Patent Description:
Currently in operations support system (OSS) / business support system (BSS), bandwidth throttling is performed using policy regulation mechanisms provided by interaction between a Policy and Charging Enforcement Function (PCEF), an Online Charging System (OCS), and a Policy and Charging Rules Function (PCRF).

Patent Application Publication No. <CIT>, describes a method for use by a mobile device for conducting multi-user interactions on the device using biometric authentication which involves performing requested actions using a software application.

<CIT>, describes controlling service traffic in a communication network.

<CIT>relates to a network anti-addiction system for teenagers, which is characterized in that it is composed of three parts: a network policy management unit responsible for data storage of user information, a policy service setting unit, and an edge collection control unit set on the server side.

<CIT> relates to a method for selecting Policy and Charging Rules Function (PCRF) entity and the method includes that a Diameter Routing Agent (DRA) selects the same PCRF entity for at least two users sharing the subscription information. The same PCRF entity is ensured to be selected for all the users sharing the subscription information, thus preventing the policy and charging control from confliction.

Policy regulations in current communication networks are based on a subscription identifier linked to a device (e.g., a device's Mobile Station International Subscriber Directory Number (MSISDN)), rather than being based on a user identifier linked to the person actually using the device. This prevents implementation of polices at a user level (i.e., not at the subscription level). For example, if two users share the same device (e.g., a parent and a child), a single policy will apply to both users. This is disadvantageous because, for example, there could be some content that the child's parent does not want the child to be able to access when the child is using the device. As another example, the parent may want to place limits on whom the child may call or text using the device and/or place limits on how long the child can use the device in a given day (e.g., <NUM> minutes a day). Some methods of content blocking exist, but these are performed at the application level, not at the network level.

Embodiments disclosed herein overcome these disadvantages. In one aspect, there is provided a method performed by a policy function for implementing user defined policies in a communications network. In one embodiment, the method includes the policy function (PF) receiving a policy information request comprising a subscription identifier, SID, identifying a subscription, where a set of two or more policies are linked to the SID and one of the policies included in the set of policies is set as an active policy for the subscription and where each policy is associated with a different user identifier, UID. The method includes the policy function determining, after receiving the policy information request comprising the SID, the policy that is set as the active policy for the subscription identified by the SID. The method includes the policy function obtaining the active policy. The method includes the policy function transmitting, in response to the policy information request, a policy information response comprising the obtained active policy. The method includes that the user defined policies offer user specific policies and comprise user specific service authorization under the subscription in the communication network. The method includes the step of determining the policy that is set as the active policy comprises determining a UID that is set as an active UID for the subscription were determining the UID that is set as the active UID includes parsing the policy information request to obtain the active UID. The method includes receiving a first request to register a particular user, the request comprising the SID and a particular UID assigned to the user, and after receiving the first request, adding the particular UID to a set of UIDs linked with the SID. The method includes receiving a second request to set a policy for the particular user, the request comprising the SID, the particular UID assigned to the user, and a particular user defined policy for the particular user, and after receiving the second request, storing the particular user defined policy so that the particular user defined policy is linked with the particular UID.

The above described embodiment is advantageous in that it provides a way of realizing dynamic policy allocation based on the end user, rather than based on the device. That is, the embodiment provides the following significant advantages: (<NUM>) the application of user based policy restrictions in the network; (<NUM>) enablement of instant end-user specific policy enforcements; and (<NUM>) enhanced scope for granular policy control.

In some embodiments, the policy function adds, after receiving the first request, the particular UID to a set of UIDs linked with the SID.

In some embodiments, the method includes a further step in which the policy function receives a first user service access request transmitted by a user terminal, the first service request comprising the particular UID and the SID. In such embodiments, the policy function sets, after receiving the first user service access request, the particular UID as the active UID for the subscription.

