Method for wireless communication system and wireless communication system

Abstract

Methods, systems, and apparatus are described for providing selectable service offerings to mobile users via a mobile terminal through a satellite communication system. In embodiments, a database of access profiles for accessing a network via the wireless communication system may be maintained, wherein each access profile corresponds to a service offering among a plurality of service offerings selectable via a plurality of devices and is associated with a set of network destinations within the network. In embodiments, a request for a specific service offering among the plurality of service offerings is received from a device among the plurality of devices. Access profiles associated with the specific service offering can be identified from the database. Communication can be permitted between the devices and the corresponding set of network destinations associated with the identified access profile.

Description

Background Technology

[0001] In wireless communication systems, satellite communication systems can provide network connectivity to multiple devices coupled to satellite terminals of the wireless communication system. The network connectivity provided to the devices can be binary (e.g., all or none), such as being connected to all networks, such as the Internet, or disconnected. Regardless of the quality or characteristics of the devices, the services provided to the devices within a single operator are typically the same. Providing complete network access to devices can be costly, and the available radio frequency (RF) spectrum resources in satellite communication systems are used inefficiently. Furthermore, not every service provided is suitable for every device. Summary of the Invention

[0002] The described features broadly relate to providing personalized service provisioning for devices connected to satellite terminals within a satellite communication system. Specifically, it involves offering connectivity solutions to each customer or passenger associated with a device specifically tailored for that customer or passenger. The technology described herein provides passengers with à la carte, passenger-customizable products, services, and applications on their own devices within a mobile platform. When a device requests a service, a micro-session for the service can be established between the device and the network providing the service via the satellite communication system. The micro-session can restrict network traffic to a set of network destinations associated with the requested service. This technology enables traffic shaping, reduces traffic on the satellite communication system, lowers costs, and provides passengers with a more personalized experience.

[0003] Various content and service providers on one or more networks can provide information related to service provisioning to operators associated with a mobile platform. Each service provisioning can be personalized using one or more access profiles. An access profile can define a set of rules for multiple service provisions (including specific service provisions) offered at multiple devices within the mobile platform. A service provisioning manager can reside within a satellite communication system, such as on the mobile platform. The service provisioning manager can compare the requested service provisioning and the requesting device with the relevant access profile. If a match is found, the satellite communication system is authorized to allow the service provisioning at the access device. The satellite communication system can facilitate communication between the network and devices at a specific set of network destinations to provide the requested service at the device.

[0004] The foregoing has provided a fairly extensive overview of the features and technical advantages of examples according to this disclosure, enabling a better understanding of the following specific embodiments. Additional features and advantages will be described below. The disclosed concepts and specific examples can be readily used as the basis for modifications or the design of other structures for performing the same purposes of this disclosure. Such equivalent constructions do not depart from the scope of the appended claims. The features of the concepts disclosed herein, their organization and methods of operation, together with their associated advantages, when considered in conjunction with the accompanying drawings, will be better understood from the following description. Each of the figures is provided for illustrative and descriptive purposes only and is not intended to limit the scope of the claims. Attached Figure Description

[0005] A further understanding of the nature and advantages of this disclosure can be achieved by referring to the following figures. In the figures, similar components or features may have the same reference numerals. Furthermore, various components of the same type can be distinguished by a dash following the reference numeral and a second numeral used to differentiate them among similar components. If only the first reference numeral is used in the specification, the description applies to any similar component having the same first reference numeral but independent of the second reference numeral.

[0006] Figure 1 A diagram illustrating a wireless communication system according to aspects of this disclosure;

[0007] Figure 2 A diagram illustrating a media delivery system in a vehicle according to various aspects of this disclosure;

[0008] Figure 3 A process flowchart illustrating an example of service provisioning according to aspects of this disclosure is shown;

[0009] Figure 4 An example screenshot of a dashboard for multiple service provisioning according to aspects of this disclosure is shown;

[0010] Figures 5 to 8 A flowchart illustrating an exemplary method for providing personalized connectivity services according to aspects of this disclosure is shown;

[0011] Figure 9 A block diagram illustrating a satellite communication environment according to aspects of this disclosure is shown; and

[0012] Figure 10 A block diagram of a service provision manager according to aspects of this disclosure is shown. Detailed Implementation

[0013] Satellite terminals (e.g., multi-user access terminals) within a satellite communication system can establish a communication link between the satellite terminal and a communication satellite using a communication antenna. In some cases, the communication link can be configured for two-way communication (e.g., transmission and reception) or one-way communication (e.g., reception). This communication link can provide communication services between a terrestrial network and a mobile vehicle containing a satellite terminal. These communication links can also be used to provide services to devices of passengers located on the mobile vehicle (e.g., user devices such as mobile phones and laptops).

[0014] The program can be used to establish specific services at devices located on mobile vehicles with a connection via a satellite communication system. The satellite communication system relays network traffic for the specific service between the device and the network. According to aspects of this disclosure, one or more networks can provide satellite terminals with information related to service provisioning, the service provisioning including one or more services of the network. The satellite terminal can provide these service provisionings to devices on mobile vehicles associated with the satellite terminal. The satellite terminal can generate a device-specific portal for each device based on a set of access profiles associated with the service provisioning. The portal can display authorized service provisionings for the device, which can be based on characteristics of the device or its associated users. Service provisioning may vary between customers based on content, price, type, etc.

[0015] When a customer selects a service provider to use (e.g., using a generated portal), the satellite terminal can establish communication between the device and the associated network and network destinations for that specific service. That is, devices accepting the service provider that will communicate with one or more network destinations associated with the service provider are whitelisted. The satellite terminal can facilitate the service by acting as a relay for network activity.

[0016] This description provides examples and is not intended to limit the scope, applicability, or configuration of embodiments of the principles described herein. Rather, the following description is intended to provide a illustrative description for those skilled in the art to implement embodiments of the principles described herein. Various variations can be made to the function and arrangement of the elements.

[0017] Therefore, various embodiments may omit, substitute, or add various procedures or components as needed. For example, it should be understood that methods may be performed in a different order than those described, and various steps may be added, omitted, or combined. Furthermore, aspects and elements described relative to certain embodiments may be combined in various other embodiments. It should also be understood that the following systems, methods, apparatuses, and software may individually or collectively be components of a larger system, wherein other procedures may be applied preferentially or otherwise modified.

[0018] Figure 1 A diagram illustrating a wireless communication system 100 according to aspects of this disclosure is shown. The wireless communication system 100 includes a satellite communication environment comprising a satellite communication system 157 (including one or more communication satellites 121), a satellite terminal 150, one or more devices 160, one or more satellite terminals 136, a gateway 130, and one or more networks 140. The satellite terminal 150 may be a multi-user access terminal providing network access connectivity to multiple devices 160 on a mobile platform 170. A service provisioning manager 172 is located on the mobile platform 170, providing connectivity to services selected from service provisioning options at the devices 160. The wireless communication system 100 may be directly or via one or more network devices 141 connected to at least one user device 160 and one or more networks 140.

[0019] One or more communication satellites 121 in satellite communication system 157 may comprise any suitable type of communication satellite configured for wireless communication with gateway 130 and one or more satellite terminals 150. In some instances, some or all of the communication satellites 121 may be in geostationary orbit, such that their positions relative to ground installations can be relatively fixed, or fixed within operational tolerances or other orbital windows. In other instances, any suitable orbit for one or more satellites 121 in the satellite communication system (e.g., low Earth orbit (LEO), medium Earth orbit (MEO), etc.) may be used.

