Patent Application
20240422131
Examples of the disclosure relate generally to systems and methods for connecting to computer networks, and more specifically, to systems and methods for using a router device to securely connect to a remote computer network using a virtual private network (VPN).
Sensitive electronic data and sensitive electronic communications require secure and private network connections, even when accessing public networks from non-secure locations, such as when using public Wi-Fi connections or cellular connections. Known solutions for protecting and securing network communications do not address all needs, including the need for separating device-side network communications from public-network side network communications, the need for rapidly deploying ephemeral virtual private networks (VPNs) through which to route communications, the need to provide hotspot connectivity, the need to automatically cease network communications if it is detected that the VPN has gone down, and the need to provide a graphical user interface for controlling system functionality. Disclosed herein are systems and methods that may address one or more of the above-identified needs.
Disclosed herein is a device (and methods for use thereof) for facilitating secure network (e.g., wireless) communications, for example when using public Wi-Fi and/or cellular (e.g., 4G or 5G) connections. The device may be provided in the form of a secure travel router. The device may be provided as a SoC (System-on-Chip) board allowing for enormous flexibility in deployment options. For example, the device may be based on a Raspberry Pi. The device may include a user-side network communication interface, such as a Wi-Fi communication interface, other wireless communication interface, and/or wired communication interface. The device may include a separate, public-facing-side (e.g., network-side) network communication interface, such as a Wi-Fi communication interface, cellular communication interface, Ethernet communication interface, other wireless communication interface, and/or other wired communication interface. A user may connect their own mobile (e.g., phone or laptop) to the user-side communication interface, and may connect the network-side communication interface of the device to the public network. Network traffic may be passed on the device (e.g., using IP rules) between the two separate network communication interfaces.
The device may include instructions, for example instructions stored locally on memory on the device, for instantiating and configuring an ephemeral VPN, and for using said ephemeral VPN to transmit (and thereby protect) network traffic transmitted to and from the device. Thus, a secure tunnel for safe transport of wireless communications is provided. The VPN functionality allows users to be able to leverage an ephemeral VPN hosted at the service provider of their choosing and configured in a manner of their choosing.
The device may be configured to provide a software “kill switch” that monitors the status of the instantiated VPN and/or monitors traffic passing through the VPN and/or otherwise passing to/from the device. The device may be configured such that, if it is detected that the VPN connection is dropped (or if it is detected otherwise that the VPN has ceased functioning), then communications to/from the device are ceased such that no data leaves the device. The device may be configured to transmit instructions to destroy the VPN after use of it is complete.
The device may be configured to provide hotspot connectivity, such that one or more client devices (e.g., mobile devices) may connect to the device (e.g., using Wi-Fi) as a hotspot via the user-device-facing network communication interface. The device may be able to enter a “discoverable” mode where other client devices can discover it as a hotspot. The hotspot may be provided via the user-facing network communication interface of the device. The device may be configured to rapidly deploy ephemeral hotspots and to destroy the hotspots after use of them is complete.
The device may include a display (e.g., a touch-screen display) that provides a graphical user interface that allows users to control system functionality. The graphical user interface may allow users to interact with a plurality of screens (e.g., provided as toggle screens) to configure different device functionality. The graphical user interface may allow users to access Wi-Fi capture pages, such as those found in coffee shops and hotels, allowing users to easily connect the outbound network communication interface.
A Wi-Fi graphical user interface (GUI) screen may provide an affordance to cause the device to scan for Wi-Fi networks, an affordance allowing users to select from amongst detected Wi-Fi networks, a field allowing users to enter Wi-Fi passwords, an affordance to cause the device to connect to a selected Wi-Fi network, an affordance to cause the device to disconnect from a connected Wi-Fi network, and a GUI object displaying a status of the Wi-Fi connection. The Wi-Fi GUI may allow users to navigate web content, such as captive portals often used to access public Wi-Fi connections.
A VPN GUI screen may include an affordance allowing a user to select a configuration file (e.g., a PEM file), a field allowing a user to enter a network address at which to instantiate a VPN, an affordance to cause the device to create a VPN, an affordance to cause the device to destroy a VPN, an affordance to cause the device to restart a VPN, and a GUI object displaying a status of whether a VPN is deployed and/or functioning correctly.
