WO2012129113A1 - Managing tethered data traffic over a hotspot network - Google Patents
Managing tethered data traffic over a hotspot network Download PDFInfo
- Publication number
- WO2012129113A1 WO2012129113A1 PCT/US2012/029507 US2012029507W WO2012129113A1 WO 2012129113 A1 WO2012129113 A1 WO 2012129113A1 US 2012029507 W US2012029507 W US 2012029507W WO 2012129113 A1 WO2012129113 A1 WO 2012129113A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- mobile device
- tethering
- data traffic
- hotspot
- unauthorized
- Prior art date
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/08—Access security
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
- H04L63/1416—Event detection, e.g. attack signature detection
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
- H04W4/50—Service provisioning or reconfiguring
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/40—Security arrangements using identity modules
- H04W12/43—Security arrangements using identity modules using shared identity modules, e.g. SIM sharing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W84/00—Network topologies
- H04W84/02—Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
- H04W84/10—Small scale networks; Flat hierarchical networks
- H04W84/12—WLAN [Wireless Local Area Networks]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
- H04W88/02—Terminal devices
- H04W88/04—Terminal devices adapted for relaying to or from another terminal or user
Definitions
- Mobile devices having tethering capabilities are common in today's device landscape. As third party applications for such mobile devices continue to advance, turning a mobile device into a mobile hotspot has become considerably easier. Several third party applications for mobile devices now allow consumers to piggy back data plans, designed for smart phone use, to create a mobile hotspot for use by other devices such as laptops and tablets.
- the data consumption profile of mobile devices used as unauthorized mobile hotspots results in significant carrier revenue leakage from the Joss of authorized hotspot service revenue. Revenue leakage is especially pronounced where unauthorized tethered connections are used on mobile devices having unlimited or high-tiered data plans targeted for smartphone- only data usage.
- unauthorized usage of mobile devices as mobile hotspots malces it difficult for enterprises to manage their costs for data usage across their mobile device inventory.
- the present disclosure is directed to managing tethered data traffic over a hotspot network, substantially as shown in and/or described in connection with at least one of the figures, and as set forth more completely in the claims.
- Figure 1A presents an exemplary system for controlling access to a mobile hotspot utilizing a hotspot management application, according to one implementation
- Figure IB presents an exemplary mobile device including a hotspot management application for controlling access to a mobile liotspot, according to one implementation
- Figure 2 presents an exemplary diagram of the architecture of a mobile device including a hotspot management application for controlling access to a mobile hotspot, according to one implementation
- Figure 3 presents an exemplary flowchart illustrating a method for controlling access to a mobile hotspot on a mobile device utilizing a hotspot management application, according to one implementation
- Figures 4A and 4B show exemplary systems for supporting download, installation, and update of a liotspot management application on a mobile device, according to implementations of the present invention.
- FIG. 1A presents an exemplary system for controlling access to a mobile hotspot utilizing a hotspot management application, according to one implementation.
- system 100 may include mobile device 1 10, tethered device 120, base station 150, and network server 140.
- Mobile device 1 10 may be any type of mobile device, such as a smartphone, tablet, laptop, personal computer, or personal digital assistant (PDA), for example.
- Mobile device 1 10 may act as a mobile hotspot for one or more tethered devices, for example tethered device 120.
- Mobile device 110 may further include a hotspot management application, which provides policy-driven, control over subordinate tethered connections to mobile device 1 10, such as at the kernel level of the operating system of mobile device 1 10.
- Mobile device 1 10 may communicate with tethered device 120 via tethered connection 112, which may be any IP-based connection, without limitation, such as a USB connection, a Bluetooth connection, a WiFi AP connection, a WiFi direct connection or an Ethernet connection.
- tethered device 120 may communicate with base station 150 over wireless wide area network (WW AN) connection 1 14.
- WW AN wireless wide area network
- the hotspot management application within or otherwise provided to the mobile device 110 may provide policy-driven control over any tethered connections to mobile device 1 10.
- the present application provides a way in which a carrier may prevent users from extending data connectivity, via tethering, through the use of non-approved mobile hotspot applications on mobile devices.
- FIG. IB presents an exemplary mobile device including a hotspot management application for controlling access to a mobile hotspot, according to one implementation.
- mobile device 1 10 may include display 102, memory 104, processor 106, and communication interfaces 108, for example.
- Display 102 may be configured to display any communications to or from mobile device 1 30, as required by one or more implementations of the present application.
- Memory 104 may be configured to store a hotspot management application, as set forth by one or more implementations of the present application, as well as any other information that may be utilized by mobile device 1 10, for example.
- Processor 106 may be configured to carry out any required calculations, procedures or processes for controlling access to a mobile hotspot on mobile device 1 10, as set forth by one or more implementations of the present application.
- communication interfaces 108 may be configured to provide a mobile hotspot by establishing wireless or wired connections to and from mobile device 1 10.
- FIG. 2 presents an exemplary diagram of the architecture of a mobile device including a hotspot management application for controlling access to a mobile hotspot, according to one implementation.
- Mobile device 200 of Figure 2 may include communications interfaces 270 configured to transmit and receive wireless or wired signals in a plurality of formats.
- mobile device 200 may include, for example, a wireless wide area network (WWAN) interface 272, a USB interface 274, a Bluetooth interface 276 and a WiFi interface 278, for example.
- WWAN wireless wide area network
- USB interface 274 a USB interface 274
- Bluetooth interface 276 and a WiFi interface 278, for example.
- mobile device 200 may directly control each of the communications interfaces 270 such that no data traffic may transfer from one interface to another interface without the proper policy in place.
- Device interface 265 may be a software and/or hardware interface allowing communication between communications interfaces 270 and higher-level software layers, for example.
- Three core modules may allow mobile device 200 to control the WWAN radio and how it is bridged to one or more of the other communications interfaces: update agent 240, rules engine 250, and tethering agent 260.
- Update agent 240 is a powerful device management (DM) platform which may communicate with an external DM server supporting common DM types such as the software component management object (SCOMO) and/or the firmware update management object (FUMO), thus allowing remote installation, uninstallation, activation and deactivation of software components on mobile device 1 10, for example.
- a DM server may be shown as server 140 of Figure 1, for example.
- the hotspot management application must always be operational on a mobile device.
- update agent 240 may include custom extensions allowing the hotspot management application to be automatically updated, or reinstalled in the event that portions or all of the application are uninstalled, damaged, altered or deleted.
- Such custom extensions may include the use of an installation bootstrap engine, which may ensure the integrity of the entire hotspot management application by facilitating automatic reinstallation of any missing or damaged portions of the hotspot management application.
- the installation bootstrap engine may operate to reinstall or update specific modules in the proper locations on mobile device 1 10, for example, rather than the entire hotspot management application when appropriate.
- the installation bootstrap engine may utilize a difference engine to determine which modules of the hotspot management application are missing, altered or damaged.
- the installation bootstrap engine may review the hotspot application to ensure all modules are properly installed through the use of a integrity signature approach, such that a run-time computed integrity signature for the hotspot management application will be computed and validated against the pre-shared authentic integrity signature using all necessary modules of the hotspot management application installed and/or present on the mobile device.
- the signature computed by the bootstrap engine will match with the pre-installed authentic integrity signature resident on the device and reported to the server.
- the computed key information may be sent to the network server occasionally for verification or when requested by the server.
- the network server may determine that the hotspot management application is not properly installed or has been compromised and initiate a push to the mobile device for immediate application reinstallation.
- the properly installed hotspot management application may provide the authentic integrity signature as a part of network authentication of the mobile device with the carrier network in general. Thus, each time the mobile device attempts to connect to the carrier network, proper installation of the hotspot management application may be ensured.
- the network server may initiate a push to the mobile device for immediate application and integrity key reinstallation.
- Rules engine 250 may control how communications interfaces 270 are bridged to one another. The operation of rules engine 250 may be based on one or more carrier controlled tethering policies and/or one or more mobile device user controlled tethering policies. For example, a carrier may set a policy for mobile devices that no tethering is allowed without an authorized tethering data plan, or that USB or Bluetooth tethering is allowed, while WiFi-based soft access point tethering is not. Rules engine 250 may determine whether the particular mobile device is signed up for an authorized tethering data plan and may then determine which of the communications interfaces are being utilized to tether another device to the mobile device and apply the appropriate carrier-based policy.
