Patent ID: 8484713

Claim:
A method, implemented in a resource-constrained device, comprising: providing, at the resource-constrained device an application container which includes a plurality of server applications executing therein, wherein each server application executes within its own application context, is capable of conducting transactions with client applications executing on a remote device, and includes, within its application context, one or more security tokens specific to that server application, for use by the client applications with that server application; providing a plurality of application firewalls, including, for each server application, its own application firewall which restricts the application context and security tokens specific to that server application from use by others of the server applications; providing a plurality of virtual hosts, including for each server application a virtual host associated with that server application which listens on a secure port to receive requests directed to that server application, including during deployment of each server application to the resource-constrained device, dynamically allocating a secure port and a virtual host associated with that server application, which receives requests directed to that server application, and adding an identifier for the newly allocated port to a redirection map; providing a physical interconnect layer which is configured to allow the client applications to make requests to the server applications within the application container; providing a secure port redirector within the application container and coupled to a default port which receives the requests via the physical interconnect layer, wherein the secure port redirector listens on the default port for an incoming request directed to a particular server application, determines, using the redirection map, the secure port associated with the virtual host for that particular server application, and rebuilds the incoming request to form a rebuilt request that includes an identifier for the secure port associated with the virtual host for that particular server application; and receiving, at a security layer which executes within the application contexts of the server applications, a rebuilt request, from the client application executing on the client device, directed to a particular server application, and using the security tokens specific to that server application to authenticate the client application that initially sent the request, and establish an application-specific secure connection between the client application and the server application for conducting a transaction.