Patent ID: 8532303

Claim:
A method, comprising: a security measurement hardware device, integrated in a client, requesting a required client health policy from an application server; a network interface controller, integrated in the application server, sending/storing the required client health policy and an address of a key distribution server to the security measurement hardware device; the security measurement hardware device performing a health check of the client using the required client health policy received from the network interface controller, the health check creating health information describing the health of the client; the security measurement hardware device sending the health information to a key distribution server; the key distribution server validating the client's health through the received health information; the key distribution server providing the client with a session key for secure interaction with the application server when the client's health has been validated; the key distribution server providing the network interface controller a master key corresponding to the session key, wherein the master key is one of a plurality of unique master keys, each unique master key being provided for each particular session key; the client sending a request to interact with the application server using the session key; and the network interface controller allowing the client to interact with the application server after verifying the client's session key with the corresponding master key.