- carrier-based policies may include, without limitation, limiting a maximum number of subordinate connections to a mobile device, otherwise limiting or shaping the behavior of subordinate connections to the mobile device, as well as policies concerning redirection to custom web portals or pages upon a detection of an unauthorized tether to the mobile device.
- Such carrier-based policies may not be overridden by the mobile device user.
- rules engine 250 may determine whether the detected data traffic or tethering application is unauthorized, and if so, direct that the data traffic be limited or disabled.
- rules engine 250 may incorporate mobile device user-based policies, which may be applied subsequent to the carrier-based policies. Such user-based policies will be further discussed with regard to hotspot manager 230 below.
- Tethering agent 260 may control the actual bridging of one or more of communications interfaces 270 to WW AN interface 272. For example, once rules engine 250 has determined whether tethering another device to the mobile device is appropriate in a current set of circumstances, tethering agent 260 may facilitate the actual connection/disconnection of W WAN interface 272 to/from one or more of USB interface 274, Bluetooth 276, or WiFi interface 278, for example.
- Service enabling interface 235 may be a software and/or hardware interface facilitating communication between deeper- level modules, such as update agent 240, rules engine 250 and tethering agent 260, and modules handling a user interface and other high level business and user related functions.
- Tethering / hotspot controller 210 may control the user interface used to manage mobile device 200.
- tethering / hotspot controller 210 may configure aspects such as a service set identifier (SSID), wired equivalent privacy (WEP) security protocols, as well as facilitating the utilization of a central threat database containing a constantly updated listing of applications known to facilitate unauthorized tethering on mobile devices.
- SSID service set identifier
- WEP wired equivalent privacy
- data plan manager 220 may facilitate redirecting the user / user device (e.g., tethered device) to a captive portal or other user interface where the user of either the mobile device or the user of the tethered device may be offered a support tethering solution and data plan from the carrier.
- user / user device e.g., tethered device
- Hotspot manager 230 may include features that allow the mobile device user to manage the mobile device as a carrier-authorized hotspot in a number of ways. For example, hotspot manager 230 may provide guest management by allowing for the creation and configuration of guest connections to the mobile device including determining how those connections may be accessed, how often, at what rate, and even what web pages are allowed to be accessed through mobile device 200. In addition, hotspot manager 230 may allow a guest connection that complies with carrier-controlled policies already in place to be created by entering a key into a tethered device connected to mobile device 200, for example. Entering the key may allow the tethered device to access mobile device 200 as a mobile hotspot, for example, subject to any user-controlled tethering policies in place either globally, or specifically tailored to that particular key.
- the hotspot management application may utilize a packet filter driver to facilitate the packet processing required by one or more of the above described modules of the hotspot management application.
- a packet filter driver may be stored in memory of the mobile device, for example, memory 104 of mobile device 1 10.
- Such a driver may facilitate the detection of tethering activity on the mobile device by rules engine 250, for example.
- the driver may also facilitate the interception of the tethering activity by tethering agent 260 and redirection of the tethered session via data plan manager 230, for example.
- Such data may be transformed as required to enable tracking of any tethering activity or attempted tethering activity on the mobile device.
- Such tracking may include, without limitation, identities of tethered devices, identities of applications used for such unauthorized tethering, as well as the frequency, duration and amount of data transferred during each session.
- Such tracking may accordingly allow carriers to evaluate the efficacy of installed policies as well as apprise mobile device users of how much bandwidth is being tethered and by what tethered devices, for example.
- a driver may additionally facilitate the shaping or limiting of bandwidth as controlled by one or more of the above described modules of the hotspot management application.
- Figure 3 presents an exemplary flowchart illustrating a method for controlling access to a mobile hotspot on a mobile device utilizing a hotspot management application, according to one implementation.
- Action 310 of flowchart 300 includes detecting unauthorized data traffic over a tethered link between the mobile device and a tethered device by analyzing a signature of the unauthorized data traffic.
- a signature of any traffic may be acquired through monitoring of any data traffic being transferred between a WW AN connection of the mobile device, such as 2G, 3G, 4G, or 4G LTE for example, and any other IP-based connection, such as USB, Bluetooth, WiFi or Ethernet, for example.
- Such analysis and detection may be carried out within the mobile device itself, for example.
- aspects of such data traffic monitored may include, without limitation, "time to live” (TTL) values, "type of service” (ToS) values, differentiated service code point (DSCP) values, a tunneling type, or any other IP header information associated with the transferred data, for example.
- Traffic signatures acquired may be further logged with a traffic signature database to dynamically build a collection of traffic signatures, which may be distributed to other hotspot management applications on other mobile devices for accurate identification of unauthorized tethered traffic. Additionally, the traffic signatures may be logged for the purpose of tracking subordinate tethered traffic and to provide a record of data traffic transfers or attempted data traffic transfers to or from a particular mobi le device.
- TTL time to live
- ToS type of service
- DSCP differentiated service code point
- a signature of unauthorized data traffic over the tethered link may additionally, or alternatively, include determining the identity of an unauthorized third party tethering or hotspot application itself that may be executing on the mobile device.
- an application signature may include, without limitation, an MD5/SHA-1 hash of the unauthorized application's binary, an executable filename, or the brand product name of the application, for example.
- Such an application signature may be used as a look up into entries in a central threat database, which may contain a constantly updated listing of applications known to facilitate unauthorized tethering on mobile devices. Alternatively, such a threat database may be maintained and continuously updated within the mobile device itself.
- the application and/or data traffic may be disabled or limited, according to a policy and rules engine within the hotspot management application on the mobile device.
- the operation of the policy and rules engine may be based on one or more carrier-controlled tethering policies and/or one or more mobile device user- controlled tethering policies.
- a carrier may set a policy for mobile devices it services that no tethering is allowed on any mobile device without a tethering data plan.
- the carrier may set a policy that only USB tethering is allowed and that WiFi tethering is not allowed, for example.
- the rules engine may apply such policies and accordingly determine whether the detected data traffic or tethering application is unauthorized.
- the operation of the policy and rules engine may be based on one or more tethering policies set by the user of the mobile device.
- a user of a mobile device may control features such as creating and configuring separate guest connections to the mobile device.
- Such configuration of separate guest connections may include defining the types of connections that may be used for tethering, how often and for how long those connections may be established, caps on the amount of data which may be transferred, and at what data rates.
- the user of the mobile device may additionally define a whitelist and/or blacklist of websites that may or may not be accessed using the mobile device as a mobile hotspot or tether.
- action 320 includes controlling the unauthorized data traffic.
- the carrier-controlled "no unauthorized tethering" policy may be applied by the rules engine to determine that tethered data traffic between the mobile device's WWAN interface and WiFi interface is unauthorized, for example.
- the hotspot management application may disable the unauthorized data traffic by any appropriate method.
- the hotspot management application may shut down or uninstall the unauthorized third party tethering application.
- the unauthorized application's traffic may alternatively be directed to a null port within the mobile device, or the data traffic may be otherwise dropped.
- the hotspot management application may appropriately limit or disable a particular tethered device's traffic through the mobile device.
- a mobile device user may have set a policy that only a particular tethered device may utilize the mobile device as a hotspot and only at a prescribed data rate or capped at a particular data amount.
- the rules engine for example, rules engine 250 of Figure 2
- the rules engine may determine that tethered data transfers at speeds greater than those set by the mobile device user, or data transfers over the capped amount, are to be limited or disabled.
- the present implementation allows for both carrier and user control of the tethering and hotspot capabilities of the mobile device.
- Action 330 includes redirecting a user of the tethered device to a captive portal for authorized tethering plan support. Where unauthorized data traffic is disabled or limited, the offending user may be redirected to a captive portal, which may display one or more carrier-authorized tethering data plans to the mobile device user. In addition, or in the alternative, a user of the tethered device may be redirected to a webpage or display, which presents information as to why the tethered connection was disabled or limited.
- a display may inform the tethered device user that the total data transfer limit has been reached and that further data transfer via tether has been disabled or limited.
- a captive portal may be hosted directly on the mobile device, or in the alternative, the captive portal may be hosted remotely on a server.
- jailbreaking A common practice to remove limitations on applications and operating systems of mobile devices is a process known as jailbreaking.
- custom kernels within the operating system are loaded or limiting portions of the operating system are deleted or altered in an effort to lift or modify the limitations of the mobile device.
