Patent ID: 8706800

Claim:
A network system, comprising: a plurality of client devices coupled to a services hosting platform via a network; an application invocation framework stored in a computer readable memory and executable by at least one processor of the services hosting platform, the application invocation framework comprising at least one entry point to a sharable instance of an application service, the application service hosted by the services hosting platform for use by the plurality of client devices, wherein the application invocation framework is used to augment the sharable instance of the application service for each of the plurality of client devices via the selective invocation of at least one security platform service to secure content stored by the services hosting platform on behalf of each of the plurality of client devices, wherein the sharable instance of the application service and the at least one security platform service form a services extension pipeline in which the application invocation framework selectively invokes the at least one security platform service to augment the sharable instance of the application service based on a security requirement of each respective one of the plurality of client devices accessing the sharable instance of the application service, and wherein the at least one security platform service secures the content for each of the plurality of client devices in accordance with respective policies and security credentials corresponding to each respective one of the plurality of client devices; wherein the application invocation framework further include a client side agent that comprises a lockbox service for storing encryption keys retrieved from a key management service of the application services framework for the particular client device; wherein a key stored by the lockbox service is used by a plurality of different sharable services invoked by at least one of the plurality of client devices.