Abstract: A method and a system of restricting data packet transmission of an apparatus at a network node. The network node, during a first time period, updates a whitelist and does not restrict data packet transmission according to the whitelist. After the first time period, the network node determines corresponding destination address of each of the data packets and allows the data packets to be sent to the corresponding destination address if a criteria is satisfactory. The network node does not allow the data packets to be sent to the corresponding destination address if the criteria is not satisfactory. The whitelist is comprised of at least one destination address. The criteria is based on the at least one destination address. The whitelist list is stored in non-transitory computer readable storage medium in the network node.

Abstract: A method and system for a first node to transmit packets to a second none, comprising receiving a packet from a local area network (LAN) interface, inspecting the packet; determining whether the packet satisfies at least one packet condition; transmitting the packet through a predefined tunnel if the packet satisfies the at least one packet condition; transmitting the packet through a second tunnel if the packet does not satisfy the at least one packet condition. The predefined tunnel is a first tunnel and is established before the packet is received by the first node. The second tunnel belongs to a first tunnel group or a second tunnel group. The first tunnel, the second tunnel and other tunnels may together form an aggregated connection. Further, the use of predefined tunnel may be based on whether the packets satisfy a session condition.

Abstract: The present invention discloses methods and systems for selecting at least one SIM card for data communication at a wireless communication device which is capable of housing a plurality of SIM cards. When a switching condition is satisfied, the wireless communication device selects a second SIM card group, and disconnects one or more connections established using any non-second group SIM card. Non-second group SIM cards are SIM cards that are not in the second SIM card group. A selected SIM card from the second SIM card group is then used for data communications. The steps are repeated until (i) the switching condition is no longer satisfied, (ii) no more SIM cards selected from the second SIM card group can be used for data communications or (iii) no more connection is made using non-second group SIM cards.

Abstract: A method and system for transmitting and receiving data packets between two network nodes via one or more end-to-end connections. An interface is provided for selecting one or more possible end-to-end connection(s) or established end-to-end connection(s). The method and system may further comprise receiving a policy, wherein one or more selected end-to-end connections are established based, at least in part, on the policy. The policy may also restrict or promote selection of certain established end-to-end connection(s) via the interface provided. The selected and established end-to-end connection(s) are used for transmitting and receiving data packets.

Abstract: Methods and systems for sharing data usage by a plurality of SIM cards at a plurality of network devices are disclosed. Each of the plurality of network devices is capable of housing at least one SIM card from the plurality of SIM cards. The method comprises the steps of determining the total data usage allowance. A remaining total data usage allowance is determined by either retrieving it from a carrier server or by subtracting aggregated data usage information from the total data usage allowance. The method further comprises restricting use of one or more of the plurality of SIM cards when the remaining total data usage allowance is below a first threshold until the remaining total data usage allowance is above the first threshold. The total data usage allowance is changed to a first value periodically or according to an administrator's instruction.

Abstract: A method and system for transmitting and receiving data packets between two network nodes via one or more end-to-end connections. An interface is provided for selecting one or more possible end-to-end connection(s) or established end-to-end connection(s). The method and system may further comprise receiving a policy, wherein one or more selected end-to-end connections are established based, at least in part, on the policy. The policy may also restrict or promote selection of certain established end-to-end connection(s) via the interface provided. The selected and established end-to-end connection(s) are used for transmitting and receiving data packets.

Abstract: The present invention discloses methods and systems for sharing data usage by a plurality of SIM cards at a plurality of network devices. Each of the plurality of network devices is capable of housing at least one SIM card from the plurality of SIM cards. The method comprises the steps of determining the total data usage allowance. A remaining total data usage allowance is determined by either retrieving it from a carrier server or by subtracting aggregated data usage information from the total data usage allowance. The method further comprises restricting use of one or more of the plurality of SIM cards when the remaining total data usage allowance is below a first threshold until the remaining total data usage allowance is above the first threshold. The total data usage allowance is changed to a first value periodically or according to an administrator's instruction.

Abstract: The present invention discloses methods and systems for selecting at least one SIM card for data communication at a wireless communication device which is capable of housing a plurality of SIM cards. When a switching condition is satisfied, the wireless communication device selects a second SIM card group, and disconnects one or more connections established using any non-second group SIM card. Non-second group SIM cards are SIM cards that are not in the second SIM card group. A selected SIM card from the second SIM card group is then used for data communications. The steps are repeated until (i) the switching condition is no longer satisfied, (ii) no more SIM cards selected from the second SIM card group can be used for data communications or (iii) no more connection is made using non-second group SIM cards.

Abstract: A method and a system of restricting data packet transmission of an apparatus at a network node. The network node, during a first time period, updates a whitelist and does not restrict data packet transmission according to the whitelist. After the first time period, the network node determines corresponding destination address of each of the data packets and allows the data packets to be sent to the corresponding destination address if a criteria is satisfactory. The network node does not allow the data packets to be sent to the corresponding destination address if the criteria is not satisfactory. The whitelist is comprised of at least one destination address. The criteria is based on the at least one destination address. The whitelist list is stored in non-transitory computer readable storage medium in the network node.

Abstract: A method and system for transmitting and receiving data packets between two network nodes via one or more end-to-end connections. An interface is provided for selecting one or more possible end-to-end connection(s) or established end-to-end connection(s). The method and system may further comprise receiving a policy, wherein one or more selected end-to-end connections are established based, at least in part, on the policy. The policy may also restrict or promote selection of certain established end-to-end connection(s) via the interface provided. The selected and established end-to-end connection(s) are used for transmitting and receiving data packets.

