US 12,445,376 B2
Application path selection for cloud-based applications from a client device
Ryan William Shoemaker, Naperville, IL (US); Shikha Jain, Fremont, CA (US); Meghana Mukund Amble, San Jose, CA (US); Jay Ponce, Wylie, TX (US); and Santosh Ramrao Patil, Milpitas, CA (US)
Assigned to CISCO TECHNOLOGY, INC., San Jose, CA (US)
Filed by Cisco Technology, Inc., San Jose, CA (US)
Filed on Sep. 29, 2022, as Appl. No. 17/936,534.
Prior Publication US 2024/0113967 A1, Apr. 4, 2024
Int. Cl. H04L 45/00 (2022.01); H04L 9/40 (2022.01); H04L 43/08 (2022.01); H04L 67/50 (2022.01)
CPC H04L 45/70 (2013.01) [H04L 43/08 (2013.01); H04L 63/1408 (2013.01); H04L 67/535 (2022.05)] 17 Claims
OG exemplary drawing
 
1. A method, comprising:
collecting metrics associated with usage amounts that indicate at least a frequency with which a remote user uses one or more cloud-based applications on a user device;
categorizing, based at least in part on the collected metrics, the one or more cloud-based applications into one or more classes that indicate at least the frequency with which the remote user uses the one or more cloud-based applications on the user device, wherein applications categorized into a first class are associated with a priority level;
determining an upper limit of a number of secure network paths that can be established for the user device,
determining one or more secure network paths based at least in part on the one or more classes of the one or more cloud-based applications and the determined upper limit of the number of secure network paths that can be established for the user device;
establishing the one or more secure network paths between the remote user and one or more network points-of-presence; and
routing data traffic for the one or more cloud-based applications through the one or more established secure network paths based at least in part on the on the one or more classes of the cloud-based applications and the determined upper limit of the number of secure network paths that can be established for the user device, wherein data traffic for each application categorized into the first class is routed through a different secure network path.