- Jailbreaking allows users to gain root access to the operating system, allowing the mobile device users to download additional applications, extensions, or themes that are not sanctioned by the mobile device manufacturer or carrier.
- Action 340 includes detecting when the hotspot management application has been inappropriately modified or is not installed on the mobile device and automatically reinstalling the hotspot management application or appropriate components thereof.
- update agent 240 of Figure 2 may detect that a portion or all of the hotspot management application has been uninstalled, damaged or deleted through the use of a tampering alert. If a tampering alert is triggered, a request may be sent over the mobile device's WWAN to push back necessary installation components to the mobile device via protocols such as SCOMO or FUMO for immediate update or repair of the hotspot management application. Where the mobile device already contains a software copy of the hotspot management application in local memory, such a copy may be used by the mobile device for immediate repair and/or reinstallation.
- the present implementation may additionally include a method of delivery of the hotspot management application to a mobile device.
- Figures 4A and 4B show exemplary systems for supporting download, installation, and update of a hotspot management application on a mobile device, according to implementations of the present invention.
- Figure 4 A shows system 400, which may include mobile device 410, base station 450 and one or more of carrier-hosted server 420 and third-party server 430, for example.
- the hotspot management application may come preloaded on mobile device 410.
- the present application contemplates solutions in which legacy mobile devices may also obtain automatic access to the hotspot management application of the present implementation, where the application does not come preloaded on the mobile device.
- a user of mobile device 410 may call carrier customer support, for example, or receive a SMS message providing a link to the hotspot management application download site.
- Such a download site may be hosted by either carrier-hosted server 420, third-party server 430, such as for example, the Android marketplace, or both.
- the user of mobile device 410 may follow the link at which time an auto-update software package containing the hotspot management application may be pushed from either carrier-hosted server 420 or third-party server 430 to mobile device 410 for installation.
- updates to an already-installed hotspot management application may occur automatically as they become available, or may occur after user acceptance of the update.
- the hotspot management application may attempt to verify whether the mobile device 410 is associated with a carrier-authorized hotspot or tethering data plan. If so, mobile hotspot or tethering functionality may be enabled on mobile device 410. If not, the user of mobile device 410 may be redirected to a captive portal for authorized tethering plan support.
- FIG. 4B shows system 460 which may be similar to system 400 of Figure 4A except further including laptop 470, for example.
- laptop 470 may link to the hotspot management application download site.
- the user of laptop 470 may follow the link to the hotspot management application download site at which time an auto-update software package containing the hotspot management application may be pushed from either carrier-hosted server 420 or third-party server 430 to laptop 470.
- the hotspot management application may then be uploaded to mobile device 410 from laptop 470 via USB connection or any other appropriate wireless or wired connection.
- the hotspot management application may attempt to verify whether the mobile device 410 is associated with a carrier-authorized hotspot or tethering data plan.
- mobile hotspot or tethering functionality may be enabled on mobile device 410. If not, the user of mobile device 410 may be redirected to a captive portal for authorized tethering plan support.
- System 460 may additionally allow for a user to control guest management and/or customize the hotspot management application from laptop 470.
- the present application provides for controlling access to a mobile hotspot on a mobile device utilizing a hotspot management application.
- the hotspot management application may provide kernel-level control over mobile devices configured to provide mobile hotspot or tethering support to subordinate tethered devices. Accordingly, concepts of the present application reduce revenue leakage through the control of unauthorized subordinate tethered connections and redirection to a captive portal for carrier-authorized tethering data plan support. Additionally, concepts of the present application enforce solution integrity through device management, provide policy support for flexible control of tethering policies, and provide for guest and user configuration of tethered and mobile hotspot connections to a mobile device according to both carrier-controlled and mobile device user-controlled policies.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
Presented is a system and method for controlling access to a mobile hotspot on a mobile device utilizing a hotspot management application. The method includes detecting unauthorized data traffic over a tethered link between the mobile device and a tethered device by analyzing a signature of the unauthorized data traffic. Analyzing the signature of the unauthorized data traffic may be carried out utilizing a rules engine, where the rules engine is based on one or more carrier controlled tethering policies and one or more user controlled tethering policies. Detecting unauthorized data traffic may further include detecting an unauthorized tethering application on the mobile device utilizing a database of known unauthorized tethering applications. The method further includes controlling the unauthorized data traffic. The method additionally includes redirecting a user of the mobile device to a captive portal for authorized tethering plan support.
Description
MANAGING TETHERED DATA TRAFFIC OVER
A HOTSPOT NETWORK
RELATED APPLICATIONS
This application claims priority of U.S. Provisional Application No.
61/454,480 filed on March 18, 201 1, which is hereby incorporated by reference in its entirety.
BACKGROUND
Mobile devices having tethering capabilities are common in today's device landscape. As third party applications for such mobile devices continue to advance, turning a mobile device into a mobile hotspot has become considerably easier. Several third party applications for mobile devices now allow consumers to piggy back data plans, designed for smart phone use, to create a mobile hotspot for use by other devices such as laptops and tablets. However, the data consumption profile of mobile devices used as unauthorized mobile hotspots results in significant carrier revenue leakage from the Joss of authorized hotspot service revenue. Revenue leakage is especially pronounced where unauthorized tethered connections are used on mobile devices having unlimited or high-tiered data plans targeted for smartphone- only data usage. In addition, unauthorized usage of mobile devices as mobile hotspots malces it difficult for enterprises to manage their costs for data usage across their mobile device inventory.
SUMMARY OF THE INVENTION
The present disclosure is directed to managing tethered data traffic over a hotspot network, substantially as shown in and/or described in connection with at least one of the figures, and as set forth more completely in the claims.
BRIEF DESCRIPTION OF THE DRAWINGS
Figure 1A presents an exemplary system for controlling access to a mobile hotspot utilizing a hotspot management application, according to one implementation;
Figure IB presents an exemplary mobile device including a hotspot management application for controlling access to a mobile liotspot, according to one implementation;
Figure 2 presents an exemplary diagram of the architecture of a mobile device including a hotspot management application for controlling access to a mobile hotspot, according to one implementation;
Figure 3 presents an exemplary flowchart illustrating a method for controlling access to a mobile hotspot on a mobile device utilizing a hotspot management application, according to one implementation; and
Figures 4A and 4B show exemplary systems for supporting download, installation, and update of a liotspot management application on a mobile device, according to implementations of the present invention.
DETAILED DESCRIPTION
The following description contains specific information pertaining to implementations in the present disclosure. One skilled in the art will recognize that the present disclosure may be implemented in a manner different from that specifically discussed herein. The drawings in the present application and their accompanying detailed description are directed to merely exemplary implementations. Unless noted otherwise, like or corresponding elements among the figures may be indicated by like or corresponding reference numerals. Moreover, the drawings and illustrations in the present application are generally not to scale, and are not intended to correspond to actual relative dimensions.
Figure 1A presents an exemplary system for controlling access to a mobile hotspot utilizing a hotspot management application, according to one implementation. As shown in Figure 1, system 100 may include mobile device 1 10, tethered device 120, base station 150, and network server 140. for example. Mobile device 1 10 may be any type of mobile device, such as a smartphone, tablet, laptop, personal computer, or personal digital assistant (PDA), for example. Mobile device 1 10 may act as a mobile hotspot for one or more tethered devices, for example tethered device 120. Mobile device 110 may further include a hotspot management application, which provides policy-driven, control over subordinate tethered connections to mobile device 1 10, such as at the kernel level of the operating system of mobile device 1 10. Mobile device 1 10 may communicate with tethered device 120 via tethered connection 112, which may be any IP-based connection, without limitation, such as a USB connection, a Bluetooth connection, a WiFi AP connection, a WiFi direct
connection or an Ethernet connection. Utilizing mobile device 1 10 as a mobile hotspot, tethered device 120 may communicate with base station 150 over wireless wide area network (WW AN) connection 1 14. As will be discussed in greater detail below, the hotspot management application within or otherwise provided to the mobile device 110 may provide policy-driven control over any tethered connections to mobile device 1 10. Thus, the present application provides a way in which a carrier may prevent users from extending data connectivity, via tethering, through the use of non-approved mobile hotspot applications on mobile devices.
