embodiments of the present invention are directed to providing control and monitoring of content provisioning at multiple locations over a network . embodiments of the present invention may be implemented in a number of distributed computing environments where functionality is tailored for provision of customer support services . according to an actual embodiment , the present invention is implemented in a cable television / services system . fig1 is a simplified block diagram illustrating a cable television / services system 100 ( hereafter referred to as “ catv ”) architecture that serves as an exemplary operating environment for the present invention . referring now to fig1 , digital and analog video programming , information content , and interactive television services are provided via a hybrid fiber coax ( hfc ) network 115 to a television set 120 for consumption by a cable television / services system customer . as is known to those skilled in the art , hfc networks 115 combine both optical fiber and coaxial cable lines . typically , optical fiber runs from the cable head end 110 to neighborhoods of 500 to 2 , 000 customers . coaxial cable runs from the optical fiber feeders to each customer . according to embodiments of the present invention , the functionality of the hfc network 115 allows for efficient bidirectional data flow between the client - side set - top box 105 and the server - side application server 140 of the present invention . according to embodiments of the present invention , the catv system 100 is in the form of a distributed client - server computing system for providing video and data flow across the hfc network 115 between server - side services providers ( e . g ., cable television / services providers ) via a server - side head end 110 and a client - side customer via a client - side set - top box ( stb ) 105 functionally connected to a customer receiving device , such as the television set 120 . as is understood by those skilled in the art , modem catv systems 100 may provide a variety of services across the hfc network 115 including traditional digital and analog video programming , telephone services , high speed internet access , video - on - demand , and information services . on the client side of the catv system 100 , digital and analog video programming and digital and analog data are provided to the customer television set 120 via the set - top box ( stb ) 105 . interactive television services that allow a customer to input data to the catv system 100 likewise are provided by the stb 105 . as illustrated in fig1 , the stb 105 is a multipurpose computing device having a computer processor , memory and an input / output mechanism . the input / output mechanism receives input from server - side processes via the hfc network 115 and from customers via input devices such as the remote control device 128 and the keyboard 130 . the remote control device 128 and the keyboard 130 may communicate with the stb 105 via a suitable communication transport such as the infrared connection 132 . the stb 105 also includes a video processor for processing and providing digital and analog video signaling to the television set 120 via a cable communication transport 134 . a multi - channel tuner is provided for processing video and data to and from the stb 105 and the server - side head end system 110 , described below . the stb 105 also includes an operating system 122 for directing the functions of the stb 105 in conjunction with a variety of client applications 126 . for example , if a client application 125 requires a news flash from a third - party news source to be displayed on the television 120 , the operating system 122 may cause the graphics functionality and video processor of the stb 105 , for example , to output the news flash to the television 120 at the direction of the client application 126 responsible for displaying news items . according to an embodiment , the stb 105 may also be configured to implement a parental control application 123 . parental control 123 allows an authorized user to view and control access to what is currently being watched or recorded on any device in a home networked environment . the access control 123 may be configured to allow the authorized user to terminate particular content viewing at another device . access control 123 may also allow additional control parameters to be implemented at another device , such as recording of a program on a dvr located in an area of the home remote from stb 105 , download content from a remote storage device coupled to the stb 105 , etc . because a variety of different operating systems 122 may be utilized by a variety of different brands and types of set - top boxes , a middleware layer 124 is provided to allow a given software application to be executed by a variety of different operating systems . according to an embodiment of the present invention , the middleware layer 124 may include a set of application programming interfaces ( api ) that are exposed to client applications 126 and operating systems 122 that allow the client applications to communicate with the operating systems through common data calls understood via the api set . as described below , a corresponding middleware layer is included on the server side of the catv system 100 for facilitating communication between the server - side application server and the client - side stb 105 . according to one embodiment of the present invention , the middleware layer 142 of the server - side application server and the middleware layer 124 of the client - side stb 105 format data passed between the client side