[0020] Satellite terminal 150 may include a satellite terminal communication antenna configured to receive and transmit signals 155 from communication satellite 121. Satellite terminal 150 may be configured to communicate one-way or two-way with one or more communication satellites 121 of satellite communication system 157.

[0021] Communication satellite 121 can communicate via signal 155 directed toward a service beam coverage area 126 containing satellite terminals 150. Service beam coverage area 126 can cover any suitable service area (e.g., circular, elliptical, hexagonal, local, regional, national, etc.) and provide service to any number of satellite terminals 150 located within service beam coverage area 126. Similarly, communication satellite 121 can communicate via signal 135 directed toward service beam coverage area 136 containing one or more satellite terminals 110. Communication satellite 121 can communicate with gateway 130 by transmitting and / or receiving signal 135. Signal 135 can, for example, carry communication traffic of one or more satellite terminals 150 (e.g., relayed by communication satellite 121), or other communication between communication satellite 121 and gateway 130. In some instances, the communication satellite 121 may be a multi-beam satellite and may have multiple service beams covering multiple service beam coverage areas that may or may not overlap with adjacent service beam coverage areas, said multiple service beam coverage areas including service beam coverage areas 126 and 136.

[0022] The wireless communication system 100 (including the satellite communication system 157) can operate in one or more frequency bands. For example, the wireless communication system 100 can operate in the International Telecommunication Union (ITU) Ku, K or Ka bands, C band, X band, S band, L band, etc. Additionally, the satellite terminal 150 can be used for applications other than terrestrial fixed systems, including mobile applications such as those involving ships, aircraft, and terrestrial vehicles.

[0023] Satellite terminal 150 may be located on mobile platform 170, which may be any device, equipment, or object capable of supporting satellite terminal 150 and changing its position. For example, mobile platform may be a mobile vehicle such as an airplane, space shuttle, ship, or vehicle.

[0024] Gateway 130 can use one or more gateway satellite terminals 110 to transmit signal 135 to and receive signal 135 from communication satellite 121 of satellite communication system 157. Gateway antenna terminal 110 can be bidirectional and designed with sufficient transmit power and receive sensitivity to reliably communicate with at least one communication satellite 121. Gateway 130 can also communicate with one or more networks 140. The one or more networks 140 can be part of or outside the wireless communication system. The wireless communication system can access one or more networks 140 using a database accessing configuration file 145. The one or more networks 140 can include a local area network (LAN), metropolitan area network (MAN), wide area network (WAN), or any other suitable public or private network, and can be connected to other communication networks such as the Internet, telephone networks (e.g., Public Switched Telephone Network (PSTN), etc.). One or more network devices 141 can be coupled to gateway 130 through one or more networks 140 and, in some instances, can control aspects of wireless communication system 100. In various instances, network device 141 may be located in the same location or otherwise near gateway 130, or it may be a remote device communicating with gateway 130 and / or one or more networks 140 via one or more wired and / or wireless communication links. In some instances, at least some of network devices 141 are servers. Network 140 may include one or more service providers 167.

[0025] Aircraft communication equipment 174 may include a satellite terminal 150 (which may be a multi-user access terminal, a part of a multi-user access terminal, or an aspect thereof), a service provisioning manager 172, a network access unit 164, a wireless access point 166, and user devices 160-a to 160-d (collectively referred to herein as device 160). Satellite terminal 150 may include one or more mobile terminal antennas, transceiver 176, and modem 178. All or some of the aircraft communication equipment 162 may be located inside the aircraft.

[0026] Mobile platform 170 includes aircraft communication equipment 174, which includes a satellite terminal 150. The satellite terminal includes an antenna, which may be an antenna array. Mobile platform 170 can communicate with satellite communication system 157 via one or more signals 155 using the antenna of satellite terminal 150. Parts of satellite terminal 150 (e.g., antenna, transceiver 176) may be mounted externally to the fuselage or at other locations external to mobile platform 170, and may be mounted under an radome. In other instances, other types of housings may be used to accommodate parts of satellite terminal 150. Other parts of satellite terminal 150 may be located inside the aircraft (e.g., modem 178). Satellite terminal 150 can operate in ITU Ku, K, or Ka bands. Alternatively, satellite terminal 150 can operate in other frequency bands, such as C-band, X-band, S-band, L-band, etc.

[0027] Data transmitted to satellite communication system 157 via one or more signals 155 on the downlink and uplink can be formatted using a modulation and coding scheme (MCS), which can be satellite-customized or similar to other schemes in the industry. For example, an MCS can contain multiple code points, each associated with a modulation technique (e.g., BPSK, QPSK, 16QAM, 64QAM, 256QAM, etc.) and a coding rate based on the ratio of coded information bits to the total number of coded bits containing redundant information.

[0028] Service Provider Manager 172 may reside on Onboard Mobile Platform 170 and may include Processor 180, Network Interface 182, and Memory 186. Service Provider Manager 172 can manage different service provisioning among various devices, such as providing requested service provisioning, approving requested service provisioning, and whitelisting devices that will communicate with associated network destinations when accepting service provisioning. Processor 180 can execute instructions stored in Memory 186 to perform the functions of Service Provider Manager 172. Memory 186 may store instructions for the operation of Service Provider Manager 172, local copies of media content, and access profile database 145-b, as well as one or more device-specific profiles 149. In some instances, Memory 186 stores a database of device-specific profiles. Memory 186 may also store indexes that can organize or otherwise identify the content stored in Memory 186.

[0029] The database of access profile 145 may contain a set of access profiles that define a set of rules for multiple service providers. Each service provider can be authorized for a specific device 160 based on the access profile of device 160. Access profiles can be based on one or more characteristics of device 160. For example, an access profile may show that one or more service providers can be authorized for device 160 based on: characteristics of device 160, identifiers of users associated with device 160, subscriptions of device 160, service providers of device 160, one or more characteristics of the mobile platform 170 carrying device 160, flight or other route-specific information, communication information, reservation identifiers, ticket identifiers, individual memberships associated with device 160, group memberships associated with device 160, or combinations thereof. In other instances, access profiles in the database of access profile 145 may be based on other or additional information, quality, or characteristics. In some instances, both network 140 and service provider 172 contain access profile database 145. In other instances, only one of network 140 or service provider 172 has access profile database 145. When a wireless communication system receives a request associated with a service provision (e.g., from device 160), it can queue access profile database 145-b to determine whether to authorize access to the service provision. Once device 160 selects one or more access profiles, those access profiles can be associated with device 160. When device 160 requests to communicate with network destination 141, one or more access profiles associated with device 160 (which can now be device-specific profile 149) can be queued to determine whether communication is permitted.

[0030] The service provisioning manager 172 may also include a portal builder 188 and a service provisioning request manager 184. The portal builder 188 provides the ability to manage and control which services are deployed to the backend of different users or devices 160 associated with the mobile platform 170 or an associated operator. Which services are provisioned to each user or device 160 can be based on a unique set of rules for that user or device 160, such as access profiles. The portal builder 188 can generate displays for users to browse the service provisioning at device 160.

[0031] The service provisioning request manager 184 can process requests for service provision from device 160. In some instances, the service provisioning request manager 184 can process the selection of service providers.

[0032] The onboard communication system of mobile platform 170 can provide communication services to device 160 via modem 178. Device 160 can connect to and access network 140 and service provisioning via modem 178. Device 160 can be a mobile device such as a laptop computer or cellular phone, or it can be other types of devices within mobile platform 170. Device 160 can communicate with modem 178 via network access unit 164, which can provide network services such as DNS, IP address management (e.g., Dynamic Host Configuration Protocol (DHCP)), Network Address Translation (NAT), etc. Device 160 can be connected to network access unit 164 via wired or wireless connection. For example, device 160 can connect to network access unit 164 via wireless access point (WAP) 166, which can provide wireless connectivity within mobile platform 170. For example, the wireless connection can be based on wireless local area network (WLAN) technology such as IEEE 802.11 (Wi-Fi), or other wireless communication technologies.

