Selective Service Control for Mobile IP Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computing devices that rely on internet connections for application access face limitations when users lack a valid data plan or network permission, restricting access to web-based applications and services.
Innovation Solution
Implementing a system with a multiprotocol label switching (MPLS) platform that translates DNS requests to new IP addresses for managed and unmanaged domains, allowing selective access, rating, quality control, and security, even without a valid data plan, by routing requests through a content filter and gateways to manage access and service availability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If traditional access control methods are used, then network security and access management are maintained, but users without valid data plans or network permission cannot access web-based applications
Solution Approach 1:
The patent segments network services into managed and unmanaged categories, allowing different access control policies for different services. This enables users without valid data plans to access unmanaged services while managed services maintain traditional access control, thus resolving the contradiction between accessibility and access management.
Solution Approach 2:
The patent introduces an intermediary system that translates DNS requests to IP addresses and applies selective filtering. This intermediary layer enables differentiated access control where some services are accessible without valid data plans while others require proper authorization, balancing accessibility with access management.
2Adaptability or versatility
If users must stay connected to Internet access point, then web-based applications can be accessed, but device complexity and network dependency increase
Solution Approach 1:
The patent segments applications into web-based and offline categories, allowing the device to function with different capabilities depending on network availability. This segmentation reduces the complexity burden by allowing core functions to work offline while advanced web-based functions require network connection.
Solution Approach 2:
The patent implements dynamic access control where the system adapts its behavior based on network connection status and user authorization. When connected with valid permissions, full functionality is available; when disconnected or unauthorized, limited functionality is provided, reducing the perceived complexity for users.
3Ease of operation
If selective service control is implemented, then access to essential services is maintained without valid data plan, but system complexity increases
Solution Approach 1:
The patent introduces a network service provider system as an intermediary that handles the complexity of selective service control. This intermediary translates high-level service requests into appropriate network actions, shielding the user from the underlying complexity while enabling selective access to essential services without valid data plans.
Solution Approach 2:
The patent implements automatic service classification and access control where the system self-determines which services are managed versus unmanaged based on pre-configured policies. This self-service approach reduces operational complexity by eliminating manual intervention in access control decisions.
Data Source
AI summary
Systems and methods are described for managing services of a computing device over a mobile network where requests for managed or unmanaged services are translated to corresponding IP addresses sent to the computing device and corresponding requests sent to the translated IP addresses are either permitted, rated, quality controlled or secured if the computing device has a valid data plan or is otherwise permissioned for using the mobile network, are denied if filtered and if the computing device does not have a valid data plan or is not otherwise permissioned and the request corresponds to the first address, and are permitted, rated, quality controlled or not secured even if the computing device does not have a valid data plan or is not otherwise permissioned if the request corresponds to the second address.