the request to be added to the master service account, device group, or multi-device service plan is communicated using an audio signal.

[0988] In some embodiments, the request to add the second device to the master service account, device group, or multi-device service plan includes a credential that provides for unique identification of the first device, such as a subscriber identity module, a device identifier, a phone number, an IMSI, an MEID, or any other credential. In some embodiments, the request to add the second device to the master service account, device group, or multi-device service plan includes information that provides for identification of a user of the first device (e.g., a subscriber). In some embodiments, the request to add the second device to the master service account, device group, or multi-device service plan includes a credential that provides for unique identification of the first device, such as a subscriber identity module, a device identifier, a phone number, an IMSI, an MEID, or any other credential. In some embodiments, the request to add the second device to the master service account, device group, or multi-device service plan includes information that provides for identification of a user of the second device. In some embodiments, the request to add the second device to the master service account, device group, or multi-device service plan includes a credential that provides for unique identification of the second device. In some embodiments, the credential comprises a secure information aspect associated with the first device. In some embodiments, the credential comprises a secure information aspect associated with the second device. In some embodiments, the request to be added to the master service account, device group, or multi-device service plan includes information that identifies a user of the first device. In some embodiments, the request to be added to the master service account, device group, or multi-device service plan includes information that identifies a user of the second device.

[0989] In some embodiments, the request to be added to the master service account, device group, or multi-device service plan includes a credential that provides for unique identification of the master service account, device group, or multi-device service plan. In some embodiments, the credential also includes a secure service plan information aspect known only to a subscriber of the master service account, device group, or multi-device service plan (e.g., a password, a personal identification number, etc.). In some embodiments, the credential comprises information associated with an aspect of an account that is associated with the master service account, device group, or multi-device service plan (e.g., an account number, etc.).

[0990] In some embodiments, the first device includes a user interface, and the first device agent initiates the request to add the second device to the master service account, device group, or multi-device service plan based at least in part on a user input obtained through the user interface. In some embodiments, the user input includes information associated with at least one of: a credential that provides for unique identification of the first device; a credential that provides for unique identification of the second device; information that provides for identification of a user of the first device; information that provides for identification of a user of the second device; information that provides for identification of a unique master service account, device group, or multi-device service plan; and information that provides for identification of an account associated with the master service account, device group, or multi-device service plan.

[0991] In some embodiments, a first device agent installed on a first device is configured to communicate an acknowledgment to add a second device to a master service account, device group, or multi-device service plan. In some embodiments, the acknowledgment comprises a permission or a request acceptance. In some embodiments, the acknowledgment is based on a user response to a message presented through a user interface of the first device. In some embodiments, the first device agent is configured to present the message. In some embodiments, the message includes information obtained from a network element. In some embodiments, the network element is a website, a web page, a wireless application protocol (WAP) site, a portal server, a message server, or an access network policy interface.

[0992] In some embodiments, the first device agent receives, from a network element, information associated with a second device's request to share a service plan. In some embodiments, the first device agent presents a message based on the information associated with the second device's request to share a service plan through a user interface of the first device, obtains a user response, and generates the acknowledgment based on the user response. In some embodiments, the network element is a website, a web page, a wireless application protocol (WAP) site, a portal server, a message server, or an access network policy interface.

[0993] In some embodiments, the first device agent receives, from a second device, information associated with another device's request to share a service plan. In some embodiments, the first device agent presents a message based on the information associated with the another device's request to share a service plan through a user interface of the first device, obtains a user response, and generates the acknowledgment based on the user response.

[0994] In some embodiments, a first device agent installed on a first device is configured to communicate an acknowledgment to add the first device to a master service account, device group, or multi-device service plan. In some embodiments, the acknowledgment comprises a permission or a request acceptance. In some embodiments, the first device agent assists in presenting a message through a user interface of the first device, the message being configured to seek the acknowledgment. In some embodiments, the acknowledgment is configured to assist in enrolling the first device in a master service account, device group, or multi-device service plan. In some embodiments, the message includes information obtained from a network element. In some embodiments, the network element is a website, a web page, a wireless application protocol (WAP) site, a portal server, a message server, or an access network policy interface.