and server side according to the extensible markup language ( xml ). the set - top box 105 passes digital and analog video and data signaling to the television 120 via a one - way communication transport 134 . the stb 105 may receive video and data from the server side of the catv system 100 via the hfc network 115 through a video / data downlink and data via a data downlink . the stb 105 may transmit data from the client side of the catv system 100 to the server side of the catv system 100 via the hfc network 115 via one data uplink . the video / data downlink is an “ in band ” downlink that allows for digital and analog video and data signaling from the server side of the catv system 100 through the hfc network 115 to the set - top box 105 for use by the stb 105 and for distribution to the television set 120 . as is understood by those skilled in the art , the “ in band ” signaling space operates at a frequency between 54 and 860 megahertz . the signaling space between 54 and 860 megahertz is generally divided into 6 megahertz channels in which may be transmitted a single analog signal or a greater number ( e . g ., up to ten ) digital signals . the data downlink and the data uplink , illustrated in fig1 , between the hfc network 115 and the set - top box 105 comprise “ out of band ” data links . as is understand by those skilled in the art , the “ out of band ” frequency range generally lies between zero and 54 megahertz . according to embodiments of the present invention , data flow between the client - side set - top box 105 and the server - side application server 140 is typically passed through the “ out of band ” data links . alternatively , an “ in band ” data carousel may be positioned in an “ in band ” channel into which a data feed may be processed from the server - side application server 140 through the hfc network 115 to the client - side stb 105 . operation of data transport between components of the catv system 100 , described with reference to fig1 , is well known to those skilled in the art . referring still to fig1 , the head end 110 of the catv system 100 is positioned on the server side of the catv system and includes hardware and software systems responsible for originating and managing content for distributing through the hfc network 115 to client - side stbs 105 for presentation to customers via televisions 120 . as described above , a number of services may be provided by the catv system 100 , including digital and analog video programming , interactive television services , telephone services , video - on - demand services , targeted advertising , and provision of information content . the application server 140 is a general - purpose computing system operative to assemble and manage data sent to and received from the client - side set - top box 105 via the hfc network 115 . as described above with reference to the set - top box 105 , the application server 140 includes a middleware layer 142 for processing and preparing data from the head end of the catv system 100 for receipt and use by the client - side set - top box 105 . for example , the application server 140 via the middleware layer 142 may obtain data from third - party services 146 via the internet 140 for transmitting to a customer through the hfc network 115 and the set - top box 105 . for example , a weather report from a third - party weather service may be downloaded by the application server via the internet 144 . when the application server 140 receives the downloaded weather report , the middleware layer 142 may be utilized to format the weather report for receipt and use by the set - top box 105 . according to one embodiment of the present invention , data obtained and managed by the middleware layer 142 of the application server 140 may be formatted according to the extensible markup language and passed to the set - top box 105 through the hfc network 115 where the xml - formatted data may be utilized by a client application 126 in concert with the middleware layer 124 , as described above . as should be appreciated by those skilled in the art , a variety of third - party services data , including news data , weather data , sports data and other information content may be obtained by the application server 140 via distributed computing environments such as the internet 144 for provision to customers via the hfc network 115 and the set - top box 105 . according to embodiments of the present invention , the application server 140 may obtain customer support services data , including billing data , information on customer work order status , answers to frequently asked questions , services provider contact information , and the like from data services 160 for provision to the customer via an interactive television session . as illustrated in fig1 , the services provider data services 160 include a number of services operated by the services provider of the catv system 100 which may include data on a given customer . a billing system 162 may include information such as a customer &# 39 ; s name , street address , business identification number , social security number , credit history , and information regarding services and products subscribed to by the customer . according to embodiments of the present invention , the billing system 162 may also include billing data for services and products subscribed to by the customer for bill processing billing presentment and payment receipt . a customer information database 168 may include general information about customers such as place of employment , business address , business telephone number and demographic information such as