Abstract: A method and a system for updating a first whitelist at a network node. The network node receives data packets from an Internet of Things (IoT) device and determines a predetermined identifier for the IoT device. The network node then determines whether the predetermined identifier is in the first whitelist. When the predetermined identifier is not in the first whitelist, the network node starts a first time period. When the predetermined identified is on the first whitelist, the network node determines whether the data packets are received within the first time period. When the data packets are received within the first time period, the network node identifies destination addresses of the data packets and updates the first whitelist based on the destination addresses and the predetermined identifier. The updated first whitelist is stored in non-transitory computer readable storage medium in the network node.

Abstract: The present invention discloses methods and systems for selecting at least one SIM card for data communication at a wireless communication device which is capable of housing a plurality of SIM cards. When a switching condition is satisfied, the wireless communication device selects a second SIM card group, and disconnects one or more connections established using any non-second group SIM card. Non-second group SIM cards are SIM cards that are not in the second SIM card group. A selected SIM card from the second SIM card group is then used for data communications. The steps are repeated until (i) the switching condition is no longer satisfied, (ii) no more SIM cards selected from the second SIM card group can be used for data communications or (iii) no more connection is made using non-second group SIM cards.

Abstract: A method and a system of restricting data packet transmission of an apparatus at a network node. The network node, during a first time period, updates a whitelist and does not restrict data packet transmission according to the whitelist. After the first time period, the network node determines corresponding destination address of each of the data packets and allows the data packets to be sent to the corresponding destination address if a criteria is satisfactory. The network node does not allow the data packets to be sent to the corresponding destination address if the criteria is not satisfactory. The whitelist is comprised of at least one destination address. The criteria is based on the at least one destination address. The whitelist list is stored in non-transitory computer readable storage medium in the network node.

Abstract: A method and system for transmitting and receiving data packets between two network nodes via one or more end-to-end connections. An interface is provided for selecting one or more possible end-to-end connection(s) or established end-to-end connection(s). The method and system may further comprise receiving a policy, wherein one or more selected end-to-end connections are established based, at least in part, on the policy. The policy may also restrict or promote selection of certain established end-to-end connection(s) via the interface provided. The selected and established end-to-end connection(s) are used for transmitting and receiving data packets.

Abstract: A method and system for a first node to transmit packets to a second none, comprising receiving a packet from a local area network (LAN) interface, inspecting the packet; determining whether the packet satisfies at least one packet condition; transmitting the packet through a predefined tunnel if the packet satisfies the at least one packet condition; transmitting the packet through a second tunnel if the packet does not satisfy the at least one packet condition. The predefined tunnel is a first tunnel and is established before the packet is received by the first node. The second tunnel belongs to a first tunnel group or a second tunnel group. The first tunnel, the second tunnel and other tunnels may together form an aggregated connection. Further, the use of predefined tunnel may be based on whether the packets satisfy a session condition.

Abstract: Method and system for storing packets received from a bonded communication links according to latency of the communication link that has the largest latency among all communication links of the bonded communication links. Embodiments of present inventions can be applied to bonded communication links, including wireless connection, Ethernet connection, Internet Protocol connection, asynchronous transfer mode, virtual private network, WiFi, high-speed downlink packet access, GPRS, LTE, and X.25. The present invention presents methods comprising the steps of estimating storage size of a queue, wherein the queue is for storage the one or more packets received from the bonded communication links. The storage size is based on one or more factors, including largest latency, bandwidth of each of the plurality of communication links, and allowed time duration of packet storage.

Abstract: The present invention discloses methods and systems for managing VPN tunnels. A VPN concentrator establishes a first aggregated VPN connection and a second aggregated VPN connection with a rust host and a first network device respectively. When the first aggregated VPN connection comprises a first plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. Similarly, when the second aggregated VPN connection comprise a second plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. The first host encapsulates a first data packet in a first encapsulating packet and transmits the first encapsulating packet to a VPN concentrator using a first aggregated VPN connection.

Abstract: A method and system for a first node to transmit packets to a second none, comprising receiving a packet from a local area network (LAN) interface, inspecting the packet; determining whether the packet satisfies at least one packet condition; transmitting the packet through a predefined tunnel if the packet satisfies the at least one packet condition; transmitting the packet through a second tunnel if the packet does not satisfy the at least one packet condition. The predefined tunnel is a first tunnel and is established before the packet is received by the first node. The second tunnel belongs to a first tunnel group or a second tunnel group. The first tunnel, the second tunnel and other tunnels may together form an aggregated connection. Further, the use of predefined tunnel may be based on whether the packets satisfy a session condition.

Abstract: Method and system for storing packets received from a bonded communication links according to latency of the communication link that has the largest latency among all communication links of the bonded communication links. Embodiments of present inventions can be applied to bonded communication links, including wireless connection, Ethernet connection, Internet Protocol connection, asynchronous transfer mode, virtual private network, WiFi, high-speed downlink packet access, GPRS, LTE, and X.25. The present invention presents methods comprising the steps of estimating storage size of a queue, wherein the queue is for storage the one or more packets received from the bonded communication links.

Abstract: A method and a system of restricting data packet transmission of an apparatus at a network node. The network node, during a first time period, updates a whitelist and does not restrict data packet transmission according to the whitelist. After the first time period, the network node determines corresponding destination address of each of the data packets and allows the data packets to be sent to the corresponding destination address if a criteria is satisfactory. The network node does not allow the data packets to be sent to the corresponding destination address if the criteria is not satisfactory. The whitelist is comprised of at least one destination address. The criteria is based on the at least one destination address. The whitelist list is stored in non-transitory computer readable storage medium in the network node.