Patent ID: 9641529
Date: 2017-05-02
CPC Classifications: G06F,H04L,H04W

Claim:
1. A computer-implemented method, comprising: displaying, on a computing device, an application execution container configured to provide an execution environment to execute secondary applications within the application execution container; providing, by the application execution container, a secure network connection over a computer network between the secondary applications and an application gateway node; retrieving, by the application execution container, a plurality of secondary applications from the application gateway node over the secure network connection; executing, within the application execution container and responsive to selection by a user of the application execution container, one of the plurality of retrieved secondary applications; restricting, by the application execution container, all network communications by the executed secondary application to the secure network connection between the application execution container and the application gateway node; providing, by the application execution container, an authentication interface to authenticate the user of the application execution container to the application gateway node over the secure network connection to allow the executed secondary application access to the application gateway node, transforming, by the application execution container, a request for services from the application gateway node by the executed secondary application into an authenticated request to the application gateway node by using the provided authentication interface, wherein the authentication interface is configured to support multi-factor authentication with the application gateway node, wherein the secure authentication information of the user is provided by the application execution container within an encrypted object, and wherein the encrypted object is encrypted so that the executed secondary application and the application execution container cannot decrypt the secure authentication information of the user.