Abstract: Diagnostic test results are obtained in respect of local area networks (LANs), the LANs having user-devices located therein having interfaces and being operable to communicate via those interfaces and via a LAN gateway device with remote devices in a communications network outside their respective LANs. A method comprises comparing performance measures obtained in respect of communication flows with a performance threshold whereby to identify communication flows whose performance measures are indicative of performance below a predetermined level, and for any such communication flows, obtaining a diagnosis in respect of the LAN in question in dependence on a comparison of the performance measure obtained in respect of the identified communication flow and performance measures obtained in respect of other communication flows, the diagnosis being obtained in dependence on respective portability levels and network interface types determined in respect of the user-devices involved in said communication flows.

Abstract: Methods and apparatus are disclosed for obtaining diagnostic test results in respect of network elements in a network, the test results being obtained from a population of probes associated with network elements. The method comprises receiving a first-stage set of probe reports comprising, in respect of probes in an initial subset, a test result and metadata, each test result indicating a state of the network element associated with the probe; identifying a specific subset of probes in the initial subset wherein the test results from the probes in the specific subset satisfy a predefined condition; determining a subsequent subset based on the metadata of the probes in the specific subset; and triggering the probes in the subsequent subset to provide a second-stage set of probe reports comprising test results indicating states of network elements associated with probes in the subsequent subset.

Abstract: Methods and apparatus are disclosed for diagnostic testing, and in particular to methods and apparatus for obtaining diagnostic test results in respect of network-reliant applications used by one or more devices (1, 1?) in a local user network (3), the one or more user-devices (1, 1?) being operable to communicate with a digital communications access network (5, 6, 8) via a network gateway device (2) having a control module associated therewith, and being operable to communicate with remote networked devices (7, 9) involved in said network-reliant applications via the access network. Preferred embodiments relate to methods and apparatus for triggering diagnostic testing procedures and obtaining test results indicative of the actual Quality of Experience (QoE) of one or more users of the applications being run on the user-devices (1, 1?) in the user network (3).

Abstract: Methods and apparatus are disclosed for processing data items received at a network element in a communications network. In particular, methods and apparatus are disclosed for processing data items such as packets received at a network element such as a router or other such packet-forwarding network element (20) from a source (1, 1?) and which are intended to be forwarded towards an intended receiver (2, 2?) in a communications network such as a network operating according to the Internet Protocol.

Abstract: Methods, apparatus and systems for processing digital content service requests from user devices in a user network are disclosed. The method, performed by a control device, comprises receiving policy indications in respect of the user devices indicating desired control policies to be implemented in respect of the user devices, and associating user device source identifiers with the user devices indicating a network location to which responses should be directed, the user device source identifier associated with a particular user device depending on the policy indication for that user device. On receiving digital content service requests containing indications of domain names associated with content providers from which digital content is desired, the control device submits server location requests to a domain name system server comprising (i) the domain name from the digital content service request and (ii) the user device source identifier for the user device in question.

Abstract: Methods and apparatus are disclosed for analyzing network performance of a network comprising a plurality of network nodes. The method may comprise: obtaining a plurality of probe measurements in respect of a target node, the probe measurements resulting from probe test-messages being sent via different network paths to said target node and relating to a network performance characteristic in respect of the paths taken by the respective probe test-messages and probe response-messages associated therewith and being dependent also on local processing of the respective probe test-messages at said target node; determining respective measures of unexpectedness in respect of the probe measurements; comparing said respective measures of unexpectedness and in dependence on the comparison, assigning a weighting in respect of said target node; and determining a network performance analysis measure in dependence on at least one probe measurement and on the weighting.

Abstract: Methods and apparatus are disclosed for analyzing network performance of a network comprising network nodes. The method may comprise: obtaining probe measurements by sending probe test-messages via a path from a testing node to a first target node, and also by sending probe test-messages via a path from the testing node via the first target node to a subsequent target node, the probe measurements relating to a network performance characteristic in respect of the paths taken by the probe test-messages and probe response-messages associated therewith and being dependent also on local processing of the probe test-messages at the respective target nodes; comparing the probe measurements; in dependence on the comparison, assigning a weighting in respect of the first target node indicative of whether it is deemed likely to be providing reliable or unreliable results; and determining a network performance analysis measure dependent on the probe measurements and on the weighting.

Abstract: Methods and apparatus are disclosed for monitoring network performance in respect of a digital communications network comprising a user-network (1) having at least one user-device (11, 12, 13) therein that is able to submit requests for data to and receive data from one or more remote servers (16) via an intermediate control module (10), and an access network (5) via which data may be delivered to the user-network (1) via the control module (10). In particular, methods and apparatus are disclosed that allow a network service provider providing network services via an access network to its customers' home networks to have visibility on the performance of its customers' home networks and/or on the performance of one or more networked devices within those customers' home networks.

Abstract: Methods and apparatus are disclosed for analyzing performance of a network.

Abstract: Methods and apparatus are disclosed for analyzing network performance in relation to a network portion comprising a group of nodes.

