Patent ID: 7131137

Claim:
A communication system, comprising: a communication network, including a plurality of nodes; a server connected to a first one of the nodes; a client processor; a storage medium within the client processor to store a security system for connecting the client processor to the communication network for communication with the server, wherein the security system includes a transmission control protocol to control communication between the client processor and the communication network; a security classifier to couple the transmission control protocol to the communication network, the security classifier to determine a security classification for the client processor; a security association negotiator responsive to the client processor opening a socket at a node of the communication network, to correlate the socket with a security association based on the determined security classification; and a network interceptor to couple the client processor with the transmission control protocol, wherein the network interceptor responds to the socket being closed by determining whether any other socket is correlated with the security association, and if it is determined that no other socket is correlated with the security association, deleting the security association.