Abstract: Techniques to authenticate a client to a proxy through a domain name server intermediary are described. In one embodiment, for example, a client apparatus may comprise a data store and a network access component. The data store may be operative to store a network configuration file, the network configuration file containing a client-specific secret. The network access component may be operative to transmit a communication request from the client device to a proxy server, the communication request directed to a destination server distinct from the proxy server, and to receive a response to the communication request from the destination server based on a determination by the proxy server that the client is authorized to use the proxy server, the determination based on the client having previously sent an encoding of a client-specific secret to a domain name server embedded within a lookup domain of a domain name request. Other embodiments are described and claimed.

Abstract: Techniques to identify applications based on network traffic are described. In one embodiment, an apparatus may comprise a client record component, a traffic monitoring component, a profiling component, and a traffic analysis component. The client record component may be operative to store a client application map, the client application map to represent installations of a plurality of applications on a plurality of client devices. The traffic monitoring component may be operative to monitor training network traffic and additional network traffic on one or more network interfaces, the training network traffic generated by the plurality of client devices. The profiling component may be operative to generate a network profile map using machine learning based on the training network traffic and the client application map. The traffic analysis component may be operative to identify one or more application of the plurality of applications. Other embodiments are described and claimed.

Abstract: Techniques to identify application foreground/background state based on network traffic are described. In one embodiment, an apparatus may comprise a traffic monitoring component and a traffic analysis component. The traffic monitoring component may receive monitored network traffic over a monitored time period. The traffic analysis component may receive a foreground activity profile, the foreground activity profile comprising one or more signals for distinguishing between foreground activity of one or more profiled applications and background activity of the one or more profiled applications; determine one or more active foreground applications in the monitored network traffic based on the foreground activity profile, wherein determining the one or more active foreground applications comprises determining that at least a portion of the monitored network traffic comprises background activity; and log that the one or more active foreground application were active during the monitored time period.

Abstract: Techniques for zero rating through redirection are described. In one embodiment, an apparatus may comprise a client proxy component operative to receive a proxy network packet from a local gateway application on a client device, the proxy network packet containing an application network packet for delivery to a network server device; and forward the application network packet to the network server device based on a determination that a local user application is authorized to use the proxy server device; and a proxy access component operative on the processor circuit to determine that the application network packet is associated with the local user application on the client device; and determine that the local user application is authorized to use the proxy server device. Other embodiments are described and claimed.

Abstract: Techniques for zero rating through web reconstruction are described. In one embodiment, an apparatus may comprise a client access component operative to receive a web request from a client device, the web request for a web page hosted on a network server device; and transmit a zero-rating transformed web page to the client device in response to the web request; and a web reconstruction component operative on the processor circuit to retrieve the web page from the network server device; identify one or more non-zero-rated resource references in the retrieved web page; transform the one or more non-zero-rated resource references to form one or more zero-rated resource references; and replace the one or more non-zero-rated resource references with the one or more zero-rated resource references in the web page to form the zero-rating transformed web page. Other embodiments are described and claimed.

Abstract: A system and method may handle the supervision of the connectivity of a virtual private network (VPN) of a mobile device that is configured to connect through a plurality of network interfaces. A server may configure the mobile device to send a request for data item. The server may track the response of the mobile device to the request. According to one embodiment, the VPN may not be connected through a preferred network interface, while such interface is available. In such case, the data item may be routed through the preferred network and therefore not received by the VPN server within a predetermined period of time. According to another embodiment, the server may identify an internal IP address of the data item. The server may be configured to determine the current network interface based on the internal IP address. The server may disconnect the VPN to permit the VPN to reconnect through the preferred network interface.

Abstract: Techniques to authenticate a client to a proxy through a domain name server intermediary are described. In one embodiment, for example, a client apparatus may comprise a data store and a network access component. The data store may be operative to store a network configuration file, the network configuration file containing a client-specific secret. The network access component may be operative to transmit a communication request from the client device to a proxy server, the communication request directed to a destination server distinct from the proxy server, and to receive a response to the communication request from the destination server based on a determination by the proxy server that the client is authorized to use the proxy server, the determination based on the client having previously sent an encoding of a client-specific secret to a domain name server embedded within a lookup domain of a domain name request. Other embodiments are described and claimed.

Abstract: Techniques to authenticate a client to a proxy through a domain name server intermediary are described. In one embodiment, for example, a client apparatus may comprise a data store and a network access component. The data store may be operative to store a network configuration file, the network configuration file containing a client-specific secret. The network access component may be operative to transmit a communication request from the client device to a proxy server, the communication request directed to a destination server distinct from the proxy server, and to receive a response to the communication request from the destination server based on a determination by the proxy server that the client is authorized to use the proxy server, the determination based on the client having previously sent an encoding of a client-specific secret to a domain name server embedded within a lookup domain of a domain name request. Other embodiments are described and claimed.

