Abstract: The present invention discloses methods and systems for managing VPN tunnels. A VPN concentrator establishes a first aggregated VPN connection and a second aggregated VPN connection with a rust host and a first network device respectively. When the first aggregated VPN connection comprises a first plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. Similarly, when the second aggregated VPN connection comprise a second plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. The first host encapsulates a first data packet in a first encapsulating packet and transmits the first encapsulating packet to a VPN concentrator using a first aggregated VPN connection.

Abstract: The present invention discloses methods and systems for sharing data usage by a plurality of SIM cards at a plurality of network devices. Each of the plurality of network devices is capable of housing at least one SIM card from the plurality of SIM cards. The method comprises the steps of determining the total data usage allowance. A remaining total data usage allowance is determined by either retrieving it from a carrier server or by subtracting aggregated data usage information from the total data usage allowance. The method further comprises restricting use of one or more of the plurality of SIM cards when the remaining total data usage allowance is below a first threshold until the remaining total data usage allowance is above the first threshold. The total data usage allowance is changed to a first value periodically or according to an administrator's instruction.

Abstract: The present invention discloses methods and systems for selecting at least one SIM card for data communication at a wireless communication device which is capable of housing a plurality of SIM cards. When a switching condition is satisfied, the wireless communication device selects a second SIM card group, and disconnects one or more connections established using any non-second group SIM card. Non-second group SIM cards are SIM cards that are not in the second SIM card group. A selected SIM card from the second SIM card group is then used for data communications. The steps are repeated until (i) the switching condition is no longer satisfied, (ii) no more SIM cards selected from the second SIM card group can be used for data communications or (iii) no more connection is made using non-second group SIM cards.

Abstract: The present invention discloses methods and systems for transferring SIM card information from a first device to a server. A first SIM card is housed in the first device or in a first modem connected to the first device. When the first device boots up, it identifies the first SIM card and retrieves SIM card information from the first SIM card. The first device then sends authentication information to the first server and requests historical SIM card activity information. Historical SIM card activity information received from the first server is stored in a storage medium, and is used for determining whether to use the first SIM card. The first server performs steps of receiving a first request message from the first device, and determining the SIM card identity specified in the first request message if the first request message is authentic. The first server retrieves and sends historical SIM card activity information of the first SIM card to the first device.

Abstract: A method and system for a first node to transmit packets to a second none, comprising receiving a packet from a local area network (LAN) interface, inspecting the packet; determining whether the packet satisfies at least one packet condition; transmitting the packet through a predefined tunnel if the packet satisfies the at least one packet condition; transmitting the packet through a second tunnel if the packet does not satisfy the at least one packet condition. The predefined tunnel is a first tunnel and is established before the packet is received by the first node. The second tunnel belongs to a first tunnel group or a second tunnel group. The first tunnel, the second tunnel and other tunnels may together form an aggregated connection. Further, the use of predefined tunnel may be based on whether the packets satisfy a session condition.

Abstract: A method and system for choosing at least one network interface among a plurality of network interfaces to send and receive information data by determining performance data for a plurality of network interface groups. A network interface group comprises one or more network interfaces of a network device. Performance data of a network interface group is determined by sending testing data through at least one network interface comprised in the network interface group. Performance data may be based on a report received from a test server to which the testing data was sent. Performance data is determined according to one or more performance metrics such as a CPU usage metric, a memory usage metric, a response time metric, a packet delay metric, a packet latency metric, a bandwidth metric, a throughput metric, packet loss, packet drop, a power consumption metric, or a signal to noise ratio (SNR) metric.

Abstract: A network system and method regarding data flow transmission, including: a first network connection interface interconnecting with a transmitter; at least two second network connection interfaces interconnecting with a receiver through at least two access networks; and a control unit, used for receiving packets of a data flow from the transmitter by the first network connection interface, selecting an access network from the access networks connecting to the at least two second network connection interfaces to send the packets embedded with the packets of the data flow to the receiver, determining whether to generate at least one nominal reception acknowledgement message corresponding to the packets of the data flow, generating the nominal reception acknowledgement message on behalf receiver if it is determined to generate the nominal reception acknowledgement message, and sending the nominal reception acknowledgement message to the transmitter; and at least one storage medium.

Abstract: The present invention discloses methods and systems for managing VPN tunnels. A VPN concentrator establishes a first aggregated VPN connection and a second aggregated VPN connection with a first host and a first network device respectively. When the first aggregated VPN connection comprises a first plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. Similarly, when the second aggregated VPN connection comprise a second plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. The first host encapsulates a first data packet in a first encapsulating packet and transmits the first encapsulating packet to a VPN concentrator using a first aggregated VPN connection.

Abstract: A method and system for processing Domain name Services (DNS) request in a gateway. The gateway receives a DNS request from a host from its local area network. The gateway then selects DNS server(s) and transmits a new DNS request to at least one DNS server(s). DNS server(s) may or may not be accessible through a first tunnel. The contents of the new DNS request are the same as the content of the received DNS request. Further, when the gateway receives a DNS response corresponding to the DNS request, it determines a decision whether to transfer data to the host whose IP address is specified in the DNS response through a second tunnel. The decision may be based on a geographical location of an IP address.

Abstract: A method and system for a first node to transmit packets to a second none, comprising receiving a packet from a local area network (LAN) interface, inspecting the packet; determining whether the packet satisfies at least one packet condition; transmitting the packet through a predefined tunnel if the packet satisfies the at least one packet condition; transmitting the packet through a second tunnel if the packet does not satisfy the at least one packet condition. The predefined tunnel is a first tunnel and is established before the packet is received by the first node. The second tunnel belongs to a first tunnel group or a second tunnel group. The first tunnel, the second tunnel and other tunnels may together form an aggregated connection. Further, the use of predefined tunnel may be based on whether the packets satisfy a session condition.

