Wireless device with application data flow tagging and network stack-implemented network access policy

What is this patent about?

’161 is related to the field of wireless network management, specifically focusing on the granular control of data traffic on end-user devices. As mobile devices increasingly utilize both high-capacity local networks and bandwidth-constrained wide area networks, there is a growing need to manage how individual applications consume data to preserve network capacity and control user costs.

The underlying idea behind ’161 is to move the intelligence of network policy enforcement from the core network directly onto the end-user device. By identifying and tagging specific data flows at the application level, the device can distinguish between different software applications and apply unique access rules to each, such as allowing a critical business app to use cellular data while restricting a high-bandwidth entertainment app to Wi-Fi only.

The claims of ’161 focus on a wireless device equipped with both WWAN and WLAN modems that utilizes an application service interface agent to associate specific data traffic flows with the responsible software application. The device's network stack uses this association to apply application-specific access policies, ensuring that policy instructions for a first application are enforced without affecting the network access of a second application.

In practice, the invention works by monitoring requests made through the network service API and managing them via an IP socket management function. When an application attempts to communicate, the interface agent generates tag information that follows the data flow through the stack. This allows the modem drivers or other stack elements to recognize the source of the traffic and apply the correct throttling, blocking, or routing rules based on the active network connection.

This approach differs from prior solutions that typically relied on coarse, network-side deep packet inspection or device-wide settings that treated all traffic identically. By implementing application-specific control within the device's own communication stack, the system can manage encrypted traffic that network-based tools cannot see and provides a more flexible, user-friendly way to optimize data usage across diverse network environments.