Patent ID: 11930366
Assignee: T-MOBILE INNOVATIONS LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 12:
13. A system for suspect device filtering in a wireless communication network, the system comprising:
a data repository; and
an access mobility function, wherein the access mobility function comprises one or more computer components configured to perform a method comprising:
receiving, via a radio access network, a plurality of attach requests from a user device during a predetermined period of time;
determining, by the access mobility function, that the user device is suspect; and
based on the determination that the user device is suspect, communicating an indication from the access mobility function to the data repository that causes the user device to be added to a first suspect device list maintained on the data repository, the data repository being remote from the access mobility function, wherein the first suspect device list is stored on the data repository;
in response to an acknowledgement from the data repository, associating the user device with a second suspect device list stored locally on the access mobility function;
receiving, at the radio access network, a subsequent request for the network service from the user device;
communicating the subsequent request for the network service from the radio access network to the access mobility function; and
determining by the access mobility function, based on a query of the locally stored second suspect device list, that the user device is blacklisted; and
communicating an access denial for the network service from the access mobility function to the user device, via the radio access network, without a subsequent query to the data repository,
wherein determining that the user device is suspect comprises the access mobility function determining that a number of the plurality of requests that have been received by the access mobility function within a predetermined time period exceed a predetermined threshold, and wherein the predetermined threshold and the predetermined time period are modifiably configurable parameters.