Patent ID: 7827590

Claim:
A method of controlling access to a set of resource in a network, the method comprising: receiving a request for access to the set of resources in the network, the request received from a client computer remote from a computing device hosting the set of resources; and executing instructions stored in memory, wherein execution of the instructions by a processor: analyzes interrogation results concerning the computing environment of the client computer requesting access to the set of resources, the interrogation results used to classify the client computer into a zone of trust and generated by an interrogator agent, and wherein the interrogator agent is based on the identity of a user of the client computer and installed at the client computer requesting access to the set of resources, determines that the computing environment of the client computer requesting access to the set of resources complies with the zone of trust, wherein the zone of trust is associated with a signature including one or more static process objects residing on the client computer and is based on the authenticated identity of the user of the client computer and the received interrogation results, and satisfies an access control rule, the access control rule including the need for the establishment of a secure connection between the client computer remote the computing device hosting the set of resources prior to access to the set of resources being granted, and assigns access rights to the client computer requesting access to the set of resources, the access rights being granted upon a determination that the client computer requesting access to the set of resources complies with the zone of trust and satisfies the access control rule.