Approach for QoS control on un-wanted service (e.g. VoIP or Multimedia) over wireless and wireless IP network

Abstract

An apparatus in one example has: at least one access network operatively coupled to an access and data network; and a controller in the access and packet data network, the controller determining access of data flow from the access network through the access and data network. Embodiments allow access or packet data service providers to control which types of services are allowed over their respective access and packet data networks.

1 . An apparatus, comprising:
 at least one access network operatively coupled to an access and data network;   an IP/UDP list of application servers that are operatively coupled to the access and data network; and   a controller in the access and packet data network, the controller determining access of data flow from the access network through the access and data network based on the application servers in the IP/UDP list.   
   
   
       2 . The apparatus according to  claim 1 , wherein a plurality of access networks are operatively coupled to the access and data network. 
   
   
       3 . A method, comprising:
 identifying at least one access network operatively coupled to an access and packet data network;   forming an IP/UDP list of application servers operatively coupled to the access and packet data network; and   one of allowing or denying a flow of packet data from the access network based on the application servers in the IP/UDP list.   
   
   
       4 . The method according to  claim 3 , wherein the method further comprises provisioning static allowed list to block the flow of packet data, the static allowed list being the IP/UDP list. 
   
   
       5 . The apparatus according to  claim 3 , wherein a plurality of access networks are operatively coupled to the access and data network. 
   
   
       6 . The apparatus according to  claim 1 , wherein the apparatus further comprises:
 at least one user equipment operatively coupled to a multiprotocol label switching network;   an active gateway operatively coupled between an access network and the multiprotocol label switching network; and   at least one application server operatively coupled to the multiprotocol label switching network that utilizes a database that has a “static” allowed list in a PDSN (packet data service node) for the application server.   
   
   
       7 . The apparatus according to  claim 6 , wherein the “static” allowed list is provisioned in the access gateway to block flows from the access network. 
   
   
       8 . The apparatus according to  claim 7 , wherein addresses of allowed application servers are provisioned in the allowed list. 
   
   
       9 . The apparatus according to  claim 8 , wherein, once it is determined that a requested application is not provisioned in the access gateway, the access gateway notifies the access network and the respective user equipment releases a respective resource. 
   
   
       10 . The apparatus according to  claim 6 , wherein a plurality of access networks are operatively coupled to the multiprotocol label switching network via respective access gateways. 
   
   
       11 . The apparatus according to  claim 1 , wherein the apparatus further comprises:
 at least one user equipment operatively coupled to an access network;   an active gateway operatively coupled between the access network and a multiprotocol label switching network; and   an application server operatively coupled to the multiprotocol label switching network that utilizes a policy decision function for communication between the user equipment and the application server.   
   
   
       12 . The apparatus according to  claim 11 , wherein a session control with the policy decision function authorizes a quality of service to the access gateway. 
   
   
       13 . The apparatus according to  claim 12 , wherein the apparatus further comprises a default policy implemented in the access gateway that blocks all services until authorized. 
   
   
       14 . The apparatus according to  claim 11 , wherein all services are allowed until occurrence of a timeout, and wherein the apparatus further comprises a policy authorization timer for all services. 
   
   
       15 . The apparatus according to  claim 1 , wherein the apparatus further comprises:
 at least one user equipment operatively coupled to an access network;   an active gateway operatively coupled between the access network and a multiprotocol label switching network; and   at least one application server operatively coupled to the multiprotocol label switching network that authorizes peer to peer service for a flow identified by a predetermined criteria between the user equipment and the application server.   
   
   
       16 . The apparatus according to  claim 15 , wherein the multiprotocol label switching network authorizes peer to peer service for a flow identified by user equipment IP/UDP port. 
   
   
       17 . A method, comprising:
 retrieving a first user equipment IP address/UDP port to a policy decision function, assuming same sending and receiving IP address and/or UDP port;   authorizing peer to peer service for this flow identified by a predetermined criteria;   recognizing peer to peer service for this service by notifying successful authorization to an access gateway; and   enforcing policy from the policy decision function and only allowing the flow with authorized services and blocking other services.   
   
   
       18 . The method according to  claim 17 , wherein the predetermined criteria comprises a second user equipment IP address/UDP port. 
   
   
       19 . A method, comprising:
 retrieving a first user equipment IP address/UDP port to a policy decision function, a sending and receiving being the same for the IP address and/or UDP port;   authorizing peer to peer service for this flow identified by a predetermined criteria;   recognizing peer to peer service for this service by notifying successful authorization to an access gateway; and   enforcing policy from the policy decision function and allowing all flows before a timer expires.   
   
   
       20 . The method according to  claim 19 , wherein the predetermined criteria comprises a second user equipment IP address/UDP port.