[0995] In some embodiments, the first device agent receives, from a network element, information associated with a second device's request to share a service plan. In some embodiments, the first device agent presents a message based on the information associated with the second device's request to share the service plan through a user interface of the first device, obtains a user response, and generates the acknowledgment based on the user response. In some embodiments, the network element is a website, a web page, a wireless application protocol (WAP) site, a portal server, a message server, or an access network policy interface.

[0996] In some embodiments, the first device agent receives, from a second device, information associated with another device's request to share a service plan. In some embodiments, the first device agent presents a message based on the information associated with the another device's request to share the service plan through a user interface of the first device, obtains a user response, and generates the acknowledgment based on the user response.

[0997] In some embodiments, a network element (e.g., service controller 122 shown in FIG. 1 or the sign-up request processor 9002 shown in FIGS. 198, 201, 203, 205, and 206) is configured to accept, from a first device agent on a first device, a request to be added to a master service account, device group, or multi-device service plan. In some embodiments, the network element confirms a secure information aspect associated with the request, and, after confirming that the secure information aspect is consistent with a device that is to be added to the master service account, device group, or multi-device service plan, configures one or more network service policies to add the first device to the master service account, device group, or multi-device service plan. In some embodiments, the secure information aspect comprises at least one of: a credential that provides for unique identification of the first device; information that provides for identification of a user of the first device; information that provides for identification of a unique master service account, device group, or multi-device service plan; information that provides for identification of a user of a second device that is associated with the master service account, device group, or multi-device service plan; and information that provides for identification of an account associated with the master service account, device group, or multi-device service plan. In some embodiments, an aspect of the request is communicated to a second device agent installed on a second device, and an aspect of the secure information aspect associated with the request is associated with a user input obtained by the network element from the second device agent (e.g., communicated by the second device agent).

[0998] In some embodiments, the network element configures the one or more network service policies to add the first device to the master service account, device group, or multi-device service plan by provisioning a device service usage accounting system to identify service usage associated with the first device and account the identified first device service usage to the master service account, device group, or multi-device service plan. In some embodiments, the network element configures the one or more network service policies to add the first device to the master service account, device group, or multi-device service plan by provisioning a device access service policy system to identify attempted or successful network service activity associated with the first device and to apply a set of one or more access control policies associated with the master service account, device group, or multi-device service plan to the identified attempted or successful network service activity associated with the first device.

[0999] In some embodiments, the network element configures the one or more network service policies to add the first device to the master service account, device group, or multi-device service plan by provisioning a device access service notification system to identify attempted or actual network service activity associated with the first device and to apply a set of one or more access service notification policies associated with the first device and to apply a set of one or more access service notification policies associated with the multi-device service plan to cause a multi-device service plan notification to be presented through the first device's user interface.

[1000] In some embodiments, the aspect of the request that is communicated to a second device agent installed on a second device comprises an indication that a user of the first device desires to add the first device to the master service account, device group, or multi-device service plan, and the aspect of the secure information associated with the request that is communicated from the second device to the network element comprises an indication that a user of the second device approves enrollment of the second device in the master service account, device group, or multi-device service plan.

[1001] In some embodiments, a first device includes a user interface, and a device agent on the first device presents a breakdown of usage of a shared or assigned service plan through the user interface. In some embodiments, the breakdown of service usage includes a first subset of a shared service plan and a second subset of the shared service plan. In some embodiments, the first subset is associated with the first device, and the second subset is associated with a second device. In some embodiments, neither the first subset nor the second subset is associated with the first device. In some embodiments, the breakdown of service usage includes a characterization of the service activities that are generating service usage for the second subset. In some embodiments, the device agent is configured to accept user inputs to specify alert conditions for assisting in creating user interface alert messages when the service usage for the second subset of the shared device plan usage associated with the second device satisfies a condition. In some embodiments, the condition is based on an input from a user of the first device. In some embodiments, the second subset includes a characterization of at least a portion of the device activities responsible for at least a portion of the service usage of the second device. In some embodiments, the first device agent is configured to specify a policy limit on the service activities that are generating service usage for the second subset. In some embodiments, the policy limit specifies a limit on voice service usage. In some embodiments, the policy limit specifies a limit on data service usage. In some embodiments, the policy limit includes a limit on a subset of service activities less than all service activities available to the second device. In some embodiments, the policy limit includes a limit on service usage while the second device is roaming. In some embodiments, the policy limit includes a limit on cellular wireless services. In some embodiments, the policy limit includes a limit on Wi-Fi access.

