END NETWORK DECIDER

• US 20140129724A1
• Filed: 11/08/2012
• Published: 05/08/2014
• Est. Priority Date: 11/08/2012
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Pillay, Venkat R., Resende, Paulo
• Granted Patent: US 9,094,439 B2
• Time in Patent Office: Days
• US Class Current: 709/227
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/561 Adding application-functional data or data for application control, e.g. adding metadata

Abstract

According to one embodiment, an apparatus may store a mapping of a plurality of applications to a plurality of end networks. The apparatus may receive a request associated with executing an application from the plurality of applications and determine, based at least in part upon the mapping, an end network from the plurality of end networks that participates in the execution of the application. The end network may be mapped to the application. The apparatus may then establish a connection to the end network such that communications associated with the application are directed through the connection.

Claims

1. An apparatus comprising:

a memory operable to store a mapping of a plurality of applications to a plurality of end networks; and

a processor communicatively coupled to the memory and operable to;

receive a request associated with executing an application from the plurality of applications;

determine, based at least in part upon the mapping, an end network from the plurality of end networks that participates in the execution of the application, wherein the end network is mapped to the application; and

establish a connection to the end network such that communications associated with the application are directed through the connection.

2. The apparatus of claim 1, wherein the processor is further operable to perform an authentication prior to establishing the connection.

3. The apparatus of claim 1, wherein the memory is further operable to store a log comprising information about the application, a time the request was received, and a user associated with the request.

4. The apparatus of claim 1, wherein the processor is further operable to block a communication associated with the application based at least in part upon a permission associated with the application.

5. The apparatus of claim 1, wherein the request is received through a public network.

6. The apparatus of claim 1, wherein the processor is further operable to communicate a response to the request in order for the application to continue execution.

7. The apparatus of claim 1, wherein the end network is a private network.

8. A method comprising:

storing, by a memory, a mapping of a plurality of applications to a plurality of end networks;

receiving a request associated with executing an application from the plurality of applications;

determining, by a processor, based at least in part upon the mapping, an end network from the plurality of end networks that participates in the execution of the application, wherein the end network is mapped to the application; and

establishing a connection to the end network such that communications associated with the application are directed through the connection.

9. The method of claim 8, further comprising performing, by the processor, an authentication prior to establishing the connection.

10. The method of claim 8, further comprising storing a log comprising information about the application, a time the request was received, and a user associated with the request.

11. The method of claim 8, further comprising blocking, by the processor, a communication associated with the application based at least in part upon a permission associated with the application.

12. The method of claim 8, wherein the request is received through a public network.

13. The method of claim 8, further comprising communicating, by the processor, a response to the request in order for the application to continue execution.

14. The method of claim 8, wherein the end network is a private network.

15. A system comprising:

a requesting element operable to;

communicate a request to initiate execution of an application; and

execute, at least in part, the application; and

a connection element operable to;

store a mapping of a plurality of applications to a plurality of end networks;

receive the request associated with executing an application from the plurality of applications;

determine, based at least in part upon the mapping, an end network from the plurality of end networks that participates in the execution of the application, wherein the end network is mapped to the application; and

establish a connection to the end network such that communications associated with the application are directed through the connection.

16. The system of claim 15, wherein the connection element is further operable to perform an authentication prior to establishing the connection.

17. The system of claim 15, wherein the connection element is further operable to store a log comprising information about the application, a time the request was received, and a user associated with the request.

18. The system of claim 15, wherein the connection element is further operable to block a communication associated with the application based at least in part upon a permission associated with the application.

19. The system of claim 15, wherein the request is received through a public network.

20. The system of claim 15, wherein the connection element is further operable to communicate a response to the request in order for the application to continue execution.