Patent ID: 8245285

Claim:
A method, implemented in a resource-constrained device, comprising: providing, at the resource-constrained device, an application container which includes a plurality of server applications executing therein, wherein each server application executes within its own application context, is capable of conducting transactions with client applications executing on a remote device, and includes within its application context one or more security tokens specific to that server application, for use by the client applications with that server application; providing one or more application firewalls, which restrict the application context and the security tokens specific to each server application from use by others of the server applications; providing a physical interconnect layer which is configured to allow the client applications to make requests to the server applications within the application container; during deployment of each server application to the resource-constrained device, dynamically allocating a secure port and a virtual host associated with that server application, which receives requests directed to that server application, and adding an application-context root uniform resource identifier and an identifier for the newly allocated port to a redirection map; providing a secure port redirector within the application container and coupled to a default port which receives the requests via the physical interconnect layer, wherein the secure port redirector listens on the default port for an incoming request directed to a particular server application, determines, using the redirection map, the secure port associated with the virtual host for that particular server application, and rebuilds the incoming request to form a rebuilt request that includes an identifier for the secure port associated with the virtual host for that particular server application; receiving, at a security layer which executes within the application contexts of the server applications, a rebuilt request, from the client application executing on the client device, directed to the particular server application; and using the security tokens that are specific to the particular server application to authenticate the client application that initially sent the request, and establish an application-specific secure connection between the client application and the server application for conducting a transaction.