[0033] exist Figure 1 In this example, two devices 160-a and 160-b are shown as wireless user devices, and two devices 160-c and 160-d are shown as fixed devices. Device 160-a or 160-b can be a mobile device, such as a wireless device, a remote device, a handheld device, a subscriber device, or some other suitable term, where "device" may also be referred to as a unit, station, terminal, or client. Device 160-a or 160-b can also be a personal electronic device, such as a mobile phone, personal digital assistant (PDA), tablet computer, laptop computer, personal computer, other handheld devices, netbook, notebook computer, display device (e.g., TV, computer monitor, etc.), printer, or other types of customer premises equipment (CPE). Devices 160-c and 160-d can be devices installed within a mobile platform 170, such as a display screen or a monitor on a seat back. In other examples, other numbers of devices 160 may be included.

[0034] Device 160 can generate requests for service provision. For example, a user associated with device 160 can use the connection provided by WAP 166, network access unit 164, and satellite terminal 150 to obtain service provision and browse any available content items or other services. After selecting to accept the provision, the user can prompt device 160 to send a request for the service provision, which can identify any selected content item or service and any other relevant information, including the characteristics of the request, the duration of the content, related content, recommended content, etc. Network 140 can provide service provision to device 160 and can also provide services to device 160. Network 140 may include at least one service provider 166.

[0035] Satellite terminal 150 can provide multiple service offerings specific to each device 160 via wireless communication system 100 (including a satellite communication system), such as network access services (e.g., Internet access) or other communication services (e.g., broadcast media). In some instances, satellite terminal 150 provides bidirectional communication between device 160 and network 140 via communication satellite 121 and gateway 130. In other instances, other types of devices can be connected to the satellite terminal, such as any equipment located at the subscriber's premises, including routers, firewalls, switches, private branch exchanges (PBXs), Voice over Internet Protocol (VoIP) gateways, etc. In some instances, device 160 may include an installation device (e.g., a handheld installation device, a laptop computer, etc.) configured to perform various procedures to establish, maintain, and / or troubleshoot communication links between communication satellite 121 and satellite terminal 150.

[0036] Although the example of satellite terminal communication antenna 152 described herein uses two-way satellite communication for illustrative purposes, the techniques described herein are not limited to this. For example, the hardware and techniques described herein can be used on antennas used for point-to-point ground links, and in some instances may not be limited to two-way communication.

[0037] Wireless communication systems can use the techniques described herein to deliver curated service offerings to each device 160 on a mobile vehicle. Service offerings can be an à la carte offering from which a user associated with the device can select. The wireless communication system can provide communication between the onboard device and a terrestrial network that hosts services, applications, or both in the service offering. These technologies can reduce costs, provide passengers with more personalized and relevant services or applications, improve streaming capabilities, reduce the size, weight, and power limitations of onboard mobile platforms, provide passengers with a wider range of media content options, or reduce network traffic.

[0038] Figure 2 A diagram illustrating a media delivery system 200 in a vehicle according to various aspects of this disclosure is provided. The media delivery system 200 in the vehicle includes a wireless communication system comprising at least one satellite 121-a, a network 140-a, and communication equipment for a mobile vehicle 170-a. The one or more networks 140-a may be external to the wireless communication system and may be terrestrial-based networks. The satellite 121-a, the mobile platform 170-a, and the one or more networks 140-a may be respectively... Figure 1 Instances of satellite 121, mobile platform 170, and one or more networks 140, or respectively containing Figure 1Aspects of satellite 121, mobile platform 170 and one or more networks 140.

[0039] Figure 2 Another view of a wireless communication system 100, showing a detailed block diagram of one example embodiment including network access unit 164-a, is shown. Many other configurations of network access unit 164-a may have more or fewer components. Although in Figure 2 While presented as a single physical computing device, in some aspects, one or more of the functions discussed below with respect to network access unit 164-a can be performed by multiple different physical computing devices. In some aspects, network access unit 164-a may contain more than Figure 2 The examples shown have fewer functional components. Furthermore, the functionalities described herein can be distributed among components in a manner different from those described.

[0040] In some respects, the network access unit 164-a and the personal electronic device 160-e on the mobile vehicle 170-a are related to the above. Figure 1 The discussed network 140-a or network destination 141 provides gateway functionality. In some instances, personal electronic device 160-e can be, for example... Figure 1 Examples of one or more aspects of the apparatus 160 described herein. In some aspects, all network traffic transmitted and / or received by personal electronic device 160-e may be processed by network access unit 164-a. For example, in some aspects, network traffic transmitted from devices within network 140-a to personal electronic device 160-e may be electronically received by network access unit 164-a, which then forwards or retransmits the network traffic to personal electronic device 160-e according to one or more policies. Similarly, in some aspects, network traffic transmitted from personal electronic device 160-e to devices on network 140-a may be electronically received by network access unit 164-a, which may then forward or retransmit the network traffic to a destination indicated in the network traffic (e.g., a destination within network 140-a) based on one or more policies.

[0041] according to Figure 1 The network access unit 164-a in the vehicle communicates via satellite 121-a (or other suitable communication network, as described above) and other components of the two-way communication system (e.g., Figure 2 The components shown communicate with the terrestrial network 140-a. The network access unit 164-a can also communicate with personal electronic devices 160-e, and in some embodiments, with a transportation management computer 202. Figure 2In the following discussion, gateway 130 and the terms mentioned above are omitted. Figure 1 Some components of the wireless communication system 100 discussed (e.g., satellite terminal 150, transceiver 176, modem 178, and WAP 166, etc.) are included to avoid making the accompanying drawings overly complicated.

[0042] The described aspects of network access unit 164-a include an electronic hardware processor 180-a and a network interface 210. Processor 180-a can communicate with network interface 210 via an electronic bus within network access unit 164-a. Processor 180-a can communicate with network interface 210 to transmit and / or receive data packets over a network, such as one provided with the network described above. Figure 1 The network discussed includes wireless access point 166 and / or modem 178. Processor 180-a can also communicate via network interface 210 to exchange network messages with personal electronic devices 160-e and / or vehicle management computer 202.

[0043] Network access unit 164-a further includes an account provider 215, a network server 216, a traffic classifier 217, a rules engine 220, a traffic scheduler 220, and a service provider 172-a. The account provider 215, network server 216, traffic classifier 217, rules engine 220, traffic scheduler 220, and service provider 172-a may be part of volatile or stable storage devices, such as virtual or physical memory space accessible to processor 180-a. The account provider 215, network server 216, traffic classifier 217, rules engine 218, traffic scheduler 220, and service provider 172-a may contain binary data that defines instructions for configuring processor 180-a to perform various functions. For example, account provider 215 may contain instructions for configuring processor 180-a to provide access to network 140-a for one or more personal electronic devices 120a-n.

[0044] Network server 216 may store instructions configuring processor 180-a to provide functions associated with delivering electronic content via network standards such as HTML / HTTP. Traffic classifier 217 may include instructions configuring processor 180-a to classify network traffic received by network access unit 164-a. For example, traffic classifier 217 may determine whether the traffic is email, web browsing traffic, video streaming traffic, messaging traffic, or other types of traffic. This information can be used to determine whether the traffic is permitted by traffic policies, as discussed in more detail below.