Abstract: Methods and apparatus are disclosed for operating a data network (10), the data network comprising a plurality of network ingestion points (12, 14) via which data traffic (38) may be received from another data network, and a plurality of network attachment points (16) via which data traffic may be forwarded. The method comprises receiving data traffic (38) via said network ingestion points (12, 14), assigning ingestion point indications indicative of a characteristic of the network ingestion points (12, 14); forwarding the traffic via said network attachment points (16); and in respect of data traffic being forwarded via said network attachment points (16), determining traffic information indicative of a characteristic of the data traffic; and selecting a traffic management policy in dependence on said traffic information and the characteristic of the network ingestion point via which the data traffic was received.

Abstract: Methods and apparatus are disclosed for enabling selection of a remote service node from a plurality of possible nodes, each capable of providing a service, and each associated with a service node control entity.

Abstract: Methods and apparatus are disclosed for operating a data network (10), the data network comprising a plurality of network ingestion points (12, 14) via which data traffic (38) may be received from another data network, and a plurality of network attachment points (16) via which data traffic may be forwarded. The method comprises receiving data traffic (38) via said network ingestion points (12, 14), assigning ingestion point indications indicative of a characteristic of the network ingestion points (12, 14); forwarding the traffic via said network attachment points (16); and in respect of data traffic being forwarded via said network attachment points (16), determining traffic information indicative of a characteristic of the data traffic; and selecting a traffic management policy in dependence on said traffic information and the characteristic of the network ingestion point via which the data traffic was received.

Abstract: An RFID device such as an RFID tag (2) and method comprising: storing a current read key and a current ownership key; receiving, from the RFID reader system (4), a change read key command and an indication that the RFID reader system (4) holds the current ownership key; and in response, replacing the current read key with a new current read key enabling the RFID device (2) to be read by an RFID reader system (4) holding the new current read key. Also, an RFID reader system (4) and method for an RFID reader system (4) to process an RFID device (2), comprising: issuing a take ownership command to an RFID device (2); receiving a new ownership key from the RFID device (2); applying for authorization of the new ownership key; and receiving from the authorization apparatus (6) the new ownership key and an acknowledgement that may be communicated to the tag as evidence of authorization.

Abstract: Methods and apparatus are disclosed for enabling selection of a remote service node from a plurality of possible nodes, each capable of providing a service, and each associated with a service node control entity.

Abstract: Methods and devices for enabling a user to obtain item information relating to an item (10), the item having associated therewith an item identification means (12) and an RFID response means (14) arranged to provide a predetermined response on being subjected to a currently applicable trigger signal; the method comprising steps of: establishing from the item identification means (12) item identification information; using the item identification information to determine from an item information source (30) a currently applicable trigger signal for the RFID response means (14); subjecting the RFID response means (14) to the currently applicable trigger signal; receiving a predetermined response from the RFID response means (14); and using the predetermined response to obtain item information from the item information source (30); wherein the RFID response means (14) is arranged to generate a new currently applicable trigger signal and a new predetermined response associated therewith following subjecting of th

Abstract: Control apparatus (30), systems and methods for enabling access to one or more information systems (36) by one or more entities (34) on a path across a supply network to be controlled, access to the or each information system (36) being policed by means of an access-policer (38), the network comprising: at least one token-issuer (32) operable to issue an access pre-authorization token, the access pre-authorization token having associated therewith an information identifier and a digital signature, and to forward the access pre-authorization token towards one or more entities (34) on a path across the network; and at least one receiver entity (34) operable to receive an access pre-authorization token issued by the at least one token-issuer (32).

Abstract: Methods and systems for use in enabling verification by entities on a path across a supply network of an item identification means traversing said path, the network comprising: at least one supplier entity able to introduce into the network an item identification means having stored therein an item identifier and a digital signature associated with said supplier entity, and to forward said item identification means along a path across said network; at least one intermediate entity able to receive said item identification means from said at least one supplier entity or from another intermediate entity in said network and forward said item identification means along said path; and at least one receiver entity able to receive said item identification means from an intermediate entity in said network.

Abstract: A policy store associated with a policy decision point of an access control system is updated. The policy decision point is arranged to provide, in response to received decision requests, access control decisions in dependence on one or more policies stored in the policy store, each policy specifying a predetermined access control decision to be provided in response to a particular access request made in respect of a particular attribute or combination of attributes. The policy decision point is associated with at least one policy enforcement point arranged to implement access control in accordance with access control decisions provided by the policy decision point in response to decision requests submitted by the policy enforcement point, the policy enforcement point having associated therewith an attribute store providing data relating to attributes in respect of which access requests have previously been made via the policy enforcement point.

Abstract: Control apparatus (30), systems and methods for enabling access to one or more information systems (36) by one or more entities (34) on a path across a supply network to be controlled, access to the or each information system (36) being policed by means of an access-policer (38), the network comprising: at least one token-issuer (32) operable to issue an access pre-authorisation token, the access pre-authorisation token having associated therewith an information identifier and a digital signature, and to forward the access pre-authorisation token towards one or more entities (34) on a path across the network; and at least one receiver entity (34) operable to receive an access pre-authorisation token issued by the at least one token-issuer (32).