Patent ID: 9621402
Date: 2017-04-11
CPC Classifications: H04L

Claim:
1. A data communication system, comprising: a first connection, implemented at least in part using hardware, and established to communicate first data from a first server to a second server over a public network, the first data configured for communication from a private network that is connected to the first server to a first device that is connected to the second server; a first authentication certificate that is associated with the first connection, the first authentication certificate including a first authentication certificate field that identifies a first communication interface of the first connection, the first authentication certificate field including at least an indication of a first subnet associated with the first device and a first priority of the first connection on the second server; a second connection, implemented at least in part using hardware, and established to communicate second data from the first server to the second server over the public network, the second data configured for communication from the private network that is connected to the first server to a second device that is connected to the second server; a second authentication certificate that is associated with the second connection, the second authentication certificate including a second authentication certificate field that identifies a second communication interface of the second connection, the second authentication certificate field including at least an indication of a second subnet associated with the second device and a second priority of the second connection on the second server; and a load-balancing algorithm configured to generate, based at least in part on the first priority and the second priority, at least the first authentication certificate field that identifies the first communication interface of the first connection and the second authentication certificate field that identifies the second communication interface of the second connection, wherein the second server configured to distinguish the first data of the first connection from the second data of the second connection according to the first authentication certificate field of the first authentication certificate or the second authentication certificate field of the second authentication certificate.