Abstract: A method and system for a first node to transmit packets to a second none, comprising receiving a packet from a local area network (LAN) interface, inspecting the packet; determining whether the packet satisfies at least one packet condition; transmitting the packet through a predefined tunnel if the packet satisfies the at least one packet condition; transmitting the packet through a second tunnel if the packet does not satisfy the at least one packet condition. The predefined tunnel is a first tunnel and is established before the packet is received by the first node. The second tunnel belongs to a first tunnel group or a second tunnel group. The first tunnel, the second tunnel and other tunnels may together form an aggregated connection. Further, the use of predefined tunnel may be based on whether the packets satisfy a session condition.

Abstract: A method and system for configuring a network device according to the identity of a plurality of removable wireless communications devices (RWCDs), the method comprising the steps of: determining the identities of the plurality of RWCDs; determining whether the network device is capable of using the plurality RWCDs; retrieving policy settings from an authorized party or a storage medium of the network device according to the identities of the plurality of RWCDs, determining priority of policy settings; and configuring the network device according to the policy settings. The priority of policy settings are based on the positions of the RWCDs when there are conflict among policy settings. The plurality of RWCDs are plugged to the network device and the network device provides wireless wide area network (WAN) connectivity through the plurality of RWCDs.

Abstract: The present invention discloses methods and systems for transmitting a received packet at a first network node through an aggregated connection. The first network node determines session information of the received packet and determines whether a new tunnel needs to be selected for transmitting the received packet. When a new tunnel needs to be selected, a hash result is determined. The hash result is substantially based on the session information and the number of available tunnels. A first tunnel is determined for transmitting the received packet according to the hash result. The session information and tunnel ID of the first tunnel is then stored in a first database. The received packet is transmitted through the first tunnel. When a new tunnel need not be selected, a lookup is performed to determine a tunnel ID substantially based on the session information. The received packet is transmitted through the determined tunnel.

Abstract: A network system and method regarding data flow transmission, including: a first network connection interface interconnecting with a transmitter; at least two second network connection interfaces interconnecting with a receiver through at least two access networks; and a control unit, used for receiving packets of a data flow from the transmitter by the first network connection interface, selecting an access network from the access networks connecting to the at least two second network connection interfaces to send the packets embedded with the packets of the data flow to the receiver, determining whether to generate at least one nominal reception acknowledgement message corresponding to the packets of the data flow, generating the nominal reception acknowledgement message on behalf receiver if it is determined to generate the nominal reception acknowledgement message, and sending the nominal reception acknowledgement message to the transmitter; and at least one storage medium.

Abstract: The present invention discloses methods and systems for managing VPN tunnels. A VPN concentrator establishes a first aggregated VPN connection and a second aggregated VPN connection with a first host and a first network device respectively. When the first aggregated VPN connection comprises a first plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. Similarly, when the second aggregated VPN connection comprise a second plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. The first host encapsulates a first data packet in a first encapsulating packet and transmits the first encapsulating packet to a VPN concentrator using a first aggregated VPN connection.

Abstract: The present invention discloses methods and systems for managing an error correction mode at a first communications router. The first communication router transmits data packets to a second communications router and stores the first data packet in a local storage medium, When a delay inquiry message is received from the second communications router, the first communications router activates the error correction mode. When the error correction mode is activated, the first data packet is retransmitted to the second communications router and an error correction packet corresponding to the first data packet is also transmitted. When a back-to-normal message is received from the second communications router, the first communications router deactivates the error correction mode. The back-to-normal message indicates that the first communications router no longer needs to be in error correction mode.

Abstract: The present invention discloses methods and systems for estimating network performance of a virtual private network (VPN) tunnel established between a first network node and a second network node. The VPN tunnel comprises a plurality of end-to-end connections. The first network node transmits reference packets through at least two end-to-end connections of the plurality of end-to-end connections and estimates networking performance of the at least two end-to-end connections. When the reference packets are transmitted substantially at the same time, the reference packets are originated from different wide area network (WAN) network interfaces of the first network node and designated to different WAN network interfaces of the second network node. These steps are repeated until network performances have been estimated for all end-to-end connections of the plurality of end-to-end connections by the first network node.

Abstract: A method and system for a first node to transmit packets to a second none, comprising receiving a packet from a local area network (LAN) interface, inspecting the packet; determining whether the packet satisfies at least one packet condition; transmitting the packet through a predefined tunnel if the packet satisfies the at least one packet condition; transmitting the packet through a second tunnel if the packet does not satisfy the at least one packet condition. The predefined tunnel is a first tunnel and is established before the packet is received by the first node. The second tunnel belongs to a first tunnel group or a second tunnel group. The first tunnel, the second tunnel and other tunnels may together form an aggregated connection. Further, the use of predefined tunnel may be based on whether the packets satisfy a session condition.

Abstract: A method and a first communications router for transmitting data packets to a second communications router by establishing an aggregated end-to-end connection with the second communications router. The aggregated end-to-end connection comprises a plurality of established end-to-end connections. Data packets are transmitted through a first established end-to-end connection when a first condition is satisfied, and through a second established end-to-end connection when a second condition is satisfied. The first and second established end-to-end connections belong to the aggregated end-to-end connection. The first communications router comprises a plurality of network interfaces.

Abstract: The present invention discloses a method carried out by a first communications device for determining performance of a plurality of connections and selecting at least one first connection from the plurality of connections substantially based on performance. Data packets are then transmitted through the at least one first connection. The plurality of connections are aggregated to form an aggregated connection. The determining of performance is performed by transmitting evaluation packets through the plurality of connections. The evaluation packets are based on data packets that are received by the first communication device but have not yet been transmitted through the aggregated connection. The data packets may be designated for a host or node reachable through the aggregated connection. Alternatively, the evaluation packets may be based on predefined information when there are no data packets to be transmitted through the aggregated connection. The performance may be determined periodically.

