Patent ID: 8640203

Claim:
A method for identifying and authenticating a user, the method comprising: establishing a trust between a server machine and a security agent on a user machine; establishing a session key to encrypt communications between the server machine and the security agent; receiving a username and password for use in validating the user; determining device data that is to be extracted from the user machine by the security agent; creating an executable binary that is configured to be executed by the security agent in order to extract the device data from the user machine; generating a session concatenation order that defines how the device data extracted from the user machine should be concatenated by the security agent; transmitting the executable binary and the session concatenation order to the security agent for execution, wherein the executable binary and the session concatenation order are to be stored in a protected area of a memory included in the user machine; and receiving the device data extracted from the user machine from the security agent, wherein the extracted device data is concatenated according to the session concatenation order.