Secure server architecture for web based data management

An apparatus comprising:

• an interface configured to receive a service request over a private data network from a server within a secure network area that employs a plurality of firewalls, the server receiving the service request from a client via a communication session over a public data network, wherein the communication session is associated with a session identifier stored at the client;
• and
• a processor configured to dispatch the service request, via a back-end server to a proxy service linking to one of a plurality of applications;
• and further configured to:
• accept the service request from the client and route the service request from the client to at least one of a plurality of preselected addresses behind a first one of the plurality of firewalls in accordance with a first set of filtering rules;
• and accept the service request from the server and route the service request from the server to at least one of a plurality of preselected addresses behind a second one of the plurality of firewalls in accordance with a second set of filtering rules.

A system comprising:

• a server within a secure network area that employs a plurality of firewalls, wherein the server receives a service request from a client via a communication session over a public data network, wherein the communication session is associated with a session identifier stored at the client;
• and
• a back-end server,
• wherein the service request is provided to an interface configured to receive the service request over a private data network from the server, wherein the service request is dispatched via the back-end server to a proxy service linking to one of a plurality of applications;
• and
• wherein a first one of the plurality of firewalls accepts the service request from the client and routes the service request from the client to at least one of a plurality of preselected addresses behind the first one of the firewalls in accordance with a first set of filtering rules;
• and a second one of the plurality of firewalls accepts the service request from the server and routes the service request from the server to at least one of a plurality of preselected addresses behind the second one of the firewalls in accordance with a second set of filtering rules.