Figure IB presents an exemplary mobile device including a hotspot management application for controlling access to a mobile hotspot, according to one implementation. For example, mobile device 1 10 may include display 102, memory 104, processor 106, and communication interfaces 108, for example. Display 102 may be configured to display any communications to or from mobile device 1 30, as required by one or more implementations of the present application. Memory 104 may be configured to store a hotspot management application, as set forth by one or more implementations of the present application, as well as any other information that may be utilized by mobile device 1 10, for example. Processor 106 may be configured to carry out any required calculations, procedures or processes for controlling access to a mobile hotspot on mobile device 1 10, as set forth by one or more implementations of the present application. Finally, communication interfaces 108 may be configured to provide a mobile hotspot by establishing wireless or wired connections to and from mobile device 1 10.
Figure 2 presents an exemplary diagram of the architecture of a mobile device
including a hotspot management application for controlling access to a mobile hotspot, according to one implementation. Mobile device 200 of Figure 2 may include communications interfaces 270 configured to transmit and receive wireless or wired signals in a plurality of formats. Thus, mobile device 200 may include, for example, a wireless wide area network (WWAN) interface 272, a USB interface 274, a Bluetooth interface 276 and a WiFi interface 278, for example. In one implementation, mobile device 200 may directly control each of the communications interfaces 270 such that no data traffic may transfer from one interface to another interface without the proper policy in place.
Device interface 265 may be a software and/or hardware interface allowing communication between communications interfaces 270 and higher-level software layers, for example. Three core modules may allow mobile device 200 to control the WWAN radio and how it is bridged to one or more of the other communications interfaces: update agent 240, rules engine 250, and tethering agent 260.
Update agent 240 is a powerful device management (DM) platform which may communicate with an external DM server supporting common DM types such as the software component management object (SCOMO) and/or the firmware update management object (FUMO), thus allowing remote installation, uninstallation, activation and deactivation of software components on mobile device 1 10, for example. Such a DM server may be shown as server 140 of Figure 1, for example. For the present implementation, the hotspot management application must always be operational on a mobile device. Thus, update agent 240 may include custom extensions allowing the hotspot management application to be automatically updated,
or reinstalled in the event that portions or all of the application are uninstalled, damaged, altered or deleted. Such custom extensions may include the use of an installation bootstrap engine, which may ensure the integrity of the entire hotspot management application by facilitating automatic reinstallation of any missing or damaged portions of the hotspot management application. The installation bootstrap engine may operate to reinstall or update specific modules in the proper locations on mobile device 1 10, for example, rather than the entire hotspot management application when appropriate. The installation bootstrap engine may utilize a difference engine to determine which modules of the hotspot management application are missing, altered or damaged.
Additionally, the installation bootstrap engine may review the hotspot application to ensure all modules are properly installed through the use of a integrity signature approach, such that a run-time computed integrity signature for the hotspot management application will be computed and validated against the pre-shared authentic integrity signature using all necessary modules of the hotspot management application installed and/or present on the mobile device. When the hotspot management application is properly installed on the mobile device, the signature computed by the bootstrap engine will match with the pre-installed authentic integrity signature resident on the device and reported to the server. The computed key information may be sent to the network server occasionally for verification or when requested by the server. Where the network server detects that tethered data traffic is or has recently been active but the particular signature is not received by the mobile device, the network server may determine that the hotspot management application is
not properly installed or has been compromised and initiate a push to the mobile device for immediate application reinstallation. Alternatively, the properly installed hotspot management application may provide the authentic integrity signature as a part of network authentication of the mobile device with the carrier network in general. Thus, each time the mobile device attempts to connect to the carrier network, proper installation of the hotspot management application may be ensured. Where the authentic integrity key is not provided, the network server may initiate a push to the mobile device for immediate application and integrity key reinstallation.
Rules engine 250 may control how communications interfaces 270 are bridged to one another. The operation of rules engine 250 may be based on one or more carrier controlled tethering policies and/or one or more mobile device user controlled tethering policies. For example, a carrier may set a policy for mobile devices that no tethering is allowed without an authorized tethering data plan, or that USB or Bluetooth tethering is allowed, while WiFi-based soft access point tethering is not. Rules engine 250 may determine whether the particular mobile device is signed up for an authorized tethering data plan and may then determine which of the communications interfaces are being utilized to tether another device to the mobile device and apply the appropriate carrier-based policy. Additional examples of such carrier-based policies may include, without limitation, limiting a maximum number of subordinate connections to a mobile device, otherwise limiting or shaping the behavior of subordinate connections to the mobile device, as well as policies concerning redirection to custom web portals or pages upon a detection of an unauthorized tether to the mobile device. Such carrier-based policies may not be
overridden by the mobile device user. According to the specific carrier-based policies in place, rules engine 250 may determine whether the detected data traffic or tethering application is unauthorized, and if so, direct that the data traffic be limited or disabled. Similarly, rules engine 250 may incorporate mobile device user-based policies, which may be applied subsequent to the carrier-based policies. Such user-based policies will be further discussed with regard to hotspot manager 230 below.
Tethering agent 260 may control the actual bridging of one or more of communications interfaces 270 to WW AN interface 272. For example, once rules engine 250 has determined whether tethering another device to the mobile device is appropriate in a current set of circumstances, tethering agent 260 may facilitate the actual connection/disconnection of W WAN interface 272 to/from one or more of USB interface 274, Bluetooth 276, or WiFi interface 278, for example.
Service enabling interface 235 may be a software and/or hardware interface facilitating communication between deeper- level modules, such as update agent 240, rules engine 250 and tethering agent 260, and modules handling a user interface and other high level business and user related functions.
Tethering / hotspot controller 210 may control the user interface used to manage mobile device 200. For example, tethering / hotspot controller 210 may configure aspects such as a service set identifier (SSID), wired equivalent privacy (WEP) security protocols, as well as facilitating the utilization of a central threat database containing a constantly updated listing of applications known to facilitate unauthorized tethering on mobile devices. In this way, known threats together with carrier and user based tethering/hotspot policies may allow mobile device 200 to
determine when an unauthorized third party application is attempting to facilitate tethering.
As will be disclosed in more detail by flowchart 300 of figure 3, once a tethering threat is detected, and after tethering agent 260 has disconnected WWAN interface 272 from the other communications interfaces, data plan manager 220 may facilitate redirecting the user / user device (e.g., tethered device) to a captive portal or other user interface where the user of either the mobile device or the user of the tethered device may be offered a support tethering solution and data plan from the carrier.
Hotspot manager 230 may include features that allow the mobile device user to manage the mobile device as a carrier-authorized hotspot in a number of ways. For example, hotspot manager 230 may provide guest management by allowing for the creation and configuration of guest connections to the mobile device including determining how those connections may be accessed, how often, at what rate, and even what web pages are allowed to be accessed through mobile device 200. In addition, hotspot manager 230 may allow a guest connection that complies with carrier-controlled policies already in place to be created by entering a key into a tethered device connected to mobile device 200, for example. Entering the key may allow the tethered device to access mobile device 200 as a mobile hotspot, for example, subject to any user-controlled tethering policies in place either globally, or specifically tailored to that particular key.
Because tethered data traffic between a mobile device's WWAN interface and one or more of the mobile device's other interfaces, such as USB, Bluetooth, WiFi, or
Ethernet may comprise IP-based packets of data, the hotspot management application may utilize a packet filter driver to facilitate the packet processing required by one or more of the above described modules of the hotspot management application. Such a packet filter driver may be stored in memory of the mobile device, for example, memory 104 of mobile device 1 10. Thus, such a driver may facilitate the detection of tethering activity on the mobile device by rules engine 250, for example. The driver may also facilitate the interception of the tethering activity by tethering agent 260 and redirection of the tethered session via data plan manager 230, for example. As packet data is filtered, such data may be transformed as required to enable tracking of any tethering activity or attempted tethering activity on the mobile device. Such tracking may include, without limitation, identities of tethered devices, identities of applications used for such unauthorized tethering, as well as the frequency, duration and amount of data transferred during each session. Such tracking may accordingly allow carriers to evaluate the efficacy of installed policies as well as apprise mobile device users of how much bandwidth is being tethered and by what tethered devices, for example. Such a driver may additionally facilitate the shaping or limiting of bandwidth as controlled by one or more of the above described modules of the hotspot management application.