age , gender , educational level , and the like . the customer information database 168 may also include information on pending work orders for services or products ordered by the customer . the customer information database 168 may also include general customer information such as answers to frequently asked customer questions and contact information for various service provider offices / departments . as should be understood , this information may be stored in a variety of disparate databases operated by the cable services provider . an electronic mail system 164 may contain information such as electronic mail addresses , high - speed internet access subscription information and electronic mail usage data . an authentication system 166 may include information such as secure user names and passwords utilized by customers for access to network services . as should be understood by those skilled in the art , the disparate data services systems 162 , 164 , 166 , 168 are illustrated as a collection of data services for purposes of example only . the example data services systems comprising the data services 160 may operate as separate data services systems , which communicate with a web services system ( described below ) along a number of different communication paths and according to a number of different communication protocols . referring still to fig1 , a web services system 150 is illustrated between the application server 140 and the data services 160 . according to embodiments of the present invention , the web services system 150 serves as a collection point for data requested from each of the disparate data services systems comprising the data services 160 . according to embodiments of the present invention , when the application server 140 requires customer services data from one or more of the data services 160 , the application server 140 passes a data query to the web services system 150 . the web services system formulates a data query to each of the available data services systems for obtaining any required data for a requesting customer as identified by a set - top box identification associated with the customer . the web services system 150 serves as an abstraction layer between the various data services systems and the application server 140 . that is , the application server 140 is not required to communicate with the disparate data services systems , nor is the application server 140 required to understand the data structures or data types utilized by the disparate data services systems . the web services system 150 is operative to communicate with each of the disparate data services systems for obtaining necessary customer data . the customer data obtained by the web services system is assembled and is returned to the application server 140 for ultimate processing via the middleware layer 142 , as described above . fig2 is a diagram 200 of a home having set - top boxes and a monitoring device according to an embodiment of the invention . in fig2 a communications system 210 provides content to a communications network 220 for deliver to subscribers . one such subscriber may be a single - family residence , an apartment complex , a condominium complex , etc . in fig2 , a single - family residence 230 is shown coupled to the communications network 220 . content is provided to the single - family residence 230 via signal path 232 . the single - family residence 230 includes 4 set - top boxes ( stbs ) 240 , 242 , 244 , 246 for processing content signals delivered to the single - family residence 230 via signal path 232 . signal path 232 is coupled to stb 1 240 , stb 2 242 and stb 3 244 . stb 3 244 is coupled to a wireless device 282 . thus , stb 4 246 may receive content signals from wireless device 282 via wireless device 284 . stb 1 240 , stb 3 244 and stb 4 246 are coupled to televisions 250 , 254 , 256 , respectively . stb 2 242 is coupled to a computer 262 for accessing the internet . monitoring device 270 may also be coupled to the signal path 232 . monitoring device 270 implements the access controls . monitoring device 270 may be a master set - top box or may be a dedicated device for providing monitoring functionality . monitoring device 270 may also be coupled to wireless device 280 to provide communications and control to stb 3 244 and stb 4 246 via wireless devices 282 , 284 . monitoring device 270 may also communicate with stb 1 240 , stb 2 242 and stb 3 244 via signal path 232 . accordingly , monitoring device 270 may be configured with a parental control application that allows an authorized user to view and control access to what is currently being watched or recorded on any device in a home networked environment , i . e ., television 250 , television 254 , television 256 and computer 262 . the parental control application implemented on monitoring device 270 may be configured to allow the authorized user to terminate particular content viewing at such other devices . monitoring device may also allow additional control parameters to be implemented at another device , such as recording of a program on a dvr 272 , download content from a remote storage device , such as dvr 272 , etc . fig3 is a control interface 300 according to an embodiment of the invention . in fig3 , the control interface 300 presents to an authorized user information regarding users 310 and active content information 320 . the control interface 300 may also be configured to provide a data input and control panel 330 . the data input and control panel 330 may be configured to provide a window or dialog box 332 for entering a pass code for authorizing a user . a command