Smart router

Abstract

An example router device disclosed herein functions as a transport level proxy and application level proxy, is able to host both authenticated user and device sessions with stored session state and access control to resources for enhanced performance and ease of use. The device is able to function as a protocol proxy for improved performance and security. The device may be configured to implement a captive portal login mechanism, and may programmatically force unsecure LAN-side client requests to secure WAN-side connections. The device may execute an API for remote applications to utilize. The router device may pre-fetch content for client devices, and may communicate with other servers and peer routers to ascertain congestion on the WAN, and perform intelligent routing of WAN traffic based on the detected congestion. The device may also employ techniques to enhance privacy, virtualized address spaces, cookie filters, and traffic modification.

1 . (canceled) 
     
     
         2 . A networking device, comprising:
 a router including a processor configured to implement a captive portal with social network login, by:
 when a LAN-side client device accesses the router by attempting to send a request to access a resource at a WAN-side destination server, presenting a social network credentials interface to the client device prompting a user of the client device to input social network logon credentials, instead of forwarding the request on to the destination server; 
 receiving social network credentials including a social network login and password from a user of the client device via the social network credentials interface; 
 forwarding the social network credentials to a social network server for validation; 
 receiving a message indicating whether the social network credentials were successfully validated; and 
 if the message indicates that the social network credentials were successfully validated, forwarding the request on to the destination server. 
   
     
     
         3 . The networking device of  claim 2 , comprising:
 after receiving the message that the social network credentials were successfully validated, displaying a notification in the social network credentials interface that the social network credentials were successfully validated.   
     
     
         4 . The networking device of  claim 2 , wherein the client device is not registered with the router, and wherein the social network credentials interface is presented when a user starts a new browsing session from the client device. 
     
     
         5 . The networking device of  claim 4 , wherein if the client device is not registered with the router if it does not have a current authorized session, and wherein if the client device is not registered with the router, the processor is further configured to at least temporarily refrain from forwarding the request. 
     
     
         6 . The networking device of  claim 2 , wherein the client device is registered with the router. 
     
     
         7 . The networking device of  claim 6 , wherein the processor is further configured to register the client device with the router by:
 identifying a client device identifier; and   based on the client device identifier, determining whether the client has a current authorized session on the router.   
     
     
         8 . The networking device of  claim 6 , wherein the social network credentials interface is presented when a user starts a browsing session from the registered device after a period of registered device inactivity. 
     
     
         9 . The networking device of  claim 6 , further comprising, along with forwarding the request, passing a cookie associated with the request to the destination server. 
     
     
         10 . The networking device of  claim 2 , further comprising, if the message indicates that the social network credentials were not successfully validated, refraining from forwarding the request on to the destination server. 
     
     
         11 . A networking method for implementing a captive portal with social network login at a router, comprising:
 at the router:
 when a LAN-side client device accesses the router by attempting to send a request to access a resource at a WAN-side destination server, presenting a social network credentials interface to the client device prompting a user of the client device to input social network logon credentials, instead of forwarding the request on to the destination server; 
 receiving social network credentials including a social network login and password from a user of the client device via the social network credentials interface; 
 forwarding the social network credentials to a social network server for validation; 
 receiving a message indicating whether the social network credentials were successfully validated; and 
 if the message indicates that the social network credentials were successfully validated, forwarding the request on to the destination server. 
   
     
     
         12 . The networking method of  claim 11 , comprising:
 after receiving the message that the social network credentials were successfully validated, displaying a notification in the social network credentials interface that the social network credentials were successfully validated.   
     
     
         13 . The networking method of  claim 11 , wherein the client device is not registered with the router, and wherein the social network credentials interface is presented when a user starts a new browsing session from the client device. 
     
     
         14 . The networking method of  claim 13 , wherein if the client device is not registered with the router if it does not have a current authorized session, and wherein if the client device is not registered with the router, the processor is further configured to at least temporarily refrain from forwarding the request. 
     
     
         15 . The networking method of  claim 11 , wherein the client device is registered with the router. 
     
     
         16 . The networking method of  claim 11 , wherein the processor is further configured to register the client device with the router by:
 identifying a client device identifier; and   based on the client device identifier, determining whether the client has a current authorized session on the router.   
     
     
         17 . The networking method of  claim 16 , wherein the social network credentials interface is presented when a user starts a browsing session from the registered device after a period of registered device inactivity. 
     
     
         18 . The networking method of  claim 16 , further comprising, along with forwarding the request, passing a cookie associated with the request to the destination server. 
     
     
         19 . The networking method of  claim 11 , further comprising, if the message indicates that the social network credentials were not successfully validated, refraining from forwarding the request on to the destination server. 
     
     
         20 . A router, comprising:
 a processor configured to:
 cause a captive portal graphical user interface to be displayed on a client device that is seeking to access a server over a WAN via the router; 
 cause a prompt to be displayed on the graphical user interface of the client device, which prompts the user to enter social network credentials; 
 receive social network credentials via the graphical user interface; 
 upon authenticating the social network credentials, allow the client device to access the server over the WAN via the router. 
   
     
     
         21 . The router of  claim 20 , wherein prior to causing the prompt to be displayed, the processor is further configured to:
 cause a social network login option to be displayed in a graphical user interface of the client device; and   receive a selection of the social network login option.