Abstract: A non-transitory computer readable storage medium has instructions executed by a processor to access a list of Wi-Fi networks available to a user device. User network activity is classified. It is determined that there is a new Wi-Fi network for the user device to initiate a connection attempt. In the event of an existing licensed spectrum wireless network data connection on the user device, licensed spectrum wireless network data connection analytics are collected and an attempt is made to transition to the new Wi-Fi network to produce either a failed transition to the new Wi-Fi network or a successful transition to the new Wi-Fi network. In the event of an existing Wi-Fi network collection on the user device or a successful transition to the new Wi-Fi network, available Wi-Fi networks are periodically assessed to establish one of a network unavailable state and a network available state.

Abstract: A server has a processor and a memory connected to the processor. The memory stores instructions executed by the processor to collect scan lists from client devices. Each scan list specifies a WiFi access point identifier collected by a client device and geographic coordinates of the client device when the WiFi access point identifier was collected. A cluster of geographic coordinates is formed around a designated WiFi access point. A centroid within the cluster is identified. The location of the centroid is ascribed as the geographic position of the designated WiFi access point. A client device is advised when the designated WiFi access point is a known mobile WiFi access point to facilitate connection between the client device and the known mobile WiFi access point.

Abstract: A server has a processor and a memory connected to the processor. The memory stores instructions executed by the processor to collect scan lists from client devices. Each scan list specifies a WiFi access point identifier collected by a client device and geographic coordinates of the client device when the WiFi access point identifier was collected. A cluster of geographic coordinates is formed around a designated WiFi access point. A centroid within the cluster is identified. The location of the centroid is ascribed as the geographic position of the designated WiFi access point. A client device is advised when the designated WiFi access point is a known mobile WiFi access point to facilitate connection between the client device and the known mobile WiFi access point.

Abstract: A server has a processor and a memory connected to the processor. The memory stores instructions executed by the processor to collect scan lists from client devices, where each scan list specifies a Wi-Fi access point identifier collected by a client device and geographic coordinates of the client device when the Wi-Fi access point identifier was collected. A cluster of geographic coordinates around a designated Wi-Fi access point is formed. A centroid within the cluster is identified. The location of the centroid is ascribed the geographic position of the designated Wi-Fi access point. The geographic position of the designated Wi-Fi access point is added to a Wi-Fi access point location database. A Wi-Fi tag scan list is processed to form a tag path listing known geographic locations of Wi-Fi access points observed by the Wi-Fi tag. The tag path is supplied in response to a request.

Abstract: A server has a processor and a memory connected to the processor. The memory stores instructions executed by the processor to collect scan lists from client devices, where each scan list specifies a Wi-Fi access point identifier collected by a client device and geographic coordinates of the client device when the Wi-Fi access point identifier was collected. A cluster of geographic coordinates around a designated Wi-Fi access point is formed. A centroid within the cluster is identified. The location of the centroid is ascribed the geographic position of the designated Wi-Fi access point. The geographic position of the designated Wi-Fi access point is added to a Wi-Fi access point location database. A Wi-Fi tag scan list is processed to form a tag path listing known geographic locations of Wi-Fi access points observed by the Wi-Fi tag. The tag path is supplied in response to a request.

Abstract: A server has a processor and a memory connected to the processor. The memory stores instructions executed by the processor to collect scan lists from client devices. Each scan list specifies a WiFi access point identifier collected by a client device and geographic coordinates of the client device when the WiFi access point identifier was collected. A cluster of geographic coordinates is formed around a designated WiFi access point. A centroid within the cluster is identified. The location of the centroid is ascribed as the geographic position of the designated WiFi access point. A client device is advised when the designated WiFi access point is a known mobile WiFi access point to facilitate connection between the client device and the known mobile WiFi access point.

Abstract: In some embodiments, a method includes scanning for wireless networks, where scanning includes collecting network information indicating properties of the wireless networks. The method can include analyzing the network information to determine signal data indicating signal qualities for the wireless networks. The method can include characterizing, based on the signal data, one or more wireless networks as being suitable for connection by the mobile device, where the characterizing includes determining, based on the signal data, movement of the mobile relative to one or more access points of the wireless networks. The method can include determining that one or more signals of the wireless networks are above a dwell threshold level for reliable wireless connectivity. The method can include determining that one or more signals has been dropped, and connecting to the mobile device to one of the one or more wireless networks that are suitable for connection.

Abstract: Some embodiments include a method for determining whether to establish a connection between a computer and a network. In some embodiments, the method includes: receiving first network information from a network; determining a first trust level for the network by matching the network information to provisioning information, wherein the provisioning information indicates the first trust level and an authentication method of the network; verifying that network supports the authentication method, wherein the verifying includes exchanging information with the network; after verifying that the network supports the authentication method, establishing a connection to the network, wherein the connection provides access to an Internet.

Abstract: Some embodiments include a method for initially configuring a network appliance. The method can detect, by the network appliance, a subscriber network. The method can transmit, to a remote configuration service via the subscriber network, a request for configuration information for the network appliance, and receive, via the subscriber network, the configuration information, wherein the configuration information includes first parameters for the subscriber network, and second parameters for an access network for connecting computing devices to the network appliance. The method can also perform an automated initial configuration of the network appliance using the configuration information, wherein the automated configuration does not require user input, and wherein the automated configuration includes using the first parameters and the second parameters to configure the network appliance for use with the access network and the subscriber network.