[0045] Rule engine 218 may include instructions to configure processor 180-a to execute one or more rules that allocate traffic policies to personal electronic device 160 based on one or more characteristics of the network device. Traffic scheduler 220 may include instructions to configure processor 180-a to schedule network traffic generated by personal electronic device 160-e. Instructions in one or more of account provider 215 and / or traffic scheduler 220 may configure processor 180-a to read data from policy database 225. For example, in some aspects, processor 180-a may read data from policy database 225 and rule database 228 to determine traffic policies applicable to network traffic generated by one or more of personal electronic devices 160-e.

[0046] Although Figure 2 Network access unit 164-a is represented as a single physical device; however, those skilled in the art will understand that, in some aspects, the functionality discussed above and below with respect to network access unit 164-a can be implemented on multiple physical devices in some embodiments. For example, in some aspects, the functionality associated with each of account provider 215, network server 216, traffic classifier 217, rule engine 218, traffic scheduler 220, and service provider 172-a can each be provided on a separate physical device, each having its own dedicated electronic hardware processor, memory, and network interface. Additionally, in some embodiments, policy database 225, rule database 228, and access profile database 145-c can also be implemented on one or more separate devices from account provider 215, network server 216, traffic classifier 217, rule engine 218, and traffic scheduler 220. How the functionality discussed above and below is divided across one or more physical hardware devices does not substantially affect the methods and systems disclosed herein. Although Figure 2 The diagram shows a policy database 225, a rules database 228, and an access profile database 145-c, which are part of network access unit 164-a. However, in some other embodiments, these components may be accessible via network 140-a. In some of these aspects, network access unit 164-a may be configured to cache at least a portion of the policy data 225, the rules database 228, and / or the access profile database 145-c in local memory to provide reliable and high-performance access to the data contained therein.

[0047] Figure 3A process flowchart 300 illustrating an example of service provisioning according to aspects of this disclosure is provided. Process flowchart 300 illustrates an example of communication between a service provisioning manager 172-b, a network 140-b, and a device 160-f (e.g., a wireless communication system comprising one or more satellites). The wireless communication system may include... Figure 1 and 2 In terms of wireless communication systems, for example, service provider 172-b, network 140-b, and device 160-f can be respectively Figure 1 and 2 The service provision managers 172 and 172-a, networks 140 and 140-b, and devices 160-a to 160-d and 160-e. In some instances, device 160-f may be located on a mobile platform, such as an aircraft.

[0048] Network 140-b may represent one or more networks. Network 140-b may provide information related to one or more service providers 305 to the service provider manager 172-b. Service providers may be the provision of applications or services personalized for a specific operator, mobile vehicle, user, or device. In some instances, service providers are based on routes, sectors, base stations, or areas of an associated operator. In some instances, service providers may be dynamically modified to personalize them for operators, users, or devices. For example, an operator may be any person or company that transports people or goods, such as an airline with a fleet of aircraft or a company with a fleet of ships.

[0049] Service offerings can be associated with access profiles for multiple devices 160-f. That is, each service offering can be authorized for a specific device 160-f based on its access profile. An access profile can define a set of rules for multiple service offerings and can be based on one or more characteristics of device 160-f. For example, an access profile can show that one or more service offerings can be authorized for device 160-f based on: the identifier of the user associated with device 160-f, the subscription of device 160-f, the service provider of device 160-f, one or more characteristics of the mobile platform carrying device 160-f, flight or other route-specific information, communication information, reservation identifier, ticket identifier, individual membership associated with device 160-f, group membership associated with device 160-f, or a combination thereof. In other instances, access profiles can be based on other or additional information, quality, or characteristics.

[0050] Once the service provider 172-b has access to one or more service providers for passenger use, it can provide service provider-related information to the device 160-f in a service provider information signal 310. The information in the service provider information signal 310 may include identification information for each service provider, including the type of service provided, any included applications or services, the terms of the service provider, any expiration dates, etc. The service provider information signal 310 can be provided to the device 160-f upon request or after the device 160-f is connected to the mobile platform's network. The service provider information signal 310 can be generated at the service provider 172-b or at the network 140-b.

[0051] Device 160-f can send a request for service provision signal 315 to service provision manager 172-b. For example, a user associated with device 160-f can browse one or more service providers available to device 160-f. After selecting to accept a service provision, the user can prompt device 160-f to send a request for service provision signal 315, which can identify the selected service provision and any other relevant information including the characteristics of the request, duration, etc.

[0052] Upon receiving a request for service provisioning signal 315, service provisioning manager 172-b can identify an access profile associated with a specific selected service provision. That is, service provisioning manager 172-b can identify an access profile from a database of access profiles at 320, where a specific access profile is associated with a service provision. Based on the associated access profile, service provisioning manager 172-b can determine whether communication is permitted between device 160-f and a corresponding set of network destinations associated with the identified access profile. In some instances, service provisioning manager 172-b can approve the service provisioning request at 325 based on the access profile. In other instances, service provisioning manager 172-b can determine that the access profile does not permit the approval of service provisioning for device 160-f. In this case, service provisioning manager 172-b can reject the request for service provisioning signal 315.

[0053] If the service provider 172-b determines that service provisioning is approved based on an access profile, it may send an authorization signal 330 to the network 140-b. The network 140-b and the service provider 172-b may establish a communication session 335, and the service provider 172-b may in turn establish a communication session 340 with the device 160-f. In some instances, communication sessions 335 and 340 may be micro-sessions. Micro-sessions may be service provision-only sessions, and may also be limited to a corresponding set of network destinations associated with the identified access profile. Communication sessions 335 and 340 may be bidirectional communication sessions, where communication 345 between the device 160-f and the network 140-b is relayed via the service provider 172-b. In other words, the service provider 172-b provides communication services to the device 160-f within the mobile platform via a wireless communication system.

[0054] Figure 4 Screenshot 400 shows an example of a portal 405 for multiple service providers 410 according to aspects of this disclosure. For example, in... Figure 3 When a service is received at point 310, portal 405 can be displayed on the device, for example... Figure 2 and 3 The portal 405 is displayed on the screen of device 220. It can be displayed on a mobile device on a mobile vehicle, or on the screen of a terminal fixed to a mobile vehicle. Screenshot 400 is merely one example of many possible different screenshots and alternatives to portal 405.

[0055] Portal 405 may include identifier 435, which indicates that portal 405 is used to establish one or more micro-sessions. As used herein, a micro-session may include only a portion of an application or other web-based service that is associated with an application or service identified in the service offering. Portal 405 may include a list of service offerings 410, which includes a price 420. Instance service offerings and instance prices are listed in portal 405. For example, a messaging service and eight different options of different messaging applications that a user can choose from may be listed as free. Different options may be selected from currently popular messaging services, messaging services typically used in a region or along the route of a carrier or mobile vehicle, personalized user history associated with the device, etc. Other service offerings shown in instances of portal 405 may include social networks, video services, music applications, spreadsheet applications, or graphing applications. In other instances, other service offerings may be included, which may have more than Figure 4 The examples show more or less service provision.

[0056] Portal 405 may also include one or more request options 415, such as radio buttons, where the device's user can select the service offered. Figure 4 As shown, request option 415-a has been selected by placing X on radio button 415-a, which selects an associated service provider named Music. Submit option 440 can be selected to submit a request for the service provider to the wireless communication system. If authorized, the device may be able to connect to the service provider via the wireless communication system. If submit option 440 is selected, device 160-f can, for example, in Figure 3 315 service requests were received.