A hotspot GUI screen may comprise an affordance allowing users to select from amongst different available network communication interfaces by which to provide hotspot connectivity, a field allowing users to input a hotspot name, a field allowing users to input a password for a hotspot to be deployed, an affordance to cause the device to create a hotspot, an affordance to cause the device to destroy a hotspot, and a GUI object displaying a status of whether a hotspot is currently deployed.
In some embodiments, the GUI may be user-editable.
The device may be small, portable, and/or battery-powered.
The devices disclosed herein provide a combination of multiple features into a single device, coupled with the simple deployment of a VPN solution to a service provider of the user's choosing, and further coupled with the assurance that no unsecured data ever leaves the hardware device. This combination of features is not provided in known solutions.
Any of the features disclosed herein, including any of the features disclosed in the claims, specification, and/or figures, may be combined in whole or in part with one another.
According to examples of the disclosure, a system can include a router device in communication with a first wireless network interface; one or more sensors; and one or more processors. A location of the router device can be determined based on an output of the one or more sensors. It can be determined whether to establish a Wi-Fi network connection via the first wireless network interface. In accordance with a determination to establish a Wi-Fi network via the first wireless interface, a Wi-Fi network can be selected based on the location of the router device; a first VPN can be instantiated via the Wi-Fi network; and encrypted data can be communicated from a client device to the first VPN via the Wi-Fi network. In accordance with a determination not to establish a Wi-Fi network via the first wireless interface, an SIM can be selected from one or more SIMs based on the location of the router device; a connection to a cellular data network via a second wireless network interface can be initialized based on the selected SIM; a second VPN can be instantiated via the cellular data network; and encrypted data can be communicated from the client device to the second VPN via the cellular data network.
In the following description of examples, reference is made to the accompanying drawings which form a part hereof, and in which it is shown by way of illustration specific examples that can be practiced. It is to be understood that other examples can be used and structural changes can be made without departing from the scope of the disclosed examples.
Example processes described herein can be performed or implemented via one or more computers, computing devices, or computing systems (including conventional computers and including mobile devices, such as smartphones). Examples of the disclosure may be implemented in any suitable form, including hardware, software, firmware, or any combination of these, using any suitable programming language or technology. Devices used to implement examples of the disclosure can include one or more processors (e.g., CPUs, GPUs, DSPs) configured to execute instructions stored on transitory or non-transitory computer-readable media, thereby performing one or more steps of one or more methods described herein. For example, computer-readable media can include optical media (e.g., CD-ROM, DVD-ROM, Blu-Ray, etc.); a memory; or any other medium capable of being accessed by a computer. Embodiments described herein can be implemented in any suitable format, including hardware or software in any suitable combination. A communications network (e.g., the Internet) can be used to communicate data between two or more elements or nodes of a system described herein, such as between two computers or other devices (e.g., smartphones or mobile devices). These communications can include communication via wired (e.g., Ethernet) or wireless (e.g., Wi-Fi, Bluetooth) communication channels and digital or in analog communication channels. Other suitable technologies for implementing the examples disclosed herein will be familiar to the skilled artisan and are within the scope of this disclosure.
In
Router device 200, or another component of computer system 100, can include or communicate with a SIM (Subscriber Identity Module) for access to a data network, such as a cellular data network. The skilled artisan will be familiar with SIM technology, which is described for example in Andrew Tanenbaum, C
In the example shown in
It is advantageous for computer system 100 to include a portable device (e.g., router device 200) that can connect securely from a field location to a remotely located computer network. For example, it is advantageous for router device 200 to securely connect from the field location to one or more networked computers of a corporate headquarters (which can in turn be securely connected to one or more networked computers of a satellite office). In some cases, the field location and the remote computer network may be located in different countries; different regions of the same country; or different areas of the same geographic region. A field location in which the portable device is located may have communication needs, concerns, or preferences that are based on that location. For example, the portable device may be located in a location in which network communications are monitored or under surveillance; in which network infrastructure has been compromised; in which devices must comply with specific regulatory requirements, usage restrictions, or other limitations (e.g., privacy restrictions); or in which data bandwidth, power, or other resources are limited. In some cases, a user of the portable device may prefer a particular data service provider (such as a cellular service provider or an Internet service provider (ISP)) for network access (e.g., Internet access) based on the location of the portable device. For example, the user may prefer to use a first service provider (e.g., Company A) for cellular service in the United States, but to use a second service provider (e.g., Company B) for cellular service in Mexico. This preference may be based on considerations such as a provider's rates, coverage area, quality of service, data policies, privacy policies, or usage policies in a particular location. For instance, Company A may offer more reliable coverage than Company B in a first location (which can be a country, a city, a state, a building, a room, a neighborhood, a time zone, a continent, a range of latitudes and longitudes, a range of GPS coordinates, a zone or subnetwork of a computer network, or any other suitable location or type of location), such that Company A is preferred for data service when the portable device is in the first location. But Company B may offer more economical pricing, or greater data security, or some other advantage, such that it is preferred when the portable device is in the second location (or a location different from the first location).