Figure 3 presents an exemplary flowchart illustrating a method for controlling access to a mobile hotspot on a mobile device utilizing a hotspot management application, according to one implementation. Action 310 of flowchart 300 includes detecting unauthorized data traffic over a tethered link between the mobile device and a tethered device by analyzing a signature of the unauthorized data traffic. A
signature of any traffic may be acquired through monitoring of any data traffic being transferred between a WW AN connection of the mobile device, such as 2G, 3G, 4G, or 4G LTE for example, and any other IP-based connection, such as USB, Bluetooth, WiFi or Ethernet, for example. Such analysis and detection may be carried out within the mobile device itself, for example. Aspects of such data traffic monitored may include, without limitation, "time to live" (TTL) values, "type of service" (ToS) values, differentiated service code point (DSCP) values, a tunneling type, or any other IP header information associated with the transferred data, for example. Traffic signatures acquired may be further logged with a traffic signature database to dynamically build a collection of traffic signatures, which may be distributed to other hotspot management applications on other mobile devices for accurate identification of unauthorized tethered traffic. Additionally, the traffic signatures may be logged for the purpose of tracking subordinate tethered traffic and to provide a record of data traffic transfers or attempted data traffic transfers to or from a particular mobi le device. Thus, where laws or terms of service prohibit an application from automatically uninstalling or shutting down an unauthorized program, a carrier may still have access to a log of threatening data transfer behavior associated with each mobile device serviced by the carrier.
A signature of unauthorized data traffic over the tethered link may additionally, or alternatively, include determining the identity of an unauthorized third party tethering or hotspot application itself that may be executing on the mobile device. For example, such an application signature may include, without limitation, an MD5/SHA-1 hash of the unauthorized application's binary, an executable filename, or
the brand product name of the application, for example. Such an application signature may be used as a look up into entries in a central threat database, which may contain a constantly updated listing of applications known to facilitate unauthorized tethering on mobile devices. Alternatively, such a threat database may be maintained and continuously updated within the mobile device itself.
Once an unauthorized application and/or unauthorized tethered data traffic has been identified, the application and/or data traffic may be disabled or limited, according to a policy and rules engine within the hotspot management application on the mobile device. The operation of the policy and rules engine may be based on one or more carrier-controlled tethering policies and/or one or more mobile device user- controlled tethering policies. For example, a carrier may set a policy for mobile devices it services that no tethering is allowed on any mobile device without a tethering data plan. In the alternative, the carrier may set a policy that only USB tethering is allowed and that WiFi tethering is not allowed, for example. In such a situation, the rules engine may apply such policies and accordingly determine whether the detected data traffic or tethering application is unauthorized.
Similarly, the operation of the policy and rules engine may be based on one or more tethering policies set by the user of the mobile device. Thus, once the carrier controlled tethering policies have been complied with, a user of a mobile device may control features such as creating and configuring separate guest connections to the mobile device. Such configuration of separate guest connections may include defining the types of connections that may be used for tethering, how often and for how long those connections may be established, caps on the amount of data which
may be transferred, and at what data rates. The user of the mobile device may additionally define a whitelist and/or blacklist of websites that may or may not be accessed using the mobile device as a mobile hotspot or tether.
Continuing to action 320 of flowchart 300, action 320 includes controlling the unauthorized data traffic. For example, if a particular mobile device does not subscribe to a tethered data plan with the carrier, the carrier-controlled "no unauthorized tethering" policy may be applied by the rules engine to determine that tethered data traffic between the mobile device's WWAN interface and WiFi interface is unauthorized, for example. In such a situation, the hotspot management application may disable the unauthorized data traffic by any appropriate method. For example, the hotspot management application may shut down or uninstall the unauthorized third party tethering application. The unauthorized application's traffic may alternatively be directed to a null port within the mobile device, or the data traffic may be otherwise dropped.
In the case where tethered data traffic complies with appropriate carrier- controlled tethering policies but conflicts with user-controlled tethering policies, the hotspot management application may appropriately limit or disable a particular tethered device's traffic through the mobile device. For example, a mobile device user may have set a policy that only a particular tethered device may utilize the mobile device as a hotspot and only at a prescribed data rate or capped at a particular data amount. In such a situation, the rules engine, for example, rules engine 250 of Figure 2, may determine that tethered data transfers at speeds greater than those set by the mobile device user, or data transfers over the capped amount, are to be limited or
disabled. Thus, the present implementation allows for both carrier and user control of the tethering and hotspot capabilities of the mobile device.
Action 330 includes redirecting a user of the tethered device to a captive portal for authorized tethering plan support. Where unauthorized data traffic is disabled or limited, the offending user may be redirected to a captive portal, which may display one or more carrier-authorized tethering data plans to the mobile device user. In addition, or in the alternative, a user of the tethered device may be redirected to a webpage or display, which presents information as to why the tethered connection was disabled or limited. For example, if a tethered device user is authorized to tether to the mobile device but has exceeded a total data transfer limit, a display may inform the tethered device user that the total data transfer limit has been reached and that further data transfer via tether has been disabled or limited. Such a captive portal may be hosted directly on the mobile device, or in the alternative, the captive portal may be hosted remotely on a server.
A common practice to remove limitations on applications and operating systems of mobile devices is a process known as jailbreaking. When a mobile device is jailbroken, custom kernels within the operating system are loaded or limiting portions of the operating system are deleted or altered in an effort to lift or modify the limitations of the mobile device. Jailbreaking allows users to gain root access to the operating system, allowing the mobile device users to download additional applications, extensions, or themes that are not sanctioned by the mobile device manufacturer or carrier.
To protect the integrity of the hotspot management application, an
implementation of the present application includes action 340 of flowchart 300. Action 340 includes detecting when the hotspot management application has been inappropriately modified or is not installed on the mobile device and automatically reinstalling the hotspot management application or appropriate components thereof. For example, update agent 240 of Figure 2 may detect that a portion or all of the hotspot management application has been uninstalled, damaged or deleted through the use of a tampering alert. If a tampering alert is triggered, a request may be sent over the mobile device's WWAN to push back necessary installation components to the mobile device via protocols such as SCOMO or FUMO for immediate update or repair of the hotspot management application. Where the mobile device already contains a software copy of the hotspot management application in local memory, such a copy may be used by the mobile device for immediate repair and/or reinstallation.
The present implementation may additionally include a method of delivery of the hotspot management application to a mobile device. Figures 4A and 4B show exemplary systems for supporting download, installation, and update of a hotspot management application on a mobile device, according to implementations of the present invention.
Figure 4 A shows system 400, which may include mobile device 410, base station 450 and one or more of carrier-hosted server 420 and third-party server 430, for example. The hotspot management application may come preloaded on mobile device 410. However, the present application contemplates solutions in which legacy mobile devices may also obtain automatic access to the hotspot management
application of the present implementation, where the application does not come preloaded on the mobile device. For example, in the event that mobile device 410 does not come preloaded with the hotspot management application, to enable a hotspot a user of mobile device 410 may call carrier customer support, for example, or receive a SMS message providing a link to the hotspot management application download site. Such a download site may be hosted by either carrier-hosted server 420, third-party server 430, such as for example, the Android marketplace, or both. The user of mobile device 410 may follow the link at which time an auto-update software package containing the hotspot management application may be pushed from either carrier-hosted server 420 or third-party server 430 to mobile device 410 for installation. In such an implementation, updates to an already-installed hotspot management application may occur automatically as they become available, or may occur after user acceptance of the update. Once the hotspot management application has been installed and/or updated, the hotspot management application may attempt to verify whether the mobile device 410 is associated with a carrier-authorized hotspot or tethering data plan. If so, mobile hotspot or tethering functionality may be enabled on mobile device 410. If not, the user of mobile device 410 may be redirected to a captive portal for authorized tethering plan support.
Figure 4B shows system 460 which may be similar to system 400 of Figure 4A except further including laptop 470, for example. In system 460, laptop 470 may link to the hotspot management application download site. The user of laptop 470 may follow the link to the hotspot management application download site at which time an auto-update software package containing the hotspot management application may be
pushed from either carrier-hosted server 420 or third-party server 430 to laptop 470. The hotspot management application may then be uploaded to mobile device 410 from laptop 470 via USB connection or any other appropriate wireless or wired connection. Once the hotspot management application has been installed or updated, the hotspot management application may attempt to verify whether the mobile device 410 is associated with a carrier-authorized hotspot or tethering data plan. If so, mobile hotspot or tethering functionality may be enabled on mobile device 410. If not, the user of mobile device 410 may be redirected to a captive portal for authorized tethering plan support. System 460 may additionally allow for a user to control guest management and/or customize the hotspot management application from laptop 470.
