System and method for extensible positive client identification

Abstract

A system and method that provides electronic security over a network through an extensible positive client identifier (EPCI), working with a positive information profiling system (PIPS), pseudo uniform resource locators (PURLs) to assist in providing data integrity, a virtual page publication system (VPPS), and an active security responder, (ASR). The extensible positive client identifier (EPCI) creates a unique client identification key and continually self-evaluates the key based on unique system signature data. The positive information profiling system implements account profiles for all content and clients so that pages of information can be generated and matched to the data requested as well as the requester. The virtual page publication system VPPS of the invention does not store pages permanently in the root directory of the site but instead creates temporary web pages dynamically containing the level of information resulting from the client identification, PIPS, and PURL evaluations. The virtual page is sent, (in encrypted form if this option has been selected or if this option is required by the PIPS profile), to the requestor and exists only for the time necessary to send it. The active security responder (ASR) controls the overall operation of the present invention.

What is claimed is:  
     
         1 . A method for positively identifying a valid client terminal communicating with a host machine, comprising the steps of: 
 creating a system signature for the client terminal, the system signature including configuration information likely to be unique to that client terminal;    generating a first client identification key containing the system signature and storing the first client identification key at the client terminal;    re-evaluating the system signature each time a communication is purportedly sent from the client terminal by creating a new system signature unique to the then sending terminal with the system signature stored with the first client identification key; and    generating a second client identification key containing an indicator that silently informs the host system whether the sending terminal is the same as the client terminal.