Router device 200 can make use of a virtual private network (VPN) to communicate securely with a remote computer network via an unsecured network, such as the public Internet (which may be accessed by, e.g., publicly available Wi-Fi, or cellular service provided by an untrusted entity). A VPN is an overlay network on top of a public data network that has properties of a private network, such as a network built up from company computers and leased telephone lines. As the skilled artisan will understand, VPN can maintain an authenticated, encrypted, communications channel for securely transmitting data traffic across a public network, such as the Internet. The skilled artisan will be familiar with such VPNs, which are described for example in Andrew Tanenbaum, C
In some examples, computer system 310 can communicate with a VPN (e.g., via VPN server 350) using a wired or wireless communications interface, such as interfaces 212 or 214 described above. For example, computer system 310 can use a Wi-Fi adapter to connect to the Internet 340 and communicate with VPN server 350. In some examples, computer system 310 can communicate with VPN server 350 via a mobile phone, or via another device with a cellular data communications interface (e.g., a 4G LTE or 5G modem or HAT). In some such examples, a device such as router device 200 can tether to the mobile phone to take advantage of the mobile phone's existing cellular connectivity, and can send and receive data to VPN server 350 by using the mobile phone as an intermediary. Similarly, client devices 320, in communication with router device 200, can send and receive data to VPN server using the mobile phone. In some cases, the VPN is created by (and may be terminated by) computer system 100, router device 200, and/or the mobile phone or cellular data device.
At stage 410A of process 400A, a Wi-Fi network can be selected from a group of available Wi-Fi networks. In some examples, the Wi-Fi network can be selected based on one or more attributes of the Wi-Fi network, such as a security policy of the Wi-Fi network; whether the Wi-Fi network is public or private; a connection quality of the Wi-Fi network; or other suitable attributes. At stage 420A of process 400A, a data connection (e.g., to the Internet) can be initialized using the selected Wi-Fi network according to techniques known in the art. In some examples, user input received via a GUI, such as presented via a display in communication with computer system 100, can be used to select the Wi-Fi network and to initialize the data connection. In some examples, these operations can be performed automatically.
At stage 430 of process 400A, a VPN can be instantiated using the data connection initialized at stage 420A, according to techniques known in the art. For example, VPN utilities (such as WireGuard) familiar to the skilled artisan can be used to instantiate and configurate the VPN for use by computer system 100. In some cases, the VPN can be an ephemeral VPN such as described above, and stage 430 can include configuring ephemeral features of the VPN, such as conditions (e.g., time limits or other conditions described above) under which the VPN will automatically terminate. In some examples, a configuration file, such as a PEM file, can be stored in memory of computer system 100 and can be used to instantiate and configure the VPN. For example, the configuration file can retain settings associated with the VPN, so that the computer system 100 can utilize the same or analogous settings for future VPN connections. In some cases, the configuration file, or other VPN setup and configuration information, can be pre-loaded in memory of computer system 100.
At stage 440 of process 400A, a network connection for other devices (e.g., client devices) can be established using the VPN and the initialized data connection. For example, a wireless hotspot can be established using router device 200, according to techniques known in the art, to provide client devices (e.g., mobile phones, tablets, laptop computers, smart home devices, game consoles, etc.) with access to the VPN via the hotspot. For example, at stage 450 of process 400, such client devices can connect to the hotspot of router device 200 via a network adapter (e.g., a wired Ethernet adapter or a Wi-Fi adapter), and send and receive data via the VPN (stage 460) using the router device 200. In some examples, such as where computer system 100 includes a mobile phone, the hotspot can be established at stage 440 using the mobile phone, and client devices can connect to the VPN via the mobile phone at stage 450, such that the client devices can send and receive data via the VPN at stage 460.
