Patent ID: 7386889

Claim:
A method for preventing unauthorized access to a specific resource within a computer network, comprising: assigning a unique, non-dynamic system identifier (SID) to each authorized computer within the network; assigning a unique user identifier (UID) to each authorized user of the network; defining policy profiles for authorized computers and for authorized users of the network, wherein each policy profile identifies rights of access to resources within the network for the authorized users and the authorized computers; upon initiation of a TCP/IP communication attempt for access to the specific resource, wherein the communication attempt is initiated by a specific authorized user logged into a specific authorized computer and wherein the communication attempt includes a synchronization packet having a SEQ and an ACK field, inserting the UID of the specific authorized user and the SID of the specific authorized computer into the SEQ and ACK fields of the synchronization packet; intercepting the synchronization packet within the computer network; extracting the UID and SID from the SEQ and ACK fields of the synchronization packet to identify the specific authorized user and the specific authorized computer initiating the communication attempt; and allowing the communication attempt with the specific resource as a function of the policy profile of the specific authorized user and of the policy profile of the specific authorized computer.