Abstract: A proxy server and a method for determining a mobile application download attribution are provided. The method includes identifying an application downloaded from an application repository to a mobile device; analyzing previously logged requests sent from the mobile device to identify a most recent request directed to the application repository from the mobile device; analyzing the identified most recent request to detect a source that causes the application download and at least one identifier of the application; determining the download attribution respective of the source that causes the application download; and generating an application metadata respective of the download attribution and the application identifiers. This is subject to a user's privacy, opt-in, or opt-out settings.

Abstract: Techniques for zero rating through redirection are described. In one embodiment, an apparatus may comprise a client proxy component operative to receive a proxy network packet from a local gateway application on a client device, the proxy network packet containing an application network packet for delivery to a network server device; and forward the application network packet to the network server device based on a determination that a local user application is authorized to use the proxy server device; and a proxy access component operative on the processor circuit to determine that the application network packet is associated with the local user application on the client device; and determine that the local user application is authorized to use the proxy server device. Other embodiments are described and claimed.

Abstract: Techniques to identify application foreground/background state based on network traffic are described. In one embodiment, an apparatus may comprise a traffic monitoring component and a traffic analysis component. The traffic monitoring component may receive monitored network traffic over a monitored time period. The traffic analysis component may receive a foreground activity profile, the foreground activity profile comprising one or more signals for distinguishing between foreground activity of one or more profiled applications and background activity of the one or more profiled applications; determine one or more active foreground applications in the monitored network traffic based on the foreground activity profile, wherein determining the one or more active foreground applications comprises determining that at least a portion of the monitored network traffic comprises background activity; and log that the one or more active foreground application were active during the monitored time period.

Abstract: Techniques for zero rating through web reconstruction are described. In one embodiment, an apparatus may comprise a client access component operative to receive a web request from a client device, the web request for a web page hosted on a network server device; and transmit a zero-rating transformed web page to the client device in response to the web request; and a web reconstruction component operative on the processor circuit to retrieve the web page from the network server device; identify one or more non-zero-rated resource references in the retrieved web page; transform the one or more non-zero-rated resource references to form one or more zero-rated resource references; and replace the one or more non-zero-rated resource references with the one or more zero-rated resource references in the web page to form the zero-rating transformed web page. Other embodiments are described and claimed.

Abstract: Techniques to authenticate a client to a proxy through a domain name server intermediary are described. In one embodiment, for example, a client apparatus may comprise a data store and a network access component. The data store may be operative to store a network configuration file, the network configuration file containing a client-specific secret. The network access component may be operative to transmit a communication request from the client device to a proxy server, the communication request directed to a destination server distinct from the proxy server, and to receive a response to the communication request from the destination server based on a determination by the proxy server that the client is authorized to use the proxy server, the determination based on the client having previously sent an encoding of a client-specific secret to a domain name server embedded within a lookup domain of a domain name request. Other embodiments are described and claimed.

Abstract: Techniques to target and communicate mobile offers are described. Some embodiments are particularly directed to techniques to techniques to target and communicate mobile offers using member information from a social-networking service. In one embodiment, for example, an apparatus may comprise a customer selection component, a channel selection component, and an offer customization component. The customer selection component may be operative to retrieve an offer from an offers store, the offer associated with offer selection criteria, and search a user information store to select a mobile user based on a match between the offer selection criteria and user information for the mobile user stored in the user information store. Other embodiments are described and claimed.

Abstract: A system and method may handle the supervision of the connectivity of a virtual private network (VPN) of a mobile device that is configured to connect through a plurality of network interfaces. A server may configure the mobile device to send a request for data item. The server may track the response of the mobile device to the request. According to one embodiment, the VPN may not be connected through a preferred network interface, while such interface is available. In such case, the data item may be routed through the preferred network and therefore not received by the VPN server within a predetermined period of time. According to another embodiment, the server may identify an internal IP address of the data item. The server may be configured to determine the current network interface based on the internal IP address. The server may disconnect the VPN to permit the VPN to reconnect through the preferred network interface.

Abstract: A proxy server and a method for determining a mobile application download attribution are provided. The method includes identifying an application downloaded from an application repository to a mobile device; analyzing previously logged requests sent from the mobile device to identify a most recent request directed to the application repository from the mobile device; analyzing the identified most recent request to detect a source that causes the application download and at least one identifier of the application; determining the download attribution respective of the source that causes the application download; and generating an application metadata respective of the download attribution and the application identifiers. This is subject to a user's privacy, opt-in, or opt-out settings.