At stage 470 of process 400A, a status of the VPN connection can be monitored. For example, the status of the VPN connection can be monitored to determine whether a connection to the VPN has been lost, or whether a fault has occurred, e.g., whether the connection has been interrupted or compromised, such that communications via the VPN are no longer secure. The VPN status can be monitored and managed locally to the VPN (e.g., at a VPN server location or another location of the VPN) and/or remotely (such as at a location of remote device 200, or at another remote location). In some examples, monitoring and management can be performed by remote device 200, and/or by a VPN server (e.g., VPN server 350). In some examples, a GUI can be used for VPN monitoring and management, as described below. At stage 480, it can be determined whether the VPN should be terminated based on the status of the VPN connection, based on the monitoring and management of the VPN such as described above, or for any other reason (e.g., to minimize power consumption or bandwidth, or as a timeout for security reasons). In some examples, a user can direct computer system 100 to terminate the VPN, such as by providing input via a GUI presented on a display. If it is determined at stage 480 that the VPN should terminate, the VPN can be so terminated at stage 490. Otherwise, process 400A can continue to send and receive encrypted data via the VPN, such as described above for stage 460.
In some cases, if the VPN is terminated or if a VPN connection is otherwise lost, process 400A can immediately terminate the Wi-Fi network connection; terminate the hotspot; disconnect from one or more client devices; turn itself off; or take other measures to ensure that no data is sent or received via the network connection. This can be advantageous in high-risk environments, such as military environments, or in communications involving highly sensitive data, by providing safeguards against accidentally transmitting data without the security offered by the VPN. In some instances, an alarm or alert notification can be triggered in accordance with terminating the VPN or with a lost VPN connection.
With respect to process 400B, at stage 410B, a SIM can be selected from one or more SIMs. (As described above, a SIM as used herein can refer to a physical SIM card, an eSIM, or another suitable device.) In some examples, the one or more SIMs may include a group of 15 to 20 different SIMs. As described above, a SIM can include subscriber information or access information for a data network, such as information identifying a data plan. A SIM can be selected from one or more SIMs based on a preference, requirement, or consideration for data access based on the current location of the router device 200. For example, as described above, a first data plan or data service provider associated with a first SIM may be preferred if the current location is a first location (e.g., a location within the United States); and a second data plan or data service provider associated with a second SIM may be preferred if the current location is a second location (e.g., a location within Mexico). As described above, this preference may be based on considerations such as a provider's rates, coverage area, quality of service, data policies, privacy policies, or usage policies in a particular location. For instance, a first service provider may offer more reliable coverage than a second service provider in a first location (which can be a country, a city, a state, a building, a room, a neighborhood, a time zone, a continent, a range of latitudes and longitudes, a range of GPS coordinates, a zone or subnetwork of a computer network, or any other suitable location or type of location), such that the first service provider is preferred for data service when the portable device is in the first location. But the second service provider may offer more economical pricing, or greater data security, or some other advantage, such that it is preferred when the portable device is in the second location (or a location different from the first location).
At stage 420B of process 400B, data services can be initialized using the selected SIM. For example, computer system 100 can communicate information from the selected SIM to a data service provider in order for the data service provider to permit computer system 100 to send and receive data via the data service provider's network. This initialization process may depend on the specific SIM selected, or on the data service provider associated with that selected SIM. For example, initializing data service with a major cellular service provider (e.g., Verizon, AT&T) may be a relatively lengthy process that exchanges a relatively large amount of data (potentially including personal information) between computer system 100 and the service provider. But initializing data service with a different or smaller service provider (e.g., Airalo, Holafly) may be a shorter and faster process that exchanges a smaller amount of data or a different type of data. In some cases, it can be advantageous to select an SIM that is associated with a particular initialization process. Thus, in some examples, the SIM can be selected at stage 410B based at least in part on an initialization process associated with that SIM. For instance, if computer system 100 is in a low-bandwidth network environment, or if computer system 100 is in a location in which certain information should not be transmitted as part of an initialization process, then an SIM can be selected such that an initialization process at stage 420B is a faster initialization process or a reduced data transmission initialization process. As one example, a first SIM (e.g., corresponding to a major cellular service provider) can be selected if computer system 100 is in a residential home environment; and a second SIM (e.g., corresponding to a smaller service provider) can instead be selected if computer system 100 is in hostile territory in a military environment. In some examples, one or more of the SIMs may be stored in, or otherwise associated with, a mobile phone in communication with router device 200.