[0057] While the example portal 405 is shown only as a line drawing, other instances may include graphics, video, colors, graphic interchangeable formats (GIFs), icons, etc. It may also include other options or features, such as options to submit, cancel, or update service provisioning. In some instances, the portal 405 is a webpage rendered by a web browser. In other instances, the portal 405 is a graphical user interface (GUI) for another type of application.

[0058] In some instances, this can be done in the portal builder of the service provider, such as... Figure 1 Portal 405 is generated at portal builder 188, as shown. For example, the portal builder can be hosted within a wireless communication system, which may be located at a satellite gateway or satellite terminal. The portal builder can provide the backend capability to manage and control which services are deployed to different users or devices associated with an operator. Which services are supplied to each user or device can be based on a unique set of rules for that user or device, such as an access profile. Access profile rules can be changed or updated based on changes in the service provider or changes in things associated with the operator, user, or device (e.g., subscription status, service provider, location, route, local competitors, market changes, license changes, applications installed on the device, etc.). Prices may also differ between devices, which may be based on loyalty program registration, device service provider identification, existing subscriptions, current promotions and region, and other factors.

[0059] Portal 405 can provide backend technology for dynamically determining personalized service offerings for multiple devices. The service offerings displayed on portal 405 can be personalized for each device, which can be based, for example, on currently subscribed and installed applications. Portal 405 can differ for different users. Portal 405 can provide users with a more unique and streamlined experience, such as offering services relevant to the user at a relevant price. When using the techniques described herein, users can save time browsing many different service offerings because more relevant offerings can be displayed more prominently. In some instances, users can also save money by paying only for the specific services they want to use in a micro-session, instead of paying a higher price for full network access. These techniques can also be used to reduce network traffic.

[0060] Figure 5 A flowchart illustrating an exemplary method 500 for providing personalized connectivity services relative to a wireless communication system, according to aspects of this disclosure, is shown. In some instances, the wireless communication system may be or include, as per [the relevant information], Figures 1 to 4 Aspects of the described wireless communication system.

[0061] At 505, one or more service provisionings can be received from one or more networks at a wireless communication system. Service provisioning may be available for a specific time period or may be provided in real time. Service provisioning may be a device-specific provisioning for one or more applications or services provided by a corresponding set of network destinations within the network. Service provisioning may be generated based on the mobile platform's operator, route, region, etc. At 510, method 500 includes providing service provisioning to multiple devices on the mobile platform. In some instances, a profile database may be accessed before providing service provisioning to multiple devices to further personalize service provisioning for specific devices.

[0062] At 515, method 500 includes determining whether a request has been received from the device for service provisioning. If not, method 500 proceeds to receiving updated provisioning from the network and providing those provisioning to the device. If a request for access to service provisioning is received, method 500 proceeds to 520.

[0063] At 520, the access profile database is queried to determine the rules associated with a specific device accessing a particular service provider. At 525, method 500 determines whether the access profile associated with the service provider and the device allows connection to the service provider. If the service provider matches the access profile, method 500 can proceed to update its service provider or provide the updated service provider to the device. However, if the service provider does indeed match the access profile, the wireless communication system can authorize the device to use the service provider. At 530, a communication session can be established between the device and the service provider, with the wireless communication system acting as a repeater. The communication session can be a micro-session.

[0064] At 535, method 500 may include a wireless communication system that relays communication between the device and the network during a session. If method 500 includes receiving a request to terminate the session from the device or the network at 540, the session can be terminated at 545. In other instances, the session may be associated with a session timer, and the session may time out after the session timer expires. If not, method 500 continues to support communication between the device and the network until the session is terminated. Method 500 can be performed repeatedly or in parallel for different devices connected to the wireless communication system and for updated service provisioning.

[0065] Figure 6 A flowchart illustrating an exemplary method 600 for providing personalized connectivity services relative to a device, according to aspects of this disclosure, is shown. In some instances, the device may be device 160 or device 220, such as a mobile device or any other type of device, as relative to... Figures 1 to 3 As described.

[0066] At 605, method 600 may include establishing a connection with a wireless communication system, said wireless communication system, for example, comprising a connection to a wireless communication system. Figures 1 to 5 A wireless communication system describing one or more aspects. This could be, for example, a mobile device connected to a Wi-Fi network on a mobile vehicle, such as a Wi-Fi network that communicates with a satellite communication system for network connectivity. At 610, the device can receive and display (or inspect, etc.) a service provision from the wireless communication system. At 615, the user of the device can select a service provision to use, and the device sends a request for a specific service provision to the wireless communication system.

[0067] If authorization for service provision is denied at 620, method 600 can return to 615, where the user may be able to select another service. However, if authorization for service provision is accepted, the method proceeds to 625. At 625, the device engages in communication associated with the service provision hosted by the wireless communication system, which may be a micro-session. At 630, the device may continue to participate in the micro-session until an instruction to complete service provision is given. Service provision can be completed if the user decides to terminate service use, the service provision expires, or the service provider instructs the service to end. At 635, the communication session can be terminated based on the instruction.

[0068] In one use case, for example, a user may be on an airplane flying a specific route. The user can connect their mobile phone to the airplane's Wi-Fi network. After connecting to the Wi-Fi network, a wireless communication system connected to or including the Wi-Fi network can identify one or more service providers and compare them with the phone's access profile. Based on the service providers and access profile, the wireless communication system can generate a portal at the backend for the phone to identify specific personalized service providers. The wireless communication system can present the service providers to the phone in the form of a portal. The user may be able to access the portal on their phone, browse the service providers, and select the service provider they wish to use. The phone requests access to an associated service provider via in-vehicle Wi-Fi, which relays the request to the wireless communication system. The wireless communication system, particularly a satellite terminal (which may be located on the airplane or on the ground), can further confirm the mobile device's access to the service provider. Once approved, the wireless communication system facilitates communication between the mobile device and the network hosting the service provider. The mobile device accesses the service provider via relayed communication but does not necessarily access other services or network sites.

[0069] Figure 7 A flowchart illustrating an exemplary method 700 for providing personalized connectivity services relative to a network provided with a managed service, according to aspects of this disclosure, is shown. In some instances, the network may be, for example, relative to... Figures 1 to 3 Network 140 as described.

[0070] At point 705, method 700 may include providing a set of service offerings to an operator via a wireless communication system. Each service offering may be associated with a set of network destinations. The service offerings may be used for online applications or services. For example, the network may periodically provide a set of service offerings upon request or whenever the service offering changes. The set of service offerings may detail the applications and services being offered, prices, any restrictions, etc., and may be based on specific characteristics of the associated operator or mobile vehicle.

[0071] At point 710, the network can receive an authorization message for a specific device that wants to access a specific service within a service offering. This can be received immediately after the service offering set is provided, or it can be received at a later time. The authorization message can indicate that the device is authorized to access the specific service via the relevant access profile.

[0072] At 715, a communication session is established between the device and the network via a wireless communication system, which may be or includes a satellite communication system. The communication session may be a micro-session, meaning that only those network destinations associated with a specific service can be accessed by the device. At 720, the network communicates with the device via the wireless communication system until the communication session ends at 725. The device, the network, or the wireless communication system (e.g., the device within the wireless communication system) can terminate the communication session.

[0073] Figure 8 A flowchart illustrating an exemplary method for providing personalized connectivity services according to aspects of this disclosure is shown. Some or all of the steps of the exemplary method 800 can be performed by various devices of a wireless communication system, such as one or more of satellite terminal 150, communication satellite 121 of a satellite communication system, gateway 130, and / or network device 141 of a satellite communication system, as referenced. Figures 1 to 3 As described. In the description of method 800, one or more means of a wireless communication system may perform each of the described steps. In some instances, one means of the wireless communication system may perform the steps. In other instances, one or more steps may be performed by a first means, while a second means may perform one or more other steps of method 800.

