Remotely configurable routers with failover features, and methods and apparatus for reliable web-based administration of same

{
  "publication_number": "US10404521B2",
  "country": "US",
  "kind": "B2",
  "title": "Remotely configurable routers with failover features, and methods and apparatus for reliable web-based administration of same",
  "abstract": "Web-enabled routers are remotely and securely administered in a centralized fashion. A router receives a configuration profile from a dedicated web domain that maintains a repository of configuration profiles for multiple routers. The web domain also provides a web portal for customized generation of new configuration profiles based on stored profiles. When a new profile is deployed to and instantiated on a router, the router transmits a “heartbeat” to ensure that it can maintain connectivity with the web domain; if not, the router reverts to a previous “failover” configuration profile that ensures connectivity to the web domain. A router also may be equipped with both a wired and a wireless (e.g., a 3G, 4G, or 4G LTE) WAN communication interface. In the event of a wired connectivity issue, the router controls the wireless WAN interface to prioritize traffic for the router heartbeat and data backup/restore operations between a computer network for which the router serves as a gateway and the web domain.",
  "claims": [
    "1. A system for providing remote secure centralized administration of a plurality of routers, the system comprising: at least one storage repository storing a plurality of router configuration profiles, each router configuration profile including a plurality of atomic settings, the plurality of router configuration profiles stored in the at least one storage repository comprising: a plurality of first configuration profile types for a first router associated with a first LAN to communicatively couple the first LAN to the Internet; for each first configuration profile type, a plurality of first configuration profile variants, wherein respective first configuration profile variants have at least one first different atomic setting; a plurality of second configuration profile types for a second router associated with a second LAN to communicatively couple the second LAN to the Internet; and for each second configuration profile type, a plurality of second configuration profile variants, wherein respective second configuration profile variants have at least one second different atomic setting; and a Device Management Server (DMS), comprising: at least one WAN communication interface to facilitate the transfer of data packets between the DMS and the Internet, the at least one WAN communication interface identified by a first web domain identifier associated with a first web domain that includes the DMS; a memory to storing processor-executable instructions; and a DMS processor communicatively coupled to the at least one WAN communication interface and the memory, wherein upon execution of the processor-executable instructions by the DMS processor, the DMS processor: A) electronically accesses at least some of the plurality of router configuration profiles stored in the at least one storage repository; and B) provides a web-accessible router configuration portal, via the first web domain identifier associated with the first web domain, to facilitate creation of at least a first hybrid configuration profile for the first router based at least in part on at least one of: first respective atomic settings of at least some of the plurality of first configuration profile variants; and second respective atomic setting of at least some of the plurality of second configuration profile variants.",
    "2. The system of claim 1, wherein the DMS processor further: C) controls the at least one WAN communication interface to transmit to the first router first data packets representing the first hybrid configuration profile.",
    "3. The system of claim 2, wherein the DMS processor further: D), after C), controls the at least one WAN communication interface to receive from the first router at least one first router heartbeat, wherein the first router heartbeat comprises second data packets representing a first router status.",
    "4. The system of claim 3, wherein the DMS processor further: E) in response to the at least one first router heartbeat, controls the at least one WAN communication interface to transmit to the first router at least one third data packet representing at least one task for the router to execute.",
    "5. The system of claim 4, wherein the at least one task for the router includes changing a time interval in which the router periodically transmits the at least one router heartbeat.",
    "6. The system of claim 2, wherein the DMS processor further: D), after C), controls the at least one WAN communication interface to receive from the first router at least one data packet indicating an installation status of the first hybrid configuration profile.",
    "7. The system of claim 1, wherein the plurality of first configuration profile types and the plurality of second configuration profile types comprise configuration profile types for different events or purposes.",
    "8. The system of claim 7, wherein the different events or purposes include at least one of multiplayer gaming over a local area network, network-wide parental control, and connecting multiple devices from two or more local area networks wirelessly.",
    "9. The system of claim 1, wherein: the plurality of first configuration profile variants comprise profile variants representing atomic settings installed on the first router at different instants in time; and the plurality of second configuration profile variants comprise profile variants representing atomic settings installed on the second router at different instants in time.",