Thus, the present application provides for controlling access to a mobile hotspot on a mobile device utilizing a hotspot management application. The hotspot management application may provide kernel-level control over mobile devices configured to provide mobile hotspot or tethering support to subordinate tethered devices. Accordingly, concepts of the present application reduce revenue leakage through the control of unauthorized subordinate tethered connections and redirection to a captive portal for carrier-authorized tethering data plan support. Additionally, concepts of the present application enforce solution integrity through device management, provide policy support for flexible control of tethering policies, and provide for guest and user configuration of tethered and mobile hotspot connections to a mobile device according to both carrier-controlled and mobile device user-controlled policies.
From the above description it is manifest that various techniques can be used
for implementing the concepts described in the present application without departing from the scope of those concepts. Moreover, while the concepts have been described with specific reference to certain implementations, a person of ordinary skill in the ait would recognize that changes can be made in form and detail without departing from the spirit and the scope of those concepts. As such, the described implementations are to be considered in all respects as illustrative and not restrictive. It should also be understood that the present application is not limited to the particular implementations described herein, but many rearrangements, modifications, and substitutions are possible without departing from the scope of the present disclosure.
Claims
What is claimed is: 1. A method for controlling access to a mobile hotspot on a mobile device utilizing a hotspot management application, said method comprising:
detecting unauthorized data traffic over a tethered link between said mobile device and a tethered device by analyzing a signature of said unauthorized data traffic; controlling said unauthorized data traffic;
redirecting a user of said mobile device to a captive portal for authorized tethering plan support.
2. The method of claim 1 , wherein said analyzing said signature of said unauthorized data traffic is carried out utilizing a rules engine.
3. The method of claim 2, wherein said rules engine is based on one or more carrier controlled tethering policies and one or more user controlled tethering policies.
4. The method of claim 1 , wherein said detecting unauthorized data traffic further comprises detecting an unauthorized tethering application on said mobile device utilizing a database of known unauthorized tethering applications.
5. The method of claim 1, further comprising:
detecting when said hotspot management application is not installed on said mobile device; and
automatically reinstalling said hotspot management application on said mobile device.
6. The method of claim 4, further comprising updating said database of known unauthorized tethering applications.
7. The method of claim 1, wherein said mobile device is one of a smartphone, a personal computer, a tablet computer and a personal digital assistant.
8. The method of claim 1 , wherein said tethering link comprises one of a USB connection, a Bluetooth connection, a WiFi AP connection, a WiFi direct connection and an Ethernet connection.
9. The method of claim 1 , further comprising reporting said signature of said unauthorized data traffic to a central server.
10. The method of claim 1 , wherein said captive portal is hosted on said mobile device.
11. A mobile device for controlling access to a mobile hotspot utilizing a hotspot management application, said mobile device comprising:
a processor configured to:
detect unauthorized data traffic over a tethered link between said mobile device and a tethered device by analyzing a signature of said unauthorized data traffic;
control said unauthorized data traffic;
redirect a user of said mobile device to a captive portal for authorized tethering plan support.
12. The mobile device of claim 1 1, wherein said analyzing said signature of said unauthorized data traffic is carried out utilizing a rules engine.
13. The mobile device of claim 12, wherein said rules engine is based on one or more carrier controlled tethering policies and one or more user controlled tethering policies.
14. The mobile device of claim 1 1, wherein said processor is configured to detect an unauthorized tethering application on said mobile device utilizing a database of known unauthorized tethering applications.
15. The mobile device of claim 1 1, wherein said processor is configured to: detect when said hotspot management application is not installed on said mobile device; and
automatically reinstall said hotspot management application on said mobile device.
16. The mobile device of claim 14, wherein said processor is configured to update said database of known unauthorized tethering applications.
17. The mobile device of claim 1 1 , wherein said mobile device is one of a smartphone, a personal computer, a tablet computer and a personal digital assistant.
18. The mobile device of claim 1 1, wherein said tethering link comprises one of a USB connection, a Bluetooth connection, a WiFi AP connection, a WiFi direct connection and an Ethernet connection.
19. The mobile device of claim 1 1 , wherein said processor is configured to report said signature of said unauthorized data traffic to a central server.
20. The mobile device of claim 1 1, wherein said captive portal is hosted on said mobile device.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP12712482.4A EP2687035A1 (en) | 2011-03-18 | 2012-03-16 | Managing tethered data traffic over a hotspot network |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US201161454480P | 2011-03-18 | 2011-03-18 | |
US61/454,480 | 2011-03-18 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2012129113A1 true WO2012129113A1 (en) | 2012-09-27 |
Family
ID=45931028
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/US2012/029507 WO2012129113A1 (en) | 2011-03-18 | 2012-03-16 | Managing tethered data traffic over a hotspot network |
Country Status (3)
Country | Link |
---|---|
US (1) | US8943554B2 (en) |
EP (1) | EP2687035A1 (en) |
WO (1) | WO2012129113A1 (en) |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US9706383B2 (en) | 2013-01-04 | 2017-07-11 | Nokia Technologies Oy | Method, apparatus, and computer program product for configuring a mobile wireless hotspot |
US9755919B2 (en) | 2013-04-22 | 2017-09-05 | Telefonaktiebolaget Lm Ericsson (Publ) | Traffic analysis for HTTP user agent based device category mapping |
Families Citing this family (89)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
ITTO20110284A1 (en) * | 2011-03-29 | 2011-06-28 | Sisvel Technology Srl | COOPERATIVE LOCATION PROCEDURE AND ITS APPARATUSES |
US9558677B2 (en) | 2011-04-08 | 2017-01-31 | Wombat Security Technologies, Inc. | Mock attack cybersecurity training system and methods |
US10749887B2 (en) | 2011-04-08 | 2020-08-18 | Proofpoint, Inc. | Assessing security risks of users in a computing network |
US9824609B2 (en) | 2011-04-08 | 2017-11-21 | Wombat Security Technologies, Inc. | Mock attack cybersecurity training system and methods |
WO2012139127A1 (en) * | 2011-04-08 | 2012-10-11 | Wombat Security Technologies, Inc. | Context-aware training systems, apparatuses, and methods |
US9246710B2 (en) * | 2011-04-30 | 2016-01-26 | Samsung Electronics Co., Ltd. | Method and apparatus for managing internet connection sharing |
JP6035713B2 (en) * | 2011-08-12 | 2016-11-30 | ソニー株式会社 | Information processing apparatus, communication system, and information processing apparatus control method |
US8918843B1 (en) * | 2012-02-03 | 2014-12-23 | Sprint Spectrum L.P. | Detecting unauthorized tethering |
US9204345B1 (en) | 2012-02-22 | 2015-12-01 | Google Inc. | Socially-aware cloud control of network devices |
CN102638726B (en) * | 2012-04-24 | 2016-06-15 | 惠州Tcl移动通信有限公司 | A kind of multimedia streaming method based on Terahertz radio communication and system |
US9465668B1 (en) | 2012-04-30 | 2016-10-11 | Google Inc. | Adaptive ownership and cloud-based configuration and control of network devices |
