Abstract: A method and system for configuring a network device according to the identity of a plurality of removable wireless communications devices (RWCDs), the method comprising the steps of: determining the identities of the plurality of RWCDs; determining whether the network device is capable of using the plurality RWCDs; retrieving policy settings from an authorized party or a storage medium of the network device according to the identities of the plurality of RWCDs, determining priority of policy settings; and configuring the network device according to the policy settings. The priority of policy settings are based on the positions of the RWCDs when there are conflict among policy settings. The plurality of RWCDs are plugged to the network device and the network device provides wireless wide area network (WAN) connectivity through the plurality of RWCDs.

Abstract: A network system and method regarding data flow transmission, including: a first network connection interface interconnecting with a transmitter; at least two second network connection interfaces interconnecting with a receiver through at least two access networks; and a control unit, used for receiving packets of a data flow from the transmitter by the first network connection interface, selecting an access network from the access networks connecting to the at least two second network connection interfaces to send the packets embedded with the packets of the data flow to the receiver, determining whether to generate at least one nominal reception acknowledgement message corresponding to the packets of the data flow, generating the nominal reception acknowledgement message on behalf receiver if it is determined to generate the nominal reception acknowledgement message, and sending the nominal reception acknowledgement message to the transmitter; and at least one storage medium.

Abstract: The present invention discloses methods and systems for managing an error correction mode at a first communications router. The first communication router transmits data packets to a second communications router and stores the first data packet in a local storage medium, When a delay inquiry message is received from the second communications router, the first communications router activates the error correction mode. When the error correction mode is activated, the first data packet is retransmitted to the second communications router and an error correction packet corresponding to the first data packet is also transmitted. When a back-to-normal message is received from the second communications router, the first communications router deactivates the error correction mode. The back-to-normal message indicates that the first communications router no longer needs to be in error correction mode.

Abstract: A method and system for processing Domain name Services (DNS) request in a gateway. The gateway receives a DNS request from a host from its local area network. The gateway then selects DNS server(s) and transmits a new DNS request to at least one DNS server(s). DNS server(s) may or may not be accessible through a first tunnel. The contents of the new DNS request are the same as the content of the received DNS request. Further, when the gateway receives a DNS response corresponding to the DNS request, it determines a decision whether to transfer data to the host whose IP address is specified in the DNS response through a second tunnel. The decision may be based on a geographical location of an IP address.

Abstract: The present invention discloses methods and systems for sharing data usage by a plurality of SIM cards at a plurality of network devices. Each of the plurality of network devices is capable of housing at least one SIM card from the plurality of SIM cards. The method comprises the steps of determining the total data usage allowance. A remaining total data usage allowance is determined by either retrieving it from a carrier server or by subtracting aggregated data usage information from the total data usage allowance. The method further comprises restricting use of one or more of the plurality of SIM cards when the remaining total data usage allowance is below a first threshold until the remaining total data usage allowance is above the first threshold. The total data usage allowance is changed to a first value periodically or according to an administrator's instruction.

Abstract: The present invention discloses methods and systems for a VPN gateway to establish virtual private network (VPN) connections with at least one other VPN gateways. The VPN gateway determines that it is classified into a first VPN gateway group by a VPN management server, and the VPN gateway determines which other VPN gateways belong to the same first VPN gateway group. The VPN gateway then determines and sends information about the number of remaining possible VPN connections (RPVPNC) to the VPN management server, such that the VPN management server is able to send a first configuration to the first VPN gateway. The first VPN gateway is then configured according to the first configuration, and the first VPN gateway establishes VPN connections with other VPN gateways based on VPN connection topology, configuration, and number of RPVPNC of the first VPN gateway and other VPN gateways.

Abstract: The present invention discloses methods and systems for sharing data usage by a plurality of SIM cards at a plurality of network devices. Each of the plurality of network devices is capable of housing at least one SIM card from the plurality of SIM cards. The method comprises the steps of determining the total data usage allowance. A remaining total data usage allowance is determined by either retrieving it from a carrier server or by subtracting aggregated data usage information from the total data usage allowance. The method further comprises restricting use of one or more of the plurality of SIM cards when the remaining total data usage allowance is below a first threshold until the remaining total data usage allowance is above the first threshold. The total data usage allowance is changed to a first value periodically or according to an administrator's instruction.

Abstract: The present invention discloses methods and systems for transferring SIM card information from a first device to a server. A first SIM card is housed in the first device or in a first modem connected to the first device. When the first device boots up, it identifies the first SIM card and retrieves SIM card information from the first SIM card. The first device then sends authentication information to the first server and requests historical SIM card activity information. Historical SIM card activity information received from the first server is stored in a storage medium, and is used for determining whether to use the first SIM card. The first server performs steps of receiving a first request message from the first device, and determining the SIM card identity specified in the first request message if the first request message is authentic. The first server retrieves and sends historical SIM card activity information of the first SIM card to the first device.

Abstract: The present invention discloses methods and systems for selecting at least one SIM card for data communication at a wireless communication device which is capable of housing a plurality of SIM cards. When a switching condition is satisfied, the wireless communication device selects a second SIM card group, and disconnects one or more connections established using any non-second group SIM card. Non-second group SIM cards are SIM cards that are not in the second SIM card group. A selected SIM card from the second SIM card group is then used for data communications.

Abstract: The present invention discloses methods and systems for monitoring a network connected device by a monitoring server. The monitoring server sends notifications to the network connected device periodically according to a time interval. The time interval is set to a normal value and the notifications include a request for the monitoring data. Then the network connected device sends the monitoring data to monitoring server upon receiving the notifications. Monitoring server receives and stores the monitoring data from the network connected device. When one condition is satisfied, the time interval is changed to a lower value. Therefore, the frequency of sending notifications to network connected device from monitoring server is changed.