[0074] At 805, method 800 may include multiple means for providing communication services to a mobile platform via a wireless communication system. In some instances, the mobile platform is associated with an operator defining an access profile for the mobile platform, wherein the operator is associated with multiple mobile platforms. In some instances, 805 may be at least partially comprised of, for example, Figure 10 The network manager 1020, service provisioning request manager 1015, and / or transmitter 1095 described herein are executed.

[0075] At 810, method 800 may include maintaining a database of access profiles for accessing a network via a wireless communication system, wherein each of the access profiles corresponds to a corresponding service provider among a plurality of service providers selectable via a plurality of devices, and is associated with a corresponding set of network destinations within the network. In some instances, 810 may be at least partially comprised of, for example, Figure 10 The access configuration file database 1010 described in the document is executed.

[0076] At 815, method 800 may include receiving a request for a specific service provider among a plurality of service providers from a device among a plurality of devices. In some instances, 815 may be at least partially composed of, for example, Figure 10 The service provisioning request manager 1015 or receiver 1090 described herein shall execute.

[0077] At 820, method 800 may include identifying access profiles associated with a specific service provision from a database of access profiles. In some instances, the access profile defines a set of rules for multiple service provisions (including a specific service provision) offered at multiple devices within a mobile platform. In other instances, each access profile defines a set of rules for multiple devices to access the corresponding service provision. In some instances, the set of rules for access is based at least in part on at least one of subscriptions, identifiers, communication information, reservation identifiers, ticket identifiers, individual memberships associated with a device, group memberships associated with a device, or combinations thereof. In some instances, 820 may be at least in part determined by, for example, Figure 10 The network manager 1020 or access configuration file database 1010 described herein shall be executed.

[0078] At point 825, method 800 may include communication between the granting device and a corresponding set of network destinations associated with the identified access profile. In some instances, the communication between the granting device and the corresponding set of network destinations associated with the identified access profile further includes granting communication on beam resources of at least one satellite beam of a satellite communication system, wherein the wireless communication system includes a satellite communication system. In some instances, 825 may be at least partially constituted by, for example, Figure 10 The micro session manager 1025 or network manager 1020 described herein shall be executed.

[0079] In some instances, method 800 further includes establishing a session for a specific service provision at a device in a plurality of devices, wherein communications are transmitted during the established session.

[0080] In some instances, method 800 also includes configuring a session based on an access profile associated with a specific service provisioning, and transmitting information identifying the configured session to the device. Some instances involve configuring multiple service provisions based on the characteristics of the mobile platform.

[0081] In other instances, method 800 may also include determining multiple service offerings based at least in part on identification information for at least one user associated with the device. This can be done whether the device directly transmits the identification information or not. For example, a preference profile can be built based on the device's past usage or another characteristic. The preference profile can be used to determine which services the device is allowed to select from.

[0082] In an additional instance, method 800 further includes transmitting at least a portion of data associated with a specific service provision from a network destination in a corresponding set of network destinations, wherein the network destination is outside the wireless communication system. In yet more instances, method 800 may include updating a device-specific profile database that already contains indications of requests from the device for a specific service provision.

[0083] In some instances, method 800 further includes receiving requests for different service providers from a second device among a plurality of devices. Method 800 may further include permitting communication between the second device and a corresponding second set of network destinations, said corresponding second set of network destinations being associated with a second identified access profile associated with the different service providers. In some instances, each device receives a unique service provider or set of service providers.

[0084] In other instances, method 800 may include maintaining a database of device-specific profiles, each of which is associated with a corresponding device among a plurality of devices. Method 800 may further include updating the device-specific profile associated with the device to include an indication from the device of a request for a particular service provision in response to receiving a request from the device. In additional instances, method 800 may also include allowing communication if the indication of a request for a particular service provision is within the device-specific profile associated with the device.

[0085] Figure 9 A block diagram illustrating a satellite communication environment 900 according to aspects of this disclosure is shown. The satellite communication environment 900 can be referenced separately. Figure 1 Examples of satellite communication environments 100 or 200 described in or 2. Satellite communication environment 900 includes a multi-user access terminal 950, a satellite 121-c (e.g., as part of a satellite communication system), and apparatus 160-g. In some instances, the multi-user access terminal 950 may be a reference... Figure 1 Examples of satellite terminal 150 or modem 270 described. In some instances, multi-user access terminal 950 may be a single device, for example, within a mobile platform such as aircraft 230. In other instances, features performed by multi-user access terminal 950 may be divided or split among two or more devices.

[0086] The multi-user access terminal 950 may include a processor 905 and a memory 910. The memory 910 may store computer-readable, computer-executable software or firmware code 915, which contains instructions that, when executed by the processor, cause the multi-user access terminal 950 to perform the various functions described herein. In some instances, the code 915 may not be directly executed by the processor, but may enable the computer (e.g., when compiled and executed) to perform functions. The processor 905 may include intelligent hardware devices (e.g., a central processing unit (CPU), a microcontroller, an application-specific integrated circuit (ASIC), etc.). Each of the components of the multi-user access terminal 950 may communicate directly or indirectly with each other (e.g., via one or more buses 960).

[0087] The multi-user access terminal 950 can be configured to communicate with one or more communication satellites (e.g., communication satellite 121-c), which may be as referenced. Figures 1 to 3 An example of an aspect of the described satellite communication system, communication satellite 121-c. Multi-user access terminal 950 can be configured to establish a communication link with communication satellite 121-c using satellite terminal communication antenna 954 and communication transceiver 952. The communication link can support bidirectional communication between multi-user access terminal 950 and communication satellite 121-c via forward link signal 172-a and / or return link signal 173-a.

[0088] The communication transceiver 952 may include various circuits and / or processors to support the reception, transmission, conversion, encoding, and / or decoding of signal 155-a. For example, the communication transceiver 952 may include a modem to modulate data packets and provide the modulated data packets to the satellite terminal communication antenna 954 for transmission, and demodulate data packets received from the satellite terminal communication antenna 954. As illustrated in this example, the multi-user access terminal 950 includes a single satellite terminal communication antenna 954. However, in some cases, the multi-user access terminal 950 may have more than one satellite terminal communication antenna 954, which may be capable of simultaneously transmitting or receiving multiple wireless transmissions and / or configured to support various beamforming techniques.

[0089] The multi-user access terminal 950 may include a service provisioning manager 172-c. The service provisioning manager 172-c may include various circuitry and / or processors to support personalized service provisioning. In some instances, the service provisioning manager 172-c may include circuitry and / or processors configured to receive multiple service provisionings and apply them to multiple devices using access profiles.

[0090] The multi-user access terminal 950 can be configured to support communication with one or more devices 160-g via signals transmitted through wired and / or wireless connections 161-c. The multi-user access terminal 950 may employ a local communication interface 920 that supports any number of wired and / or wireless links between the multi-user access terminal 950 and one or more devices 160-g, which may be managed by a service provider 172-c. As illustrated in this example, the service provider 172-c can be implemented as a separate module of the multi-user access terminal 950, which can be configured as an independent instruction set (e.g., a software module with an instruction set stored in memory, which may be a separate portion of the memory) and / or a separate processing element (e.g., a standalone CPU, microcontroller, ASIC, field-programmable gate array (FPGA), or other similar integrated circuit (IC)). In other instances, some or all of the operation of the service provider 172-c may be caused by instructions stored in memory 910 (e.g., a portion of code 915), which in some instances may be executed by a processor 905. The Service Provisioning Manager 172-c can control and / or configure the various components of the satellite terminal to perform reference... Figures 5 to 8 One or more operations of the exemplary methods 500, 600, 700, or 800 described herein.

