Patent ID: 9479481
Filing Date: 2016-10-25
CPC Classification: H04L

Claim Text:
1. A system to deliver applications, hosted by one of more private application provider systems, over a network to user devices comprising: an application delivery system that includes at least one processor and a storage device configured to provide, an application agent disposed within one or more private application provider systems to send a plurality of third connection requests to one or more second network interface instances to create a plurality of separate third connections between the application agent and the one or more second network interfaces; wherein each first network interface instance includes a first mapping information structure, in non-transitory storage, associating a first hosted application with one or more security interface instances and associating a second hosted application with one or more security network interface instances; wherein each second network interface instance includes a second mapping information structure, in non-transitory storage, associating the first hosted application with one or more security interface instances and associating the second hosted application with one or more security instances; wherein each first mapping information structure associates the first hosted application with one or more security network interface instances to which at least one second mapping information structure associates the first hosted application; wherein each first mapping information structure associates the second hosted application with one or more security interface instances to which at least one second mapping information structure associates the second hosted application; wherein each second mapping information structure associates the first hosted application with one or more security interface instances to which at least one first mapping information structure associates the first hosted application; wherein each second mapping information structure associates the second hosted application with one or more security interface instances to which at least one first mapping information structure associates the second hosted application; wherein respective first network interface instances include first means for selecting, in response to receiving a user or device request for access to a hosted application, based at least in part upon identity of an application identified within the request and at least one first mapping information structure, a security network interface instance associated with the application identified within the request, sending a request to create a second connection with the selected network security interface instance, and sending the user or device request to the selected security network interface instance over the created second connection; wherein respective second network interface instances include second means for selecting, for each of multiple third connection requests, based at least in part upon identity of an application identified within the third connection request and at least one second mapping information structure, a security network interface instance associated with the application identified within the third request, and sending a request to create a fourth connection with the security network interface instance; and wherein the security network interface includes authentication means for authenticating requests for access to hosted applications; wherein each security network interface instance includes a third information structure, in non-transitory storage, associating one or more of its second connections with one or more of its fourth connections; and wherein each security network interface instance includes stitching means for stitching together individual second connections for an application with individual fourth connections for the same application based at least in part upon its third information structure.