[1002] In some embodiments, a first device includes a user interface, and a device agent on the first device is configured to present, through the user interface, a message configured to present a service policy management option associated with a second device's use of a shared or assigned service plan. In some embodiments, the message includes at least an aspect that is obtained from a network element. In some embodiments, the message includes at least an aspect that is stored locally on the first device. In some embodiments, the network element is a website, a web page, a wireless application protocol (WAP) site, a portal server, a message server, or an access network policy interface. In some embodiments, the message is pushed to the first device by a network element.

[1003] In some embodiments, the service policy management option is a service permission. In some embodiments, the service policy management option is a service allowance. In some embodiments, the first device agent assists in obtaining, through the user interface, a user input indicating that a user of the first device desires to implement the presented service policy management option. In some embodiments, the first device agent assists in causing the service policy management option to be implemented to govern, at least in part, one or more service policies of the second device. In some embodiments, the first device agent assists in causing the service policy management option to be implemented by providing information to a network element configured to implement the service policy management option. In some embodiments, the first device agent assists in causing the service policy management option to be implemented by providing information to a second device agent installed on the second device, the second device agent being configured to implement the service policy management option. In some embodiments, the first device agent assists in causing the service policy management option to be implemented by communicating information that causes a second device agent on the second device to implement the service policy management option.

[1004] In some embodiments, the service policy management option comprises an indication or acknowledgment that the second device is authorized to use wireless access services in accordance with access service policies associated with the master service account, device group, or multi-device service plan.

[1005] In some embodiments, the service policy management option comprises an indication or acknowledgment that the second device is authorized to use less than all of a total service allowance provided for under the service policies associated with a multi-device (e.g., shared, shareable, assignable, or assigned) service plan. In some embodiments, the less than all of the total service allowance is less than the entire allowance provided for under the service policies associated with the multi-device service plan. In some embodiments, the less than all of the total service allowance specifies a service usage limit. In some embodiments, the limit is expressed as a percentage. In some embodiments, the limit is expressed as an amount of a resource. In some embodiments, the less than all of the total service allowance specifies an allowance for a set of one or more service activities, the set of one or more device service activities being less than all service activities available to the second device. In some embodiments, the less than all of the total service allowance specifies a time period during which the second device is authorized for one or more services. In some embodiments, the less than all of the total service allowance specifies a time period during which the second device is authorized for a set of one or more service activities less than all service activities available to the second device. In some embodiments, the set of one or more service activities includes one or more emergency services (e.g., the ability to place an outgoing call to an emergency number, the ability to send an outgoing text to a specified emergency number, etc., where the emergency number is not necessarily a public services emergency number but could instead be a number associated with a parent or another trusted entity). In some embodiments, the set of one or more service activities includes communication with a subset of devices, the subset of devices less than all devices the second device is capable of communicating with. In some embodiments, the less than all of the total service allowance is network-dependent (e.g., there is one allowance when the second device is communicating over a cellular network and another, potentially different, allowance when the second device is communicating over a Wi-Fi network, or there is one allowance when the second device is communicating over a roaming network and another, potentially different, allowance when the second device is communicating over a home network, etc.). In some embodiments, the less than all of the total service allowance is associated with service policies that apply to more than one wireless network (e.g., the service policies apply whether the second device is connected to a roaming network or a home network, or the service policies apply whether the second device is connected to a cellular network or a Wi-Fi network, etc.).

