Patent ID: 8661246

Claim:
A system for preventing secured access from a user computer in a network to remote computers presenting untrusted credentials, comprising: a) a host-based credential management agent operably connected to a user computer configured to intercept network traffic information from said user computer and transmit a network request comprising credentials of said remote computer and said network traffic information; b) a trusted credential database containing information identifying trusted entities and corresponding cryptographic certificates; c) an authorization server operably connected to said host-based credential management agent and connected to said trusted credential database, said authorization server configured to cooperate with said host-based credential management agent for i) verifying whether the user computer in said network request should have network access to said remote computer, and ii) cryptographically signing said intercepted network traffic information with an authorization server key, to authorize network access for said intercepted network traffic information; and, d) a firewall system operably connected to said user computer and said authorization server, configured to inspect said network traffic information from said user computer and reject any traffic information not signed with said authorization server key wherein said authorization server provides said cryptographic signing by adding a token, by adding a tag-value pair to an application layer protocol.