Patent ID: 7493331
Filing Date: 2009-02-17
Classification: H04L,Y10S

Abstract:
1. An apparatus, comprising: a network interface that is coupled to a data network for receiving or transmitting one or more packet flows; a processor coupled to the network interface; one or more stored sequences of instructions which, when executed by the processor, cause the processor to perform: based on a local key that is not known to a first client, encrypting first client state information to produce first encrypted information, wherein the first client state information includes authorization information; receiving, at a first time, from the first client, both the first encrypted information and a first request; based on the local key, decrypting the first encrypted information that was received from the first client, thereby producing first decrypted information; determining, based on authorization information that was included in the first decrypted information, whether the first request is authorized; and satisfying the first request only if the first request is authorized; wherein the apparatus is a first computer and wherein the first client is implemented by a second computer and is communicatively coupled with the first computer.