Abstract: A method for displaying network performance information by selecting an aggregated end-to-end connection profile, and then displaying network performance information corresponding to the aggregated end-to-end connection profile. The network performance information corresponding to the aggregated end-to-end connection profile is retrieved from a local storage unit or a remote storage unit. The aggregated end-to-end connection profile is corresponding to an aggregated end-to-end connection comprising a plurality of end-to-end connections. In one embodiment, identities of all WAN interfaces corresponding to the aggregated end-to-end connection are displayed. Alternatively, identities of a plurality of WAN interfaces corresponding to the aggregated end-to-end connection are displayed, where the plurality of WAN interfaces are selected according to a policy or a user's selection.

Abstract: Compositions and methods are provided for the cell-mediated targeted killing of diseased cells based on the presence of an intracellular antigen, rather than a surface-bound marker. The targeting cells are modified to express a cytotoxic protein that is delivered into a targeted cell, and after delivery is selectively activated by the presence of a cytoplasmic protein of interest. In one embodiment of the invention, the cytotoxic molecule is a Granzyme B (GrB) polypeptide. In the compositions of the invention, GrB is modified to render its cytotoxic enzymatic functions inactive, until the presence of an intracellular antigen unlocks the GrB molecule to enable enzymatic activities.

Abstract: The present invention discloses methods and systems for transmitting and receiving packets through a plurality of logical connections based on priority levels. When an encapsulating packets is received from a second network device via a logical network connection, priority level of a packet encapsulated in the encapsulating packet is determined, and the encapsulating packet is stored in a queue or transmitted to a host based on GSEQ, PSEQ, TSEQ, and the priority level. When a packet is received from a host via a LAN connection, the packet is retrieved from a priority queue based on the priority level a first logical network connection is selected for transmitting the packet. The packet is encapsulated in an encapsulating packet, and the payload of the encapsulating packet comprises the packet, GSEQ, TSEQ, PSEQ, and priority level of the packet. The encapsulating packet is then sent through the first logical network connection.

Abstract: Methods and systems for creating protocol header to allow network device to transfer and receive layer two packets through multiple network links. One or more layer three packets are used to encapsulate layer two packets. The protocol header includes a network link identification and a tunnel sequence number. The network link identification is used to identify the network link and the tunnel sequence number is used to identify the sequence of the one or more layer three packets in a network link. A layer two packet may be encrypted first before being embedded in the one or more layer three packets.

Abstract: The present invention discloses methods and network nodes for distributing data packets through a plurality of wide area network (WAN) interfaces and through a gateway at a network node. In order to determine whether the gateway is a slave gateway, identification request is sent to the gateway by a network node. When the gateway is configured as a slave gateway, transmitting instruction to the gateway. Further, weighting may be assigned to the WAN interfaces. Further, connections may be established through WAN interfaces of the network node and WAN interfaces of the gateway. The connections may further be aggregated together to form an aggregated connection.

Abstract: The present invention discloses methods and systems for processing data packets received at a first network node and for processing encapsulating packets received at a second network node. The first network node receives data packets from its network interface. It then selects a first tunnel and selects none or at least one second tunnel according to a selection policy. Original encapsulating packets (OEPs) are transmitted to a second network node through the first tunnel and at least one duplicate encapsulating packet (DEP) is transmitted through the at least one second tunnel. The second network node receives an encapsulating packet with a global sequence number (GSN) through an aggregated connection. The second network node determines whether one or more data packets corresponding to the encapsulating packet have been received earlier. The second network node may then determine whether or not to forward the one or more data packets.

Abstract: A method and a first communications router for transmitting data packets to a second communications router by establishing an aggregated end-to-end connection with the second communications router. The aggregated end-to-end connection comprises a plurality of established end-to-end connections. Data packets are transmitted through a first established end-to-end connection when a first condition is satisfied, and through a second established end-to-end connection when a second condition is satisfied. The first and second established end-to-end connections belong to the aggregated end-to-end connection. The first communications router comprises a plurality of network interfaces.

Abstract: The present invention discloses methods and systems for transmitting a received packet at a first network node through an aggregated connection. The first network node determines session information of the received packet and determines whether a new tunnel needs to be selected for transmitting the received packet. When a new tunnel needs to be selected, a hash result is determined. The hash result is substantially based on the session information and the number of available tunnels. A first tunnel is determined for transmitting the received packet according to the hash result. The session information and tunnel ID of the first tunnel is then stored in a first database. The received packet is transmitted through the first tunnel. When a new tunnel need not be selected, a lookup is performed to determine a tunnel ID substantially based on the session information. The received packet is transmitted through the determined tunnel.

Abstract: The present invention discloses methods and systems for transmitting data packets through a plurality of connections and through a gateway at a network node. The network node receives network performance observation report (NPOR) from the gateway. Based on the NPOR, the network node determines at least one of the plurality of wide area network (WAN) interfaces of the gateway for transmitting data packets. The network node then creates and transmits an instruction to the gateway. When the network node transmits the data packets to the gateway, the network node also creates and transmits an instruction to the gateway to determine the WAN interface(s) of the gateway for transmitting the packets.

Abstract: Method and system for storing packets received from a bonded communication links according to latency of the communication link that has the largest latency among all communication links of the bonded communication links. Embodiments of present inventions can be applied to bonded communication links, including wireless connection, Ethernet connection, Internet Protocol connection, asynchronous transfer mode, virtual private network, WiFi, high-speed downlink packet access, GPRS, LTE, and X.25. The present invention presents methods comprising the steps of estimating storage size of a queue, wherein the queue is for storage the one or more packets received from the bonded communication links.