[0091] The multi-user access terminal 950 may include a satellite communication manager 930 configured to manage various aspects of communication between the multi-user access terminal 950 and the communication satellite 121-c. As illustrated in this example, the satellite communication manager 930 may be implemented as a separate module of the multi-user access terminal 950, which may be configured as an independent instruction set (e.g., a software module having an instruction set stored in a separate portion of memory) and / or a separate processing element (e.g., a standalone CPU, microcontroller, ASIC, FPGA, or similar IC). In other instances, some or all of the operation of the satellite communication manager 930 may be caused by instructions stored in memory 910 (e.g., a portion of code 915), which in some instances may include steps executed by processor 905.

[0092] In various instances, the components of the multi-user access terminal 950 can be divided into sub-assemblies, wherein each component may be partially or wholly contained in a sub-assembly.

[0093] Figure 10 A block diagram 1000 of a service provision manager 172-d according to aspects of this disclosure is shown. The service provision manager 172-d may be as described in reference... Figures 1 to 3The service provider 172-d may be part of any of the satellite terminal 150, apparatus 220, communication satellite 121, gateway 130, or network apparatus 141 described herein. For example, the service provider 172-d may be part of the satellite terminal 150, operating in conjunction with the shared processor and memory of the satellite terminal 150. In another instance, the service provider 172-d may be a separate component of the satellite terminal 150, receiving input from other components of the satellite terminal 150 and sending output to other components of the satellite terminal 150. In other instances, the service provider 172-d may be or form part of apparatus 160, communication satellite 121, gateway 130, or network apparatus 141, which manages access rules for one or more network or content providers to provide services to the satellite communication system. The service provider 172-d may also be or contain a processor. Each of the components of the service provider 172-d may communicate with each other to provide the functionality described herein. The service provider 172-d can be configured to receive signals from the receiver 1090 and transmit the signals to the transmitter 1095 using various technologies, including wired or wireless communication, control interfaces, user interfaces, etc.

[0094] The service provisioning manager 172-d may include an access profile database 1005 that stores multiple access profiles. The service provisioning manager 172-d may also include a service provisioning request manager 1015, which can perform one or more aspects of managing requests from slave devices for a specific service provision, as referenced... Figures 1 to 9 As described. For example, the service provisioning request manager 1015 may receive requests for service provisioning as input from the receiver 1090 via a satellite communication system. In various instances, the service provisioning request manager 1015 may query the access configuration file database 1010 to determine whether the requested service provisioning is available to the requesting device.

[0095] The service provision manager 172-d may include a network manager 1020, which can perform one or more aspects of a micro-session between the management device and the network providing access to a specific service provision, as referenced. Figures 1 to 9 As described. Network Manager 1020 can establish sessions between devices and networks and relay communication between them. Service Provisioning Manager 172-d may include Micro-Session Manager 1025, which can perform one or more aspects of providing personalized service provisioning, as described in reference... Figures 1 to 9 As described. In some instances, the micro-session manager 1025 can facilitate micro-sessions between the network and devices.

[0096] Service Provider Manager 172-d may include Portal Builder 1030, which can provide a portal to the device to request and access one or more service providers, as referenced. Figures 1 to 9 As described. For example, portal builder 1030 can determine which service providers are available for a specific device, possibly by utilizing access profile database 1010, and the portal builder presents a portal to the device. In some instances, the portal may be a GUI. Service provider manager 172-d may contain a device-specific profile database 1035, which can provide device-specific rules for the device to access service providers, as described in reference... Figures 1 to 9 As described.

[0097] The components of the service provision manager 172-d can be implemented individually or collectively using at least one ASIC suitable for executing some or all of the applicable features in hardware. Alternatively, the features can be executed by one or more other processing units (or cores) on at least one IC. In other instances, other types of integrated circuits (e.g., structured / platform ASICs, FPGAs, or other half-custom ICs) can be used, which can be programmed in any manner known in the art. The features can also be implemented, in whole or in part, using instructions embodied in memory, formatted for execution by one or more general-purpose or special-purpose processors.

[0098] The specific embodiments described above with reference to the accompanying drawings are examples and do not represent the only examples that can be implemented or are within the scope of the claims. The term "example" as used in this specification means "serving as an example, illustration, or description" and is not "preferred" or "advantageous" over other examples. Detailed descriptions include specific details to provide an understanding of the described techniques. However, these techniques can be practiced without these specific details. In some cases, well-known structures and components are shown in block diagram form to avoid obscuring the concept of the described examples.

[0099] The information and signals described herein can be represented using any of a variety of different techniques and skills. For example, data, instructions, commands, information, signals, bits, symbols, and chips that may be referenced throughout the above description can be represented by voltage, current, electromagnetic waves, magnetic fields or magnetic particles, light fields or light particles, or any combination thereof.

[0100] The various illustrative blocks and components described in connection with the disclosure herein may be implemented or executed using a general-purpose processor, digital signal processor (DSP), ASIC, FPGA or other programmable logic device, discrete gate or transistor logic, discrete hardware component, or any combination thereof designed to perform the functions described herein. The general-purpose processor may be a microprocessor, but alternatively, the processor may be any conventional processor, controller, microcontroller, or state machine. The processor may also be implemented as a combination of computing devices, such as a combination of a DSP and a microprocessor, multiple microprocessors, a microprocessor incorporating a DSP core, or any other such configuration.

[0101] The functions described herein can be implemented in hardware, software executed by a processor, firmware, or any combination thereof. If implemented in software executed by a processor, the functions can be stored as instructions or code on or transmitted over a computer-readable medium. Other examples and embodiments are within the scope of this disclosure and the appended claims. For example, due to the nature of software, the functions described above can be implemented using software executed by a processor, hardware, firmware, hardwired, or any combination thereof. Features implementing the functions can also be physically located in various locations, including distributed so that different parts of the functions are implemented in different physical locations. As used herein, included in the claims, when used in a list having two or more items, the term "and / or" means that any one of the listed items can be used alone, or any combination of two or more of the listed items can be used. For example, if a composition is described as containing components A, B, and / or C, the composition can contain A alone; contain B alone; contain C alone; contain a combination of A and B; contain a combination of A and C; contain a combination of B and C; or contain a combination of A, B, and C. Moreover, as used herein, the “or” used in the list of items contained in the claims (e.g., a list of items beginning with phrases such as “at least one of” or “one or more of”) indicates a separate list, such that a list such as “at least one of A, B or C” means A or B or C, or AB or AC or BC, or ABC (i.e., A and B and C).

[0102] Computer-readable media includes both computer storage media and communication media, with communication media encompassing any media that facilitates the transfer of a computer program from one place to another. Storage media can be any available media accessible by a general-purpose or special-purpose computer. By way of example, and not limitation, computer-readable media can include RAM, ROM, EEPROM, flash memory, CD-ROM or other optical disc storage devices, magnetic disk storage devices or other magnetic storage devices, or any other media that can be used to carry or store desired program code in the form of instructions or data structures and is accessible by a general-purpose or special-purpose computer or a general-purpose or special-purpose processor. Furthermore, any connection is appropriately referred to as computer-readable media. For example, if software is transmitted from a website, server, or other remote source using coaxial cable, fiber optic cable, twisted pair, digital subscriber line (DSL), or wireless technologies such as infrared, radio, and microwave, these are included in the definition of media. As used in this article, disks and optical discs include compact optical discs (CDs), laser discs, optical discs, digital multifunction discs (DVDs), floppy disks, and Blu-ray discs. Disks typically reproduce data magnetically, while optical discs reproduce data optically using lasers. Combinations of these are also included within the scope of computer-readable media.

