Symmetric key distribution framework for the internet

A method, comprising:na security measurement hardware device, integrated in a client, requesting a required client health policy from an application server;a network interface controller, integrated in the application server, sending/storing the required client health policy and an address of a key distribution server to the security measurement hardware device;the security measurement hardware device performing a health check of the client using the required client health policy received from the network interface controller, the health check creating health information describing the health of the client;the security measurement hardware device sending the health information to a key distribution server;the key distribution server validating the client's health through the received health information;the key distribution server providing the client with a session key for secure interaction with the application server when the client's health has been validated;the key distribution server providing the network interface controller a master key corresponding to the session key, wherein the master key is one of a plurality of unique master keys, each unique master key being provided for each particular session key;the client sending a request to interact with the application server using the session key; andthe network interface controller allowing the client to interact with the application server after verifying the client's session key with the corresponding master key.

A system, comprising:na client, including a security measurement hardware device to:nrequest a required client health policy from an application server, the application server comprising a network interface controller;perform a health check of the client using the required client health, the health check creating health information describing the health of the client; andsend the health information to a key distribution server; andwherein the client to send a request to interact with the application server using a session key; andthe key distribution server to:nvalidate the client's health through the received health information;provide the client with the session key for secure interaction with the application server when the health of the client has been validated; andprovide the network interface controller of the application server with a master key corresponding to the session key, wherein the master key is one of a plurality of unique master keys, each unique master key being provided for each particular session key; andthe network interface controller of the application server to:nsend the required client health policy and an address of a key distribution server to the security measurement hardware device;verify the session key with the corresponding master key; andallow the client to interact with the application server after verifying the session key.