Virtual private network for zero trust access control and end to end network encryption

A network access system for a client program to access a server program over a network, comprising:

• a computer having non-transitory memory for storing machine instructions that are to be executed by the computer, the machine instructions when executed by the computer implement the following functions:
• generate client data derived at least in part by an algorithm that uniquely identifies the client program,
• receive server data from the server program over the network, and
• configure a discrete virtual private network connection with a routing table entry associated with the server program such that data associated with the client program and the server program traverse the route.

A network access system for a client program to access a server program over a network, comprising:

• a computer having non-transitory memory for storing machine instructions that are to be executed by the computer, the machine instructions when executed by the computer implement the following functions:
• receive server data from the server program over the network, the server data uniquely identifies a server network arbitration program,
• validate the server data to validate the server network arbitration program, and
• configure a discrete virtual private network connection upon validation of the server network arbitration program.

A network access system for a client program to access a server program over a network, comprising:

• a computer having non-transitory memory for storing machine instructions that are to be executed by the computer, the machine instructions when executed by the computer implement the following functions:
• generate client data derived at least in part by an algorithm that uniquely identifies the client program,
• receive server data from the server program over the network,
• validate the client data against the server data to determine a valid combination of client data and server data and a secret approval of a configuration phase of a discrete virtual private network connection, and
• configure the discrete virtual private network connection for the client program and the server program in response to the determination of the valid combination and the secret approval.

A network access system for a client program to access a server program over a network, comprising:

• a computer having non-transitory memory for storing machine instructions that are to be executed by the computer, the machine instructions when executed by the computer implement the following functions:
• generate client data derived at least in part by an algorithm that uniquely identifies the client program,
• receive server data from the server program over the network,
• validate the client data against the server data to determine a valid combination of client data and server data based on a manifest stored on the computer, received from an application authority server, and stored as a blockchain of manifests received from the application authority server, and
• configure a discrete virtual private network connection for the client program and the server program in response to the determination of the valid combination.

A network access system for a client program to access a server program over a network, comprising:

• a computer having non-transitory memory for storing machine instructions that are to be executed by the computer, the machine instructions when executed by the computer implement the following functions:
• generate client data derived at least in part by an algorithm that is deterministic and has output that is significantly unique to uniquely identify the client program,
• receive server data from the server program over the network,
• validate the client data against the server data to determine a valid combination of client data and server data, and
• configure a discrete virtual private network connection for the client program and the server program in response to the determination of the valid combination.

A network access system for a client program to access a server program over a network, comprising:

• a computer having non-transitory memory for storing machine instructions that are to be executed by the computer, the machine instructions when executed by the computer implement the following functions:
• receive client data derived at least in part by a client algorithm that uniquely identifies a client system,
• in response to validation of the client data, configure a client wide virtual private network for a client network arbitration program, and
• exchange server network information associated with a server network arbitration program over the client wide virtual private network to facilitate creation of a discrete virtual private connection within the client wide virtual private network.

A network access system for a first program to access a second program over a network, comprising:

• a computer having non-transitory memory for storing machine instructions that are to be executed by the computer, the machine instructions when executed by the computer implement the following functions:
• initiate a wide virtual private network secure connection,
• generate first system data derived at least in part by an algorithm that uniquely identifies the first program,
• receive second system data from the second program over the network,
• validate the first system data against the second system data to determine a valid combination of first system data and second system data, and
• configure a discrete virtual private connection within the wide virtual private network secure connection for the first program and the second program in response to the determination of the valid combination.