Patent ID: 8549300

Claim:
A method comprising: receiving, with a secure gateway device that provides secure access to a resource network comprising a plurality of different certificate-protected resources, a first message from a client device coupled to the secure gateway device through an access network, wherein the first message comprises a request to access a first certificate-protected resource and an identifier for a user that is associated with the client device; in response to receiving the first message with the secure gateway device, initiating a protocol handshake between the secure gateway device and the first certificate-protected resource to establish a secure channel; mapping, with the secure gateway device, the identifier and the first certificate-protected resource specified within the request to a first digital certificate within a certificate repository of digital certificates of the secure gateway device, wherein the digital certificates stored within the repository of the secure gateway device are specific to individual ones of the plurality of different certificate-protected resources; receiving, with the secure gateway device, a certificate request from the first certificate-protected resource as part of the protocol handshake; in response to receiving the certificate request, sending the first digital certificate from the secure gateway device to the first certificate-protected resource via the resource network to authenticate the secure gateway device to the first certificate-protected resource on behalf of the client device; and subsequent to authenticating the secure gateway device to the first certificate-protected resource, forwarding application data received with the secure gateway device from the first certificate-protected resource to the client device via the access network.