<FIG> illustrates a network <NUM> according to some embodiments. As shown in <FIG>, the network <NUM> comprises a user equipment (UE) <NUM> (i.e., any communication device, mobile or stationary), a policy function (PF) <NUM>, a policy enforcement function (PEF) <NUM>, and a service provider <NUM> in communication with the PEF <NUM> through a network <NUM> (e.g., an Internet Protocol (IP) network such as the Internet). In some embodiments, the UE <NUM> may comprise a UAP client <NUM>. The UAP client <NUM> may be an operator provided application which allows a subscription owner to register as a master subscriber for a subscription. While only one service provider <NUM> is shown in <FIG>, there may be more than one service providers in the network <NUM>. In some embodiments, one or more interfaces <NUM> between the PF <NUM> and the PEF <NUM> may be used for charging interrogation and/or policy interrogation. In some embodiments, the PEF <NUM> may comprise a PCEF.

As shown in FIG. <NUM>, the PF <NUM> may comprise a PCRF <NUM>, a OCS <NUM>, and a UAP server <NUM>. In some embodiments, an interface <NUM> between the PCRF <NUM> and the OCS <NUM> may be used to exchange subscription information. In some embodiments, the UAP server <NUM> is a component of OCS <NUM>. In some embodiments, the UAP server <NUM> may be a component of the UE <NUM>. An embodiment of OCS <NUM> is illustrated in further detail in FIG. The OCS <NUM> may be configured to: (<NUM>) maintain a list of end-users eligible to consume services under a subscription, (<NUM>) maintain each of the end-user's credentials to control service access under the subscription, and (<NUM>) control service access and usage based on the end-user accessing the subscription for a given charging and policy session.

In some embodiments, the UAP client <NUM> allows the master subscriber to add end-users to the subscription. In some embodiments, identification credentials for the end-user are also recorded when adding an end-user. In some embodiments, the master subscriber may allow and/or restrict service access for the end-user under the subscription. Additionally, the UAP client <NUM> may capture end-user identification whenever service consumption is triggered for a subscription.

In some embodiments, the UAP server <NUM> may be configured to: (<NUM>) handle requests to add and/or delete end-users for the subscription, (<NUM>) handle requests to allow and/or disallow services for an end-user under the subscription, and (<NUM>) share the captured end-user credentials to the PF <NUM> (e.g., the OCS <NUM>) whenever a service usage is triggered for the subscription.

An embodiment of implementing policy regulations based on a user using the UE <NUM> is explained as follows.

Step <NUM>: the UAP client <NUM> installed on the UE <NUM> obtains end-user credentials.

Step <NUM>: The obtained end-user credentials are sent to the UAP server <NUM> which maps the credentials to an identifier (ID) for the end-user that the OCS <NUM> can understand.

Step <NUM>: The end-user ID is sent to the OCS <NUM>. In some embodiments, the end-user ID is sent to the OCS <NUM> through a REST web service request or a diameter interface.

Step <NUM>: The OCS <NUM> maintains a list of user IDs to policies mapping. The OCS <NUM> uses this list to control the usage for a given policy session, i.e., select the right policy based on the received end-user ID.

Step <NUM>: The OCS <NUM> receives a policy session request comprising a subscription ID. In some embodiments, the policy session request is received through an ESy interface. Based on the received policy session request, the OCS <NUM> may share information regarding the selected policy for the end-user with the PCRF <NUM>. In some embodiments, the selected policy details may be included in a spending notification request (SNR) to the PCRF <NUM>.

Step <NUM>: When the OCS <NUM> shares the selected policy information with the PCRF <NUM> (e.g., including the selected policy information in a SNR to the PCRF <NUM>), the PCRF <NUM> transmits the selected policy information to the PCEF. In some embodiments, the PCRF <NUM> sends the selected policy information to the PCEF through a Gx interface. Upon receipt of the request, the PCEF throttles the bandwidth according to the selected policy information.

The following examples demonstrate practical use cases for the user based policy control according to some embodiments disclosed herein.

