Patent ID: 7856655

Claim:
A system that establishes a secure link between one individual user of multiple users of a single machine and a remote machine, the system comprising: a security subsystem that filters traffic so that traffic for each user is separate and is adapted to establish the secure link by: exchanging authentication information for the single machine between the single machine and the remote machine during a machine authentication process to authenticate the single machine to the remote machine; exchanging authentication information for the individual user between the single machine and the remote machine during a user authentication process to authenticate the individual user to the remote machine, wherein the authentication information for the individual user is exchanged over a link secured using security information derived during the machine authentication process; and using security information derived during the user authentication process to communicate securely between the single machine and the remote machine to generate at least one Security Association (SA) for the secure link between the single machine and the remote machine, generating the at least one SA with at least one filter that corresponds to the individual user, and employing the at least one SA to establish the secure link.