Abstract: A network-connected device, and methods for executing operating programs stored in a RAM-based file storage system, where the network-connected device includes a bootloader configured to be executed during a boot of the network-connected device. When executed, the bootloader causes the network-connected device to connect to an external computing device via a network, and to download an operating program. The network-connected device then stores the operating program in a RAM-based file storage system that is located in a simulated disk drive that resides in the RAM memory, and executes the operating program from within the RAM-based file storage system. In some embodiments, the network-connected device also is configured to store configuration files in the RAM-based file storage system, make changes to the configuration files stored in the RAM-based file storage system, and synchronize those changes with a remote persistent file store hosted by an external computing device.

Abstract: A network-connected device, and methods for executing operating programs stored in a RAM-based file storage system, where the network-connected device includes a bootloader configured to be executed during a boot of the network-connected device. When executed, the bootloader causes the network-connected device to connect to an external computing device via a network, and to download an operating program. The network-connected device then stores the operating program in a RAM-based file storage system that is located in a simulated disk drive that resides in the RAM memory, and executes the operating program from within the RAM-based file storage system. In some embodiments, the network-connected device also is configured to store configuration files in the RAM-based file storage system, make changes to the configuration files stored in the RAM-based file storage system, and synchronize those changes with a remote persistent file store hosted by an external computing device.

Abstract: Devices, networks, storage media, and methods for identifying client devices across a network address translation border. The devices include devices that perform the methods. The methods include methods of generating client-specific identifiers for a protocol data unit (PDU) utilizing a network address translation (NAT) device that performs network address translation. The PDU includes a header and a payload and these methods include embedding a client-specific tag within the header of the PDU to generate a modified PDU and transmitting the modified PDU and a client table to an upstream device. The methods also include methods of interpreting client-specific identifiers within a PDU with an upstream device. These methods include receiving the client table and the modified PDU with the upstream device and determining, based upon the modified PDU and the client table, a unique client identifier of a given client device.

Abstract: Methods of secure authenticated passwordless communication executed by a resource client device include (a) receiving an alternate address from a user, (b) sending a registration request to a resource server, (c) receiving from the user a passcode, (d) sending a verification request to the resource server, and (e) receiving from the resource server an access token. The alternate address is an address to communicate with the user via an alternate communication channel. The registration request includes the alternate address and a unique client device identifier associated with the resource client device. The passcode is generated by the resource server and sent to the user at the alternate address via the alternate communication channel. The verification request includes the passcode. The access token is received after sending the verification request. The resource client device may use the access token in future resource requests to the resource server.

Abstract: A method of filtering outbound Internet traffic includes connecting an appliance to a network (that includes an end user terminal and a router), altering the flow of network traffic to direct the end user terminal to route outbound Internet traffic through the appliance, and filtering the outbound Internet traffic with the appliance. The outbound Internet traffic is traffic to remote servers from the end user terminal. The appliance may alter the flow of network traffic by issuing a gratuitous ARP packet from the appliance to direct the end user terminal to route the outbound Internet traffic through the appliance instead of the router. The appliance may receive the outbound Internet traffic to remote servers from the end user terminal, monitor the outbound Internet traffic, filter the outbound Internet traffic to form allowed packets for the remote servers, and/or forward the allowed packets to the remote servers.

Abstract: A method of filtering outbound Internet traffic includes connecting an appliance to a network (that includes an end user terminal and a router), altering the flow of network traffic to direct the end user terminal to route outbound Internet traffic through the appliance, and filtering the outbound Internet traffic with the appliance. The outbound Internet traffic is traffic to remote servers from the end user terminal. The appliance may alter the flow of network traffic by issuing a gratuitous ARP packet from the appliance to direct the end user terminal to route the outbound Internet traffic through the appliance instead of the router. The appliance may receive the outbound Internet traffic to remote servers from the end user terminal, monitor the outbound Internet traffic, filter the outbound Internet traffic to form allowed packets for the remote servers, and/or forward the allowed packets to the remote servers.

Abstract: A method of configuring an appliance to be a plug-and-play network filter includes the steps of configuring an appliance to alter the flow of network traffic when the appliance is connected to a network. The appliance is configured to change the address resolution protocol ARP so that it assumes the role of a router by issuing an ARP packet. The appliance is configured to establish itself between the router and end user terminals. The appliance is configured to respond to any ARP Request on the Gateway IP address. The appliance is configured to monitor Internet traffic, and filter certain predefined types of Internet traffic. The appliance is configured to transparently proxy web packets on TCP with destination port 80.

Abstract: A method of configuring an appliance to be a plug-and-play network filter includes the steps of configuring an appliance to alter the flow of network traffic when the appliance is connected to a network. The appliance is configured to change the address resolution protocol ARP so that it assumes the role of a router by issuing an ARP packet. The appliance is configured to establish itself between the router and end user terminals. The appliance is configured to respond to any ARP Request on the Gateway IP address. The appliance is configured to monitor Internet traffic, and filter certain predefined types of Internet traffic. The appliance is configured to transparently proxy web packets on TCP with destination port 80.