1. Device comprising: processor configured for controlling a display and communicating with the Internet through a network interface; the processor configured for accessing instructions on a computer readable storage medium to configure the processor for: contacting a management server; providing a network address to the management server, the address being associated with a geographic location associated with the device; receiving from the management server a user token and at least one geographically associated service list, the service list containing only content server addresses that have been approved for access in a geographic region indicated by the address of the device, the server addresses being uniform resource locators (URLs); presenting the service list on the display; and responsive to a user selection of an entry on the service list, accessing a content server associated with the entry, wherein as part of the accessing of a content server the processor when executing the instructions is also configured for providing the user token such that the device receives a content list of available content from the content server only responsive to the content server receiving the user token, the processor when executing the instructions being configured for checking the user token against a local database of active tokens, and the processor when executing the instructions is configured for receiving from the content server the content list at the device such that no further authentication is required between the device and content server beyond the provisioning of a valid user token by the device, and further wherein the device trusts the content server without need for any further authentication on the part of the content server, the processor when accessing the instructions being configured for permitting no access to Internet sites using the device other than to the management server and content servers on the service list.