    "10. A method for providing remote secure centralized administration of a plurality of routers, the method comprising: storing, by at least one storage repository, a plurality of router configuration profiles, each router configuration profile including a plurality of atomic settings, the plurality of router configuration profiles stored in the at least one storage repository, wherein the at least one storage repository includes: a plurality of first configuration profile types for a first router associated with a first LAN to communicatively couple the first LAN to the Internet, for each first configuration profile type, a plurality of first configuration profile variants, wherein respective first configuration profile variants have at least one first different atomic setting, a plurality of second configuration profile types for a second router associated with a second LAN to communicatively couple the second LAN to the Internet, and for each second configuration profile type, a plurality of second configuration profile variants, wherein respective second configuration profile variants have at least one second different atomic setting; and providing a Device Management Server (DMS), wherein the DMS includes: at least one WAN communication interface to facilitate the transfer of data packets between the DMS and the Internet, the at least one WAN communication interface identified by a first web domain identifier associated with a first web domain that includes the DMS, a memory to storing processor-executable instructions, and a DMS processor communicatively coupled to the at least one WAN communication interface and the memory; executing, by the DMS processor, the processor-executable instructions; accessing, by the DMS processor, at least some of the plurality of router configuration profiles stored in the at least one storage repository; and providing, by the DMS processor, a web-accessible router configuration portal, via the first web domain identifier associated with the first web domain, to facilitate creation of at least a first hybrid configuration profile for the first router based at least in part on at least one of: first respective atomic settings of at least some of the plurality of first configuration profile variants, and second respective atomic setting of at least some of the plurality of second configuration profile variants.",
    "11. The method of claim 10, further comprising: controlling, by the DMS processor, the at least one WAN communication interface to transmit to the first router first data packets representing the first hybrid configuration profile.",
    "12. The method of claim 11, further comprising: controlling, by the DMS processor, the at least one WAN communication interface to receive from the first router at least one first router heartbeat, wherein the first router heartbeat comprises second data packets representing a first router status.",
    "13. The method of claim 12, further comprising: controlling, by the DMS processor, in response to the at least one first router heartbeat, the at least one WAN communication interface to transmit to the first router at least one third data packet representing at least one task for the router to execute.",
    "14. The method of claim 13, wherein the at least one task for the router includes changing a time interval in which the router periodically transmits the at least one router heartbeat.",
    "15. The method of claim 11, further comprising: controlling, by the DMS processor, the at least one WAN communication interface to receive from the first router at least one data packet indicating an installation status of the first hybrid configuration profile.",
    "16. The method of claim 10, wherein the plurality of first configuration profile types and the plurality of second configuration profile types comprise configuration profile types for different events or purposes.",
    "17. The method of claim 16, wherein the different events or purposes include at least one of multiplayer gaming over a local area network, network-wide parental control, and connecting multiple devices from two or more local area networks wirelessly.",
    "18. The method of claim 10, wherein: the plurality of first configuration profile variants comprise profile variants representing atomic settings installed on the first router at different instants in time; and the plurality of second configuration profile variants comprise profile variants representing atomic settings installed on the second router at different instants in time."
  ],
  "description_excerpt": "A local area network (LAN) is a computer network of interconnected computing devices within a relatively limited area such as a building (e.g., a residence, business, office building, research or academic setting, etc.). Related terms for computer networks within relatively limited areas and/or for particular purposes include personal area networks (PANs), campus area networks (CANs) and metropolitan area networks (MANs) (e.g., respectively corresponding to a room, campus, or specific metropolitan area). For purposes of the present disclosure, the term LAN is used generally to include local areas networks and other similar types of limited area/particular purpose networks such as PANs, CANs, and MANs.\n\nA wide area network (WAN) generally covers a larger geographic area than a LAN. WANs are used to connect together multiple LANs and other types of computer networks (e.g., PANs, CANs, MANs), so that users and computers in one location can communicate with users and computers in other locations. A WAN often relies on leased telecommunication lines/circuits to transport information throughout the WAN and between LANs and other types of networks coupled to the WAN. In some instances, wireless communication interfaces (e.g., 3G technology, 4G technology, 4G LTE technology) may be used to communicatively couple computing devices and LANs to a WAN, different portions/components of a WAN to each other, or multiple WANs. The Internet is generally considered to be a WAN.",
  "cpc": [
    "H04L 29/14",
    "G06F 11/20",
    "H04L 12/413",
    "H04L 12/46",
    "H04L 12/4625",
    "H04L 12/4641",
    "H04L 41/0806",
    "H04L 43/0811",
    "H04L 43/10",
    "H04L 69/18",
    "H04L 69/40"
  ],
  "ipc": [
    "G06F 11/20",
    "H04L 12/46",
    "H04L 45/28",
    "H04L 69/40",
    "G06F 13/00",
    "H04L 12/413"
  ],
  "assignees": [
    "Datto Inc"
  ],
  "inventors": [
    "Austin McChord",
    "Evan Anthony BUTHER",
    "Daniel Charles FUHRY",
    "Robert John GIBBONS, JR.",
    "William Moon"
  ],
  "filing_date": "2016-01-14",
  "publication_date": "2019-09-03",
  "grant_date": "2019-09-03",
  "priority_date": "2015-01-14",
  "application_number": "US-201615543445-A",
  "family_id": "56406418",
  "cited_by_count": 247,
  "citations": [
    "US6032266A",
    "US20050138204A1",
    "US20030198182A1",
    "US20030165144A1",
    "US7139926B1",
    "US7657871B2",
    "US20070022418A1",
    "US7953883B2",
    "US20110010560A1",
    "US8432701B2",
    "US20140247708A1",
    "US20120158976A1",
    "US8806032B2",
    "US20140119176A1"
  ]
}