Secure remote access public communication environment

摘要

A method and system provide a user device with secure access to an enterprise application in an enterprise network through VPN. The enterprise application is accessed from a user device such that it sends and receives data packets through the VPN client. For this, a request to send packets, originating from the user application, is intercepted by a VPN agent associated with the user application. In turn, the VPN agent associates an address of a loop-back interface with the user application. Thereafter, packets sent by the user application, are re-directed to the VPN client through the loop-back interface. Similarly, packets received by the VPN client from the enterprise network are routed through the loop-back interface to the user application.

主权项

1. A method, in a user device, for establishing a connection between a user application on the user device and an enterprise application on an enterprise network, the method comprising the steps of:
intercepting, by a virtual private network (VPN) agent instantiated on the user device and individually associated with the user application on the user device, a request to an operating system service of the user device for establishing the connection, the request originating from the user application on the user device; and establishing, based on the intercepted request, a communication channel within the user device, the communication channel being configured to only handle traffic associated with the user application and extending between the VPN agent associated with the user application and a VPN client configured to implement a VPN tunnel to securely transmit traffic from the user device to the enterprise network, both the VPN agent and VPN client residing on the user device.