Methods and systems of secure connections for joining hybrid cellular and non-cellular networks

1. A computer-implemented method comprising:

a) connecting a wireless device to a cellular network by single-hopping or multi-hopping to a sink device in a non-cellular network, wherein the sink device has a direct wireless link to a cellular base station;

b) establishing a security tunnel between the wireless device and a first gateway with aid of a key, wherein the security tunnel tunnels the wireless device and the first gateway through the sink device and the cellular base station;

c) encrypting, by the wireless device using the key, a first data packet, and generating an encrypted first data packet;

d) sending, by the wireless device, the encrypted first data packet over the security tunnel to the first gateway;

e) receiving, by the first gateway, the encrypted first data packet;

f) decrypting, by the first gateway, the encrypted first data packet, and generating a decrypted first data packet; and

g) sending, by the first gateway, the decrypted first data packet to the Internet.

2. The method of claim 1 , further comprising one or more of the following:

a) deleting, by the first gateway, a billing record of the sink device; and

b) performing deep packet inspection, by the first gateway, and not creating the billing record of the sink device.

3. The method of claim 1 , wherein the first gateway comprises one or more of the following: a packet data network gateway and a gateway GPRS support node.

4. The method of claim 1 , wherein the security tunnel uses one or more of the following protocols: dual stack mobile IP (DSMIP) and proxy mobile IP (PMIP).

5. The method of claim 1 , wherein the key is assigned to the wireless device by the cellular network and is obtained through the sink device.

6. A computer-implemented method comprising:

a) connecting a wireless device to a cellular network by single-hopping or multi-hopping to a sink device in a non-cellular network, wherein the sink device has a direct wireless link to a cellular base station;

b) establishing a security tunnel between the wireless device and a first gateway with aid of a key, wherein the security tunnel tunnels the wireless device and the first gateway through the sink device and the cellular base station;

c) receiving, by a first gateway, a second data packet from the Internet;

d) encrypting, by the first gateway, the second data packet, and generating an encrypted second data packet;

e) sending, by the first gateway, the encrypted second data packet over the security tunnel to the wireless device through the sink device;

f) receiving, by the wireless device, the encrypted second data packet; and

g) decrypting, by the wireless device, the encrypted second data packet and generating a decrypted second data packet.

7. The method of claim 6 , further comprising one or more of the following:

a) deleting, by the first gateway, a billing record of the sink device; and

b) performing deep packet inspection, by the first gateway, and not creating the billing record of the sink device.

8. The method of claim 6 , wherein the first gateway comprises one or more of the following: a packet data network gateway and a gateway GPRS support node.

9. The method of claim 6 , wherein the security tunnel uses one or more of the following protocols: dual stack mobile IP (DSMIP) and proxy mobile IP (PMIP).

10. The method of claim 6 , wherein the key is assigned to the wireless device by the cellular network and is obtained through the sink device.

11. A system comprising:

a) a wireless device comprising a processor and a memory and configured to connect to a cellular network by single-hopping or multi-hopping to a sink device in a non-cellular network, wherein the sink device has a direct wireless link to a cellular base station; and

b) a first gateway configured to establish a security tunnel between the wireless device and the first gateway with aid of a key, wherein the security tunnel tunnels the wireless device and the first gateway through the sink device and the cellular base station;

wherein:

the wireless device is further configured to: (1) encrypt a first data packet using the key and generate an encrypted first data packet; and (2) send the encrypted first data packet over the security tunnel to the first gateway; and

the first gateway is further configured to: (1) receive the encrypted first data packet; (2) decrypt the encrypted first data packet and generate a decrypted first data packet; and (3) send the decrypted first data packet to the Internet.

12. The system of claim 11 , further comprising one or more of the following:

a) the first gateway is configured to delete a billing record of the sink device; and

b) the first gateway is configured to perform deep packet inspection and does not create the billing record of the sink device.

13. The system of claim 11 , wherein the first gateway comprises one or more of the following: a packet data network gateway and a gateway GPRS support node.

14. The system of claim 11 , wherein the security tunnel uses one or more of the following protocols: dual stack mobile IP (DSMIP) and proxy mobile IP (PMIP).

15. The system of claim 11 , wherein the key is assigned to the wireless device by the cellular network and is obtained through the sink device.

16. A system comprising:

a) a wireless device comprising a processor and a memory and configured to connect to a cellular network by single-hopping or multi-hopping to a sink device in a non-cellular network, wherein the sink device has a direct wireless link to a cellular base station; and

b) a first gateway configured to establish a security tunnel between the wireless device and the first gateway with aid of a security key, wherein the security tunnel tunnels the wireless device and the first gateway through the sink device and the cellular base station;

wherein:

the first gateway is configured to: (1) receive a second data packet from the Internet; (2) encrypt the second data packet and generate an encrypted second data packet; and (3) send the encrypted second data packet over the security tunnel to the wireless device through the sink device; and

the wireless device is further configured to: (1) receive the encrypted second data packet; and (2) decrypt the encrypted second data packet and generate a decrypted second data packet.

17. The system of claim 16 , further comprising one or more of the following:

a) the first gateway is configured to delete a billing record of the sink device; and

b) the first gateway is configured to perform deep packet inspection and does not create the billing record of the sink device.

18. The system of claim 16 , wherein the first gateway comprises one or more of the following: a packet data network gateway and a gateway GPRS support node.

19. The system of claim 16 , wherein the security tunnel uses one or more of the following protocols: dual stack mobile IP (DSMIP) and proxy mobile IP (PMIP).

20. The system of claim 16 , wherein the establishing the security tunnel is based on a key assigned to the wireless device by the cellular network.