US9143400B1 (en) * | 2012-05-01 | 2015-09-22 | Google Inc. | Network gateway configuration |
CN102870445B (en) * | 2012-06-20 | 2016-09-28 | 华为技术有限公司 | A kind of identify that network shares the method for behavior, node, mobile terminal and system |
US20140012970A1 (en) * | 2012-07-03 | 2014-01-09 | Research In Motion Limited | Methods and devices for facilitating a download session |
US20140032650A1 (en) * | 2012-07-27 | 2014-01-30 | Novatium Solutions Pvt. Ltd. | System and method for providing network management in user devices |
US9237028B1 (en) * | 2012-08-14 | 2016-01-12 | Sprint Spectrum L.P. | Method and apparatus for generating a tethering alert based on a threshold similarity between incoming data and outgoing data |
US9261989B2 (en) | 2012-09-13 | 2016-02-16 | Google Inc. | Interacting with radial menus for touchscreens |
US20140086179A1 (en) * | 2012-09-21 | 2014-03-27 | Tencent Technology (Shenzhen) Company Limited | Methods, terminals, and systems for facilitating data sharing |
US9203838B2 (en) * | 2012-10-31 | 2015-12-01 | Google Inc. | Providing network access to a device associated with a user account |
US9634726B2 (en) | 2012-11-02 | 2017-04-25 | Google Inc. | Seamless tethering setup between phone and laptop using peer-to-peer mechanisms |
KR20140089622A (en) * | 2012-12-20 | 2014-07-16 | 주식회사 팬택 | Apparatus for local wireless network and method for managing local wireless network group |
US9980114B2 (en) | 2013-03-15 | 2018-05-22 | Elwha Llc | Systems and methods for communication management |
US9713013B2 (en) * | 2013-03-15 | 2017-07-18 | Elwha Llc | Protocols for providing wireless communications connectivity maps |
US9635605B2 (en) | 2013-03-15 | 2017-04-25 | Elwha Llc | Protocols for facilitating broader access in wireless communications |
US9451394B2 (en) | 2012-12-31 | 2016-09-20 | Elwha Llc | Cost-effective mobile connectivity protocols |
US9876762B2 (en) | 2012-12-31 | 2018-01-23 | Elwha Llc | Cost-effective mobile connectivity protocols |
US9781664B2 (en) | 2012-12-31 | 2017-10-03 | Elwha Llc | Cost-effective mobile connectivity protocols |
US20140273935A1 (en) * | 2013-03-15 | 2014-09-18 | Elwha Llc | Protocols for facilitating broader access in wireless communications |
US9832628B2 (en) | 2012-12-31 | 2017-11-28 | Elwha, Llc | Cost-effective mobile connectivity protocols |
US9276936B2 (en) * | 2013-01-29 | 2016-03-01 | Synchronoss Technologies, Inc. | Tethering enforcement device controller and methods thereof |
US20140254499A1 (en) * | 2013-03-11 | 2014-09-11 | Vishwa Hassan | Tethering of mobile wireless devices |
KR102170178B1 (en) * | 2013-03-14 | 2020-10-26 | 삼성전자주식회사 | Method and device for controlling use of external data network via mobile access point |
US9706060B2 (en) | 2013-03-15 | 2017-07-11 | Elwha Llc | Protocols for facilitating broader access in wireless communications |
US9843917B2 (en) | 2013-03-15 | 2017-12-12 | Elwha, Llc | Protocols for facilitating charge-authorized connectivity in wireless communications |
US9706382B2 (en) * | 2013-03-15 | 2017-07-11 | Elwha Llc | Protocols for allocating communication services cost in wireless communications |
US9866706B2 (en) | 2013-03-15 | 2018-01-09 | Elwha Llc | Protocols for facilitating broader access in wireless communications |
US9781554B2 (en) | 2013-03-15 | 2017-10-03 | Elwha Llc | Protocols for facilitating third party authorization for a rooted communication device in wireless communications |
US9813887B2 (en) | 2013-03-15 | 2017-11-07 | Elwha Llc | Protocols for facilitating broader access in wireless communications responsive to charge authorization statuses |
US9693214B2 (en) | 2013-03-15 | 2017-06-27 | Elwha Llc | Protocols for facilitating broader access in wireless communications |
US9807582B2 (en) | 2013-03-15 | 2017-10-31 | Elwha Llc | Protocols for facilitating broader access in wireless communications |
US9596584B2 (en) | 2013-03-15 | 2017-03-14 | Elwha Llc | Protocols for facilitating broader access in wireless communications by conditionally authorizing a charge to an account of a third party |
EP2995169A4 (en) * | 2013-05-10 | 2017-01-04 | Elwha LLC | Dynamic point to point mobile network including intermediate user interface aspects system and method |
US9591692B2 (en) | 2013-05-10 | 2017-03-07 | Elwha Llc | Dynamic point to point mobile network including destination device aspects system and method |
US9832728B2 (en) | 2013-05-10 | 2017-11-28 | Elwha Llc | Dynamic point to point mobile network including origination user interface aspects system and method |
US9763166B2 (en) | 2013-05-10 | 2017-09-12 | Elwha Llc | Dynamic point to point mobile network including communication path monitoring and analysis aspects system and method |
KR102134886B1 (en) | 2013-07-08 | 2020-07-17 | 삼성전자주식회사 | Tethering distribution apparatus, control method thereof, and central mediator |
JP5945735B2 (en) * | 2013-09-02 | 2016-07-05 | パナソニックIpマネジメント株式会社 | Information processing device |
CN104469724A (en) * | 2013-09-22 | 2015-03-25 | ***通信集团四川有限公司 | An emergency communication method and system |
WO2015065063A1 (en) * | 2013-10-30 | 2015-05-07 | Samsung Electronics Co., Ltd. | Method and apparatus to identity verification using asymmetric keys in wireless direct communication network |
US9226141B1 (en) * | 2013-11-04 | 2015-12-29 | Sprint Communications Company L.P. | Identifying unsubscribed tethering in a wireless network |
US20150149614A1 (en) * | 2013-11-27 | 2015-05-28 | T-Mobile Usa, Inc. | Ascertain tethering of device |
US20150188991A1 (en) * | 2013-12-31 | 2015-07-02 | Google Inc. | Simulated tethering of computing devices |
US9980130B2 (en) * | 2014-02-02 | 2018-05-22 | Telefonaktiebolaget Lm Ericsson (Publ) | Session and service control for wireless devices using common subscriber information |
CN103813475B (en) * | 2014-02-20 | 2019-09-24 | 联想(北京)有限公司 | A kind of data transmission method, data capture method and electronic equipment |
US9578588B2 (en) * | 2014-03-27 | 2017-02-21 | Intel IP Corporation | Apparatus, method and system of tethering between a mobile device and a network |
WO2015199594A1 (en) * | 2014-06-26 | 2015-12-30 | Telefonaktiebolaget L M Ericsson (Publ) | Method and network element for scheduling |
US9398029B2 (en) | 2014-08-01 | 2016-07-19 | Wombat Security Technologies, Inc. | Cybersecurity training system with automated application of branded content |
JP6385205B2 (en) * | 2014-09-01 | 2018-09-05 | キヤノン株式会社 | COMMUNICATION DEVICE, COMMUNICATION DEVICE CONTROL METHOD, AND PROGRAM |
US9526032B2 (en) * | 2014-09-26 | 2016-12-20 | Apple Inc. | Network bandwidth sharing for small mobile devices |
CN105530198A (en) * | 2014-10-24 | 2016-04-27 | 中兴通讯股份有限公司 | Access control method and device for mobile terminal |
US9485241B2 (en) * | 2014-11-21 | 2016-11-01 | Sprint Communications Company L.P. | Secure communication paths in data networks with tethered devices |
GB2534388A (en) * | 2015-01-21 | 2016-07-27 | Vodafone Ip Licensing Ltd | Systems and methods for enabling hotspot functionality |
US9980304B2 (en) | 2015-04-03 | 2018-05-22 | Google Llc | Adaptive on-demand tethering |
WO2017024228A1 (en) * | 2015-08-05 | 2017-02-09 | Kenneth Ives-Halperin | Event saturation networking |
US9521606B1 (en) * | 2015-09-22 | 2016-12-13 | Veniam, Inc. | Systems and methods for interfacing with a network of moving things |
US10237416B2 (en) * | 2015-10-16 | 2019-03-19 | Lenovo (Singapore) Pte. Ltd. | Distributed network data usage metering across authorized personal devices |
US20170295600A1 (en) * | 2016-04-11 | 2017-10-12 | Microsoft Technology Licensing, Llc | Tethering Policy for Network Connectivity via a Tethered Connection |
US10237183B2 (en) * | 2016-10-03 | 2019-03-19 | Guavus, Inc. | Detecting tethering in networks |
US10165041B2 (en) * | 2016-10-13 | 2018-12-25 | Equalearning Corp. | System and method for uninterrupted learning |
WO2018103206A1 (en) * | 2016-12-09 | 2018-06-14 | 华为技术有限公司 | Method for establishing hotspot connection, and terminal device |
KR102607647B1 (en) * | 2017-01-24 | 2023-11-30 | 삼성전자주식회사 | Electronic apparatus and tethering connection method thereof |
US10045216B1 (en) * | 2017-05-01 | 2018-08-07 | Sprint Communications Company L.P. | WiFi access point connection protocol adaptation |
