Patent ID: 8327435

Claim:
A platform configured as a node of a communications network for controlling the network layer (Layer 3) service through the communications network, the platform comprising: an interface for communication through the network; a processor, coupled to the interface; a storage device accessible by the processor; and programming stored in the storage device for the processor, wherein execution of the programming by the processor configures the platform to perform functions, including functions to: receive, through the communications network, a message relating to a request for registration of an access terminal device for network layer (Layer 3) service through the communications network, the message including data regarding a security agent that is enabled in the access terminal device, wherein the security agent is configured to protect the communications network by blocking malicious traffic generated by an application program in the access terminal device from entering the communications network from the access terminal device; determine adequacy of the security agent to protect the communications network against malicious traffic in response to the data regarding the enabled security agent; grant the requested registration for network layer (Layer 3) service for the access terminal device through the communications network, in response to the determined adequacy of the enabled security agent to protect the communications network against malicious traffic, and receive a communication through the communications network, responsive to grant of the requested registration by the node of the communications network upon determining the adequacy of the security agent to protect the communications network against malicious traffic; wherein during the communication through the network, the security agent is executed to: monitor activity of the access terminal device and identify traffic generated by the application program in the access terminal device as malicious, and prevent the application program in the access terminal device from sending the identified malicious traffic from the access terminal device into the communications network.