Patent ID: 7752320

Claim:
A method comprising: detecting, at a server, that a device is attempting to connect to a network; receiving, at the server, a token from the device, wherein the token is in one of: i. a first state in which the content of the token indicates that the token has not been modified by the device, and ii. a second state in which the content of the token indicates that the token has been modified by the device, wherein when the token is in the second state, the content of the token comprises: an indication that the execution of a security software application executing on the device was suspended, and an identification of a network to which the device was connected when the execution of the security software application was suspended; when the token is in the second state, determining, at the server, if the device was previously connected to an untrusted network; and if the device was connected to an untrusted network, evaluating the integrity of data on the device, wherein the integrity evaluation is performed by at least one of the device and the server.