Patent ID: 9059962
Filing Date: 2015-06-16
Classification: H04L

Abstract:
1. A method of enabling use of an application program, comprising: receiving, at a controller computer, a request from a user of a remote device for application entitlement; automatically sending, from the controller computer to the remote device, a list of application programs that the user of the remote device is entitled to use, and network addresses of gateway computers respectively associated with the application programs; sending, from the controller computer to the remote device, security data for one of: (i) establishing a secure communication channel with the controller computer, (ii) establishing a secure communication channel with one of the gateway computers, (iii) encrypting data stored at the remote device, and (iv) using with the application program; receiving, at one of the gateway computers, an application request from the user of the remote device for use of a selected application program, the application request being received after the security data has been sent; automatically creating, by the gateway computer, a request for verification that the user of the remote device is entitled to use the selected application program; automatically sending, from the gateway computer to the controller computer via a public communication network, the request for verification; receiving via the public communication network, at the gateway computer, a response from the controller computer indicating that the user of the remote device is entitled to use the selected application program; establishing, from the gateway computer to the selected application program executing on a computer other than the gateway computer or the controller computer, a secure channel; receiving, at the gateway computer, first data from the selected application program; automatically sending, from the gateway computer to the remote device, the first data from the selected application program; receiving, at the gateway computer, second data from the remote device; and automatically sending, from the gateway computer to the application program using the secure channel, the second data from the remote device, wherein the remote device always lacks a network address of the selected application program, and wherein the controller computer does not receive each of the application request, the first data and the second data.