US 12,015,592 B2
Zero trust approach to secure sensitive mobile applications and prevent distributed denial of service attacks
Dhawal Kumar Sharma, San Jose, CA (US); and John A. Chanak, Saratoga, CA (US)
Assigned to Zscaler, Inc., San Jose, CA (US)
Filed by Zscaler, Inc., San Jose, CA (US)
Filed on Aug. 11, 2021, as Appl. No. 17/399,632.
Application 17/399,632 is a continuation in part of application No. 16/800,307, filed on Feb. 25, 2020.
Application 16/800,307 is a continuation of application No. 15/986,874, filed on May 23, 2018, granted, now 10,616,180, issued on Apr. 7, 2020.
Application 15/986,874 is a continuation in part of application No. 15/158,153, filed on May 18, 2016, granted, now 10,375,024, issued on Aug. 6, 2019.
Prior Publication US 2021/0377222 A1, Dec. 2, 2021
Int. Cl. H04L 9/40 (2022.01); G06F 9/54 (2006.01); H04L 9/00 (2022.01); H04L 9/08 (2006.01); H04L 9/14 (2006.01); H04L 9/30 (2006.01); H04L 9/32 (2006.01); H04L 67/01 (2022.01); H04L 67/1021 (2022.01); H04L 61/4511 (2022.01); H04L 61/59 (2022.01)
CPC H04L 63/0272 (2013.01) [G06F 9/547 (2013.01); H04L 9/006 (2013.01); H04L 9/0894 (2013.01); H04L 9/14 (2013.01); H04L 9/30 (2013.01); H04L 9/3263 (2013.01); H04L 63/029 (2013.01); H04L 63/0823 (2013.01); H04L 63/0876 (2013.01); H04L 67/01 (2022.05); H04L 67/1021 (2013.01); H04L 61/4511 (2022.05); H04L 61/59 (2022.05)] 17 Claims
OG exemplary drawing
 
1. A method of protecting sensitive applications that are accessed from a user's device from an attack, the method comprising:
incorporating private application access software in a mobile application that operates on a user device to provide functionality to an end user, the private application access software enabling traffic associated with the mobile application to be forwarded to a cloud-based system;
deploying one or more virtual lightweight application connector instances in front of a private application that is accessed by the mobile application;
responsive to a request to access the private application, authenticating the end user through the mobile application;
responsive to the authentication, providing connection information via the cloud-based system to the mobile application and the one or more virtual lightweight application connector instances, wherein the virtual lightweight application connector instances are configured to only provide outbound connections on a per-application basis based on the connection information, and wherein the private application access software is adapted to route traffic through the cloud-based system based on the connection information, thereby protecting the private application from the attack; and
providing access to the private application through the mobile application via a plurality of secure tunnels.