[1006] In some embodiments, the less than all of the total service allowance specifies a time period during which the second device is to be de-authorized for service. In some embodiments, one or more service policies governing service usage in the de-authorized state provide for access to one or more emergency services (e.g., the ability to place an outgoing call to an emergency number, the ability to send an outgoing text to a specified emergency number, etc., where the emergency number is not necessarily a public services emergency number but could instead be a number associated with a parent or another trusted entity) while the second device is in the de-authorized state. In some embodiments, one or more service policies governing service usage in the de-authorized state provide for communication with a subset of devices while the second device is in the de-authorized state, the subset of devices being less than all devices the second device is capable of communicating with (e.g., the second device may communicate with a first parent's device but not with a sibling's device). In some embodiments, the one or more service policies governing service usage in the de-authorized state are network-dependent (e.g., the service policies in effect when the second device is connected to a roaming network are different from the service policies in effect when the second device is connected to a home network, or the service policies in effect when the second device is connected to a cellular network are different from the service policies in effect when the second device is connected to a Wi-Fi network, etc.). In some embodiments, the one or more service policies governing service usage in the de-authorized state apply to more than one wireless network (e.g., the service policies apply whether the second device is connected to a roaming network or a home network, or the service policies apply whether the second device is connected to a cellular network or a Wi-Fi network, etc.).

[1007] In some embodiments, the less than all of the total service allowance specifies a time period during which the second device is to be de-authorized for a set of one or more service activities, the set of one or more service activities less than all service activities available to the second device (e.g., in the de-authorized state, the second device may make phone calls to one or more numbers (e.g., an emergency number), but the second device may not stream video or use one or more applications or access one or more network destinations).

[1008] In some embodiments, the less than all of the total service allowance includes a first service allowance and a second service allowance, the first service allowance providing information to govern an aspect of a service policy for a first set of one or more service activities, the first set of service activities less than all service activities available to the second device, and the second service allowance providing information to govern an aspect of a service policy for a second set of one or more service activities. In some embodiments, the first service allowance allows one or more services associated with the first set of one or more service activities, and the second service allowance blocks one or more services associated with the second set of one or more service activities.

[1009] In some embodiments, the policy management option comprises a policy setting. In some embodiments, the policy setting is applicable to more than one wireless network that the second device is capable of connecting to (e.g., the policy setting applies whether the second device is connected to a cellular network or a Wi-Fi network). In some embodiments, the policy setting has at least an aspect that changes depending on the type of network the second device is connected to (e.g., the policy setting has a first aspect when the second device is connected to a cellular network and a second aspect when the second device is connected to a Wi-Fi network, or the policy setting has a first aspect when the second device is connected to a roaming network and a second aspect when the second device is connected to a home network, etc.).

[1010] In some embodiments, the device agent is configured to receive a message indicating a service condition exists for the second device. In some embodiments, the service condition is an “out of allowance” condition (e.g., the second device has exhausted a usage allowance, etc.). In some embodiments, the service condition is an indication that a particular amount or percentage of service usage has occurred. In some embodiments, the service condition is an indication that a particular service activity that is not allowed under the current service policy settings for the second device has been attempted by the second device. In some embodiments, the service condition is an indication that a user of the second device desires a particular service activity that is not allowed under the current service policy settings for the second device. In some embodiments, the first device includes a user interface, and the device agent is configured to present, through the user interface, a service-condition notification including information about the service condition. In some embodiments, the first device includes a user interface, and the device agent is configured to present, through the user interface, an option to modify a service policy associated with the second device in response to the service-condition notification.

[1011] In some embodiments, the multi-device (e.g., shared or assigned) service plan comprises a set of one or more service policies that govern at least an aspect of wireless network access permissions for one or more wireless access networks, and wherein the set of one or more service policies is capable of supporting wireless access services for a plurality of wireless devices.

