Patent ID: 7949871

Claim:
A method for establishing an end to end secure virtual service network interconnecting at least two computers in multiple physical networks comprising: providing a network management layer for administering the secure virtual service connection, the network management layer being located above the physical network transport layer in an Open Systems Interconnect (OSI) stack and connecting the multiple physical networks; interconnecting the physical networks with the management layer such that an end to end connection between the computers is effected upon authentication and authorization through a third computer; transmitting from a unique user at the first computer to the third computer, a request for a specified high value secure service located at the second computer in a second network, wherein the first computer is located on a first network and operates as a gateway between the first network and a third network; authenticating the request at the third computer; determining at the third computer an authorization of the unique user at the first computer to access a predetermined service located on the second network; verifying the request for the service only if (a) the user is listed on a database of permitted participants maintained in an access control list accessible to that service, and, if the user is listed, allowing access to the requested service, or, if the user is either (i) not listed on the database of permitted participants in the access control list, or (ii) is listed on a database of not permitted participants maintained in a certificate revocation list accessible to the service, denying access of the user to the requested service; establishing a secure connection between the first computer and the second computer located on the second network, after the successful authorization of the user at the first computer by the third computer; and upon authorization of the user, providing the predetermined service to the user at the first computer from the second computer by way of the secure connection the secure connection comprising a secure virtual network connection that traverses the first and second physical networks and establishes a secure end to end connection specific to the service.