Patent ID: 9646309
Date: 2017-05-09
CPC Classifications: G06F,G06Q,H04L

Claim:
1. A system for providing a compliance-based identity for determining whether an electronic computing device complies with the security policy for an electronic communications and data network of electronic computer devices, such determination including the context of said electronic computing devices, comprising: an identity provider comprising a memory storing computer readable instructions, and a microprocessor for executing said instructions; said identity provider configured to: receive an electronic request signal from said electronic computing device and establish a virtual private network (VPN) connection with said electronic computing device and a VPN concentrator, said electronic request signal including an electronically encoded request to allow an electronically encoded process operating on an electronic processor of said electronic computer device to establish electronic communication with a specific target electronic device or service operating on said electronic communications and data network; receive from said electronic computing device electronically encoded information about the identity of said electronically encoded process, said electronic computing device, or the user of said electronic computing device; receive from a policy store electronically encoded policy elements defined by said security policy; receive from a compliance server electronically encoded information about the compliance of said electronic computing device with respect to said security policy; receive from said VPN concentrator electronically encoded information related to the identity of the principal of said electronic computing device; and determine at said identity provider whether said electronic computing device complies with said security policy using said request, said identity, said compliance, and said principal identity information, and said policy elements.