US10382921B2 (en) | 2017-09-15 | 2019-08-13 | Veniam, Inc. | Systems and methods for in-vehicle sensing using a captive portal with smart phone data collection in the context of a network of moving things |
CN107766441B (en) * | 2017-09-21 | 2021-11-23 | 北京百度网讯科技有限公司 | Resource update reminding method and device based on artificial intelligence and storage medium |
KR102414927B1 (en) * | 2018-03-21 | 2022-06-30 | 삼성전자 주식회사 | Method and apparatus for authenticating a device using wireless local area network service |
US10965672B2 (en) * | 2018-04-13 | 2021-03-30 | At&T Intellectual Property I, L.P. | Network service control for access to wireless radio networks |
US10834112B2 (en) * | 2018-04-24 | 2020-11-10 | At&T Intellectual Property I, L.P. | Web page spectroscopy |
US10542466B1 (en) | 2018-05-25 | 2020-01-21 | Sprint Communications Company L.P. | Mobile phone authentication in WiFi coverage |
EP4090058B1 (en) * | 2018-06-11 | 2024-05-01 | Telefonaktiebolaget LM Ericsson (publ) | Tethering policy for cellular networks |
KR102648507B1 (en) * | 2018-06-12 | 2024-03-18 | 삼성전자 주식회사 | Electronic device and method for controlling function of relaying wireless lan connection |
CN108600280B (en) * | 2018-08-06 | 2020-11-03 | 连尚(新昌)网络科技有限公司 | Network connection method, equipment and storage medium |
CN109391944B (en) * | 2018-10-31 | 2022-05-20 | 北京小米移动软件有限公司 | Wireless network remarking method and device |
US11030350B2 (en) * | 2018-11-29 | 2021-06-08 | Visa International Service Association | System, method, and apparatus for securely outputting sensitive information |
CN112243256B (en) * | 2019-07-16 | 2023-08-04 | 北京小米移动软件有限公司 | Wireless network sharing method and device, mobile terminal and storage medium |
CN110418345B (en) * | 2019-07-25 | 2022-08-19 | 天翼数字生活科技有限公司 | Identity authentication method and device and computer equipment |
WO2022008089A1 (en) * | 2020-07-08 | 2022-01-13 | Telefonaktiebolaget Lm Ericsson (Publ) | User equipment tethering policy |
KR20220126069A (en) * | 2021-03-08 | 2022-09-15 | 삼성전자주식회사 | Electronic device for providing tethering service and method therefor |
CN114501674B (en) * | 2021-06-10 | 2022-12-30 | 荣耀终端有限公司 | Hotspot connection method, terminal device and storage medium |
US11533244B1 (en) | 2021-07-20 | 2022-12-20 | Charter Communications Operating, Llc. | Identifying a tethered device using TCP error transmissions |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20030035397A1 (en) * | 2001-08-17 | 2003-02-20 | Amit Haller | System, device and computer readable medium for providing networking services on a mobile device |
US20060153122A1 (en) * | 2005-01-13 | 2006-07-13 | Hinman Brian L | Controlling wireless access to a network |
EP1858217A1 (en) * | 2006-05-16 | 2007-11-21 | Koninklijke KPN N.V. | Shared Internet access |
US20100188975A1 (en) * | 2009-01-28 | 2010-07-29 | Gregory G. Raleigh | Verifiable device assisted service policy implementation |
Family Cites Families (16)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6496979B1 (en) * | 1997-10-24 | 2002-12-17 | Microsoft Corporation | System and method for managing application installation for a mobile device |
US7720960B2 (en) * | 2003-03-04 | 2010-05-18 | Cisco Technology, Inc. | Method and apparatus providing prepaid billing for network services using explicit service authorization in an access server |
US7239865B2 (en) * | 2003-07-25 | 2007-07-03 | Qualcomm Incorporated | Proxy authentication for tethered devices |
US8347375B2 (en) * | 2003-10-03 | 2013-01-01 | Enterasys Networks, Inc. | System and method for dynamic distribution of intrusion signatures |
US20060174001A1 (en) * | 2005-01-31 | 2006-08-03 | Shouyu Zhu | Responding to malicious traffic using separate detection and notification methods |
US8782745B2 (en) * | 2006-08-25 | 2014-07-15 | Qwest Communications International Inc. | Detection of unauthorized wireless access points |
US8634796B2 (en) * | 2008-03-14 | 2014-01-21 | William J. Johnson | System and method for location based exchanges of data facilitating distributed location applications |
US8156204B2 (en) * | 2008-05-07 | 2012-04-10 | Chalk Media Service Corp. | Method for enabling bandwidth management for mobile content delivery |
US20100034124A1 (en) * | 2008-08-05 | 2010-02-11 | Qualcomm Incorporated | Tethered data call with continuous application |
US8265607B2 (en) * | 2008-08-07 | 2012-09-11 | Research In Motion Limited | System and method for providing an interactive content portal on a mobile device |
US9351193B2 (en) * | 2009-01-28 | 2016-05-24 | Headwater Partners I Llc | Intermediate networking devices |
US8102783B1 (en) * | 2009-02-04 | 2012-01-24 | Juniper Networks, Inc. | Dynamic monitoring of network traffic |
US20120065871A1 (en) * | 2010-06-23 | 2012-03-15 | Massachusetts Institute Of Technology | System and method for providing road condition and congestion monitoring |
US8537674B2 (en) * | 2010-11-16 | 2013-09-17 | At&T Mobility Ii Llc | Data bundling and fast dormancy based upon interactivity |
US8869307B2 (en) * | 2010-11-19 | 2014-10-21 | Mobile Iron, Inc. | Mobile posture-based policy, remediation and access control for enterprise resources |
US20120166281A1 (en) * | 2010-12-23 | 2012-06-28 | Research In Motion Limited | Method and apparatus for displaying applications on a mobile device |
-
2012
- 2012-03-16 WO PCT/US2012/029507 patent/WO2012129113A1/en unknown
- 2012-03-16 EP EP12712482.4A patent/EP2687035A1/en not_active Withdrawn
- 2012-03-16 US US13/422,881 patent/US8943554B2/en active Active
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20030035397A1 (en) * | 2001-08-17 | 2003-02-20 | Amit Haller | System, device and computer readable medium for providing networking services on a mobile device |
US20060153122A1 (en) * | 2005-01-13 | 2006-07-13 | Hinman Brian L | Controlling wireless access to a network |
EP1858217A1 (en) * | 2006-05-16 | 2007-11-21 | Koninklijke KPN N.V. | Shared Internet access |
US20100188975A1 (en) * | 2009-01-28 | 2010-07-29 | Gregory G. Raleigh | Verifiable device assisted service policy implementation |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US9706383B2 (en) | 2013-01-04 | 2017-07-11 | Nokia Technologies Oy | Method, apparatus, and computer program product for configuring a mobile wireless hotspot |
US9755919B2 (en) | 2013-04-22 | 2017-09-05 | Telefonaktiebolaget Lm Ericsson (Publ) | Traffic analysis for HTTP user agent based device category mapping |
Also Published As
Publication number | Publication date |
---|---|
US20120240197A1 (en) | 2012-09-20 |
EP2687035A1 (en) | 2014-01-22 |
US8943554B2 (en) | 2015-01-27 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US8943554B2 (en) | Managing tethered data traffic over a hotspot network | |
US20230253108A1 (en) | Multi-communication path selection and security system for a medical device | |
US11190939B2 (en) | Field programmable network hub with software defined radio | |
CN109076102B (en) | User equipment container and network slice | |
US9756014B2 (en) | System and method for responding to aggressive behavior associated with wireless devices | |
US8351920B2 (en) | System and method for femtocell management | |
US11490453B2 (en) | Self-organizing device | |
US10268474B2 (en) | Network slice selection in a mobile network | |
US8838804B2 (en) | Securing a network connection by way of an endpoint computing device | |
US8413209B2 (en) | System for enforcing security policies on mobile communications devices | |
US10063995B2 (en) | Control beacons for wireless devices | |
EP2912863B1 (en) | Cost optimization for firmware updates for globally mobile machine-to-machine devices | |
US10826945B1 (en) | Apparatuses, methods and systems of network connectivity management for secure access | |
EP2939458B1 (en) | A system and method for responding to aggressive behavior associated with wireless devices | |
EP2392088B1 (en) | Security techniques for device assisted services | |
US11595819B2 (en) | Secure attestation packages for devices on a wireless network | |
US9819787B2 (en) | Mobile device inhibitor | |
WO2013059870A1 (en) | System and method for maintaining network compliance |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 12712482 Country of ref document: EP Kind code of ref document: A1 |
|
NENP | Non-entry into the national phase |
Ref country code: DE |