Patent ID: 7549159
Filing Date: 2009-06-16
Classification: G06F,H04L

Abstract:
1. A method comprising the steps of: (a) retrieving security state data at a first computer; (b) incorporating the security state data into a request message to request a connection with a second computer via a network; (c) transmitting the request message including the security state data to the second computer via the network; (d) receiving the request message including the security state data from the first computer at the second computer; (e) determining at the second computer whether the security state data in the request message is to be processed based on security activation data stored in the second computer; and if the determining in step (e) establishes that the security activation data indicates that the security state data is to be processed, (f) determining at the second computer whether the network connection to the first computer poses an impermissible security risk based on security policy data stored in the second computer and the security state data received from the first computer; (g) proceeding with establishing the network connection if the determining of step (f) establishes that connection to the second computer is permitted; and (h) terminating further processing to establish the network connection with the second computer if the determining of step (f) establishes that the connection to the second computer is not permitted.