Gateway, client device and methods for facilitating secure communication between a client device and an application server using redirect

A gateway for facilitating secure communication between a client device and an application server, the gateway comprising:

• a processor;
• and
• a memory storing instructions that, when executed by the processor, cause the gateway to:
• receive a first client request from the client device, the first client request comprising a first fully qualified domain name (FQDN) for the application server;
• transmit a gateway request to the application server, wherein the gateway request is based on the first client request;
• generate a second FQDN, based on the first FQDN and an identifier of the client device;
• generate a client specific shared key based on the second FQDN and a shared key which is not specific to the client device;
• generate a redirect message comprising the second FQDN an authentication request, a context identifier and the client specific shared key;
• transmit the redirect message to the client device;
• and
• generate an authentication response in case a second client request transmitted by the client device fails to comprise an authentication response.

A method for facilitating secure communication between a client device and an application server, the method being performed in the client device and comprising the steps of:

• transmitting a first client request to a gateway, the first client request comprising a first fully qualified domain name (FQDN) for the application server;
• receiving a redirect message from the gateway, the redirect message comprising an authentication request, a context identifier, a client specific shared key and a second FQDN;
• generating an authentication response based on the context identifier and the client specific shared key;
• and
• transmitting a second client request to the gateway, the second client request comprising the authentication response and the second FQDN.

A client device for facilitating secure communication with an application server, the client device comprising:

• a processor;
• and
• a memory storing instructions that, when executed by the processor, causes the client device to:
• transmit a first client request to a gateway, the first client request comprising a first fully qualified domain name (FQDN) for the application server;
• obtain from a received redirect message that was transmitted by the gateway an authentication request, a context identifier, a client specific shared key, and a second FQDN;
• generate an authentication response based on the context identifier and the client specific shared key;
• and
• transmit a second client request to the gateway, the second client request comprising the authentication response and the second FQDN.