Abstract: The present invention discloses methods and systems for selecting at least one SIM card for data communication at a wireless communication device which is capable of housing a plurality of SIM cards. When a switching condition is satisfied, the wireless communication device selects a second SIM card group, and disconnects one or more connections established using any non-second group SIM card. Non-second group SIM cards are SIM cards that are not in the second SIM card group. A selected SIM card from the second SIM card group is then used for data communications.

Abstract: A method and a system for creating Internet Protocol address based network policies (IPPs) by using domain name based network policies (DNNTPs) is disclosed. The DNNTPs are stored in a second device, and are used for enforcing IPPs at a first device. The first device retrieves one or more DNNTPs from the second device and monitors network traffic for Domain Name System (DNS) look-up reply. When a network device receives a record Domain Name System look-up reply, the network device identifies one or more Internet Protocol addresses of one or more host names specified in the address record Domain Name System look-up reply, then determine whether the one or more host names contain a domain name used in one or more DNNTPs and create one or more IPPs.

Abstract: The present invention discloses methods and systems for sharing data usage by a plurality of SIM cards at a plurality of network devices. Each of the plurality of network devices is capable of housing at least one SIM card from the plurality of SIM cards. The method comprises the steps of determining the total data usage allowance. A remaining total data usage allowance is determined by either retrieving it from a carrier server or by subtracting aggregated data usage information from the total data usage allowance. The method further comprises restricting use of one or more of the plurality of SIM cards when the remaining total data usage allowance is below a first threshold until the remaining total data usage allowance is above the first threshold. The total data usage allowance is changed to a first value periodically or according to an administrator's instruction.

Abstract: The present invention discloses methods and systems for restricting data usage at a first network device. The first network device determines a first usage threshold. A first instruction is retrieved from a first server when the first threshold is reached. The first instruction comprises information for determining whether or not to restrict data usage. Data usage is restricted or not restricted according to the first instruction. The first server is periodically updated with data usage information.

Abstract: The present invention discloses methods and systems for selecting at least one SIM card for data communication at a wireless communication device which is capable of housing a plurality of SIM cards. When a switching condition is satisfied, the wireless communication device selects a second SIM card group, and disconnects one or more connections established using any non-second group SIM card. Non-second group SIM cards are SIM cards that are not in the second SIM card group. A selected SIM card from the second SIM card group is then used for data communications. The steps are repeated until (i) the switching condition is no longer satisfied, (ii) no more SIM cards selected from the second SIM card group can be used for data communications or (iii) no more connection is made using non-second group SIM cards.

Abstract: A method and a system for updating a first whitelist at a network node. The network node receives data packets from an Internet of Things (IoT) device and determines a predetermined identifier for the IoT device. The network node then determines whether the predetermined identifier is in the first whitelist. When the predetermined identifier is not in the first whitelist, the network node starts a first time period. When the predetermined identified is on the first whitelist, the network node determines whether the data packets are received within the first time period. When the data packets are received within the first time period, the network node identifies destination addresses of the data packets and updates the first whitelist based on the destination addresses and the predetermined identifier. The updated first whitelist is stored in non-transitory computer readable storage medium in the network node.

Abstract: The present invention discloses a method carried out by a first communications device for determining performance of a plurality of connections and selecting at least one first connection from the plurality of connections substantially based on performance. Data packets are then transmitted through the at least one first connection. The plurality of connections are aggregated to form an aggregated connection. The determining of performance is performed by transmitting evaluation packets through the plurality of connections. The evaluation packets are based on data packets that are received by the first communication device but have not yet been transmitted through the aggregated connection. The data packets may be designated for a host or node reachable through the aggregated connection. Alternatively, the evaluation packets may be based on predefined information when there are no data packets to be transmitted through the aggregated connection. The performance may be determined periodically.

Abstract: The present invention discloses methods and systems for sharing data usage by a plurality of SIM cards at a plurality of network devices. Each of the plurality of network devices is capable of housing at least one SIM card from the plurality of SIM cards. The method comprises the steps of determining the total data usage allowance. A remaining total data usage allowance is determined by either retrieving it from a carrier server or by subtracting aggregated data usage information from the total data usage allowance. The method further comprises restricting use of one or more of the plurality of SIM cards when the remaining total data usage allowance is below a first threshold until the remaining total data usage allowance is above the first threshold. The total data usage allowance is changed to a first value periodically or according to an administrator's instruction.

Abstract: A method and system for processing Domain Name Services (DNS) request in a gateway. The gateway receives a DNS request from a host from its local area network. The gateway then selects DNS server(s) and transmits a new DNS request to at least one DNS server(s). DNS server(s) may or may not be accessible through a first tunnel. The contents of the new DNS request are the same as the content of the received DNS request. Further, when the gateway receives a DNS response corresponding to the DNS request, it determines a decision whether to transfer data to the host whose IP address is specified in the DNS response through a second tunnel. The decision may be based on a geographical location of an IP address.

Abstract: The present invention discloses methods and network nodes for distributing data packets through a plurality of wide area network (WAN) interfaces and through a gateway at a network node. In order to determine whether the gateway is a slave gateway, identification request is sent to the gateway by a network node. When the gateway is configured as a slave gateway, transmitting instruction to the gateway. Further, weighting may be assigned to the WAN interfaces. Further, connections may be established through WAN interfaces of the network node and WAN interfaces of the gateway. The connections may further be aggregated together to form an aggregated connection.