Stages 430 through 490 of process 400B are analogous to stages 430 through 490 described above for process 400A, except that data communicated in process 400B is communicated via the cellular data network via data services established in process 400B (such as described above for stages 410B and 420B).
In some examples, one or more processors may execute process 400A or 400B based on a determination whether a cellular data network should be used for network communications, or on a determination whether a Wi-Fi network should be used for network communications. For example, computer system 100 can determine whether one or more public Wi-Fi networks are available. If one or more public Wi-Fi networks are available, computer system 100 can determine that a Wi-Fi network should be used for communication, and can perform process 400A, e.g., by using a Wi-Fi adapter to connect to the Wi-Fi network and initialize data services, as described above for stages 410A and 420A. But if no public Wi-Fi networks are available, computer system 100 may instead perform process 400B, e.g., by selecting a SIM and initializing data services using the selected SIM, as described above for stages 410B and 420B. In some examples, computer system 100 can determine whether a Wi-Fi network should be used based on a location (e.g., a country) of computer system 100, based on a characteristic of available Wi-Fi networks, or other suitable factors. In some examples, computer system 100 can determine that a cellular data network should be used for network communications based on a determination that a Wi-Fi network should not be used. In some cases, computer system 100 can establish a wired or wireless communication with a mobile phone, or another device (such as a peripheral connected to router device 200 via HAT interface 224), and use a wireless network interface of the mobile phone or device to connect with the cellular data network, such as described above for process 400B.
In some examples, one or more steps of process 400A or 400B described above may be performed at the direction of a user of computer system 100, such as in response to a command provided by the user via a GUI and an input device in communication with computer system 100. The GUI can be presented to the user via a display (such as a touch screen, computer monitor, or head-wearable display) in communication with computer system 100 and configured to receive output display data from computer system 100. The GUI can also be configured to receive user input (e.g., via a touch screen or touch panel, mouse, keyboard, or other input device) and to communicate the user input to a processor of computer system 100. A GUI can include one or more user-interactable interface elements, such as buttons, icons, switches, sliders, text entry boxes, menus, or other suitable elements. In some examples, elements of a GUI can be configured by a user; for instance, a user can choose to selectively show or hide one or more elements of a GUI, or can create custom GUI elements. Moreover, in some instances, a user can configure a script to execute in response to an interaction with a user interface element. In some examples, the input and output of the GUI can be handled via an operating system (such as Linux (e.g., Debian), Unix, Raspberry Pi OS, Windows, iOS, or Android) executing on a processor of computer system 100.
In the example view shown in
In the example view shown in
In the example view shown in
According to some examples of the disclosure, a system can comprise a router device in communication with a first wireless network interface; one or more sensors; and one or more processors configured to perform a method comprising: determining, based on an output of the one or more sensors, a location of the router device; determining whether to establish a Wi-Fi network connection via the first wireless network interface; in accordance with a determination to establish a Wi-Fi network connection via the first wireless interface: selecting a Wi-Fi network based on the location of the router device; instantiating a first virtual private network (VPN) via the Wi-Fi network; and communicating encrypted data from a client device to the first VPN via the Wi-Fi network; and in accordance with a determination not to establish a Wi-Fi network connection via the first wireless interface: selecting, based on the location of the router device, a SIM from one or more SIMs; initializing, based on the selected SIM, a connection to a cellular data network via a second wireless network interface; instantiating a second VPN via the cellular data network; and communicating encrypted data from the client device to the second VPN via the cellular data network. In some examples, selecting the SIM from the one or more SIMs is based on a bandwidth restriction associated with the location of the router device. In some examples, the selecting the SIM from the one or more SIMs is based on a data policy associated with the location of the router device. In some examples, the selecting the SIM from the one or more SIMs comprises selecting a first SIM in accordance with a determination that the location of the router device corresponds to a first country, and selecting a second SIM in accordance with a determination that the location of the router device corresponds to a second country. In some examples, the method further comprises: monitoring a status of the first VPN or the second VPN; and based on the status of the first VPN or the second VPN, preventing the client device from communicating data via the Wi-Fi network or the cellular data network. In some examples, preventing the client device from communicating data via the Wi-Fi network or the cellular data network comprises one or more of: terminating one or more of the Wi-Fi network connection or the connection to the cellular data network, disconnecting the client device from the router device, and turning off the router device. In some examples, determining whether to establish a Wi-Fi network connection via the first wireless network interface comprises determining whether a public Wi-Fi access point is available. In some examples, the second wireless network interface comprises a wireless network interface of a mobile phone; the mobile phone comprises the one or more SIMs; and the method further comprises: in accordance with the determination not to establish a Wi-Fi network connection via the first wireless interface, establishing a connection between the router device and the mobile phone. In some examples, the one or more processors comprises a processor of the mobile phone. In some examples, the router device comprises a battery-powered mobile router device; the router device comprises the one or more sensors; the router device comprises the one or more processors; the router device is configured to present a graphical user interface via a display; and the one or more processors are configured to perform the method at least partially in response to user input received via the graphical user interface.
