| 摘要 |
This is a system and method for electronic security over a network which provides positive identification of clients through an extensible positive client identifier (EPCI), and provides data integrity and availability through the use of pseudo-URLs (called PURLs) in conjunction with a virtual page publication system (VPPS), a positive information profiling system (PIPS) and an active security responder, (ASR) at the host. The extensible positive client identifier examines a number of factors associated with a potential requesting user's system and relationships to create a client identification key. The extensible positive client identifier re-evaluates itself on every access of every object requested. It silently indicates when a self-check has failed. If a theft or impersonation is detected, it is dealt with by the invention as defined by the entity's security policy. Pseudo URLs - PURLs, appear the same as ordinary URLs, but instead of addresses, define tasks to be performed in response to this request and profile. The invention includes a positive information profiling system (PIPS) which implements account profiles for all content and clients so that pages can be generated and matched to both the data and the requestors. The virtual page publication system VPPS of the invention does not store pages permanently in the root directory of the site but instead creates temporary web pages dynamically containing the level of information resulting from the client identification and PURL evaluation. A virtual page is sent to the requestor and exists only for the time necessary to send it.
|