As a first example, the embodiments provide parental guidance. In the first example, a parent A and a child B are the users of a mobile phone. A profile for the parent A may be created with no restrictions. A profile for the child B may be created with a profile of "no social media from date XX to date YY. " For example, the child B profile may have the restriction of no social media from April <NUM>, <NUM> to April <NUM>, <NUM>.

In the first example, the details of the profiles (i.e., the parent A profile and the child B profile) are uploaded to the UAP server. Accordingly, no restrictions will be applied when parent A is accessing the device as no new policy profiles will be updated from the UAP server to the OCS <NUM>. In contrast, when child B accesses the device, all social media will be blocked between April <NUM>, <NUM> and April <NUM>, <NUM>, as the UAP server will now send a policy profile identifier to the OCS <NUM> to which the OCS <NUM> then updates the policy rule for child B.

As a second example, the embodiments provide public data and voice availability. In the second example, devices, such as electronic tablets, interactive televisions, digital boards, among others, with <NUM> and/or <NUM> connectivity are installed in common areas in a community and a resident of the community may want to access the device for a particular service.

In such instances, a user may first use the UAP client for authentication as a member of the community. Then, the user's policy configurations will automatically be mapped to the session the user has instantiated from the device. The user may be provided with different policy privileges and services through the device depending on the user's level within the community. The user may logout once finished using the common device.

4A-4B illustrate flow diagrams for registering a user for the user based policy restrictions according to some embodiments. In some embodiments, the UAP client is installed on the UE <NUM>. The UAP client <NUM> supports registration of users and user service access control under a registered subscription. In some embodiments, a user access proxy (UAP) server <NUM> hosts the UAP client <NUM> and serves requests from the UAP client <NUM>. The UAP server <NUM> supports registration of users and their service access towards the PF <NUM>. The PF <NUM> maintains policy, service control, and accounting information for the subscription. The PF <NUM> also maintains users of the subscription and user specific policies and service accesses.

4A is a flow diagram illustrating a process <NUM> according to some embodiments. In some embodiments, the process <NUM> is directed to registering a master subscriber. In such embodiments, in step <NUM>, the UE <NUM> sends a request to the UAP server <NUM>. In some embodiments, the request comprises a request to register a master subscriber. In such embodiments, the request comprises a subscription ID, a user ID, and master subscriber credentials. In step <NUM>, the UAP server <NUM> transmits a register user request to the PF <NUM>. In some embodiments, the UAP server <NUM> transmits the register user request to the OCS <NUM>. In some embodiments, the register user request comprises the subscription ID, the user ID, an indication of the administrator, and the master subscriber credentials. For example, the subscription ID may be "+<NUM>," the user ID may be "User <NUM>" and an administrator indication flag may indicate "true. " In step <NUM>, the PF <NUM> registers the user. In some embodiments, the PF <NUM> registers the master subscriber to the subscription in step <NUM>. For example, the PF <NUM> registers the master subscriber to the subscription "+<NUM>. " In step <NUM>, the PF <NUM> updates the subscription. In some embodiments, the PF <NUM> adds the master subscriber credentials to the subscription in step <NUM>. For example, the master subscriber credentials are added to the subscription as an administrator. In step <NUM>, the PF <NUM> sends a register user answer to the UAP server <NUM>. In some embodiments, the register user answer comprises an indication that the registration was successful. In step <NUM>, the UAP server <NUM> sends a message to the UE <NUM> comprising an indication that the registration was successful.

