Patent ID: 7591001
Filing Date: 2009-09-15
Classification: G06F,H04L

Abstract:
1. A method comprising the steps of: (a) receiving from a first computer at a second computer via a network a request message from the first computer to establish a network connection; (b) retrieving security state data at the second computer; (c) incorporating the security state data into a response message at the second computer; (d) transmitting the response message including the security state data from the second computer to the first computer via the network; (e) receiving the response message including the security state data from the second computer at the first computer via the network; (f) determining at the first computer if security activation data stored at the first computer indicates that the security state data is to be processed in order to determine if network connection to the second computer is to be permitted; and if the determining in step (f) establishes that the security activation data indicates that the security state data is to be processed, (g) determining at the first computer if the network connection to the second computer is permitted based on security policy data stored in the first computer and the security state data received from the second computer; (h) proceeding with establishing the network connection if the determining of step (g) establishes that connection to the second computer is permitted; and (i) terminating further processing to establish the network connection if the determining of step (a) establishes that the connection to the second computer is not permitted.