SECURE SCALABLE MULTI-TENANT APPLICATION DELIVERY SYSTEM AND ASSOCIATED METHOD

摘要

A system is provided to deliver applications over a network to user devices comprising: an application delivery system that includes, a first network interface that includes a plurality of first network interface instances, a network security interface that includes a plurality of security network interface instances, and a second network interface that includes a plurality of second network interface instances; a plurality of application agents are disposed within one or more private application provider systems; respective security network interface instances are configured to receive one or more user or device requests from respective first interface instances, and in response to each received user or device request, to determine whether the received user or device request is valid, and in response to determining that the received user or device request is valid, to send the received user or device request to a respective second network interface instance for delivery to the agent.

主权项

1. A system to deliver applications, hosted by one of more private application provider systems, over a network to user devices comprising:
an application delivery system that includes,
a first network interface that includes a plurality of first network interface instances;a network security interface that includes a plurality of security network interface instances;a second network interface that includes a plurality of second network interface instances; and a plurality of application agents disposed within one or more private application provider systems; wherein respective first network interface instances are configured to receive one or more user requests for access to a hosted application and in response to each received user or device request, to identify, based at least in part upon identity of an application identified within the user or device request, one or more security interface instances associated with the application identified within the user request, and to send the request to a respective identified network security interface instance; wherein respective second network interface instances are configured to receive one or more agent connection requests and in response to each received agent request to create a respective third network connection with the requesting agent; wherein respective second network interface instances are configured to identify, based at least in part upon identity of an application identified within an agent request, one or more security interface instances associated with the application, and to create an associated respective fourth network connection with an identified network security interface instance in response to the received agent connection request; and wherein respective security network interface instances are configured to receive one or more user or device requests from respective first interface instances, and in response to each received user or device request, to determine whether the received user or device request is valid, and in response to determining that the received user or device request is valid, to send the received user or device request to a respective second network interface over a respective fourth network connection; wherein respective second network interface instances are configured to send a user or device request, received from a respective security interface instance over a respective fourth network connection, to an agent over an associated respective third network connection.