Abstract: The present invention discloses methods and systems for sharing data usage by a plurality of SIM cards at a plurality of network devices. Each of the plurality of network devices is capable of housing at least one SIM card from the plurality of SIM cards. The method comprises the steps of determining the total data usage allowance. A remaining total data usage allowance is determined by either retrieving it from a carrier server or by subtracting aggregated data usage information from the total data usage allowance. The method further comprises restricting use of one or more of the plurality of SIM cards when the remaining total data usage allowance is below a first threshold until the remaining total data usage allowance is above the first threshold. The total data usage allowance is changed to a first value periodically or according to an administrator's instruction.

Abstract: The present invention discloses a method carried out by a first communications device for determining performance of a plurality of connections and selecting at least one first connection from the plurality of connections substantially based on performance. Data packets are then transmitted through the at least one first connection. The plurality of connections are aggregated to form an aggregated connection. The determining of performance is performed by transmitting evaluation packets through the plurality of connections. The evaluation packets are based on data packets that are received by the first communication device but have not yet been transmitted through the aggregated connection. The data packets may be designated for a host or node reachable through the aggregated connection. Alternatively, the evaluation packets may be based on predefined information when there are no data packets to be transmitted through the aggregated connection. The performance may be determined periodically.

Abstract: The present invention discloses methods and systems for sharing data usage by a plurality of SIM cards at a plurality of network devices. Each of the plurality of network devices is capable of housing at least one SIM card from the plurality of SIM cards. The method comprises the steps of determining the total data usage allowance. A remaining total data usage allowance is determined by either retrieving it from a carrier server or by subtracting aggregated data usage information from the total data usage allowance. The method further comprises restricting use of one or more of the plurality of SIM cards when the remaining total data usage allowance is below a first threshold until the remaining total data usage allowance is above the first threshold. The total data usage allowance is changed to a first value periodically or according to an administrator's instruction.

Abstract: The present invention discloses methods and systems for transferring SIM card information from a first device to a server. A first SIM card is housed in the first device or in a first modem connected to the first device. When the first device boots up, it identifies the first SIM card and retrieves SIM card information from the first SIM card. The first device then sends authentication information to the first server and requests historical SIM card activity information. Historical SIM card activity information received from the first server is stored in a storage medium, and is used for determining whether to use the first SIM card. The first server performs steps of receiving a first request message from the first device, and determining the SIM card identity specified in the first request message if the first request message is authentic. The first server retrieves and sends historical SIM card activity information of the first SIM card to the first device.

Abstract: The present invention discloses methods and systems for selecting at least one SIM card for data communication at a wireless communication device which is capable of housing a plurality of SIM cards. When a switching condition is satisfied, the wireless communication device selects a second SIM card group, and disconnects one or more connections established using any non-second group SIM card. Non-second group SIM cards are SIM cards that are not in the second SIM card group. A selected SIM card from the second SIM card group is then used for data communications.

Abstract: A method and a system for creating Internet Protocol address based network policies (IPPs) by using domain name based network policies (DNNTPs) is disclosed. The DNNTPs are stored in a second device, and are used for enforcing IPPs at a first device. The first device retrieves one or more DNNTPs from the second device and monitors network traffic for Domain Name System (DNS) look-up reply. When a network device receives a record Domain Name System look-up reply, the network device identifies one or more Internet Protocol addresses of one or more host names specified in the address record Domain Name System look-up reply, then determine whether the one or more host names contain a domain name used in one or more DNNTPs and create one or more IPPs.

Abstract: The present invention discloses methods and network nodes for distributing data packets through a plurality of wide area network (WAN) interfaces and through a gateway at a network node. In order to determine whether the gateway is a slave gateway, identification request is sent to the gateway by a network node. When the gateway is configured as a slave gateway, transmitting instruction to the gateway. Further, weighting may be assigned to the WAN interfaces. Further, connections may be established through WAN interfaces of the network node and WAN interfaces of the gateway. The connections may further be aggregated together to form an aggregated connection.

Abstract: The present invention discloses methods and systems for managing a node through a management server. The management server verifies whether a management confirmation has been received and allows a second user group to manage the node if the management confirmation is received. If the management confirmation is not received by the management server, the second user group is not allowed to manage the node through the management server.

Abstract: Methods and systems for transmitting data packets from a host to a destination via a virtual private network (VPN) connection at a VPN gateway. VPN gateway receives encapsulated packets via the VPN connection. The encapsulated packets encapsulate the data packets originated from the host. VPN gateway decapsulates the encapsulated packets to retrieve the data packets. VPN gateway determines whether the data packets originated from an IoT device based on IP address of the host. When the host is the IoT device, VPN gateway performs deep packet inspection (DPI) on the data packets. VPN gateway determines whether the data packets are allowed to be transmitted to the destination. When the data packets are allowed to be transmitted to the destination, VPN gateway transmits the data packets to the destination.

Abstract: Methods and apparatus for processing DNS request in a gateway with WAN and LAN interfaces. The gateway receives a first DNS request from a host via the LAN interface. The gateway selects DNS servers according to predefined selection policies and selects access networks that are authorized to send new DNS requests. The new DNS requests and the first DNA request have the same content. The gateway transmits the new DNS requests to corresponding DNS sever of the selected access networks through the selected access networks and via the WAN interfaces that are connected to the selected access networks. The gateway then identifies valid DNS responses from DNS responses received from the corresponding DNS server. The gateway selects one of the identified valid DNS responses and generates a first new DNS response with the same content thereof. The gateway sends the first new DNS response to the host.