Patent ID: 7721329
Filing Date: 2010-05-18
Classification: G06F,H04L

Abstract:
1. A method of limiting unauthorized network requests, comprising the steps of: identifying entities legitimately entitled to service, wherein an entity comprises a user id-client pair, said user id-client pair comprising an individual user-machine combination; establishing said identified entities as trusted entities by, during a first session, issuing a trust token for each entity successfully authenticating to said network service, said trust token comprising a data object that includes a client identifier, said client identifier comprising at least one client-originated item of data that uniquely identifies the client machine, wherein said user ID-client pair represents a unique entity; storing said issued trust token on said client machine; in sessions subsequent to said first session, transmitting with a network request from a trusted entity said stored issued trust token along with said user ID, authentication credentials, and client identifier from said client machine to said network service; processing said request from said trusted entity according to a first policy; and responsive to a determination that a request is from an untrusted entity, said untrusted entity comprising an entity lacking a valid trust token; processing said request from said untrusted entity according to at least a second policy; wherein processing a request according to at least a second policy comprises adding a specified amount of incremental response latency when processing requests from untrusted entities.