Patent ID: 8503657

Claim:
A method for authenticating and protecting an Internet Protocol (IP) user-end device comprising the steps of: providing a client-based security software resident on the IP user-end device; authenticating the IP user-end device using the client-based security software and a network security node communicably coupled to the IP user-end device; in response to successfully authenticating the IP user-end device, authenticating a user of the IP user-end device whenever a trigger condition occurs using an in-band channel between the client-based security software and the network security node, wherein the step of authenticating the user of the IP user-end device comprises the steps of: initiating a authenticating call from the network security node to the IP user-end device; in response to the authenticating call being answered at the IP user-end device, sending a request for a passcode to the IP user-end device, wherein the request prompts the user of the IP user-end device to enter a passcode; sending to the IP user-end device a message to disable the IP user-end device when the passcode is invalid; and after determining whether the passcode is valid or invalid, terminating the authenticating call; and protecting the IP user-end device by: (a) screening incoming IP traffic to the IP user-end device using the client-based security software, and (b) detecting an attack or a threat involving the IP user-end device using the network security node.