In other embodiments, the process <NUM> is directed to registering a user to the subscription. In such embodiments, in step <NUM>, the UE <NUM> sends a request to the UAP server <NUM> which comprises a request to register a subscription user. The request to register the subscription user may comprise a subscription ID, a user ID, and user credentials according to some embodiments. In step <NUM>, the UAP server <NUM> transmits a register user request to the PF 104which comprises the subscription ID, the user ID, an indication of the administrator, and the user credentials. For example, the subscription ID may be "+<NUM>," the user ID may be "User <NUM>" and an administrator indication flag may indicate "negative. " In step <NUM>, the PF <NUM> registers the user. In some embodiments, the PF <NUM> registers the user to the subscription in step <NUM>. For example, the PF <NUM> registers the user ID "User1234" to the subscription "+<NUM>. " In step <NUM>, the PF <NUM> updates the subscription. In some embodiments, the PF 104adds the user credentials to the subscription in step <NUM>. In step <NUM>, the PF <NUM> sends a register user answer to the UAP server <NUM>. In some embodiments, the register user answer comprises an indication that the registration was successful. In step <NUM>, the UAP server <NUM> sends an answer to the UE <NUM> comprising the indication that the registration was successful.

4B is a flow diagram illustrating a process <NUM> according to some embodiments. In some embodiments, the process <NUM> is directed to controlling user service access. In step <NUM>, the UE <NUM> may request subscription information. For example, the UE <NUM> may transmit a request to fetch available services and policies applicable for the user according to the subscription. In step <NUM>, the UAP server <NUM> transmits a request to obtain the subscription information. In some embodiments, the request may comprise a subscription ID. In step <NUM>, the PF <NUM> transmits a message comprising the subscription information associated with the subscription ID. In some embodiments, the message may comprise the subscription ID and subscription information. In step <NUM>, the UAP server <NUM> transmits the subscription information to the UE <NUM>. In step <NUM>, the UE <NUM> sets the user service access. In some embodiments, the UE <NUM> may capture the subscription ID, the user ID, and service access policies selected for the user. In step <NUM>, the UAP server <NUM> transmits a user service access request. In some embodiments, the user service access request comprises an indication of a requested action, the subscription ID, the user ID, and the selected service access policies. For example, the action indication may indicate "set," the subscription ID may be "+<NUM>" and the user ID may be "User1234. " In step <NUM>, the PF <NUM> sets service access controls for the user. In some embodiments, the PF <NUM> sets service access controls for the user associated with the user ID (e.g., "User1234") under the subscription (e.g.,"+<NUM>"). In step <NUM>, the PF <NUM> sends a user service access answer to the UAP server <NUM>. In some embodiments, the user service access answer comprises an indication that the set up was successful. In step <NUM>, the UAP server <NUM> sends a message to the UE <NUM> comprising an indication that the service access control for the user has been set successfully.

<NUM> is a flow diagram illustrating a process <NUM> according to some embodiments. In some embodiments, the process <NUM> is directed to a service session in accordance to the user based policy restrictions. In step <NUM>, a user using the UE <NUM> controls a user policy. In some embodiments, the UE <NUM> captures a subscription ID, a user ID, and user credentials in step <NUM>. In step <NUM>, the UAP server <NUM> transmits a user policy control request. In some embodiments, the user policy control request comprises an indication of a requested action, the subscription ID, and the user ID. For example, the action indication may indicate "access," the subscription ID may be "+<NUM>," and the user ID may be "User1234. " Optionally, the user policy control request may further comprise the captured user credentials. In step <NUM>, the OCS <NUM> sets the user associated with the received user ID as "active" for the subscription associated with the subscription ID. For example, the OCS <NUM> may set user "User <NUM>" as the active user for the subscription associated with the subscription ID "+<NUM>. " In some embodiments, if a previous user service access request has not been received prior to step <NUM>, a default user is set as the active user for the subscription associated with the subscription ID until the OCS <NUM> receives a user service access request. For example, when the OCS <NUM> has not received any user access information, the OCS <NUM> sets a default user (e.g., administrator) as the active user for the subscription associated with the subscription ID "+<NUM>. " In step <NUM>, the OCS <NUM> sends a user policy control answer to the UAP server <NUM>. In some embodiments, the user policy control answer comprises an indication that the active user has been set successfully. In step <NUM>, the UAP server <NUM> sends a message to the UE <NUM> comprising an indication that the active user has been set successfully.

