Patent ID: 8695073

Claim:
A method performed by a service controller communicatively coupled to an end-user device over a wireless access network and to a network system, the method comprising: obtaining one or more credentials from the end-user device, the one or more credentials identifying at least an aspect of the end-user device; determining, using at least a first portion of the one or more credentials, that a user of the end-user device has not selected a service plan for the end-user device; identifying one or more candidate service plans, wherein at least one of the one or more candidate service plans is identified based, at least in part, on at least a second portion of the one or more credentials or the first portion of the one or more credentials or a combination thereof; establishing a secure communication link between the service controller and a service processor of the end-user device over an ambient services connection of the wireless access network, the ambient services connection enabling the user of the end-user device at least to select one of the one or more candidate service plans to be a first service plan for the end-user device; sending, to the service processor over the secure communication link, information about the one or more candidate service plans; and obtaining, from the service processor over the secure communication link, a response to the information about the one or more candidate service plans, the response identifying the first service plan as selected by the user of the end-user device.