[1012] In some embodiments, a network system is configured to provide a user interface to a service account owner or a manager of a master service account, device group, or multi-device service plan, wherein the user interface presents a user option to include a mobile device in the master service account, device group, or multi-device service plan, the mobile device not having been included in the master service account, device group, or multi-device service plan when the mobile device was initially purchased or activated. In some embodiments, the network system accepts a user input comprising an instruction to add the mobile device to the master service account, device group, or multi-device service plan. In some embodiments, the network system determines whether the mobile device is already associated with a pre-existing service plan provided by a particular mobile operator. In some embodiments, if the device is associated with a pre-existing service plan provided by the particular mobile operator, the network system provisions the mobile device to be de-activated from the pre-existing service plan and added to the master service account, device group, or multi-device service plan. In some embodiments, if the device is not associated with a pre-existing service plan provided by the particular mobile operator, the network system determines if the device requires a number port (e.g., the transfer of a phone number). In some embodiments, if the device is not associated with a pre-existing service plan provided by the particular mobile operator, and the device requires a number port, the network system communicates the number porting requirement to a number porting system queue in the network. In some embodiments, if the device is not associated with a pre-existing service plan provided by the particular mobile operator, and the device does not require a number port, the network system provisions the mobile device to be added to the master service account, device group, or multi-device service plan.

[1013] In some embodiments, the network system user interface is provided by a network element. In some embodiments, the network element is a website, a web page, a wireless application protocol (WAP) site, a portal server, a message server, or an access network policy interface. In some embodiments, the user interface is provided by communicating a user interface message to a device agent located on a mobile device (e.g., a master device). In some embodiments, the device agent is on a mobile device belonging to an account owner or account master for the master service account, device group, or multi-device service plan. In some embodiments, the mobile device accepts a user input. In some embodiments accepting the user input comprises accepting a user secure credential to authenticate the account owner or account master identity. In some embodiments, the mobile device belongs to a user who wishes to add the mobile device to a master service account, device group, or multi-device service plan, and accepting a user input comprises accepting a user secure credential to authenticate that the mobile device user has the permission of the multi-device service account owner or master to add the mobile device to the master service account, device group, or multi-device service plan. In some embodiments, accepting a user input includes accepting a user secure credential to authenticate the account owner or account master identity.

Managing Service User Discovery and Service Launch Object Placement on a Device

[1014] As the number and types of services on a mobile wireless communication device increase, it becomes increasingly important to differentiate the services and types of service to users in a way that users can easily understand, access, and launch. In some embodiments, device users can avail themselves of one or more of bite-sized bulk data plans, application-specific data plans, and sponsored data plans (for example, plans that are free to the end user because they are paid for by third-party sponsors who make money when users use their over-the-top service or application).

[1015] FIG. 3, as described above, illustrates a management system 10601 that supports service user discovery and service launch object placement on a mobile wireless communication device 100 in accordance with some embodiments. In some embodiments, the management system 10601 communicates with one or more mobile wireless communication devices 100 over a network 1100 coupled to one or more of network service 120-1, application download server 140-1, device management system 170-1, and mobile wireless communication device 100. In some embodiments, mobile wireless communication device 100 includes a user interface (UI) location manager 132-1, a UI agent 134-1, a UI 101 and device services 138-1. In some embodiments, the device management system 170-1 includes a UI location management server 150-1, a UI location management console 160-1 and an accounting database 180-1.

[1016] In some embodiments, the management system 10601 includes additional or fewer functions than those shown in FIG. 3. For example, in some embodiments, management system 10601 does not include network service 120-1. In some embodiments, management system 10601 does not include an application download server 140-1. In some embodiments, a device management system 170-1 does not include an accounting database 180-1. In some embodiments, functionality of a device management system 170-1 is split across two entities, for example, a service provider and a third party. In some embodiments, the application download server 140-1 and the device management system 170-1 functions are combined. In some embodiments, the application download server 140-1 and the network service 120-1 functionality is managed by the same entity (e.g., a service provider or a third party). In some embodiments, the mobile wireless communication device 100 does not include device services 138-1 or does not include UI agent 134-1. In some embodiments, two or more of the functionalities shown in FIG. 3 are combined into a single function. For example, UI agent 134-1 and UI location manager 132-1 can be combined.

[1017] In some embodiments, the device management system 170-1 defines the location in a device UI 101 where a service launch object is placed to aid in managing the manner in which a user discovers the network service 120-1 or device service 138-1 (for example, an application) and launches it. In some embodiments, the UI location manager 132-1 uses information associated with a service launch object (for example, metadata) to instruct the UI agent 134-1 where to locate the service launch object in the device UI 101.