Abstract: A method and a system for creating Internet Protocol address based network policies (IPPs) by using domain name based network policies (DNNTPs) is disclosed. The DNNTPs are stored in a second device, and are used for enforcing IPPs at a first device. The first device retrieves one or more DNNTPs from the second device and monitors network traffic for Domain Name System (DNS) look-up reply. When a network device receives a record Domain Name System look-up reply, the network device identifies one or more Internet Protocol addresses of one or more host names specified in the address record Domain Name System look-up reply, then determine whether the one or more host names contain a domain name used in one or more DNNTPs and create one or more IPPs.

Abstract: The present invention discloses methods and systems for transmitting and receiving packets through a plurality of logical connections based on priority levels. When an encapsulating packets is received from a second network device via a logical network connection, priority level of a packet encapsulated in the encapsulating packet is determined, and the encapsulating packet is stored in a queue or transmitted to a host based on GSEQ, PSEQ, TSEQ, and the priority level. When a packet is received from a host via a LAN connection, the packet is retrieved from a priority queue based on the priority level a first logical network connection is selected for transmitting the packet. The packet is encapsulated in an encapsulating packet, and the payload of the encapsulating packet comprises the packet, GSEQ, TSEQ, PSEQ, and priority level of the packet. The encapsulating packet is then sent through the first logical network connection.

Abstract: The present invention discloses methods and systems for managing a node through a management server. The management server verifies whether a management confirmation has been received and allows a second user group to manage the node if the management confirmation is received. If the management confirmation is not received by the management server, the second user group is not allowed to manage the node through the management server.

Abstract: The present invention discloses methods and systems for processing data packets received at a first network node and for processing encapsulating packets received at a second network node. The first network node receives data packets from its network interface. It then selects a first tunnel and selects none or at least one second tunnel according to a selection policy. Original encapsulating packets (OEPs) are transmitted to a second network node through the first tunnel and at least one duplicate encapsulating packet (DEP) is transmitted through the at least one second tunnel. The second network node receives an encapsulating packet with a global sequence number (GSN) through an aggregated connection. The second network node determines whether one or more data packets corresponding to the encapsulating packet have been received earlier. The second network node may then determine whether or not to forward the one or more data packets.

Abstract: The present invention discloses methods and systems for transmitting broadcast data at a communication gateway. When the communication gateway receives a broadcast packet from a host or node, the communication gateway determines whether the broadcast packet satisfies at least one condition. If the broadcast packet satisfies the at least one condition, it is determined whether or not to modify a time to live (TTL) value. The TTL value of the broadcast packet is modified if it is determined to modify the TTL value. The broadcast packet is then forwarded to the destination address of the broadcast packet based on the TTL value. The destination address is reachable through an interconnected network.

Abstract: Methods and apparatus for processing DNS request in a gateway with WAN and LAN interfaces. The gateway receives a first DNS request from a host via the LAN interface. The gateway selects DNS servers according to predefined selection policies and selects access networks that are authorized to send new DNS requests. The new DNS requests and the first DNA request have the same content. The gateway transmits the new DNS requests to corresponding DNS sever of the selected access networks through the selected access networks and via the WAN interfaces that are connected to the selected access networks. The gateway then identifies valid DNS responses from DNS responses received from the corresponding DNS server. The gateway selects one of the identified valid DNS responses and generates a first new DNS response with the same content thereof. The gateway sends the first new DNS response to the host.

Abstract: Method and system for storing packets received from a bonded communication links according to latency of the communication link that has the largest latency among all communication links of the bonded communication links. Embodiments of present inventions can be applied to bonded communication links, including wireless connection, Ethernet connection, Internet Protocol connection, asynchronous transfer mode, virtual private network, WiFi, high-speed downlink packet access, GPRS, LTE, and X.25. The present invention presents methods comprising the steps of estimating storage size of a queue, wherein the queue is for storage the one or more packets received from the bonded communication links.

Abstract: The present invention discloses methods and systems carried out at a network device for reducing network congestion by establishing an aggregated connection, wherein the aggregated connection comprise a plurality of virtual private network (VPN) tunnels. The system further comprises assigning default weights to the plurality of VPN tunnels along with transmitting and receiving data packets of a data session through the aggregated connection. When there is a missing data packet in the received data packets, the missing data packet is recreated based on a previous or a next data packet. Furthermore the present invention discloses methods and systems for determining whether a VPN tunnel from the plurality of VPN tunnels is experiencing an unacceptable packet drop rate. If it is seen that a VPN tunnel is experiencing an unacceptable packet drop rate, an effective weight of the at least one VPN tunnel is decreased in order to overcome the setback.

Abstract: The present invention discloses methods and systems for monitoring a network connected device by a monitoring server. The monitoring server sends notifications to the network connected device periodically according to a time interval. The time interval is set to a normal value and the notifications include a request for the monitoring data. Then the network connected device sends the monitoring data to monitoring server upon receiving the notifications. Monitoring server receives and stores the monitoring data from the network connected device. When one condition is satisfied, the time interval is changed to a lower value. Therefore, the frequency of sending notifications to network connected device from monitoring server is changed.

Abstract: The present invention discloses methods and systems for managing a node through a management server. The management server verifies whether a management confirmation has been received and allows a second user group to manage the node if the management confirmation is received. If the management confirmation is not received by the management server, the second user group is not allowed to manage the node through the management server.