Abstract: A method of creating a network-initiated secondary packet data service instance includes sending a content request for application data from a mobile station to an application function through an access network. The method further includes sending a request for a secondary packet data service instance from the application function to a policy function, and evaluating the request for a secondary packet data service instance and determining one or more operational attributes from the evaluation. The method also includes creating the secondary packet data service instance between the application function to the mobile station by arranging one or more network components as a function of the one or more operational attributes. The method further includes transmitting the application data from the application function to the mobile station via the secondary packet data service instance.

Abstract: A method of creating a network-initiated secondary packet data service instance includes sending a content request for application data from a mobile station to an application function through an access network. The method further includes sending a request for a secondary packet data service instance from the application function to a policy function, and evaluating the request for a secondary packet data service instance and determining one or more operational attributes from the evaluation. The method also includes creating the secondary packet data service instance between the application function to the mobile station by arranging one or more network components as a function of the one or more operational attributes. The method further includes transmitting the application data from the application function to the mobile station via the secondary packet data service instance.

Abstract: Allocation of bandwidth to a link which is remotely displaced from a server is described. The link need not directly connected to the server. The server includes a process to assign a portion of the bandwidth to at least one application group; and count packets belonging to the application group that pass through the server. The server can be a VPN server that authenticates packets. Each application group includes packets that share a pre-defined configuration. Accordingly, the server combines bandwidth management and packet authentication with little overhead.