Patent ID: 8272043

Claim:
A method for controlling a firewall for a user computing system, said method comprising: receiving, by a processor of a computer system, a data request at the firewall, wherein the data request comprises a data packet and an indication of a program that is associated with the data request; said processor determining whether an authentication plan requires a match for the program; in response to determining that the authentication plan requires the match for the program, said processor accessing a stored authentication plan associated with the program, the stored authentication plan having one or more authentication records each having expected information relating to user access to a particular server, the stored authentication plan being stored in a repository of the firewall, the stored authentication plan having been generated based at least on selections of an authentication verifier in the firewall; said processor accessing a current authentication plan from a storage device, the current authentication plan having one or more authentication records each having current information relating to user access to a particular server; said processor comparing the stored authentication plan with the current authentication plan to determine, based on analyzing authentication events, whether there is at least a partial match between the stored authentication plan and the current authentication plan; and in response to the comparing between the stored authentication plan and the current authentication plan, said processor performing one or more firewall actions selected from the group consisting of allowing access to data packets, denying access to data packets, monitoring data packets, and redirecting data packets to another device.