Patent ID: 9491145
Filing Date: 2016-11-08
CPC Classification: H04L

Claim Text:
1. A system to deliver an application, hosted by a private application provider system, over a network to a user device comprising: an application delivery system that includes at least one processor and a storage device configured to provide, a first network interface; a network security interface; a second network interface; and an application agent disposed within the private application provider system; wherein the application agent is configured to create a first pool of third connections between the application agent and one or more backend traffic director (BTD) instances within the second network interface; wherein the second network interface includes at least one BTD instance, wherein each BTD instance includes second means for providing a separate fourth connection between the BTD instance and a traffic processing server (TPS) instance selected from among multiple TPS instances within the network security interface in response to creation of the first pool of third connections, wherein each fourth connection corresponds to a separate third connection; wherein the first network interface includes at least one frontend traffic director (FTD) instance, wherein each FTD instance includes first means for providing a separate second connection between the FTD instance and a TPS instance selected from among the multiple TPS instances within the network security interface in response to each of multiple separate requests for a first connection with the FTD instance received over the network that includes a request for access to an application and sending each over its second connection to its TPS instance within the network security interface; and wherein the network security interface includes multiple TPS instances, wherein each TPS instance includes a decryption service, disposed to receive requests over one or more second connections, and to decrypt the received requests, an authentication means, disposed to receive the decrypted requests, for authenticating the decrypted requests, an encryption service, disposed to receive the authenticated requests, and to re-encrypt the authenticated requests, and a stitching means for stitching connection pairs, wherein each connection pair includes a second connection with the TPS instance and a fourth connection with the TPS instance, and wherein each connection pair is stitched in response to authentication of a request received over a second connection of the connection pair.