Patent ID: 9608962
Date: 2017-03-28
CPC Classifications: H04L

Claim:
1. A method comprising: monitoring, by a client device, one or more application-layer communications output by a plurality of applications installed on the client device and to be transmitted over a network; processing, by the client device, the monitored application-layer communications to determine one or more application-level parameters within the application-layer communications to identify actions associated with at least one of (i) an initial execution of an inactive application of the monitored one or more applications, or (ii) a particular use of an active application of the monitored one or more applications; prior to generating outbound data traffic associated with the application-layer communications and to be transmitted over the network, determining, by the client device, based on the monitored one or more application-layer communications, whether any of the identified actions requires a secure data connection via which to transmit the outbound data traffic; in response to detecting, based on the monitored one or more application-layer communications, that at least one identified action requires the secure data connection via which to transmit first outgoing data traffic of the outbound data traffic, the first outgoing data traffic being associated with a first application, automatically establishing, by the client device, the secure data connection to couple the client device to an enterprise network; determining, by the client device, based on the monitored one or more application-layer communications, that second outgoing data traffic of the outbound data traffic does not require the secure data connection, the second outgoing traffic being associated with a second application of the plurality of applications; transmitting, by the client device, the first outgoing data traffic corresponding to the first application, via the secure data connection; and transmitting, by the client device, the second outgoing traffic, via a connection to a public network, while the secure data connection is active.