Secure architectures and methods for improving the security of mobile devices are disclosed. Also disclosed are apparatuses and methods to detect and mitigate fraud in device-assisted services implementations.

A system for tracking telephone calls made in response to advertising campaigns in electronic or other media is provided. The system permits an advertiser to associate specific and distinct telephone numbers with associated advertising campaigns. The system further modifies advertiser-provided information in response to the advertising campaign to which a potential customer responds, and includes the associated telephone number in the modified advertiser information. The system processes telephone calls made to the selected telephone numbers, and provides reports to advertisers of call data associated with the respective advertising campaigns.

Disclosed herein are various embodiments for publishing a service offer set to a device agent on an end-user device and for on-device selection of a service. In some embodiments, a network system publishes a service offer set to an end-user device over a wireless access network, receives an offer set user selection from the end-user device, and provisions one or more network functions based on the offer set user selection.

Methods, apparatus, and systems for the process-efficient generation of data records for data communications involving groups or aggregates of user equipment (UE), such as IoT devices, are described. In one illustrative example, for each one of a plurality of UEs associated with a group or aggregation identifier (ID), a request which includes data indicative of a network resource usage event of the UE is received and the data are stored in association with the group or aggregation ID. In response to identifying a predetermined condition, the data indicative of the network resource usage events associated with the group or aggregation ID are aggregated, and a request for generating a data record based on the aggregated data is sent to a data function for generating the data record. The generated data record (e.g. a CDR) may be stored for subsequent retrieval for reporting, analysis, network/communications management, or billing.

Disclosed herein are techniques for telecommunication mediation platforms using a blockchain-based distributed microservice architecture. Upon generation, usage events are assigned a blockchain-based identification, which is used by subsequent mediation microservice processes to enable traceability of a given usage event from endpoint to endpoint in the mediation process. Separate, distributed microservices for file collection, file validation, record validation, record aggregation, and record distribution provide for flexible and finely grained scalability based on where demand surge occurs and what step of the mediation process is experiencing heightened demand. Incoming usage events are ultimately transformed into billing system compatible records corresponding to the appropriate billing accounts for the usage event.

Techniques for distributed charging in digital telecommunications networks are disclosed. In one particular embodiment, the techniques may be realized as a method that includes provisioning a data path that carries a plurality of network flows, receiving a shared usage quota associated with the plurality of network flows, and allocating the shared usage quota among the plurality of network flows. For each network flow among the plurality of network flows, the method includes providing the data path with data indicative of an amount of the shared usage quota allocated to the network flow, configuring the data path to collect metering data associated with the network flow, and configuring the data path to enforce the shared usage quota based on the metering data associated with the network flow and the amount of the shared usage quota allocated to the network flow.

Various methods for a 3GPP defined Charging and Collection Function are employed that may use a microservices approach. The microservice approach may decompose the function of the network elements into component level functions that may be deployed as separate functional elements.

Methods for managing data communications with a secured facility are disclosed herein. In various aspects, the methods include the step of communicating data between a communication device located within the secured facility and an object located external of the secured facility via a communication pathway. The methods include the step of controlling the communicating of the data between the communication device and the object by a vendor included in the communication pathway, and the step of collecting at least portions of data communicated between the communication device, the vendor, and the object by an auditor into an auditor CDR independent of the vendor, the auditor being in communication with the communication pathway. Related apparatus and compositions of matter are also disclosed herein.

A computer-implemented method includes: receiving, using a processor, multiple data session records (DSRs); storing the multiple DSRs in a memory communicatively coupled to the processor; analyzing, using the processor, the stored multiple DSRs for temporal and spatial data; and determining, using the processor, quality degradation by using the temporal and spatial data for the stored multiple DSRs.

A system and method for discovering Internet Protocol (IP) network address and port translation bindings is disclosed. According to one embodiment, a system for creating IP data records, includes a carrier grade network address and port translation (CGNAPT) node in communication with a private network on an internal side and a public network on an external side. The system further includes a private Ethernet span port disposed on the internal side of the CGNAPT node that receives packet streams traversing the CGNAPT node. A public Ethernet span port is disposed on the external side of the CGNAPT node that receives packet streams traversing the CGNAPT node. The private Ethernet span port and the public Ethernet span port copy packet streams traversing the CGNAPT node and deliver the copied packet streams to a deep packet inspection host.