Cellular Data Path Control via Multi-Stage Policy Enforcement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current solutions for managing cellular devices in cellular networks are limited in controlling the data path, failing to prevent connections to specific entities or countries within the network environment, and lack comprehensive control over the data traversal.
Innovation Solution
Implementing technologies that allow customers to control the end-to-end data path through various stages, including mobile operator selection, home subscriber server management, proxy control, and packet data network gateway management, using policies to dictate allowed and disallowed countries, operators, and data paths, with configuration updates applied to SIMs, HSSs, proxies, and PGWs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If existing solutions configure cellular devices with specific IMSI or eSIM profiles to manage network connection, then the device can connect to controlled cellular networks, but the organization cannot control the data path or prevent connections to specific entities within the network environment
Solution Approach 1:
The patent segments the network control mechanism into multiple independent components: network access controller, data path controller, policy manager, and enforcement points distributed across different network elements. This allows granular control over data paths without requiring complex monolithic systems, enabling organizations to control specific path attributes while maintaining operational simplicity.
Solution Approach 2:
The patent introduces intermediary components such as data path controllers and policy enforcement elements that act as mediators between the cellular device and the network infrastructure. These intermediaries enable fine-grained data path control by intercepting and directing traffic flows without requiring direct complex configuration at the device level.
2Adaptability or versatility
If the organization prevents cellular devices from connecting to specific cellular networks, then network selection is controlled, but the organization cannot control which entities the data path traverses or which countries the data path may enter
Solution Approach 1:
The patent adds a new dimension of control by distinguishing between network selection (first dimension) and data path traversal (second dimension). This is achieved through separate control mechanisms: network access controllers manage which networks devices can connect to, while data path controllers and policy enforcement points manage the actual data traversal paths, including geographical routing constraints.
Solution Approach 2:
The patent implements preliminary action by pre-configuring data path policies and routing constraints before data transmission occurs. Policy managers establish allowed and denied data paths in advance, and enforcement points automatically apply these constraints as data flows through the network, eliminating the need for real-time complex decision-making.
3Reliability
If comprehensive data path control is implemented at multiple stages including mobile operator, HSS, proxy, and PGW stages, then complete end-to-end control is achieved, but the system complexity increases significantly
Solution Approach 1:
The patent implements universal control elements that can operate at multiple network stages. The data path controller and policy enforcement mechanisms are designed to function consistently across mobile operator networks, HSS, proxy, and PGW stages, using standardized interfaces and unified policy languages. This multi-functionality reduces overall system complexity by avoiding the need for stage-specific custom solutions.
Solution Approach 2:
The patent incorporates feedback mechanisms where each control stage reports data path status and policy compliance information back to the policy manager. This enables centralized coordination and automatic adjustment of control parameters, ensuring reliable end-to-end data path control while simplifying the complexity through automated feedback-driven management rather than manual configuration at each stage.
Data Source
AI summary
Technologies are described for controlling the data path (e.g., the end-to-end data path) for cellular network data. For example, a customer of a cellular network that owns or operates cellular devices can use the technologies described herein to control how cellular network data travels through the cellular network, including associated network connections and network equipment, before ultimately reaching the customer's network. In some implementations, the data path is controlled at each of a plurality of stages. For example, control can be applied at the mobile operator stage (e.g., to control which mobile operator the cellular device connects to), at the home subscriber server (HSS) stage, at the proxy stage, and/or at the packet data network gateway (PGW) stage.