Abstract: Methods, apparatus and systems for processing digital content service requests from user devices in a user network are disclosed. The method, performed by a control device, comprises receiving policy indications in respect of the user devices indicating desired control policies to be implemented in respect of the user devices, and associating user device source identifiers with the user devices indicating a network location to which responses should be directed, the user device source identifier associated with a particular user device depending on the policy indication for that user device. On receiving digital content service requests containing indications of domain names associated with content providers from which digital content is desired, the control device submits server location requests to a domain name system server comprising (i) the domain name from the digital content service request and (ii) the user device source identifier for the user device in question.

Abstract: A method of attributing contributions to congestion of a shared resource to respective user registers, the resource being operable to serve requests for service, each of a plurality of the requests having a user indication associated therewith indicating with which of a plurality of user registers the request is associated.

Abstract: Methods and apparatus are disclosed for operating a data network (10), the data network comprising a plurality of network ingestion points (12, 14) via which data traffic (38) may be received from another data network, and a plurality of network attachment points (16) via which data traffic may be forwarded. The method comprises receiving data traffic (38) via said network ingestion points (12, 14), assigning ingestion point indications indicative of a characteristic of the network ingestion points (12, 14); forwarding the traffic via said network attachment points (16); and in respect of data traffic being forwarded via said network attachment points (16), determining traffic information indicative of a characteristic of the data traffic; and selecting a traffic management policy in dependence on said traffic information and the characteristic of the network ingestion point via which the data traffic was received.

Abstract: Methods and apparatus are disclosed for enabling selection of a remote service node from a plurality of possible nodes, each capable of providing a service, and each associated with a service node control entity.

Abstract: A route mapping process for identifies the suitability of data sources for satisfying data requests generated by user terminals (50, 51) by searching one or more user address databases for user addresses, and searching one or more data distribution network databases for addresses of data sources (52, 3), and generates for each user address a register (33) of one or more selected data source addresses, together with an order of precedence in which they should be used to fulfil data requests. This register is accessible by a content distribution server to identify a data source address to be communicated to a user address in response to a data request received from the user address. The criteria by which data source addresses are selected for association with individual user addresses may depend on factors such as network proximity, technical compatibility, content variation (e.g language) etc.

Abstract: Methods, apparatus and systems for processing digital content service requests from user devices (12) in a user network are disclosed. The method, performed by a control device (10), comprises receiving policy indications in respect of the user devices (12) indicating desired control policies to be implemented in respect of the user devices, and associating user device source identifiers with the user devices indicating a network location to which responses should be directed, the user device source identifier associated with a particular user device depending on the policy indication for that user device. On receiving digital content service requests containing indications of domain names associated with content providers from which digital content is desired, the control device submits server location requests to a domain name system server (16) comprising (i) the domain name from the digital content service request and (ii) the user device source identifier for the user device in question.

Abstract: Methods and apparatus are disclosed for operating a data network (10), the data network comprising a plurality of network ingestion points (12, 14) via which data traffic (38) may be received from another data network, and a plurality of network attachment points (16) via which data traffic may be forwarded. The method comprises receiving data traffic (38) via said network ingestion points (12, 14), assigning ingestion point indications indicative of a characteristic of the network ingestion points (12, 14); forwarding the traffic via said network attachment points (16); and in respect of data traffic being forwarded via said network attachment points (16), determining traffic information indicative of a characteristic of the data traffic; and selecting a traffic management policy in dependence on said traffic information and the characteristic of the network ingestion point via which the data traffic was received.

Abstract: An RFID device such as an RFID tag (2) and method comprising: storing a current read key and a current ownership key; receiving, from the RFID reader system (4), a change read key command and an indication that the RFID reader system (4) holds the current ownership key; and in response, replacing the current read key with a new current read key enabling the RFID device (2) to be read by an RFID reader system (4) holding the new current read key. Also, an RFID reader system (4) and method for an RFID reader system (4) to process an RFID device (2), comprising: issuing a take ownership command to an RFID device (2); receiving a new ownership key from the RFID device (2); applying for authorization of the new ownership key; and receiving from the authorization apparatus (6) the new ownership key and an acknowledgement that may be communicated to the tag as evidence of authorization.

Abstract: Methods and apparatus for controlling the forwarding of a flow (12) of data units across a network from a sender node (11) to a receiver node (19) via at least one intermediate node (15), the data units each having one of a plurality of different types of class indication associated therewith, each type of class indication providing, to an intermediate node currently processing the data unit with which the class indication is associated, an indication denoting a particular class of treatment, selected from a plurality of different classes of treatment, according to which the data unit is to be processed by that intermediate node, such that different proportions of the data units of the flow are forwarded as different sub-flows each comprising data units having class indications of different types thereby providing indications denoting different classes of treatment.