In step <NUM>, the UE102 establishes a connection with the PCEF <NUM> via a radio access network. For example, in one embodiment, the UE <NUM> establishes an indirect connection to the PCEF <NUM>.

In step <NUM>, the PCEF <NUM> transmits a policy session request to the PCRF <NUM>. In some embodiments, the PCEF <NUM> uses a Gx interface to transmit the policy session request. In step <NUM>, the PCRF <NUM> transmits a subscription policy information request to the OCS <NUM>. In some embodiments, the PCRF <NUM> uses a ESy interface to transmit the subscription policy information request. The subscription policy information request may comprise a subscription ID. In step <NUM>, the OCS <NUM> shares policy information with the PCRF <NUM>. In some embodiments, the OCS <NUM> shares policy information applicable for an active user for the subscription associated with the subscription ID. For example, the OCS <NUM> may share policy information applicable for a user (e.g., "User1234") under the subscription associated with the subscription ID (e.g., "+<NUM>"). In step <NUM>, the OCS <NUM> transmits a subscription policy information answer to the PCRF <NUM>. In some embodiments, the subscription policy information answer comprises the policy information applicable for the active user. In step <NUM>, the PCRF <NUM> transmits a policy session request to the PCEF <NUM>. In step <NUM>, the PCEF <NUM> transmits a charging session request to the OCS <NUM>. In some embodiments, the PCEF <NUM> uses a Gy interface to transmit the charging session request. In step <NUM>, the OCS <NUM> authorizes services and/or credits according to the services and policies provisioned for the active user. In step <NUM>, the OCS <NUM> transmits a charging session answer to the PCEF <NUM>, to which the PCEF <NUM> allows a data session for the user in step <NUM>.

<NUM> illustrates a process <NUM> according to some embodiments. In some embodiments, the process <NUM> is directed to applying changes in a service session while the service session is ongoing in accordance to the user based policy restrictions. In some embodiments, the process <NUM> may be performed after the service session described in process <NUM>.

During an ongoing data session, a second user using the UE <NUM> controls a user policy in step <NUM>. In some embodiments, the UE <NUM> captures a subscription ID, a second user ID, and second user credentials in step <NUM>. In step <NUM>, the UAP server <NUM> transmits a user policy control request. In some embodiments, the user policy control request comprises an indication of a requested action, the subscription ID, and the second user ID. For example, the action indication may indicate "access," the subscription ID may be "+<NUM>," and the second user ID may be "UserXXXX. " Optionally, the user policy control request may further comprise the second user credentials. In step <NUM>, the OCS <NUM> sets the user associated with the received second user ID as "active" for the subscription associated with the subscription ID. For example, the OCS <NUM> may set user "UserXXXX" as the active user for the subscription associated with the subscription ID "+<NUM>. " As another example, the OCS <NUM> may replace a first user associated with user ID "User1234" with the second user associated with the user ID "UserXXXX" as the active user for the subscription. In step <NUM>, the OCS <NUM> sends a user policy control answer to the UAP server <NUM>. In some embodiments, the user policy control answer comprises an indication that the active user has been set successfully. In step <NUM>, the UAP server <NUM> sends a message to the UE <NUM> comprising an indication that the active user has been set successfully.

In step <NUM>, the OCS <NUM> updates service authorization and policies applicable for the second user. In step <NUM>, the PCRF <NUM> transmits a subscriber information change notification to the OCS <NUM>. In some embodiments, the PCRF <NUM> uses the ESy interface to transmit the subscriber information change notification. In step <NUM>, the PCRF <NUM> transmits a re-authorize policy session message to the PCEF <NUM>. In some embodiments, the PCRF <NUM> uses the Gx interface to send the re-authorize policy session message. In step <NUM>, the PCEF <NUM> transmits a re-authorize charging session message to the OCS <NUM>. In some embodiments, the PCEF <NUM> uses the Gy interface to send the re-authorize charging session message. In step <NUM>, the OCS <NUM> authorizes the service and credit for the second user. For example, the OCS <NUM> grants service authorization and credit authorization for the second user associated with the second user ID "UserXXXX. " In step <NUM>, the charging session is updated and the PCEF <NUM> enforces the updated charging service and policy information on the ongoing data session in step <NUM>.