Abstract: Methods and systems for transmitting and receiving data between a first node and a second node through a first tunnel group and a second tunnel group respectively. The first node transmits data to the second node mainly through a first tunnel group and receives data from the second node mainly through a second tunnel group. In some embodiments, the first node receives first IP packets from one of its LAN interfaces and then transmits encapsulated first IP packets and then are transmitted mainly through a first one or more WAN interfaces to the second node. The first node receives encapsulated second IP packets mainly from the second node through a second one or more of its WAN interfaces. Second IP packets are then decapsulated and transmitted through one of the LAN interfaces of the first node.

Abstract: Methods and systems for transmitting data packets from a host to a destination via a virtual private network (VPN) connection at a VPN gateway. VPN gateway receives encapsulated packets via the VPN connection. The encapsulated packets encapsulate the data packets originated from the host. VPN gateway decapsulates the encapsulated packets to retrieve the data packets. VPN gateway determines whether the data packets originated from an IoT device based on IP address of the host. When the host is the IoT device, VPN gateway performs deep packet inspection (DPI) on the data packets. VPN gateway determines whether the data packets are allowed to be transmitted to the destination. When the data packets are allowed to be transmitted to the destination, VPN gateway transmits the data packets to the destination.

Abstract: Methods and systems for transmitting and receiving data between a first node and a second node through a first tunnel group and a second tunnel group respectively. The first node transmits data to the second node mainly through a first tunnel group and receives data from the second node mainly through a second tunnel group. In some embodiments, the first node receives first IP packets from one of its LAN interfaces and then transmits encapsulated first IP packets and then are transmitted mainly through a first one or more WAN interfaces to the second node. The first node receives encapsulated second IP packets mainly from the second node through a second one or more of its WAN interfaces. Second IP packets are then de-capsulated and transmitted through one of the LAN interfaces of the first node.

Abstract: The present invention discloses methods and systems for managing a node through a management server. The management server verifies whether a management confirmation has been received and allows a second user group to manage the node if the management confirmation is received. If the management confirmation is not received by the management server, the second user group is not allowed to manage the node through the management server.

Abstract: The present invention discloses methods and systems for selecting at least one SIM card for data communication at a wireless communication device which is capable of housing a plurality of SIM cards. When a switching condition is satisfied, the wireless communication device selects a second SIM card group, and disconnects one or more connections established using any non-second group SIM card. Non-second group SIM cards are SIM cards that are not in the second SIM card group. A selected SIM card from the second SIM card group is then used for data communications. The steps are repeated until (i) the switching condition is no longer satisfied, (ii) no more SIM cards selected from the second SIM card group can be used for data communications or (iii) no more connection is made using non-second group SIM cards.

Abstract: Methods and apparatus for processing DNS request in a gateway with WAN and LAN interfaces. The gateway receives a first DNS request from a host via the LAN interface. The gateway selects DNS servers according to predefined selection policies and selects access networks that are authorized to send new DNS requests. The new DNS requests and the first DNA request have the same content. The gateway transmits the new DNS requests to corresponding DNS sever of the selected access networks through the selected access networks and via the WAN interfaces that are connected to the selected access networks. The gateway then identifies valid DNS responses from DNS responses received from the corresponding DNS server. The gateway selects one of the identified valid DNS responses and generates a first new DNS response with the same content thereof. The gateway sends the first new DNS response to the host.

Abstract: The present invention discloses a method carried out by a first communications device for determining performance of a plurality of connections and selecting at least one first connection from the plurality of connections substantially based on performance. Data packets are then transmitted through the at least one first connection. The plurality of connections are aggregated to form an aggregated connection. The determining of performance is performed by transmitting evaluation packets through the plurality of connections. The evaluation packets are based on data packets that are received by the first communication device but have not yet been transmitted through the aggregated connection. The data packets may be designated for a host or node reachable through the aggregated connection. Alternatively, the evaluation packets may be based on predefined information when there are no data packets to be transmitted through the aggregated connection. The performance may be determined periodically.

Abstract: The present invention discloses methods and systems for restricting data usage at a first network device. The first network device determines a first usage threshold. A first instruction is retrieved from a first server when the first threshold is reached. The first instruction comprises information for determining whether or not to restrict data usage. Data usage is restricted or not restricted according to the first instruction. The first server is periodically updated with data usage information.

Abstract: A method and system for processing Domain Name Services (DNS) request in a gateway. The gateway receives a DNS request from a host from its local area network. The gateway then selects DNS server(s) and transmits a new DNS request to at least one DNS server(s). DNS server(s) may or may not be accessible through a first tunnel. The contents of the new DNS request are the same as the content of the received DNS request. Further, when the gateway receives a DNS response corresponding to the DNS request, it determines a decision whether to transfer data to the host whose IP address is specified in the DNS response through a second tunnel. The decision may be based on a geographical location of an IP address.

Abstract: The present invention discloses methods and systems for managing a power over Ethernet (PoE) capable device through a manual information input module. Information is obtained through the manual information input module, and a current power mode is determined. Based on the information, a power mode is reset or applied. If it is determined to apply a power mode, internal switches are opened or closed and the device supplies or receives power over Ethernet according to the power mode.