[0103] As used herein, the phrase “based on” should not be construed as referring to a closed set of conditions. For example, without departing from the scope of this disclosure, an exemplary step described as “based on condition A” may be based on both condition A and condition B. In other words, as used herein, the phrase “based on” should be interpreted in the same manner as the phrase “at least partially based on”.

[0104] The prior description of this disclosure is provided to enable those skilled in the art to make or use this disclosure. Various modifications to this disclosure will be readily apparent to those skilled in the art, and the general principles defined herein can be applied to other variations without departing from the scope of this disclosure. Therefore, this disclosure is not limited to the examples and designs described herein, but is given the broadest scope consistent with the principles and novel features disclosed herein.

Claims

1. A method for use in a wireless communication system (100), the method comprising: Communication services are provided to multiple devices (160) within the mobile platform (170) via the wireless communication system; Maintain a database of access profiles (145) for accessing the network (140) via the wireless communication system, wherein each of the access profiles (147) corresponds to a corresponding service provider among a plurality of service providers (167) selectable via the plurality of devices, and wherein the network is associated with a set of network destinations (141). Receive a request for a specific service provision among the plurality of service providers from one of the plurality of devices (315); In response to a request received from the device, the device-specific profile associated with the device is updated to include an indication of a request for a specific service provision from the device, wherein the device-specific profile is contained in a device-specific profile database, and wherein each of the device-specific profiles in the device-specific profile database is associated with a corresponding one of the plurality of devices; Identify the access profile associated with the specific service provider from the database of access profiles; One or more rules are determined from the identified access profiles to be associated with the device accessing a specific service provision, wherein the one or more rules indicate that the device has been authorized to use the specific service provision, and that, at least in part based on the specific service provision, access to the set of network destinations will be restricted to a subset of network destinations within the set of network destinations; and Based on the identified access profile, the device-specific profile associated with the device, and one or more rules, the device is allowed to communicate with a subset of network destinations in the set of network destinations associated with the identified access profile.

2. The method of claim 1, wherein the device among the plurality of devices is a first device, the set of network destinations is a corresponding first set of network destinations, and the identified access profile is an identified first access profile, the method further comprising: Receive requests for different service providers among the plurality of service providers from a second device among the plurality of devices; as well as The second device is permitted to communicate with a corresponding second set of network destinations, the corresponding second set of network destinations being associated with a second identified access profile related to the different service providers.

3. The method according to claim 1, further comprising: A session for the provision of the specific service is established at one of the plurality of devices, wherein the communication is transmitted during the established session.

4. The method of claim 1, further comprising: The provision of the plurality of services is determined at least in part based on the identification information of at least one user associated with the device.

5. The method of claim 1, wherein the plurality of service offerings are different for each of the plurality of devices.

6. The method of claim 1, wherein the access profile defines a set of rules for the plurality of service providers provided at the plurality of devices within the mobile platform, the plurality of service providers including the particular service provider.

7. The method of claim 6, wherein the set of rules for access is based at least in part on at least one of subscription, identifier, communication information, reservation identifier, ticket identifier, individual membership associated with the device, group membership associated with the device, or a combination thereof.

8. The method of claim 1, further comprising: At least a portion of the data associated with the particular service provision is transmitted from network destinations in the set of network destinations, wherein the network destinations are outside the wireless communication system.

9. The method of claim 1, wherein the mobile platform is associated with an operator that defines the access profile of the mobile platform, wherein the operator is associated with multiple mobile platforms.

10. The method of claim 1, wherein permitting communication between the device and the set of network destinations further comprises: The instruction to the request for the specific service provision (315) permits the communication if it is within the device-specific profile (1035) associated with the device.

11. The method of claim 1, wherein allowing communication between the device and the set of network destinations associated with the identified access profile further comprises: Communication is permitted on beam resources (155) of at least one satellite beam of a satellite communication system (157), wherein the wireless communication system includes the satellite communication system.

12. A wireless communication system (100), comprising: A satellite (121) provides communication services to multiple devices (160) within a mobile platform (170) via one or more satellite beams (155); A database of access profiles (145) for accessing the network (140) via the wireless communication system, wherein each of the access profiles (147) corresponds to a corresponding service provider among a plurality of service providers (167) selectable via the plurality of devices, and the network is associated with a set of network destinations (141). Processor (180); A memory (186) that is in electronic communication with the processor; as well as Instructions, which are stored in the memory and can be executed by the processor, to enable the wireless communication system: Receive a request for a specific service provision from one of the plurality of service providers (315); In response to a request received from the device, the device-specific profile associated with the device is updated to include an indication of a request for a specific service provision from the device, wherein the device-specific profile is contained in a device-specific profile database, and wherein each of the device-specific profiles in the device-specific profile database is associated with a corresponding one of the plurality of devices; Identify the access profile associated with the specific service provider from the database of access profiles; One or more rules are determined from the identified access profiles to be associated with the device accessing a specific service provision, wherein the one or more rules indicate that the device has been authorized to use the specific service provision, and that, at least in part based on the specific service provision, access to the set of network destinations will be restricted to a subset of network destinations within the set of network destinations; and Based on the identified access profile, the device-specific profile associated with the device, and one or more rules, the device is allowed to communicate with a subset of network destinations in the set of network destinations associated with the identified access profile.

13. The wireless communication system of claim 12, wherein the device among the plurality of devices is a first device, the set of network destinations is a corresponding first set of network destinations, the identified access profile is an identified first access profile, and wherein the instructions are further executable by the processor to cause the wireless communication system to: Receive requests for different service providers among the plurality of service providers from a second device of the plurality of devices; and The second device is permitted to communicate with a corresponding second set of network destinations, the corresponding second set of network destinations being associated with a second identified access profile related to the different service providers.

14. The wireless communication system of claim 12, wherein the instructions are further executable by the processor to cause the wireless communication system to: A session (340) for the provision of the specific service is established at one of the plurality of devices, wherein The communication is transmitted during the established session.

15. The wireless communication system of claim 12, wherein the instructions are further executable by the processor to cause the wireless communication system to: The provision of the plurality of services is determined at least in part based on the identification information of at least one user associated with the device.

16. The wireless communication system of claim 12, wherein the plurality of service providers are different for each of the plurality of devices.

17. The wireless communication system of claim 12, wherein the access profile defines a set of rules for a plurality of service providers provided at the plurality of devices within the mobile platform, the plurality of service providers including the particular service provider.

18. The wireless communication system of claim 12, wherein a set of rules for access is based at least in part on at least one of subscription, identification, communication information, reservation identifier, ticket identifier, individual membership associated with the device, group membership associated with the device, or a combination thereof.

19. The wireless communication system of claim 12, wherein the instructions are further executable by the processor to cause the wireless communication system to: At least a portion of the data associated with the particular service provision is transmitted from network destinations in the set of network destinations, wherein the network destinations are outside the wireless communication system.

20. The wireless communication system of claim 12, wherein the mobile platform is associated with an operator defining the access profile of the mobile platform, wherein the operator is associated with a plurality of mobile platforms.

21. The wireless communication system of claim 12, wherein allowing communication between the device and the set of network destinations further comprises: The instruction to provide the specific service is permitted if the communication is within the device-specific configuration file associated with the device.

22. The wireless communication system of claim 12, wherein allowing communication between the device and the set of network destinations further comprises: Communication is permitted on beam resources (155) of at least one satellite beam of a satellite communication system (157), wherein the wireless communication system includes the satellite communication system.

Images