[1018] In some embodiments, a UI location management service provider entity utilizes the apparatus shown in FIG. 3 to increase (for example, to optimize) the discovery level for one or more service launch objects on a mobile wireless communication device 100 or a group of mobile wireless communication devices 100 with UI location (for example, placement) and notification messaging functions managed by a device-based UI location manager 132-1. In some embodiments, a device-based UI location manager 132-1 is further managed by the device management system 170-1. In some embodiments, the UI location management service provider is a carrier (for example, a network access carrier or a service provider) of access services who has control of the UI location management system. In some embodiments, the carrier of access services may be a network access carrier (for example, a wireless network carrier such as Vodafone, Verizon, or AT&T, or a cable network carrier such as Comcast, etc.). In some embodiments, the UI location management service provider is a third party who provides the location management (for example, an application store or marketplace provider such as Apple or Android/Google, a search services entity such as Google or Bing, or a third-party UI location management entity, etc.). In some embodiments, the third party who provides the location management does not control or own the network access assets (for example, an application store or marketplace provider such as Apple or Android/Google, a search services entity such as Google or Bing, or a third-party UI location management entity, etc.). In some embodiments, it is advantageous for a carrier or application store/marketplace provider to be the UI location management service provider. In some embodiments, an entity that controls the UI location management system shown in FIG. 1 controls the UI location management service and therefore controls the discovery level for one or more service launch objects on one or more mobile wireless communication devices 100. In some embodiments, the mobile wireless communication device 100 is part of a device group.

[1019] In some embodiments, the service launch object is an object on a device UI 101 that a user of the mobile wireless communication device 100 or a network entity (for example, device management 170-1, service provider, carrier, etc.) can select (for example, “click on,” “open,” “launch,” etc.) to initiate a network service 120-1 or device service 138-1. In some embodiments, the network service 120-1 or device service 138-1 is a service or an application. In some embodiments, initiating network service 120-1 or device service 138-1 provides (for example, by launching, initiating, streaming, playing, presenting, displaying, purchasing, downloading, or preloading) a content (for example, a video or movie or audio), or a software, or a software download, or software update. In some embodiments, selection of the service launch object initiates the network service 120-1 or device service 138-1 by launching an application that is associated with the service launch object; or directing an application (for example, as a browser or portal application) to a particular network destination that is associated with the service launch object; or opening a folder with one or more additional service launch object choices for the user to select from; or providing the user with a notification regarding service status or service plan permissions for this service; or providing the user with payment or service account configuration options to enable the service. In some embodiments, selection of the service launch object initiates the network service 120-1 or device service 138-1 by launching a purchase experience or a purchasing environment. In some embodiments, selection of the service launch object initiates providing a user of the mobile wireless communication device 100 with means to download an application from the application download server 140-1 and launch the network service 120-1 or device service 138-1. In some embodiments, the service launch object is an Android “APK” (i.e., an application package) comprising an application and additional associated information, for example, information about an icon (for example, a graphic or location) associated with a service or an application. In some embodiments, a service launch object icon is one or more of a graphic, a text string, a UI user entry field or any other means for the user to choose to activate a service launch object.

[1020] In some embodiments, service launch object discovery level refers to the level of priority a service launch object receives relative to gaining the device user's attention in order to encourage selection or launch a service or application associated with the service launch object. In some embodiments, a high discovery level corresponds to a premium UI location for the service launch object (for example, the service launch object is placed in a prominent UI service launch partition, a home screen, or a permanent launcher bar). In some embodiments, a high discovery level also includes or is indicated by one or more of highlighted service launch object icon features (wherein icon features include one or more of size, orientation, color, texture, persistence, transparency, foreground/background presence, skin, wallpaper, etc.) or prominent or frequent service launch object notification messages. In some embodiments, a low discovery level is characterized by a less prominent service launch object UI location or less prominent service launch object notification messaging. In some embodiments, a low discovery level includes one or more of: a service launch object location in the device application stable, a service launch object on an application store/marketplace location, a service launch object without notification messaging, and a one time notification message the first time the service launch object icon is displayed to the user.