According to some examples of the disclosure, a method can comprise determining a location of a router device based on an output of one or more sensors, the router device in communication with a first wireless network interface; determining whether to establish a Wi-Fi network connection via the first wireless network interface; in accordance with a determination to establish a Wi-Fi network connection via the first wireless interface: selecting a Wi-Fi network based on the location of the router device; instantiating a first VPN via the Wi-Fi network; and communicating encrypted data from a client device to the first VPN via the Wi-Fi network; and in accordance with a determination not to establish a Wi-Fi network connection via the first wireless interface: selecting, based on the location of the router device, a SIM from one or more SIMs; initializing, based on the selected SIM, a connection to a cellular data network via a second wireless network interface; instantiating a second VPN via the cellular data network; and communicating encrypted data from the client device to the second VPN via the cellular data network. In some examples, selecting the SIM from the one or more SIMs is based on a bandwidth restriction associated with the location of the router device. In some examples, the selecting the SIM from the one or more SIMs is based on a data policy associated with the location of the router device. In some examples, the selecting the SIM from the one or more SIMs comprises selecting a first SIM in accordance with a determination that the location of the router device corresponds to a first country, and selecting a second SIM in accordance with a determination that the location of the router device corresponds to a second country. In some examples, the method further comprises: monitoring a status of the first VPN or the second VPN; and based on the status of the first VPN or the second VPN, preventing the client device from communicating data via the Wi-Fi network or the cellular data network. In some examples, preventing the client device from communicating data via the Wi-Fi network or the cellular data network comprises one or more of: terminating one or more of the Wi-Fi network connection or the connection to the cellular data network, disconnecting the client device from the router device, and turning off the router device. In some examples, determining whether to establish a Wi-Fi network connection via the first wireless network interface comprises determining whether a public Wi-Fi access point is available. In some examples, the second wireless network interface comprises a wireless network interface of a mobile phone; the mobile phone comprises the one or more SIMs; and the method further comprises: in accordance with the determination not to establish a Wi-Fi network connection via the first wireless interface, establishing a connection between the router device and the mobile phone. In some examples, the router device comprises a battery-powered mobile router device; the router device comprises the one or more sensors; the router device comprises the one or more processors; the router device is configured to present a graphical user interface via a display; and one or more steps of the method are performed at least partially in response to user input received via the graphical user interface.
According to some examples of the disclosure, a non-transitory computer-readable storage medium stores instructions which, when executed by one or more processors, cause the one or more processors to perform a method comprising: determining a location of a router device based on an output of one or more sensors, the router device in communication with a first wireless network interface; determining whether to establish a Wi-Fi network connection via the first wireless network interface; in accordance with a determination to establish a Wi-Fi network connection via the first wireless interface: selecting a Wi-Fi network based on the location of the router device; instantiating a first VPN via the Wi-Fi network; and communicating encrypted data from a client device to the first VPN via the Wi-Fi network; and in accordance with a determination not to establish a Wi-Fi network connection via the first wireless interface: selecting, based on the location of the router device, a SIM from one or more SIMs; initializing, based on the selected SIM, a connection to a cellular data network via a second wireless network interface; instantiating a second VPN via the cellular data network; and communicating encrypted data from the client device to the second VPN via the cellular data network. In some examples, selecting the SIM from the one or more SIMs is based on a bandwidth restriction associated with the location of the router device. In some examples, the selecting the SIM from the one or more SIMs is based on a data policy associated with the location of the router device. In some examples, the selecting the SIM from the one or more SIMs comprises selecting a first SIM in accordance with a determination that the location of the router device corresponds to a first country, and selecting a second SIM in accordance with a determination that the location of the router device corresponds to a second country. In some examples, the method further comprises: monitoring a status of the first VPN or the second VPN; and based on the status of the first VPN or the second VPN, preventing the client device from communicating data via the Wi-Fi network or the cellular data network. In some examples, preventing the client device from communicating data via the Wi-Fi network or the cellular data network comprises one or more of: terminating one or more of the Wi-Fi network connection or the connection to the cellular data network, disconnecting the client device from the router device, and turning off the router device. In some examples, determining whether to establish a Wi-Fi network connection via the first wireless network interface comprises determining whether a public Wi-Fi access point is available. In some examples, the second wireless network interface comprises a wireless network interface of a mobile phone; the mobile phone comprises the one or more SIMs; and the method further comprises: in accordance with the determination not to establish a Wi-Fi network connection via the first wireless interface, establishing a connection between the router device and the mobile phone. In some examples, the one or more processors comprises a processor of the mobile phone. In some examples, the router device comprises a battery-powered mobile router device; the router device comprises the one or more sensors; the router device comprises the one or more processors; the router device is configured to present a graphical user interface via a display; and one or more steps of the method are performed at least partially in response to user input received via the graphical user interface.
