A computer implemented method, comprising: receiving at a processing node a current public epoch key of a current epoch key pair, wherein one attribute of the current public epoch key is a current key epoch ID that identifies the current epoch of the current public epoch key, an epoch comprising a measurement of a period of time; receiving at the processing node authorized user data associated with a request for content from an external system from a user, the external system is external from the user and external from the processing node, the authorized user data is based on authentication data, wherein the authentication data relates to validation of the user's identity, and wherein the authorization data relates to eligibility of the user to complete an action according to security policy, and wherein the processing node is communicatively coupled to the user over the Internet via a tunnel, a transparent proxy, a forward proxy, or redirection to the processing node and all communications of the user are through the processing node; decrypting at the processing node the authorized user data using the public epoch key; determining if the decryption of the authorized user data was successful; if the decryption of the authorized user data was successful, identifying at the processing node a user epoch ID from the decrypted authorized user data; if the decryption of the authorized user data was successful, determining at the processing node whether the user epoch ID is in a range of valid epoch IDs to determine validity of the authentication data and the authorization data, wherein the range of valid epoch IDs comprises a plurality of valid epoch IDs for the current epoch and for a prior epoch prior to the current epoch; determining fraudulently creation of the authentication data or the authorization data based on failure of the decryption or if the decryption is successful and the user epoch ID from the decryption is not the valid epoch ID; and if the user epoch ID is in the range of valid epoch IDs and the decryption of the authorized user data was successful, processing the decrypted user data and the request. receiving at a processing node a current public epoch key of a current epoch key pair, wherein one attribute of the current public epoch key is a current key epoch ID that identifies the current epoch of the current public epoch key, an epoch comprising a measurement of a period of time; receiving at the processing node authorized user data associated with a request for content from an external system from a user, the external system is external from the user and external from the processing node, the authorized user data is based on authentication data, wherein the authentication data relates to validation of the user's identity, and wherein the authorization data relates to eligibility of the user to complete an action according to security policy, and wherein the processing node is communicatively coupled to the user over the Internet via a tunnel, a transparent proxy, a forward proxy, or redirection to the processing node and all communications of the user are through the processing node; decrypting at the processing node the authorized user data using the public epoch key; determining if the decryption of the authorized user data was successful; if the decryption of the authorized user data was successful, identifying at the processing node a user epoch ID from the decrypted authorized user data; if the decryption of the authorized user data was successful, determining at the processing node whether the user epoch ID is in a range of valid epoch IDs to determine validity of the authentication data and the authorization data, wherein the range of valid epoch IDs comprises a plurality of valid epoch IDs for the current epoch and for a prior epoch prior to the current epoch; determining fraudulently creation of the authentication data or the authorization data based on failure of the decryption or if the decryption is successful and the user epoch ID from the decryption is not the valid epoch ID; and if the user epoch ID is in the range of valid epoch IDs and the decryption of the authorized user data was successful, processing the decrypted user data and the request.