button 334 may be presented to trigger termination of access to content . a navigation window 336 may also be provided to allow the user to navigate within the system . for example , the user may highlight a cursor over stb 1 312 . the navigation button 336 may then be used to view the content provided to stb 1 312 . the command button 334 may be selected to terminate access to the content currently being provided to stb 1 312 if the user desires . accordingly , the control interface 300 allows an authorized user to control access to content by other users within the content network . a specific example may include a parent terminating content to stb 1 because the parent considers the content inappropriate , because it is time for mike to retire for the evening , etc . those skilled in the art will recognize that additional dialog boxes and / or command buttons may be provided on the control interface 300 . for example , a command button may be provided to download content on stb 1 312 for viewing at a different location , e . g ., stb 3 314 . fig4 is a block diagram of a monitoring device 400 according to an embodiment of the invention . in fig4 , the monitoring device 400 is coupled to the network 410 . as described above , the monitoring device 400 may be coupled to the network 410 by a wireless connections or a wired connection . the monitoring device 400 includes a communications interface 420 for enabling data exchange between the monitoring device 400 and the network 410 . a processor 430 is provided for processing data . the processor is coupled to a display 440 , memory 450 and communications interface 420 . the processor 430 is configured to presents to an authorized user information identifying other devices and active content information . the processor 430 may be configured to present on display 440 a data input and control panel that allows a user to enter a pass code for authorizing a user , a command button for triggering termination of access to content at a particular device within the network and a navigation window for allowing a user to navigate within the system . those skilled in the art will recognize that the processor 430 may also be configured to provide additional dialog boxes and / or command buttons on a control interface provided on display 440 . memory 450 may store program information for implementing access controls . memory 450 may also store authorization codes , security programs , device data , viewing logs , etc . fig5 illustrates a method 500 for providing access controls according to an embodiment of the invention . in fig5 , a user powers on the device 510 . the user then navigates to the monitoring section 520 . the device presents a dialog box for the user to enter an authorization code that will authorize the user to monitor and control access to content throughout the network 530 . the system maintains a log of content access by all devices in the network 540 . a display of content currently being accessed and the location where such content is being access will be presented to the authorized user 550 . a decision may be made whether to terminate access to particular content or by a particular device 560 . if the decision is made to terminate access to particular content or by a particular device 562 , the user issues a command that satisfies the decision 570 . if not 564 , a decision is made whether to log off of the device 580 . if yes 582 , the process ends . if not 584 , monitoring of the network continues . fig6 is a block diagram 600 illustrating an access control and monitoring device ( acmd ) according to an embodiment of the invention . in fig6 , the acmd 610 monitors what is being recorded and / or watched by any networked attached device 620 - 624 . the acmd 610 authenticates and authorizes a user 630 to access content according to predetermined policies . moreover , the acmd 610 allows an authenticated and authorized user 630 to set policies to control and manage what others are watching on the network 640 . content may be stored on a network attached storage device 650 . the acmd 610 is aware of content and metadata 660 provided via the outside plant ( osp ) network 670 . the acmd 610 is also separate from any access device 620 - 624 and storage device 650 . the acmd 610 sits on the home network and may be configured as a gateway or part thereof . the acmd 610 may perform deep packet inspection of home network traffic and can access a list of content from an access device 620 - 624 . the acmd 610 securely holds user settable policies . however , the acmd 610 is not reliant on any type of ca or parental control implemented in a stb . the configuration for the acmd 610 securely persists a database , e . g ., user , device , content type , rating , etc . thus , control and monitoring of content provisioning is provided at multiple locations over a network . this allows a user to monitor and control the viewing of content via stbs and access devices through the acmd 610 . control and monitoring of content provisioning may thus be implemented in a number of distributed computing environments where functionality is tailored for provision of customer support services . the foregoing description of the exemplary embodiment of the invention has been presented for the purposes of illustration and description . it is not intended to be exhaustive or to limit the invention to the precise form disclosed . many modifications and variations are possible in light of the above teaching . it is intended that the scope of the invention be limited not with this detailed description , but rather by the claims appended hereto .