Patent No. US9198117 (titled "Network system with common secure wireless message service serving multiple applications on multiple wireless devices") on Mar 24, 2015. The application was issued on Nov 24, 2015.
’117 is related to the field of wireless network messaging and application data delivery. Specifically, it addresses the technical challenge of securely and efficiently routing data from multiple network application servers to specific software processes residing on mobile end-user devices over a wireless data connection.
The underlying idea behind ’117 is a centralized network message server that acts as a secure intermediary between various application servers and a fleet of mobile devices. Instead of each application establishing its own independent connection, the system uses a dedicated device messaging agent on each handset to maintain a single secure tunnel. This agent acts as a local dispatcher, using internal logic to route incoming data to the correct destination process on the device.
The claims of ’117 focus on a network system architecture where a central server receives data requests from multiple application servers, each specifying a target device and a target application. The server packages this data with an application identifier and transmits it over a secure Internet connection to a messaging agent on the mobile device. The agent then performs a mapping function to identify the correct software process and delivers the data using a secure interprocess communication service.
In practice, this invention streamlines how mobile apps receive updates or notifications by offloading the complexity of secure connection management to a specialized agent. By including an application identifier in each message, the system ensures that data is not just delivered to the right device, but is handed off to the specific software process intended to handle it. This creates a robust framework for multi-app data synchronization without requiring every app developer to implement their own secure networking stack.
This approach differs from prior methods that often relied on fragmented, application-specific polling or less secure broadcast mechanisms. By utilizing a secure interprocess communication service local to the device, the invention ensures that data remains protected even after it leaves the network interface. This centralized agent model reduces network overhead and improves device battery life by consolidating multiple application data streams into a single, managed secure connection.
In the late 2000s when ’117 was filed, mobile data consumption was beginning to outpace network capacity at a time when service access was typically implemented using rigid, all-or-nothing billing models. Systems commonly relied on centralized core network infrastructure to manage traffic policies and deep packet inspection, rather than distributing control to the edge. Hardware and software constraints of the era made the granular classification and real-time management of diverse device types—such as e-readers, cameras, and smartphones—non-trivial for service providers seeking to offer differentiated or sponsored access plans.
The disclosed invention represents a meaningful technical advancement through an architectural shift that distributes service policy implementation and billing event capture from the core network directly to the end-user device. By utilizing a device-based service processor in communication with a network-based service controller, the system enables a verifiable and granular monitoring capability that overcomes the technical constraints of traditional centralized traffic shaping. This integration allows for the creation of ambient service profiles and 'bill-by-account' functionalities, enabling specific application or transaction traffic to be partitioned and monetized independently of general data usage, thereby increasing network capacity efficiency and providing refined user-level control.
The patent contains a total of 18 claims, with claim 1 being the sole independent claim. This independent claim is focused on a network system that utilizes a centralized message server and device-side messaging agents to manage secure data connections between multiple network application servers and mobile end-user devices, specifically handling the mapping of application identifiers to software processes via secure interprocess communication. The dependent claims serve to further define the system by specifying features such as data buffering and transmission triggers, encryption and tunneling methods, secure execution environments, bidirectional data flow between devices and servers, and various authentication and authorization protocols.
Definitions of key terms used in the patent claims.
US Latest litigation cases involving this patent.

The dossier documents provide a comprehensive record of the patent's prosecution history - including filings, correspondence, and decisions made by patent offices - and are crucial for understanding the patent's legal journey and any challenges it may have faced during examination.
Get instant alerts for new documents