Although the present invention has been fully described in connection with examples thereof with reference to the accompanying drawings, it is to be noted that various changes and modifications will become apparent to those skilled in the art. Such changes and modifications are to be understood as being included within the scope of the claimed subject matter. The various examples of the invention should be understood that they have been presented by way of example only, and not by way of limitation. Although the invention is described above in terms of various examples and implementations, it should be understood that the various features and functionality described in one or more of the individual examples are not limited in their applicability to the particular example with which they are described. They instead can, be applied, alone or in some combination, to one or more of the other examples of the invention, whether or not such examples are described, and whether or not such features are presented as being a part of a described example. Thus the breadth and scope of the claimed subject matter should not be limited by any of the above-described examples.
Terms and phrases used in this document, and variations thereof, unless otherwise expressly stated, should be construed as open ended as opposed to limiting. As examples of the foregoing, the term “including” should be read as meaning “including, without limitation” or the like; the term “example” is used to provide exemplary instances of the item in discussion, not an exhaustive or limiting list thereof; and adjectives such as “conventional,” “traditional,” “normal,” “standard,” “known,” and terms of similar meaning, should not be construed as limiting the item described to a given time period, or to an item available as of a given time. These terms should instead be read to encompass conventional, traditional, normal, or standard technologies that may be available, known now, or at any time in the future. Likewise, a group of items linked with the conjunction “and” should not be read as requiring that each and every one of those items be present in the grouping, but rather should be read as “and/or” unless expressly stated otherwise. Similarly, a group of items linked with the conjunction “or” should not be read as requiring mutual exclusivity among that group, but rather should also be read as “and/or” unless expressly stated otherwise. Furthermore, although items, elements or components of the invention may be described or claimed in the singular, the plural is contemplated to be within the scope thereof unless limitation to the singular is explicitly stated. For example, “at least one” may refer to a single or plural and is not limited to either. The presence of broadening words and phrases such as “one or more,” “at least,” “but not limited to,” or other like phrases in some instances shall not be read to mean that the narrower case is intended or required in instances where such broadening phrases may be absent. The word “exemplary” is used herein to mean “serving as an example or illustration.” Any aspect or design described herein as “exemplary” is not necessarily to be construed as preferred or advantageous over other aspects or designs.
It will be appreciated that, for clarity purposes, the above description has described examples of the invention with reference to different functional units and modules. However, it will be apparent that any suitable distribution of functionality between different functional units, processing logic elements or domains may be used without detracting from the invention. For example, functionality illustrated to be performed by separate processing logic elements, or controllers, may be performed by the same processing logic element, or controller. Hence, references to specific functional units are only to be seen as references to suitable means for providing the described functionality, rather than indicative of a strict logical or physical structure or organization. It should be understood that the specific order or hierarchy of steps in the processes disclosed herein is an example of exemplary approaches. Based upon design preferences, it is understood that the specific order or hierarchy of steps in the processes may be rearranged while remaining within the scope of the claimed subject matter. Further, in some examples, some steps in the processes disclosed herein may be forgone altogether while remaining within the scope of the claimed subject matter.
This application claims the benefit of U.S. Provisional Application No. 63/521,250, filed Jun. 15, 2023, the entire contents of which are incorporated herein by reference.
| Number | Date | Country | |
|---|---|---|---|
| 63521250 | Jun 2023 | US |