Abstract: Methods and systems for policing usage by one or more users (12) of a data network (14), said one or more users (12) being able to send, to receive, or to send and receive data over the network via one or more of a plurality of access nodes (42), the usage of the data network resulting from respective data units consuming network resources along respective paths across the data network (14), each of said data units being associated with one of a plurality of subsets of the usage of the data network, said data units having congestion indications associated therewith indicating a measure of their congestion impact.

Abstract: A method of attributing contributions to congestion of a shared resource to respective user registers, said resource being operable to serve requests for service, each of a plurality of said requests having a user indication associated therewith indicating with which of a plurality of user registers the request is associated.

Abstract: Methods and apparatus are disclosed for enabling selection of a remote service node from a plurality of possible nodes, each capable of providing a service, and each associated with a service node control entity.

Abstract: Data networks, nodes making up parts of data networks, and information are related to the characterization of paths taken by data travelling between nodes in the networks. Path characterization information is arranged to be conveyed to nodes such that it may be used by nodes subsequently forwarding data. In particular, the invention relates to nodes receiving such path characterization information from upstream nodes, deriving therefrom information indicative of characteristics of a path downstream of said nodes, and using such information to make informed decisions such as routing decisions when forwarding data onward in data networks.

Abstract: Methods and devices for enabling a user to obtain item information relating to an item (10), the item having associated therewith an item identification means (12) and an RFID response means (14) arranged to provide a predetermined response on being subjected to a currently applicable trigger signal; the method comprising steps of: establishing from the item identification means (12) item identification information; using the item identification information to determine from an item information source (30) a currently applicable trigger signal for the RFID response means (14); subjecting the RFID response means (14) to the currently applicable trigger signal; receiving a predetermined response from the RFID response means (14); and using the predetermined response to obtain item information from the item information source (30); wherein the RFID response means (14) is arranged to generate a new currently applicable trigger signal and a new predetermined response associated therewith following subjecting of th

Abstract: Control apparatus (30), systems and methods for enabling access to one or more information systems (36) by one or more entities (34) on a path across a supply network to be controlled, access to the or each information system (36) being policed by means of an access-policer (38), the network comprising: at least one token-issuer (32) operable to issue an access pre-authorization token, the access pre-authorization token having associated therewith an information identifier and a digital signature, and to forward the access pre-authorization token towards one or more entities (34) on a path across the network; and at least one receiver entity (34) operable to receive an access pre-authorization token issued by the at least one token-issuer (32).

Abstract: Path characterization information is provided to a data sender relating to a network characteristic such as congestion experienced by data units traversing a path across a data network from the data sender towards one of a plurality of data receivers. The data units have associated therewith information indicative of the network characteristic. The path is traversed by the data units having at least a first path portion between the data sender and a proxy node along which data units may traverse conveying a measure indicative of the network characteristic that is representable by any of a first set of codepoints. The data receivers are operable to provide data acknowledgement units in respect of data units they receive via a second path portion in which information indicative of the network characteristic may only be representable using codepoints of a second set of codepoints having less codepoints than the first set.

Abstract: Methods and systems for use in enabling verification by entities on a path across a supply network of an item identification means traversing said path, the network comprising: at least one supplier entity able to introduce into the network an item identification means having stored therein an item identifier and a digital signature associated with said supplier entity, and to forward said item identification means along a path across said network; at least one intermediate entity able to receive said item identification means from said at least one supplier entity or from another intermediate entity in said network and forward said item identification means along said path; and at least one receiver entity able to receive said item identification means from an intermediate entity in said network.

Abstract: A policy store associated with a policy decision point of an access control system is updated. The policy decision point is arranged to provide, in response to received decision requests, access control decisions in dependence on one or more policies stored in the policy store, each policy specifying a predetermined access control decision to be provided in response to a particular access request made in respect of a particular attribute or combination of attributes. The policy decision point is associated with at least one policy enforcement point arranged to implement access control in accordance with access control decisions provided by the policy decision point in response to decision requests submitted by the policy enforcement point, the policy enforcement point having associated therewith an attribute store providing data relating to attributes in respect of which access requests have previously been made via the policy enforcement point.

Abstract: Methods and apparatus for controlling the forwarding of a flow (12) of data units across a network from a sender node (11) to a receiver node (19) via at least one intermediate node (15), the data units each having one of a plurality of different types of class indication associated therewith, each type of class indication providing, to an intermediate node currently processing the data unit with which the class indication is associated, an indication denoting a particular class of treatment, selected from a plurality of different classes of treatment, according to which the data unit is to be processed by that intermediate node, such that different proportions of the data units of the flow are forwarded as different sub-flows each comprising data units having class indications of different types thereby providing indications denoting different classes of treatment.

Abstract: Data networks and nodes making up parts of data networks are arranged to derive information relating to the characterization of paths taken by data travelling between nodes in the networks. Path characterization information is fed back from a receiver of data to a provider of data, and informs nodes subsequently forwarding data of characteristics of the downstream path. Also described are routing and related controlling nodes and methods for using such path characterization information to make informed routing and other decisions when forwarding data in a data network.