Abstract: A wireless end-user device divides the functions of a network data policy management function between kernel and user-space processes. The kernel process is efficient at implementing control policies (block/allow/rate limit/usage limit) and counting policies for flows, but relies on the user-space process to classify flows and supply the control and counting policies for each flow. The kernel process allows the majority of the network data policy management function to run in a secure, power-efficient manner, with the user-space process remaining flexible and potentially sophisticated in classification capability, while having limited access to detailed packet flow information.

Abstract: A method is provided for a first network resource to facilitate access of a client to content, comprising the steps of receiving from a user a request for a document stored at a second network resource; obtaining the requested document from the second network resource; determining whether the requested document contains instructions for redirecting to a document at a network resource other than the first network resource; replacing the instructions with an instruction to redirect to the first network resource, and providing the document to said user with the replaced instructions. The method may also include, in response to a request from a user, providing linked term content including terms selected from the document, and links associated with each of the terms.