Methods and systems of secure connections for joining hybrid cellular and non-cellular networks

1. A computer-implemented method comprising:

a) connecting a wireless device to a cellular network by single-hopping or multi-hopping to a sink device in a non-cellular network, wherein the sink device has a direct wireless link to a cellular base station;

b) establishing a security tunnel between the wireless device and a first gateway through the sink device and the cellular base station;

c) encrypting, by the wireless device, a first data packet, and generating an encrypted first data packet;

d) sending, by the wireless device, the encrypted first data packet over the security tunnel to the first gateway;

e) receiving, by the first gateway, the encrypted first data packet;

f) decrypting, by the first gateway, the encrypted first data packet, and generating a decrypted first data packet;

g) updating, by the first gateway, a network connection table;

h) sending, by the first gateway, the decrypted first data packet to a second gateway; and

i) sending, by the second gateway, the decrypted first data packet to the Internet.

2. The method of claim 1 further comprising one or more of the following:

a) sending, by the first gateway, a request to the second gateway to delete a billing record of the sink device; and

b) performing deep packet inspection, by the second gateway, and not creating the billing record of the sink device.

3. The method of claim 1 , wherein the first gateway comprises one or more of the following: an evolved packet data gateway and a tunnel termination gateway.

4. The method of claim 1 , wherein the second gateway comprises one or more of the following: a packet data network gateway and a gateway GPRS support node.

5. The method of claim 1 , wherein the establishing the security tunnel is based on a key assigned to the wireless device by the cellular network.

6. A computer-implemented method comprising:

a) connecting a wireless device to a cellular network by single-hopping or multi-hopping to a sink device in a non-cellular network, wherein the sink device has a direct wireless link to a cellular base station;

b) establishing a security tunnel between the wireless device and a first gateway through the sink device and the cellular base station;

c) receiving, by a second gateway, a second data packet from the Internet;

d) sending, by the second gateway, the second data packet to the first gateway;

e) encrypting, by the first gateway, the second data packet, and generating an encrypted second data packet;

f) sending, by the first gateway, the encrypted second data packet over the security tunnel to the wireless device through the sink device;

g) receiving, by the wireless device, the encrypted second data packet; and

h) decrypting, by the wireless device, the encrypted second data packet and generating a decrypted second data packet.

7. The method of claim 6 , further comprising one or more of the following:

a) sending, by the first gateway, a request to the second gateway to delete a billing record of the sink device; and

b) performing deep packet inspection, by the second gateway, and not creating the billing record of the sink device.

8. The method of claim 6 , wherein the first gateway comprises one or more of the following: an evolved packet data gateway and a tunnel termination gateway.

9. The method of claim 6 , wherein the second gateway comprises one or more of the following: a packet data network gateway and a gateway GPRS support node.

10. The method of claim 6 , wherein the establishing the security tunnel is based on a key assigned to the wireless device by the cellular network.

11. A system comprising:

a) a wireless device comprising a processor and a memory and configured to connect to a cellular network by single-hopping or multi-hopping to a sink device in a non-cellular network, wherein the sink device has a direct wireless link to a cellular base station;

b) a first gateway configured to establish a security tunnel between the wireless device and the first gateway through the sink device and the cellular base station; and

c) a second gateway;

wherein:

the wireless device is further configured to: (1) encrypt a first data packet and generate an encrypted first data packet; and (2) send the encrypted first data packet over the security tunnel to the first gateway; and

the first gateway is further configured to: (1) receive the encrypted first data packet; (2) decrypt the encrypted first data packet and generate a decrypted first data packet; (3) update a network connection table; and (4) send the decrypted first data packet to the second gateway; and

the second gateway is configured to: send the decrypted first data packet to the Internet.

12. The system of claim 11 further comprising one or more of the following:

a) the first gateway is configured to send a request to the second gateway to delete a billing record of the sink device; and

b) the second gateway is configured to perform deep packet inspection and does not create the billing record of the sink device.

13. The system of claim 11 , wherein the first gateway comprises one or more of the following: an evolved packet data gateway and a tunnel termination gateway.

14. The system of claim 11 , wherein the second gateway comprises one or more of the following: a packet data network gateway and a gateway GPRS support node.

15. The system of claim 11 , wherein the establishing the security tunnel is based on a key assigned to the wireless device by the cellular network.

16. A system comprising:

a) a wireless device comprising a processor and a memory and configured to connect to a cellular network by single-hopping or multi-hopping to a sink device in a non-cellular network, wherein the sink device has a direct wireless link to a cellular base station;

b) a first gateway configured to establish a security tunnel between the wireless device and the first gateway through the sink device and the cellular base station; and

c) a second gateway;

wherein:

the second gateway is configured to: (1) receive a second data packet from the Internet; and (2) send the second data packet to the first gateway;

the first gateway is further configured to: (1) encrypt the second data packet and generate an encrypted second data packet; and (2) send the encrypted second data packet over the security tunnel to the wireless device through the sink device; and

the wireless device is further configured to: (1) receive the encrypted second data packet; and (2) decrypt the encrypted second data packet and generate a decrypted second data packet.

17. The system of claim 16 further comprising one or more of the following:

a) the first gateway is configured to send a request to the second gateway to delete a billing record of the sink device; and

b) the second gateway is configured to perform deep packet inspection and does not create the billing record of the sink device.

18. The system of claim 16 , wherein the first gateway comprises one or more of the following: an evolved packet data gateway and a tunnel termination gateway.

19. The system of claim 16 , wherein the second gateway comprises one or more of the following: a packet data network gateway and a gateway GPRS support node.

20. The system of claim 16 , wherein the establishing the security tunnel is based on a key assigned to the wireless device by the cellular network.