<NUM> is a flow chart illustrating a process <NUM>, according to some embodiments, that is performed by a PF <NUM> for implementing user defined policies in a communication network. Process <NUM> may begin with step s702 in which the PF <NUM> receives a policy information request comprising a subscription identifier, SID, identifying a subscription. In some embodiments, a set of two or more policies are linked to the SID and one of the policies included in the set of policies is set as an active policy for the subscription where each policy is associated with a different user identifier, UID. In step s704, the PF <NUM> determines, after receiving the policy information request comprising the SID, the policy that is set as the active policy for the subscription identified by the SID. In step s706, the PF <NUM> obtains the active policy. In step s708, the PF <NUM> transmits, in response to the policy information request, a policy information response comprising the obtained active policy. In some embodiments, the user defined policies offer user specific policies and comprise user specific service authorization under the subscription in the communication network. In some embodiments, the step of determining the policy that is set as the active policy comprises determining a UID that is set as an active UID for the subscription.

In some embodiments, the process <NUM> includes a further step in which the RF node receives a first request to register a particular user, the request comprising the SID and a particular UID assigned to the user. In such embodiments, the RF node adds, after receiving the first request, the particular UID to a set of UIDs linked with the SID.

In some embodiments, the process <NUM> includes a further step in which the RF node receives a second request to set a policy for the particular user, the request comprising the SID, the particular UID assigned to the user, and a particular user defined policy for the particular user. In such embodiments, the RF node stores, after receiving the second request, the particular user defined policy so that the particular user defined policy is linked with the particular UID.

In some embodiments, the process <NUM> includes a further step in which the RF node receives a first user service access request transmitted by a user terminal, the first service request comprising the particular UID and the SID. In such embodiments, the RF node sets, after receiving the first user service access request, the particular UID as the active UID for the subscription.

In some embodiments, the policy information request may include the active UID. In some embodiments, determining the UID that is set as the active UID includes parsing the policy information request to obtain the active UID. In some embodiments, determining the UID that is set as the active UID includes using the SID to access a database and obtain the active UID.

In some embodiments, the process <NUM> includes an additional step in which an enforcement function node (e.g., PEF <NUM>) receives a service request comprising the active UID and the SID.

<NUM> is a block diagram of node <NUM> according to some embodiments. As shown in FIG. <NUM>, node <NUM> may comprise: a processing circuit (PC) <NUM>, which may include one or more processors (P) <NUM> (e.g., a general purpose microprocessor and/or one or more other processors, such as an application specific integrated circuit (ASIC), field-programmable gate arrays (FPGAs), and the like); a network interface <NUM> comprising a transmitter (Tx) <NUM> and a receiver (Rx) <NUM> for enabling node <NUM> to transmit data to and receive data from other nodes connected to a network <NUM> (e.g., an Internet Protocol (IP) network) to which network interface <NUM> is connected; circuitry <NUM> (e.g., radio transceiver circuitry comprising an Rx <NUM> and a Tx <NUM>) coupled to an antenna system <NUM> for wireless communication with UEs); and local storage unit (a. , "data storage system") <NUM>, which may include one or more non-volatile storage devices and/or one or more volatile storage devices (e.g., random access memory (RAM)). In embodiments where PC <NUM> includes a programmable processor, a computer program product (CPP) <NUM> may be provided. CPP <NUM> includes a computer readable medium (CRM) <NUM> storing a computer program (CP) <NUM> comprising computer readable instructions (CRI) <NUM>. CRM <NUM> may be a non-transitory computer readable medium, such as, but not limited, to magnetic media (e.g., a hard disk), optical media, memory devices (e.g., random access memory, flash memory), and the like. In some embodiments, the CRI <NUM> of computer program <NUM> is configured such that when executed by data processing apparatus <NUM>, the CRI causes node <NUM> to perform steps described herein (e.g., steps described herein with reference to the flow charts and/or message flow diagrams). In other embodiments, node <NUM> may be configured to perform steps described herein without the need for code. That is, for example, PC <NUM> may consist merely of one or more ASICs. Hence, the features of the embodiments described herein may be implemented in hardware and/or software. In some embodiments, the node <NUM> is configured to implement the functions of the PF <NUM>.