Abstract: In some embodiments, a method includes scanning for wireless networks, where scanning includes collecting network information indicating properties of the wireless networks. The method can include analyzing the network information to determine signal data indicating signal qualities for the wireless networks. The method can include characterizing, based on the signal data, one or more wireless networks as being suitable for connection by the mobile device, where the characterizing includes determining, based on the signal data, movement of the mobile relative to one or more access points of the wireless networks. The method can include determining that one or more signals of the wireless networks are above a dwell threshold level for reliable wireless connectivity. The method can include determining that one or more signals has been dropped, and connecting to the mobile device to one of the one or more wireless networks that are suitable for connection.

Abstract: Some embodiments include a method for determining whether to establish a connection between a computer and a network. In some embodiments, the method includes: receiving first network information from a network; determining a first trust level for the network by matching the network information to provisioning information, wherein the provisioning information indicates the first trust level and an authentication method of the network; verifying that network supports the authentication method, wherein the verifying includes exchanging information with the network; after verifying that the network supports the authentication method, establishing a connection to the network, wherein the connection provides access to an Internet.

Abstract: In one embodiment the method includes detecting a network indicator associated with a network, the network provided by a network provider. In one embodiment, after the detecting of the network indicator, the method includes obtaining from the network provider an actual attribute associated with the network. The method may also include determining, based on stored network information, whether the actual attribute matches an expected attribute for the network. If the actual attribute matches the expected attribute, the method may classify the network into one of a plurality of network classes.

Abstract: In some embodiments a method for correlating supply chain network information received from supply chain network components controlled by different entities includes receiving connection agent information indicating access point identifiers associated with network access points; receiving provisioning information including physical location identifiers identifying venues at which the network access points reside; receiving network authorization request and response records, wherein the network authorization request and response records include data associated with the connection agent information and the provisioning data.

Abstract: Some embodiments include a method for initially configuring a network appliance. The method can detect, by the network appliance, a subscriber network. The method can transmit, to a remote configuration service via the subscriber network, a request for configuration information for the network appliance, and receive, via the subscriber network, the configuration information, wherein the configuration information includes first parameters for the subscriber network, and second parameters for an access network for connecting computing devices to the network appliance. The method can also perform an automated initial configuration of the network appliance using the configuration information, wherein the automated configuration does not require user input, and wherein the automated configuration includes using the first parameters and the second parameters to configure the network appliance for use with the access network and the subscriber network.

Abstract: In some embodiments, a method includes scanning for wireless networks, where scanning includes collecting network information indicating properties of the wireless networks. The method can include analyzing the network information to determine signal data indicating signal qualities for the wireless networks. The method can include characterizing, based on the signal data, one or more wireless networks as being suitable for connection by the mobile device, where the characterizing includes determining, based on the signal data, movement of the mobile relative to one or more access points of the wireless networks. The method can include determining that one or more signals of the wireless networks are above a dwell threshold level for reliable wireless connectivity. The method can include determining that one or more signals has been dropped, and connecting to the mobile device to one of the one or more wireless networks that are suitable for connection.

Abstract: A method includes sending a faked authentication request from a client device wherein the faked authentication request includes identification credentials. A faked authentication request indicates that a reply message in response to the faked authentication request is to include data for updating a directory on the client device. A reply message is received at the client device in response to the faked authentication request. The reply message includes data for updating the directory. The directory is updated based, at least in part, on the data for updating the directory.

Abstract: A method includes sending a faked authentication request from a client device wherein the faked authentication request includes identification credentials. A faked authentication request indicates that a reply message in response to the faked authentication request is to include data for updating a directory on the client device. A reply message is received at the client device in response to the faked authentication request. The reply message includes data for updating the directory. The directory is updated based, at least in part, on the data for updating the directory.

Abstract: In some embodiments, a method includes detecting, in a connection agent, a problem connecting to a network; receiving, in the connection agent, replacement configuration options, wherein the replacement configuration options are for updating a configuration profile for the connection agent; wherein the configuration profile for the connection agent and the replacement configuration options define parameter values used in connecting to a network; updating the configuration profile for the connection agent based on the replacement configuration options; and determining, using testing components in the connection agent, test results that indicate the replacement configuration options do not solve the problem connecting to the network.

Abstract: Some embodiments include a method for determining whether to establish a connection between a computer and a network. In some embodiments, the method includes: receiving first network information from a network; determining a first trust level for the network by matching the network information to provisioning information, wherein the provisioning information indicates the first trust level and an authentication method of the network; verifying that network supports the authentication method, wherein the verifying includes exchanging information with the network; after verifying that the network supports the authentication method, establishing a connection to the network, wherein the connection provides access to an Internet.

Abstract: Methods and systems are disclosed for monitoring activity of a user on a network component, such as an end user computer, in a virtual private network for adherence to a security enforcement provision or policy utilized in the virtual private network. A method of determining whether a security provision in a computer network has been violated is described. It is determined whether the network component has violated, modified or circumvented a security enforcement provision of the computer network. If the detection is affirmative, the network component, such as an end user system, is modified in a manner in which the computer network operates at a level appropriate to the degree of the violation, modification, or circumvention of the security enforcement provision. If instructed to do so, a third party operating the virtual private network is notified of the violation and access to the network by the network component is restricted or terminated.