<NUM> is a diagram showing functional units of PF <NUM> according to some embodiments. As shown in FIG. <NUM>, PF <NUM> includes a receiving unit <NUM> for receiving a policy information request comprising a subscription identifier, SID, identifying a subscription, where a set of two or more policies are linked to the SID and one of the policies included in the set of policies is set as an active policy for the subscription; a determining unit <NUM> for determining after receiving the policy information request comprising the SID, the policy that is set as the active policy for the subscription identified by the SID; an obtaining unit <NUM> for obtaining the active policy; and a transmitting unit <NUM> for transmitting, in response to the policy information request, a policy information response comprising the obtained active policy.

is a flow chart illustrating a process <NUM>, according to a non claimed example, for implementing user defined policies in a communication network. Process <NUM> may begin with step s1002 a user access proxy, UAP, server detects an active user for a subscription. In step s1004, the UAP server obtains a policy associated with the active user. In step s1006, the UAP server transmits the policy with a subscription identifier, SID, identifying the subscription. In step s1008, an online charging system, OCS, receives the policy with the SID. In step s1010, the OCS replaces an existing policy for the subscription associated with the SID with the received policy. In some non claimed examples, the process <NUM> includes a further step in which the OCS sets the received policy as an active policy for the active user.

<NUM> is a diagram showing functional units of PF <NUM> according to a non claimed example. As shown in FIG. <NUM>, PF <NUM> includes a detecting unit <NUM> for detecting an active user for a subscription; a first obtaining unit <NUM> for obtaining a policy associated with the active user; a providing unit <NUM> for providing the policy with a subscription identifier, SID, identifying the subscription; a second obtaining unit <NUM> for receiving the policy with the SID; and a replacing unit <NUM> for replacing an existing policy for the subscription associated with the SID with the received policy.

Also, while various embodiments of the present disclosure are described herein, it should be understood that they have been presented by way of example only, and not limitation. Thus, the breadth and scope of the present disclosure should not be limited by any of the above-described exemplary embodiments but is defined by the claims.

Claim 1:
A method performed by a network node (<NUM>) for implementing user defined policies in a communication network, the method comprising:
Receiving, from a device, a policy information request comprising a subscription identifier, SID, identifying a subscription, wherein a set of two or more policies are linked to the SID and one of the policies included in the set of policies is set as an active policy for the subscription, and wherein each policy is associated with a different user identifier, UID;
after receiving the policy information request comprising the SID, determining the policy that is set as the active policy for the subscription identified by the SID;
obtaining the active policy;
in response to the policy information request, transmitting a policy information response comprising the obtained active policy wherein determining the policy that is set as the active policy comprises determining a UID that is set as an active UID for the subscription, and wherein determining the UID that is set as the active UID comprises parsing the policy information request to obtain the active UID;
receiving a first request to register a particular user, the request comprising the SID and a particular UID assigned to the user;
after receiving the first request, adding the particular UID to a set of UIDs linked with the SID;
receiving a second request to set a policy for the particular user, the request comprising the SID, the particular UID assigned to the user, and a particular user defined policy for the particular user; and
after receiving the second request, storing the particular user defined policy so that the particular user defined policy is linked with the particular UID.